digg

Facebook Connect Join Digg About

Secustick - Total security or waste of money

tweakers.net — As of late, several organizations including civil services and the ministry of defense, have been embarrassed by the revelation of secrets because of lost memory sticks. The security of these information carriers has since become a hot issue. The Secustick promises to be the ultimate solution. It took Tweakers.net about half an hour to hack it.

Who dugg this?

Digg DudeWhat is Digg?

Digg is a place for people to discover and share content from anywhere on the web. Digg surfaces the best stuff as submitted and voted on by the community. Take the Tour to learn more.

8 Comments

show profanity settings
expand all
  • Snuffelbug, on 10/12/2007, -0/+3Very nice article. Go Tweakers!
  • SuckMyDigg, on 10/12/2007, -0/+2There's nothing I love more than reading about some new grand touted security scheme that was defeated with little more than common sense. Especially when governments or large corporations buy it up.

    Digg++ on that article. Well done.
  • windhawk, on 10/12/2007, -0/+2Use TrueCrypt
  • bosmonster, on 10/12/2007, -0/+1Unbelievable how naive governments can be. A company stating it is safe and has a selfdestruct and believing it, without having it tested by a company that knows what its doing. Without hesitation large companies and governments start using this so called 'secure' stick.

    It's a joke.
  • Tosti444, on 10/12/2007, -0/+1The actual hacker of this "secustick" has his own website, with a lot of other cool hacks: http://spritesmods.com/
  • dtechnology, on 10/12/2007, -1/+2Great article. It's in dutch, so for those who can't read dutch (or just want a summary), these are the main conclusions:
    - The password verification takes place entirely on the PC (with a windows-only program)
    - The only thing needed to unlock the stick is a command, this can either be send by a custom-made program, or the program can easily be hacked to send the command whatever the password is. (Changing a return value from 0 to 1)
    - The stick doesn't have any hardware that can destroy the memory
  • PdeB, on 10/12/2007, -0/+1The Digg-link goes to the English translation of the article :)
  • SantaRosa, on 10/10/2007, -0/+0I am wondering did the hacker manage to successfully hack the 2nd stick with the fingerprint, cos he seems like he can't manage to hack thru as the encryption key is coupled with the fingerprint.

  • Add a Comment

    Login or register to comment!
    Or, sign-in super fast with your Facebook account ...


© Digg Inc. 2009 — Content created and posted by Digg users is dedicated to the public domain | Terms of Use Updated | Privacy Policy
DIGG, DIGG IT, DUGG, DIGG THIS, Digg graphics, logos, designs, page headers, button icons, scripts, and other service names are the trademarks of Digg Inc.