Lenovo has issued firmware updates for several of its USB storage devices, including the ThinkPlus FU100, FU200, TU800, and TSD303, following security research that revealed significant vulnerabilities. Initially marketed as secure and encrypted, the ThinkPlus FU100 was found to contain a standard SD card with no actual encryption, only a fingerprint reader that enabled the USB connection. Further investigation uncovered hardcoded keys and backdoor accounts in other 'secure' USB products from various vendors, some of which also left data unencrypted on microSD cards. The research utilized AI tools like OpenAI's Codex to assist in reverse-engineering these security measures. AI
IMPACT Highlights how AI tools are accelerating the discovery of security vulnerabilities in hardware products.
RANK_REASON Security research uncovered flaws in consumer USB storage products, leading to firmware updates.
Read on Mastodon — mastodon.social →
- Advanced Encryption Standard
- Codex
- Lenovo
- microSD card
- OpenAI
- SD card
- ThinkPlus FU100
- ThinkPlus FU200
- TSD303
- TU800
- Xusheng Li
AI-generated summary · Google Gemini · from 2 sources. How we write summaries →