[The Register] Western Digital's hard drive encryption is useless. Totally useless

The_Unbeliever

Honorary Master
Joined
Apr 19, 2005
Messages
103,193
Reaction score
10,233
Location
Nkaaaaandla
Rookie errors make it child's play to decrypt data

Now, a trio of infosec folks – Gunnar Alendal, Christian Kison and "modg" – have tried out six models in the WD My Passport family, and found blunders in the software designs.

For example, on some models, the drive's encryption key can be trivially brute-forced, which is bad news if someone steals the drive: decrypting it is child's play. And the firmware on some devices can be easily altered, allowing an attacker to silently compromise the drive and its file systems.

More at the link : http://www.theregister.co.uk/2015/10/20/western_digital_bad_hard_drive_encryption/
 
Top
Sign up to the MyBroadband newsletter
X