4 ms·
SSD based encryption implementations are often highly insecure and should never be used. Many drives don't even use the given password to encrypt the data on th
by ndiddy 3y ago
SSD based encryption implementations are often highly insecure and should never be used. Many drives don't even use the given password to encrypt the data on the disk, meaning that flashing the controller with a modified firmware with the password validation patched out will let anyone decrypt the data without needing to know the password. https://www.ieee-security.org/TC/SP2019/papers/310.pdf https://www.ieee-security.org/TC/SP2019/papers/310.pdf
- andersa 3y agoWell that's disappointing.