• purplemonkeymad@programming.dev
    link
    fedilink
    English
    arrow-up
    0
    ·
    14 hours ago

    different flaw in Lenovo’s TSD303 external SSD. Its data actually was encrypted, but the drive sent the correct password back over USB in plain text for the software to compare,

    Are we doing client side verification again already? I thought we had just remembered not to do it recently.

    • m-p{3}@lemmy.caOP
      link
      fedilink
      English
      arrow-up
      0
      ·
      22 hours ago

      They’re all likely awful. My advice is to leave that part to well tested and trusted encryption softwares.

      Ex: VeraCrypt, LUKS2, Cryptomator, Gocryptfs

      • SayCyberOnceMore@feddit.uk
        link
        fedilink
        English
        arrow-up
        0
        ·
        16 hours ago

        Our problem is that we’re using these as boot drives and transferring files to appliances (ie network switches, etc) so we can’t use a lot of the software based encryption.

        I’ll just hope that the iStorage and Apricorn drives use more than smoke & mirrors to protect the contents