also @ TechSpot: Check your bill: AT&T adds new 'administrative fee' to wireless bills

› ›

Lexar JumpDrive Password Scheme Cracked

By Derek Sooman

On September 15, 2004, 11:47 AM

The Lexar JumpDriveŽ Secure USB Flash Drive is described as having security as a key feature - thus the name. "The pre-loaded security software means that your information will be subject to password-protected 256-bit AES encryption. Lost or stolen, your data is safe." Buy one of these babies and your data is secure? Think again. Slashdot have something else to say. According to a security advisory here, that claim is total rubbish.

"The password can be observed in memory or read directly from the device, without evidence of tampering." And best of all, the punch line: "[The password] is stored in an XOR encrypted form and can be read directly from the device without any authentication."

IMHO, people should stop bounding words like "secure" about. There is no such thing as "secure" in the computer world, unless its a closed system buried 100 feet underground. And it looks like one of these Lexar devices is far from "secure".

No tags on this story

Post a comment

Post a new comment

Social Login & Guest Posting TechSpot Members
Login here or sign up for free,
it takes about a minute.
Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.
TechSpot on:

Most Popular

Trending Featured
More Trending Topics

Featured on Cases

Downloads and Drivers

Downloads   Drivers  

KiTTY 0.62.2.3

mIRC 7.32

Actual Bookmarks 1.2

World of Warcraft Patch 5.3.0

Funny Photo Maker 2.4.1

More Downloads

Latest Discussion

Unacceptably high disk usage/performance lag Windows 8 44 replies on Windows OS

PC vs Xbox 360 vs PS3 85 replies on Gaming

How did my Windows key become disabled? 19 replies on Other Hardware

USB drive or flash problems? How to cleanup and remove old USB storage drivers 61 replies on Guides and Tutorials

How to identify your webcam (and then find its driver) 387 replies on Device Drivers

More Recent Discussion

Subscribe to TechSpot

Get free exclusive content, learn about new features and breaking tech news.