Lexar JumpDrive Password Scheme Cracked

Saint Aardvark writes "Lexar describes the JumpDrive Secure as "loaded with software that lets you password-protect your data. If lost or stolen, you can rest assured that what you've saved there remains there with 256-bit AES encryption." @stake has a different take: The password can be observed in memory or read directly from the device, without evidence of tampering." And best of all, the punch line: "[The password] is stored in an XOR encrypted form and can be read directly from the device without any authentication." That's why I use ROT-13 for my encryption needs."

Comments

Re:stupid response #1

[nacs]

My definition of God is based on Christianity, and would never destroy to create.

I guess you've never heard the story of Noah's ark then. Or Soddom and Gomorrah.

Re:stupid response #1

[tabrnaker]

Really? Have you ever even read the bible? YOu seem quite clueless as to it's contents. I guess you're not a christian because dissolving the ego is the entrance to heaven/enlightenment. Then again, you might be christian since they pick and choose which parts of the bible to follow and twist jesus' words until they're almost meaningless. It's always so much easier when we create our own religions and definitions because then we can tailor them to fit our failings.