LibreTechni.ca
  • Communities
  • Create Post
  • Create Community
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
JensSpahnpasta@feddit.org to Technology@lemmy.worldEnglish · 3 days ago

Lenovo's 'encrypted' fingerprint USB drive is just an unencrypted SD card in a fancy case

www.tomshardware.com

external-link
message-square
79
fedilink
  • cross-posted to:
  • cybersecurity@infosec.pub
722
external-link

Lenovo's 'encrypted' fingerprint USB drive is just an unencrypted SD card in a fancy case

www.tomshardware.com

JensSpahnpasta@feddit.org to Technology@lemmy.worldEnglish · 3 days ago
message-square
79
fedilink
  • cross-posted to:
  • cybersecurity@infosec.pub
Lenovo's 'encrypted' fingerprint USB drive is just an unencrypted SD card in a fancy case — AI-assisted follow-up finds a backdoor and hardcoded keys in other ‘secure’ USB products
www.tomshardware.com
external-link
The fingerprint only switched the USB connection on; nothing on the card was encrypted.
  • bitteroldcoot@piefed.social
    link
    fedilink
    English
    arrow-up
    79
    ·
    3 days ago

    They have a really long history of doing this stuff. Including outright espionage.

    https://en.wikipedia.org/wiki/Lenovo#Security_and_privacy_incidents

    https://legioncyber.com/insights/lenovos-security-failures-and-hidden-risks/

    This last one is more about just poor quality.

    https://www.lawsuitupdatecenter.com/lenovo-class-action-lawsuits.html

    • Waterpumpee@lemmus.org
      link
      fedilink
      English
      arrow-up
      22
      ·
      3 days ago

      Never understood the thinkpad craze. “Military grade” means cheap as fuck.

      • aesthelete@lemmy.world
        link
        fedilink
        English
        arrow-up
        20
        ·
        3 days ago

        “Military grade” means cheap as fuck.

        Cheap as fuck yes, but also a giant rip-off as well. It isn’t military grade without that skimming off as much of that military industrial complex dollar as possible.

      • frongt@lemmy.zip
        link
        fedilink
        English
        arrow-up
        18
        ·
        3 days ago

        The old ones were durable as hell.

        • eleijeep@piefed.social
          link
          fedilink
          English
          arrow-up
          17
          ·
          3 days ago

          You mean when IBM made them?

          • phutatorius@lemmy.zip
            link
            fedilink
            English
            arrow-up
            1
            ·
            22 hours ago

            And for a few years after, until Lenovo started lifecycling them and the enshittification began.

        • EmilieEasie@fedinsfw.app
          link
          fedilink
          English
          arrow-up
          7
          ·
          2 days ago

          are* durable as hell, the old ones are still around… because they’re very durable!

      • ricecake@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        5
        ·
        2 days ago

        Not always. It’s better to say that “military grade” means “very specific standards”.
        That also happens to translate to cheap pretty often, but that’s because someone in 1943 wrote the specification for The Standard Tube Sock and ordered 7,500,000,000 pairs to be delivered over the next century. Since it’s precisely specified you know exactly how much you can skimp.
        Add that to the trillion pages of compatability requirements and you’re basically never updating anything.
        Like how switching lightbulb brands at a nuclear power plant is hard because you need documentation demonstrating that the plastic in the led won’t become a hazard in a radioactive incident.

      • ramble81@lemmy.zip
        link
        fedilink
        English
        arrow-up
        3
        ·
        2 days ago

        “Close enough for government work” is a saying for a reason.

Technology@lemmy.world

technology@lemmy.world

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !technology@lemmy.world

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


  • @L4s@lemmy.world
  • @autotldr@lemmings.world
  • @PipedLinkBot@feddit.rocks
  • @wikibot@lemmy.world
Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 3.46K users / day
  • 8.95K users / week
  • 14.4K users / month
  • 28.5K users / 6 months
  • 1 local subscriber
  • 89.4K subscribers
  • 9.15K Posts
  • 293K Comments
  • Modlog
  • mods:
  • L3s@lemmy.world
  • enu@lemmy.world
  • L4sBot@lemmy.world
  • Technopagan@lemmy.world
  • L3s@hackingne.ws
  • BE: 0.19.5
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org