Kingston Elite

Home > Photography & Video > Kingston Elite

July 15th, 2010 admin Leave a comment Go to comments

Kingston Elite

Top Brand "secure" USB flash drives hacked

January 5, 2010, most major brands, such as Sandisk, Kingston and Verbatim offer Secure Flash Drive, in addition to its extensive standard flash unit on the market. Secure flash drives promise to protect your data against hackers, viruses, water, earthquakes and other natural disasters. On January 5, 2010, a design flaw has been reported, This would allow an attacker to gain secure access to flash drives made by some of the major brands of Flash Memory decisions. said it is possible to send a "liberation" of flag devices that bring to light thanks to the computer without the word system password. Pen-Test GmbH German company has released a document iff highlighting flaws. Devices affected

SanDisk Cruzer ® Enterprise FIPS Edition USB flash drive with McAfee, CZ46 – 1 GB SanDisk Cruzer ® Enterprise FIPS Edition USB Flash Drive, CZ32 – 1GB 2GB, 4GB, 8GB
SanDisk Cruzer ® Enterprise USB flash drive with McAfee CZ38 – 1GB, 2GB, 4GB, 8GB
SanDisk Cruzer ® Enterprise USB Flash Drive, CZ22 – 1GB, 2GB, 4GB, 8GB
Kingston DataTraveler BlackBox (DTBB)
Kingston DataTraveler Secure – Privacy Edition (DTSP)
Kingston DataTraveler Elite – Privacy Edition (DTEP)
Verbatim Corporate Secure FIPS Edition USB Flash Drives 1GB, 2GB, 4GB, 8GB
Verbatim Corporate Secure USB Flash Drive 1GB, 2GB, 4GB, 8GB

The default is pretty simple. When the flash drive is connected to the secure computer software with the drive Flash is running on the computer, which authenticates the password provided and sends an "unlock" the banner of unity. During the analysis under a debugger, the code simply translates into a common "conditional jump" that can be patched to unlock the device. Such implementations have been criticized by safety engineers of reserves in the world and certainly raise questions about the process of designing flash drives in danger. Many of the "cracks" of the software based on the same technique to change the logic of the software implementation, which is easily visible with a good debugger, for example, and SoftIce OllyDbg. The fact on the public and users who have purchased many these devices is that they boasted of being certified for FIPS 140-2 Level 2 security validation in organizing the U.S. government (NIST target = "_blank"> National Standards Institute and Technology). Iff GmbH uses Ollydbg change a flag in the software that accompanies the flash of course access the drive without knowing the original password. For course, this raises the question, how and why NIST certify the products concerned and flash drives safe when they had such inherent defects in the design. NIST is of course the defense of his position and said:

"From our initial analysis, appears that the software that allows the decryption cryptographic module instead of certified by NIST, is the source of vulnerability "

Yes, of course.

"However, we investigated if changes in the NIST certification process should be done in the light this issue. "

NIST certification for cryptographic modules that encrypt and decrypt the data contained in the device. Lovers security are discussed, if you put the encryption module implementations behind the insecurity, resulting in a system of insecurity General. Flash drives for security, it is quite embarrassing to see the major vendors do not do what your product promised. As demonstrated by default, media consumers have been a misperception of certificates issued by large organizations. These certifications do not guarantee that the device is safe, only that the cryptographic module is safe, right. IronKey users would be happy to know that the failure has not affect its products. IronKey uses hardware-based authentication instead of sending the flags to unlock the device. All IronKey Flash drives you have not been affected by this defect, and we are not surprised to see sales of this device to hit the ceiling. Remember, not Only the software is vulnerable, but also the equipment. It is easier to analyze the software under a debugger, but with the right tools, analysis material under a debugger is just as easy. Particularly vulnerable is the sequence that opens the album once authentication is completed – Nodoubt be one of the safest routines flash drive. Fortunately, IronKey has designed its protection from the beginning. Chips on the flash drive epoxy mixture sure what it means to have access to the equipment is almost impossible, even by the most persistent pirates. In our opinion, if more than the account to buy secure flash drive, you should not have to worry about the implementation of the safety device. Although Kingston, Sandisk and Verbatim furiously to try to do all it can to address and bury the problem, we would not be an easy task to restore consumer confidence. As expected, Kingston is to replace all affected units and secure flash memory makes the following statement to reassure customers

Kingston Digital Inc. believes that safety the data of our customers as paramount. Kingston customers affected by security risks please visit our website for instructions on how to address issues: target = "_blank" title = "Replacing flash memory drives Kingston after hacking insurance "> http://www. Kingston. com / driveupdate

About the Author

Article Written By: Jason Mills, Techdna.co.uk
Article Source: http://news.techdna.co.uk/2010/01/secure-flash-drives-hacked/

Kingston Elite Cheerleading- Nationals at Nationals 2009