3 ms·
> making it impossible for even hacked software on the USB device to write to memory? Signed firmware to prevent BadUSB-style attacks, price starts at $40 for
by transpute 3y ago
> making it impossible for even hacked software on the USB device to write to memory?
Signed firmware to prevent BadUSB-style attacks, price starts at $40 for 16GB, https://www.kanguru.com/products/kanguru-flashtrust-secure-firmware-usb-3-0-flash-drive https://www.kanguru.com/products/kanguru-flashtrust-secure-f...
They have other models with signed firmware + FIPS 140 certified encryption + tamper resistance + physical write-protect switch.
They also sell an SSD enclosure with write-protect switch.
- yencabulator 3y agoSigning firmware might help prevent replacing the firmware, but it doesn't do anything to protect against exploiting a security vulnerability in the current firmware. The marketing is a little too breathless to assure me that they did anything to actually make the firmware trustworthy: "Digitally Signed, Trusted Secure Firmware (RSA-2048 Bit)". Signing something doesn't make it secure against exploits.
- transpute 3y agoSigning firmware is step 1 in raising the bar for attackers, since most flash drives have unsigned firmware which presents little barrier to attacks. If you could recommend other commercial flash drives with signed firmware, they could be compared for security vulnerabilities. Some models have FIPS-certified encryption, so they may have customers who are high-value targets, motivating attacks/testing for security vulnerabilities.