So I have read some articles (this being one https://nakedsecurity.sophos.com/2010/01/05/flash-drive-manufacturers-warn-hackers-decrypt-secure-usb-sticks/) that point out some flaws with certain encrypted USB sticks. Are all encrypted USB sticks subject to these kinds of problems or are there ones out there that are stronger than others?
2
-
Each manufacturer is going to build their devices differently.– schroeder ♦Nov 5, 2014 at 15:24
-
Encrypted USB sticks cover the full spectrum from "data stored unencrypted with 'security' provided by a custom driver" to "data stored encrypted, following current best practices for full-disk encryption".– MarkNov 5, 2014 at 20:50
Add a comment
|
1 Answer
There is no reason it isn't possible to build a secure USB stick that actually requires password entry to decrypt which isn't present on the stick. Short of putting a keypad on the actual device though, there is always the possibility of logging the password when connected to an insecure system (and even with a keypad, an insecure system could tamper with any partition that is opened up to it.)
Whether any particular USB stick fits this though depends on that particular USB stick manufacturer's design. There are certainly plenty of ill conceived security products available.
answered Nov 5, 2014 at 15:55
