conv.

← The whole story
Security
Lenovo's 'encrypted' USB drive found to be a plain SD card; AI probe finds more flaws

Researcher finds Lenovo FU100 drive has no real encryption

1 Oct 29 4:10 PM · 13d ago · 1 post · 1 source · development 1 of 3

Xusheng Li determined that the Lenovo ThinkPlus FU100, marketed as AES-256 hardware-encrypted, contains an ordinary SD card; the fingerprint sensor merely switches the USB connection on without encrypting any data. Lenovo issued a stopgap fix covering the card.

Researcher finds Lenovo FU100 drive has no real encryption
tomshardware.com

“Lenovo's ThinkPlus FU100 fingerprint stick was marketed as "hardware encrypted" with AES-256, but inside was an ordinary SD card with nothing encrypted.”

@IntCyberDigest

Xusheng Li Security researcherLenovo Manufacturer of the ThinkPlus FU100Codex AI tool used in the follow-up analysis

The whole story articlesposts the bright band is this development · numbered dots are the others · click one to jump

Peak 14 pieces in 3h at Nov 1, 8 AM; 41 pieces over 14 days (4 articles · 8 posts · 29 comments) Oct 29, 3 PM — 1 piece · 1 post — X 1Oct 29, 6 PM — quietOct 29, 9 PM — quietOct 30, 12 AM — quietOct 30, 3 AM — quietOct 30, 6 AM — quietOct 30, 9 AM — quietOct 30, 12 PM — 1 piece · 1 post — Mastodon 1Oct 30, 3 PM — quietOct 30, 6 PM — quietOct 30, 9 PM — quietOct 31, 12 AM — quietOct 31, 3 AM — quietOct 31, 6 AM — quietOct 31, 9 AM — quietOct 31, 12 PM — quietOct 31, 3 PM — quietOct 31, 6 PM — quietOct 31, 9 PM — quietNov 1, 12 AM — quietNov 1, 2 AM — quietNov 1, 5 AM — 3 pieces · 2 articles · 1 post — Mastodon 1, Reddit 1, Newswires 1Nov 1, 8 AM — 14 pieces · 2 articles · 3 posts · 9 comments — Hacker News 10, Mastodon 2, Newswires 2Nov 1, 11 AM — 10 pieces · 1 post · 9 comments — Hacker News 9, Mastodon 1Nov 1, 2 PM — 3 pieces · 3 comments — Hacker News 3Nov 1, 5 PM — 3 pieces · 3 comments — Hacker News 3Nov 1, 8 PM — quietNov 1, 11 PM — 1 piece · 1 comment — Hacker News 1Nov 2, 2 AM — 2 pieces · 2 comments — Hacker News 2Nov 2, 5 AM — 2 pieces · 1 post · 1 comment — Mastodon 1, Hacker News 1Nov 2, 8 AM — quietNov 2, 11 AM — 1 piece · 1 comment — Hacker News 1Nov 2, 2 PM — quietNov 2, 5 PM — quietNov 2, 8 PM — quietNov 2, 11 PM — quietNov 3, 2 AM — quietNov 3, 5 AM — quietNov 3, 8 AM — quietNov 3, 11 AM — quietNov 3, 2 PM — quietNov 3, 5 PM — quietNov 3, 8 PM — quietNov 3, 11 PM — quietNov 4, 2 AM — quietNov 4, 5 AM — quietNov 4, 8 AM — quietNov 4, 11 AM — quietNov 4, 2 PM — quietNov 4, 5 PM — quietNov 4, 8 PM — quietNov 4, 11 PM — quietNov 5, 2 AM — quietNov 5, 5 AM — quietNov 5, 8 AM — quietNov 5, 11 AM — quietNov 5, 2 PM — quietNov 5, 5 PM — quietNov 5, 8 PM — quietNov 5, 11 PM — quietNov 6, 2 AM — quietNov 6, 5 AM — quietNov 6, 8 AM — quietNov 6, 11 AM — quietNov 6, 2 PM — quietNov 6, 5 PM — quietNov 6, 8 PM — quietNov 6, 11 PM — quietNov 7, 2 AM — quietNov 7, 5 AM — quietNov 7, 8 AM — quietNov 7, 11 AM — quietNov 7, 2 PM — quietNov 7, 5 PM — quietNov 7, 8 PM — quietNov 7, 11 PM — quietNov 8, 2 AM — quietNov 8, 5 AM — quietNov 8, 8 AM — quietNov 8, 11 AM — quietNov 8, 2 PM — quietNov 8, 5 PM — quietNov 8, 8 PM — quietNov 8, 11 PM — quietNov 9, 2 AM — quietNov 9, 5 AM — quietNov 9, 8 AM — quietNov 9, 11 AM — quietNov 9, 2 PM — quietNov 9, 5 PM — quietNov 9, 8 PM — quietNov 9, 11 PM — quietNov 10, 2 AM — quietNov 10, 5 AM — quietNov 10, 8 AM — quietNov 10, 11 AM — quietNov 10, 2 PM — quietNov 10, 5 PM — quietNov 10, 8 PM — quietNov 10, 11 PM — quietYesterday, 2 AM — quietYesterday, 5 AM — quietYesterday, 8 AM — quietYesterday, 11 AM — quietYesterday, 2 PM — quietYesterday, 5 PM — quietYesterday, 8 PM — quietYesterday, 11 PM — quietToday, 2 AM — quietToday, 5 AM — quiet 123
1Researcher finds Lenovo FU100 drive has…2Infosec outlets pick up the Lenovo finding3AI-assisted follow-up finds backdoor in…
Oct 30Oct 31Nov 1Nov 2Nov 3Nov 4Nov 5Nov 6Nov 7Nov 8Nov 9Nov 10now · 8:19 AM ET

What people said 1 voice · verbatim

All 3 developments of Lenovo's 'encrypted' USB drive found to be a plain SD card… →

XMastodonNewswiresRedditHacker News