USB Vulnerabilities Exploited

[Phil Derbyshire <phil.derbyshire () pdmd co uk>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi all,

This may be old news to some of you, but thought i'd pass on the link
anyway as I don't recollect seeing anything sent out:

https://www.ironkey.com/usb-flash-drive-flaw-exposed

It details the vulnerabilities, how to hack these devices and have been
published by German security firm SySS. The affected devices include:

SanDisk Cruzer® Enterprise FIPS Edition with McAfee USB flash drive,
CZ46 - 1GB,

SanDisk Cruzer® Enterprise FIPS Edition USB flash drive, CZ32 - 1GB,
2GB, 4GB, 8GB

SanDisk Cruzer® Enterprise with McAfee USB flash drive, CZ38 - 1GB, 2GB,
4GB, 8GB

SanDisk Cruzer® Enterprise USB flash drive, CZ22 - 1GB, 2GB, 4GB, 8GB

Kingston DataTraveler BlackBox (DTBB)

Kingston DataTraveler Secure ? Privacy Edition (DTSP)

Kingston DataTraveler Elite ? Privacy Edition (DTEP)

Verbatim Corporate Secure FIPS Edition USB Flash Drives 1GB, 2GB, 4GB, 8GB

Verbatim Corporate Secure USB Flash Drive 1GB, 2GB, 4GB, 8GB


Cheers

Phil


- --

Phil Derbyshire CLAS B.Sc. (Hons)
Director
PDMD Consulting
tel: 07866 728 182
LinkedIn:
http://www.linkedin.com/pub/philip-derbyshire/a/81b/6b6
CESG:
http://www.cesg.gov.uk/find_a/clas/index.cfm?menuSelected=11&displayPage=1111&CLASid=6235
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQEVAwUBS0Wly33bx89c0VTVAQJ9/QgA192REAZ0f1gTOJ+PkNl0tDge0At6qiCd
yHd0DEcfevkd0rJNc5mx7iu2IUqCaMuBq53qCfPTzQ1X1LcCDNZzc81jpnWlq4I2
QyBYGyIcn7KsyKHVSeedW+9y3c6EVgF0fFTCOLYKZddCNj9TYUR44IYer3WaoHMJ
tuLrQ5mPVfY1iHVXAJ7Jrq1EzWi62zJOUKe7ZHrx2cS7nhH1+sCDV/ikoF8RO5ul
Q3mfeCruvIuQsI5fkYM7NT7JaFF/Q/vGkovCfBhZY4wDTxymL/dX2qQD+bi4JrRz
+M6rg1Cpk86c8tGeVvlMtB/0e0jJOkrGcrCoR+SRiuuCgBIV8Sm5QA==
=aZwy
-----END PGP SIGNATURE-----

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------