PulseAugur
EN
LIVE 16:05:57

Lenovo 'secure' USB drives found to have unencrypted SD cards and backdoors

Lenovo has issued firmware updates for several of its USB storage devices, including the ThinkPlus FU100, FU200, TU800, and TSD303, following security research that revealed significant vulnerabilities. Initially marketed as secure and encrypted, the ThinkPlus FU100 was found to contain a standard SD card with no actual encryption, only a fingerprint reader that enabled the USB connection. Further investigation uncovered hardcoded keys and backdoor accounts in other 'secure' USB products from various vendors, some of which also left data unencrypted on microSD cards. The research utilized AI tools like OpenAI's Codex to assist in reverse-engineering these security measures. AI

IMPACT Highlights how AI tools are accelerating the discovery of security vulnerabilities in hardware products.

RANK_REASON Security research uncovered flaws in consumer USB storage products, leading to firmware updates.

Read on Mastodon — mastodon.social →

AI-generated summary · Google Gemini · from 2 sources. How we write summaries →

Lenovo 'secure' USB drives found to have unencrypted SD cards and backdoors

How we ranked this

Signal score
0 / 100
Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket
Tool
Security research uncovered flaws in consumer USB storage products, leading to firmware updates.
Source corroboration
2 independent sources
Multiple independent publishers reporting the same story raises confidence that it's real and newsworthy.
Topics
product, safety
Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance
High
Clearly on-topic for AI-industry coverage.
Story freshness
2 days old
Coverage has settled into its steady-state source set.

Full methodology in our editorial standards.

COVERAGE [2]

  1. Tom's Hardware TIER_1 English(EN) · Shane Downing ·

    Lenovo's 'encrypted' fingerprint USB drive is just an unencrypted SD card in a fancy case

    Lenovo’s ThinkPlus FU100 fingerprint USB drive held an unencrypted SD card, and Codex found fixed keys in other ‘secure’ USB products.

  2. Mastodon — mastodon.social TIER_1 English(EN) · [email protected] ·

    Lenovo's 'encrypted' fingerprint USB is just an unencrypted SD card in a case Article URL: https://www. reddit.com/r/technology/commen ts/1xl2pr3/lenovos_encryp

    Lenovo's 'encrypted' fingerprint USB is just an unencrypted SD card in a case Article URL: https://www. reddit.com/r/technology/commen ts/1xl2pr3/lenovos_encrypted_fingerprint_usb_drive_is_just/ Comments URL: https:// news.ycombinator.com/item?id=5 0326099 Points: 3 # Comments: 0…