Botnet, Phineas Fisher, and SSD – Hack Naked News #196

Vulnerabilities in SSD Encryption, Bypassing Windows UAC, Botnet Pwns over 100,00 routers w/ ancient security flaw, Google hit with IP Hijack, and 1 thing you can do to make your internet safer and faster! Jason Wood from Paladin Security joins us for … Continue reading Botnet, Phineas Fisher, and SSD – Hack Naked News #196

Steady Hand Repurposes Cheap SSD Modules

For hackers, cheap (and arguably disposable) consumer hardware makes for a ready supply of free or low-cost components. When you can walk into a big box store and pick up a new low-end laptop for $150, how many are going to spend the money to repair or upgrade the one they have now? So the old ones go to the bin, or get sold online for parts. From an ecological standpoint our disposable society is terrible, but at least we get some tech bargains out of the deal.

Case in point, the dirt cheap 32 GB eMMC SSDs [Jason Gin] …read more

Continue reading Steady Hand Repurposes Cheap SSD Modules

Researchers crack disk encryption in popular Samsung and Crucial SSDs

Researchers at Netherlands-based Radboud University, which is active in almost all scientific fields, have discovered grave security flaws in several popular solid-state drives (SSD) that promise full disk encryption. In a nutshell, they can be cracked… Continue reading Researchers crack disk encryption in popular Samsung and Crucial SSDs

Self-encrypting SSDs vulnerable to encryption bypass attacks

Researchers have discovered security holes in the hardware encryption implementation of several solid state disks (SSDs) manufactured by Crucial (owned by Micron) and Samsung, which could allow attackers to bypass the disk encryption feature and access… Continue reading Self-encrypting SSDs vulnerable to encryption bypass attacks

Flaws in Popular Self-Encrypting SSDs Let Attackers Decrypt Data

We all have something to hide, something to protect. But if you are also relying on self-encrypting drives for that, then you should read this news carefully.

Security researchers have discovered multiple critical vulnerabilities in some of the popula… Continue reading Flaws in Popular Self-Encrypting SSDs Let Attackers Decrypt Data

Does full disk encryption offer mitigation in the case of the firmware of an SSD being compromised?

Suppose the firmware of an SSD or HDD has been compromised by rogue actors either through “interdiction” (interception) or via the internet. They are able to exfiltrate data and conduct surveillance at will without my knowled… Continue reading Does full disk encryption offer mitigation in the case of the firmware of an SSD being compromised?