Bob ‘n Alice On Security

Sprites mods has a nicely detailed article on how they broke through the biometric finger print reader on the BioSlimDisk, a supposedly secure USB memory stick, and were able to access the information stored on the device.

It’s yet another indication that encryption of data really doesn’t do much of a job of protecting it, if the product doesn’t deal with issues such as key generation, key management, brute force attacks, modification of firmware, or simple power attacks against the chips.

As always, stay safe and avoid a false sense of security.