Padlock 2 Flash Drive Security Easily Bypassed!
Posted on July 5, 2010 at 12:50 am by Donna Warren
Corsair advertises “256-bit hardware data encryption” on the Padlock2 flash drive. This supposedly secure flash drive uses a pin number to unlock the drive. These flash drives have a mini keyboard for users to enter their pin number to unlock the drive which is supposed to let the drive function independently of drivers and operating system platforms. The company has pointed out that the pin only powers up the motherboard and lets you bypass the security measures.
However, you can defeat the security and access the data by using a special key combination without using the PIN.
Didn’t the designers bother to test the drive’s security measures? Their last version had problems as well. Anyway, Corsair has released a fix if you happen to be unlucky enough to own one of these drives.
How to Fix the Problem
While Corsair assures us that the repair is not destructive, it is a good idea to back up your data before performing the repair. According to Corsair, you must follow these steps exactly to make your flash drive secure:
- The drive must be in a LOCKED state. If the drive is plugged into a computer, remove it.
- Press and hold the KEY button and the 0/1 button down, simultaneously, for five or more seconds.
- Release the KEY and 0/1 buttons. Your password MAY have been erased, but data will still exist on the drive.
- Wait until any LEDs are no longer blinking or turned on
- Press and hold the KEY button for three seconds. Both red and green LEDs will turn on
- Enter a new PIN using the PIN keys. A user PIN may be 4 to 10 digits long.
- Press and release the KEY button. Both red and green LEDs will blink in unison.
- Re-enter your PIN to confirm.
- Press and release the Key button. Green LED will flash, indicating your PIN has been accepted.
- Your drive is now secure.
Summary
Companies could avoid these kinds of problems if they would thoroughly test their products before final release. Come on folks, there are thousands of us willing to be beta testers for new products. Is the bad press and losing your customer’s trust really worth saving the cost of giving away a few free products to testers?
