SySS discovered that, regardless of the password being used, the Windows access control program ultimately sent the same sequence of bytes to the drive to “unlock” it. Kingston’s advisory doesn’t provide much information other than advising affected customers to contact their technical support team for an update, but does explain that a “skilled person with the proper tools and physical access to the drives may be able to gain unauthorized access to data”.Ī similar warning has also been published by Verbatim.Īccording to a report in The H, the vulnerability was discovered by SySS, a German penetration testing firm, and revolves around a fairly elementary loophole in the way the flash drives handle passwords. Kingston Technology has also chimed in with its own security advisory (presumably based upon the same vulnerability) regarding the potential for hackers to access encrypted on some of its USB drives too.
FORGOT SANDISK SECURE ACCESS PASSWORD CODE
SanDisk’s alert was at pains to point out that the the flaw was not in the drive’s hardware or firmware, but in the accompanying code that runs on the user’s computer. What’s going to be causing some anxiety amongst IT teams is that SanDisk has issued a security bulletin explaining that versions of its Cruzer Enterprise flash drive contain a vulnerability that could allow unauthorised parties to access encrypted data on your USB stick. So having a thumb drive that automatically encrypts the data contained upon it is a good idea, as it will mean that even if you do lose your USB stick in the back of a taxi or down the side of the sofa that identity thieves won’t be able to do anything with the sensitive information contained upon it. In fact, if you can think of a type of personal sensitive information – chances are that someone, somewhere, has lost it on a USB stick.
This is sensible as there have been far too many instances of USB sticks being lost containing confidential patient records, school children and records relating to US soliders serving in Afghanistan and Iraq.Įven plans for secret troop movements stored on memory sticks have been lost on the floor of a nightclub. Many companies and individuals use thumb drives equipped with hardware-based encryption to secure their sensitive data. Here’s some news that might cause concern for some users of hardware-encrypted USB memory sticks.
0 kommentar(er)
