Full Disclosure mailing list archives

Re: Victorinox Launches Super-Secure USB Stick


From: Michael Holstein <michael.holstein () csuohio edu>
Date: Wed, 31 Mar 2010 16:08:57 -0400


Victorinox says that during the Secure's launch event in London, the
company offered a team of professional hackers close to $150,000 if
they could get past the Secure's security measures. 

No, they offered them a set amount of time to do it. In practical terms
for a "lost/stolen USB stick" this is a totally useless test, and is
100% marketing fluff.

If they were really serious, they would have published the full
specifications and provided a dozen sample units for a reasonable entry
fee to anyone that wanted to try.

They also wouldn't be the first manufacturer to severely misunderstand
the correct implementation of AES :

http://www.h-online.com/security/news/item/NIST-certified-USB-Flash-drives-with-hardware-encryption-cracked-895308.html

Cheers,

Michael Holstein
Cleveland State University

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: