> Victorinox says that during the Secure's launch event in London, the
> company offered a team of professional hackers close to $150,000 if
> they could get past the Secure's security measures. 

No, they offered them a set amount of time to do it. In practical terms
for a "lost/stolen USB stick" this is a totally useless test, and is
100% marketing fluff.

If they were really serious, they would have published the full
specifications and provided a dozen sample units for a reasonable entry
fee to anyone that wanted to try.

They also wouldn't be the first manufacturer to severely misunderstand
the correct implementation of AES :

http://www.h-online.com/security/news/item/NIST-certified-USB-Flash-drives-with-hardware-encryption-cracked-895308.html

Cheers,

Michael Holstein
Cleveland State University

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Reply via email to