Bob ‘n Alice On Security

Helping to Avoid a False Sense of Security

Archive for September 2008

MXI Security: Stealth MXP USB Drive Cracked

leave a comment »

The Stealth MXP USB memory stick from MXI Security has been cracked. Upon being confronted with the breech, MXI issued Security Bulletin MXI06-001, which reads in part “MXI ACCESS and ACCESS Enterprise Client software incorrectly manages a hashed password history list allowing attackers to execute an off-line attack on the hashes to guess a password in the list”. Check out the full report from Heise Security to learn about the three mistakes MXI made in designing its encrypted USB drive.

As always, stay safe and avoid a false sense of security.


Written by Alice

September 10, 2008 at 20:41