RE: uniquely identifing USB device

[Erki Männiste <Erki.Manniste () webmedia ee>]

Thanks everybody, there has been a lot of answers. 
 The reason for doing this is licesing. And everything must work offline. So generating a hash would not protect me 
from byte-to-byte copying using something like dd. 
As I have understood, there is no point-to-click solution for changing the hardware ID, so I guess I will just stick 
with that. Writing a driver or compiling a kernel is probably more expensive than the software is going to be anyway.. 
 

ERKI MÄNNISTE
QA Specialist
erki.manniste () webmedia ee
Telefon: +372 5233653
Webmedia Group AS 



-----Original Message-----
From: John Morrison [mailto:john.morrison101 () gmail com] 
Sent: Wednesday, April 11, 2012 2:32 PM
To: Erki Männiste
Cc: security-basics () securityfocus com
Subject: Re: uniquely identifing USB device

Erki,

Why do you want to identify the USB stick?

If it is to check if it is an authorised one could you not just store a unique hash on it? If it doesn't have a hash, 
or the hash does not match what you generated, it's not authorised. Just an MD5 hash might be enough.

John

On 5 April 2012 12:24, <erki.manniste () webmedia ee> wrote:
> Hi,
> I need to identify a usb stick uniquely and I have been trying to find 
> out weather using just hardwareID is enough?
> I have heard of a driver that lets you emulate an usb device and set 
> that ID, but quick googleing didn’t give any results. Does anybody 
> know of something like that? Is it possible to (for someone with 
> mediocre hacking
> skills) to manipulate with these values? Is there a better way to 
> uniquely identify that device?
>
> Thanks,
> erki
>
> ----------------------------------------------------------------------
> -- Securing Apache Web Server with thawte Digital Certificate In this 
> guide we examine the importance of Apache-SSL and who needs an SSL 
> certificate.  We look at how SSL works, how it benefits your company 
> and how your customers can tell if a site is secure. You will find out 
> how to test, purchase, install and use a thawte Digital Certificate on 
> your Apache web server. Throughout, best practices for set-up are 
> highlighted to help you ensure efficient ongoing management of your 
> encryption keys and digital certificates.
>
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be4
> 42f727d1
> ------------------------------------------------------------------------

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------