News for hackers. Stuff that matters.

A comment on Lenovo's 'encrypted' fingerprint USB is just an unencrypted SD card in a case.

Re:Lenovo's 'encrypted' fingerprint USB is just an unencrypt... by RobotToaster on Sunday November 01, 2026 @11:09AM (#50326914)
This could've been rendered relatively secure had the USB stick been potted, but I guess that would've cost an extra few cents. https://en.wikipedia.org/wiki/Potting_(electronics)
[ Parent | on HN ]
Re:Lenovo's 'encrypted' fingerprint USB is just an unencrypt... by icpmoles on Sunday November 01, 2026 @12:01PM (#50327410)
It was potted (page 19 of the slides https://github.com/xusheng6/breaking_encrypted_USB_drives_wi... )
[ Parent | on HN ]
Re:Lenovo's 'encrypted' fingerprint USB is just an unencrypt... by charles_f on Sunday November 01, 2026 @12:07PM (#50327474)
> an interim fix using epoxy over the card

It was

[ Parent | on HN ]
Re:Lenovo's 'encrypted' fingerprint USB is just an unencrypt... by blurbleblurble on Sunday November 01, 2026 @11:23AM (#50327061)
Too expensive at scale
[ Parent | on HN ]
Re:Lenovo's 'encrypted' fingerprint USB is just an unencrypt... by askvictor on Sunday November 01, 2026 @06:44PM (#50331133)
Potted shouldn't matter; if the data is encrypted it doesn't matter if the bits are readable by anyone
[ Parent | on HN ]