Comments on: Personal Pocket Safe USB Drive with Self-Termination Feature http://www.hardwaresphere.com/2009/08/20/personal-pocket-safe-usb-drive-with-self-termination-feature/ Sphere of Hot Hardware and Cool Gadgets Fri, 10 Feb 2012 04:30:17 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: Electronic Gadgets http://www.hardwaresphere.com/2009/08/20/personal-pocket-safe-usb-drive-with-self-termination-feature/comment-page-1/#comment-4733 Electronic Gadgets Sun, 30 Aug 2009 15:39:14 +0000 http://www.hardwaresphere.com/?p=10620#comment-4733 This is a great device for transporting sensitive information with peace of mind. And it will self-destruct if it falls into the hands of S.P.E.C.T.R.E. by mistake. This is a great device for transporting sensitive information with peace of mind. And it will self-destruct if it falls into the hands of S.P.E.C.T.R.E. by mistake.

]]> By: 3rd Hot Hardware and Cool Gadgets Gallery of August 2009 | Gallery at Hardware Sphere http://www.hardwaresphere.com/2009/08/20/personal-pocket-safe-usb-drive-with-self-termination-feature/comment-page-1/#comment-4616 3rd Hot Hardware and Cool Gadgets Gallery of August 2009 | Gallery at Hardware Sphere Mon, 24 Aug 2009 00:36:29 +0000 http://www.hardwaresphere.com/?p=10620#comment-4616 [...] [...] [...] [...]

]]> By: Daniel Kantsky http://www.hardwaresphere.com/2009/08/20/personal-pocket-safe-usb-drive-with-self-termination-feature/comment-page-1/#comment-4595 Daniel Kantsky Fri, 21 Aug 2009 21:21:01 +0000 http://www.hardwaresphere.com/?p=10620#comment-4595 Looking at this device, I find that the volume is pre-formatted, which means that the AES encryption key was pre-set at the factory. This makes me wonder if the factory keeps a copy, or if all devices have the same AES encryption key? Also, since the PIN can only be 5 numbers long, there are only 625 possible different PINs/Passwords. Since the device doesn't really prevent brute force password guessing (it adds a delay after several bad attempts), you are 100% guaranteed to be able to guess the password within about 2 days of trying by hand. The manufacturer doesn't publish any details of how the encryption works, or anything about key management. They are made in China by an unnamed OEM manufacturer. Makes me suspicious that's for sure. Looking at this device, I find that the volume is pre-formatted, which means that the AES encryption key was pre-set at the factory. This makes me wonder if the factory keeps a copy, or if all devices have the same AES encryption key?

Also, since the PIN can only be 5 numbers long, there are only 625 possible different PINs/Passwords. Since the device doesn’t really prevent brute force password guessing (it adds a delay after several bad attempts), you are 100% guaranteed to be able to guess the password within about 2 days of trying by hand.

The manufacturer doesn’t publish any details of how the encryption works, or anything about key management. They are made in China by an unnamed OEM manufacturer.

Makes me suspicious that’s for sure.

]]>