LibreTechni.ca
  • Communities
  • Create Post
  • Create Community
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
JensSpahnpasta@feddit.org to Technology@lemmy.worldEnglish · 2 days ago

Lenovo's 'encrypted' fingerprint USB drive is just an unencrypted SD card in a fancy case

www.tomshardware.com

external-link
message-square
66
fedilink
  • cross-posted to:
  • cybersecurity@infosec.pub
669
external-link

Lenovo's 'encrypted' fingerprint USB drive is just an unencrypted SD card in a fancy case

www.tomshardware.com

JensSpahnpasta@feddit.org to Technology@lemmy.worldEnglish · 2 days ago
message-square
66
fedilink
  • cross-posted to:
  • cybersecurity@infosec.pub
Lenovo's 'encrypted' fingerprint USB drive is just an unencrypted SD card in a fancy case — AI-assisted follow-up finds a backdoor and hardcoded keys in other ‘secure’ USB products
www.tomshardware.com
external-link
The fingerprint only switched the USB connection on; nothing on the card was encrypted.
  • xav@programming.dev
    link
    fedilink
    English
    arrow-up
    34
    ·
    2 days ago

    They’re the people making the next GrapheneOS hardware. There’s some interesting cognitive dissonance.

    • roundabout@feddit.org
      link
      fedilink
      English
      arrow-up
      4
      ·
      18 hours ago

      I seriously believe that this thing was a white-label.

    • Natanael@infosec.pub
      link
      fedilink
      English
      arrow-up
      13
      ·
      1 day ago

      The GrapheneOS people are using CPU level hardware security functions provided by Qualcomm, I’m assuming the partnership means they get proper access to drivers and Motorola / Lenovo won’t be modifying the CPU.

      Now there’s still plenty of room for shenanigans in other places like the modem and various interconnects and the motherboard and all that, but at least there’s some baseline security provided there using ARM secure boot and hardware level exploit protection in the CPU, etc.

    • ryannathans@aussie.zone
      link
      fedilink
      English
      arrow-up
      12
      ·
      1 day ago

      The actual people involved in phone design atd manufacture wouldn’t even have a manager in common with the people that produced this

    • KyuubiNoKitsune@lemmy.blahaj.zone
      link
      fedilink
      English
      arrow-up
      12
      ·
      1 day ago

      Lenovo makes Motorola? Or are you talking about something else?

      • DastardlyJames@lemmy.world
        link
        fedilink
        English
        arrow-up
        31
        ·
        1 day ago

        Motorola has been owned by Lenovo since 2014. https://news.lenovo.com/pressroom/press-releases/lenovo-completes-full-acquisition-motorola-mobility-from-google/

        You can even buy Motorola smartphones from Lenovo’s website. https://www.lenovo.com/gb/en/c/phones/moto/

        • KyuubiNoKitsune@lemmy.blahaj.zone
          link
          fedilink
          English
          arrow-up
          10
          ·
          1 day ago

          Oh shit! I didn’t know. Thanks!

    • youmaynotknow@lemmy.zip
      link
      fedilink
      English
      arrow-up
      6
      ·
      1 day ago

      Let’s hope that the 'partnership 'means the GOS team will be auditing the actual hardware for the GrapheneOS compatible phones next year.

    • AllYourSmurf@lemmy.world
      link
      fedilink
      English
      arrow-up
      7
      ·
      1 day ago

      Fairphone here I come.

Technology@lemmy.world

technology@lemmy.world

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !technology@lemmy.world

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


  • @L4s@lemmy.world
  • @autotldr@lemmings.world
  • @PipedLinkBot@feddit.rocks
  • @wikibot@lemmy.world
Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 2.89K users / day
  • 8.97K users / week
  • 14.9K users / month
  • 28.5K users / 6 months
  • 1 local subscriber
  • 89.4K subscribers
  • 9.12K Posts
  • 292K Comments
  • Modlog
  • mods:
  • L3s@lemmy.world
  • enu@lemmy.world
  • L4sBot@lemmy.world
  • Technopagan@lemmy.world
  • L3s@hackingne.ws
  • BE: 0.19.5
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org