Lenovo's 'encrypted' fingerprint USB drive is just an unencrypted SD card in a fancy case — AI-assisted follow-up finds a backdoor and hardcoded keys in other ‘secure’ USB products (updated)
www.tomshardware.com
The fingerprint only switched the USB connection on; nothing on the card was encrypted.
  • purplemonkeymad@programming.devEnglish
    8·
    23 hours ago

    different flaw in Lenovo’s TSD303 external SSD. Its data actually was encrypted, but the drive sent the correct password back over USB in plain text for the software to compare,

    Are we doing client side verification again already? I thought we had just remembered not to do it recently.