Security Basics mailing list archives
RE: uniquely identifing USB device
From: Erki Männiste <Erki.Manniste () webmedia ee>
Date: Wed, 11 Apr 2012 12:55:40 +0000
Thanks everybody, there has been a lot of answers. The reason for doing this is licesing. And everything must work offline. So generating a hash would not protect me from byte-to-byte copying using something like dd. As I have understood, there is no point-to-click solution for changing the hardware ID, so I guess I will just stick with that. Writing a driver or compiling a kernel is probably more expensive than the software is going to be anyway.. ERKI MÄNNISTE QA Specialist erki.manniste () webmedia ee Telefon: +372 5233653 Webmedia Group AS -----Original Message----- From: John Morrison [mailto:john.morrison101 () gmail com] Sent: Wednesday, April 11, 2012 2:32 PM To: Erki Männiste Cc: security-basics () securityfocus com Subject: Re: uniquely identifing USB device Erki, Why do you want to identify the USB stick? If it is to check if it is an authorised one could you not just store a unique hash on it? If it doesn't have a hash, or the hash does not match what you generated, it's not authorised. Just an MD5 hash might be enough. John On 5 April 2012 12:24, <erki.manniste () webmedia ee> wrote:
Hi, I need to identify a usb stick uniquely and I have been trying to find out weather using just hardwareID is enough? I have heard of a driver that lets you emulate an usb device and set that ID, but quick googleing didn’t give any results. Does anybody know of something like that? Is it possible to (for someone with mediocre hacking skills) to manipulate with these values? Is there a better way to uniquely identify that device? Thanks, erki ---------------------------------------------------------------------- -- Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates. http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be4 42f727d1 ------------------------------------------------------------------------
------------------------------------------------------------------------ Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates. http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1 ------------------------------------------------------------------------
Current thread:
- uniquely identifing USB device erki . manniste (Apr 05)
- Re: uniquely identifing USB device Thugzclub (Apr 09)
- RE: uniquely identifing USB device Taylor, Graham (Apr 09)
- RE: uniquely identifing USB device Mohd Fauzi Bin Suwarno (Apr 10)
- Re: uniquely identifing USB device Bart Tryb (Apr 10)
- RE: uniquely identifing USB device Taylor, Graham (Apr 09)
- Re: uniquely identifing USB device Thugzclub (Apr 09)
- RE: uniquely identifing USB device Mohd Fauzi Bin Suwarno (Apr 09)
- Re: uniquely identifing USB device _ (Apr 09)
- Re: uniquely identifing USB device John Morrison (Apr 11)
- RE: uniquely identifing USB device Erki Männiste (Apr 11)
- <Possible follow-ups>
- uniquely identifing USB device Bartosz Trybus (Apr 10)