RE: uniquely identifing USB device

[Mohd Fauzi Bin Suwarno <mohdfauzi () cuscapi com>]

If it's true, is it legal? 

Does Hardware ID have anything significant with their product number counts?





-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On Behalf Of Taylor, Graham
Sent: Tuesday, April 10, 2012 4:24 AM
To: Thugzclub; erki.manniste () webmedia ee
Cc: security-basics () securityfocus com
Subject: RE: uniquely identifing USB device

Some suppliers can modify the Hardware ID string in the USB sticks, this is the approach I took when introducing 
endpoint security in my organisation.


-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com] On Behalf Of Thugzclub
Sent: 06 April 2012 04:05
To: erki.manniste () webmedia ee
Cc: security-basics () securityfocus com
Subject: Re: uniquely identifing USB device

This is challenging. For instance, many USB sticks are supplied by the same hardware vendor...



On 5 Apr 2012, at 11:24, erki.manniste () webmedia ee wrote:

> Hi,
> I need to identify a usb stick uniquely and I have been trying to find out weather using just hardwareID is enough? 
> I have heard of a driver that lets you emulate an usb device and set that ID, but quick googleing didn t give any 
> results. Does anybody know of something like that? Is it possible to (for someone with mediocre hacking skills) to 
> manipulate with these values? Is there a better way to uniquely identify that device?
>
> Thanks,
> erki
>
> ----------------------------------------------------------------------
> -- Securing Apache Web Server with thawte Digital Certificate In this 
> guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how it 
> benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
> install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
> highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be4
> 42f727d1
> ----------------------------------------------------------------------
> --

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and 
who needs an SSL certificate.  We look at how SSL works, how it benefits your company and how your customers can tell 
if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your 
Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing 
management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------