Lenovo's 'encrypted' fingerprint USB drive is just an unencrypted SD card in a fancy case — AI-assisted follow-up finds a backdoor and hardcoded keys in other ‘secure’ USB products (updated)
www.tomshardware.com
The fingerprint only switched the USB connection on; nothing on the card was encrypted.
  • ryannathans@aussie.zoneEnglish
    123·
    2 days ago

    Until they find a CVE they can use sure

    Plenty of those in motherboards, TPMs, CPUs, software, OS, etc.

    • InnerScientist@lemmy.worldEnglish
      1·
      2 days ago

      If the encryption is correctly configured then that doesn’t matter. The only vulnerability that matters is in the encryption algorithm and that’s very difficult to brute force or get a vulnerability for. Though at some point you’re dealing with rubber hose cryptography where you have do deal with not knowing the password yourself.