<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Two Slashes &#187; encryption chip</title>
	<atom:link href="http://www.twoslashes.com/tag/encryption-chip/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.twoslashes.com</link>
	<description>remarking on every line of life</description>
	<lastBuildDate>Thu, 14 Jul 2011 05:40:49 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.4-alpha-19854</generator>
<cloud domain='www.twoslashes.com' port='80' path='/?rsscloud=notify' registerProcedure='' protocol='http-post' />
<atom:link rel="hub" href="http://pubsubhubbub.appspot.com" />
			<item>
		<title>IronKey or LeadWeight?</title>
		<link>http://www.twoslashes.com/2007/12/12/ironkey-or-leadweight/</link>
		<comments>http://www.twoslashes.com/2007/12/12/ironkey-or-leadweight/#comments</comments>
		<pubDate>Wed, 12 Dec 2007 06:24:40 +0000</pubDate>
		<dc:creator>Nick</dc:creator>
				<category><![CDATA[Musings]]></category>
		<category><![CDATA[Christmas]]></category>
		<category><![CDATA[encryption]]></category>
		<category><![CDATA[encryption chip]]></category>
		<category><![CDATA[memory chips]]></category>
		<category><![CDATA[Tor]]></category>
		<category><![CDATA[web browser]]></category>

		<guid isPermaLink="false">http://www.twoslashes.com/?p=84</guid>
		<description><![CDATA[So, I was trolling around the ThinkGeek site a few minutes ago, bored out of my wits and wondering what a crazed geek like myself might want for Christmas, when the TG site proudly offered me a large advertisement for this. What you&#8217;re looking at folks, is the IronKey, a thumb drive so secure, it [...]]]></description>
			<content:encoded><![CDATA[<p>So, I was trolling around the <a href="http://www.thinkgeek.com">ThinkGeek</a> site a few minutes ago, bored out of my wits and wondering what a crazed geek like myself might want for Christmas, when the TG site proudly offered me a large advertisement for <a href="http://www.thinkgeek.com/gadgets/security/99f1/">this</a>.</p>
<p>What you&#8217;re looking at folks, is the IronKey, a thumb drive so secure, it shouldn&#8217;t exist for the simple fear of you not being able to get your information back.</p>
<p>Seriously, here&#8217;s an excerpt of the description of the blasted thing:</p>
<blockquote><p>Passwords <em>can</em> be hacked, but not the IronKey. It&#8217;s built to withstand attacks both virtual and physical. 10 incorrect password attempts, and the encryption chip self-destructs, making the contents of the flash drive totally unreadable. The contents of the drive are filled with epoxy, so if a hacker tries to physically access the chips, he&#8217;d more likely damage them instead. Even if he did get access to the memory chips, they&#8217;d be worthless without the encryption chip. Electron-shielded, even a scanning electron microscope can&#8217;t get inside.</p></blockquote>
<p>While 10 invalid password attempts might be good enough for some people who don&#8217;t think anybody&#8217;s ever going to be touching the drive (in which case, why not settle for something that isn&#8217;t a nuclear option like this), I see it as more problematic, especially if you&#8217;ve got a problem typing <span style="text-decoration: line-through;">croretcly</span> correctly (Yes, that little typo was actually on purpose&#8230;).  If you come back to find someone screwing with your drive (or, perhaps more believably, you&#8217;ve forgotten the password, but remember what you <em>think</em> it might be), only to find that they&#8217;ve (you&#8217;ve) burned through all your password attempts and the drive&#8217;s gone and self-destructed, you&#8217;re screwed.</p>
<p>It&#8217;s almost as if the designers put this thing together intentionally to teach people a valuable lesson:  backups need to be as secure as the originals.  Why do I say this?  They specifically mention that restoring to an IronKey takes minutes, as calmly and caringly as though it happens that people need to replace them all the time.  I don&#8217;t think encrypted backups on a DVD (or any other medium) are going to self-destruct after a few failed password attempts, and it&#8217;s pretty damn easy to just image the disc and walk away to deal with it on my own time in my own lab.  And I won&#8217;t even go near the fact that it&#8217;s filled with epoxy&#8230;while useful for security, epoxy <a href="http://crosslinktech.com/FAQ/Removing%20cured%20products.htm">isn&#8217;t all it&#8217;s cracked up to be</a>&#8230;though on the bright side it will be guaranteeing that you won&#8217;t be getting a refurbished drive off <a href="http://www.woot.com">Woot</a> anytime soon. (Where&#8217;d I put that heat gun?)</p>
<p>And the idea of a Tor-based &#8220;secure&#8221; web browser built in is fitting, it&#8217;s also laughable.  Not only has Tor been found to have <a href="http://ethanzuckerman.com/blog/?p=531">several</a> <a href="http://themostboringblogintheworld.wordpress.com/2006/09/05/clock-skew-tor-vulnerabilityexploit/">vulnerabilities</a> (despite them, it&#8217;s still a great service if you want to <em>try</em> to be anonymous in your surfing) .  The exact same experience is delivered by simply using something along the lines of <a href="http://www.download.com/Torpark/3000-2356_4-10586816.html">Torpark</a>; while you still end up having to trust other people you&#8217;ve never met, you also don&#8217;t have to trust the traffic to be monitored by the people manufacturing the device.</p>
<p>So, with all that in mind:  Why do people bask in the illusion of security, thinking that just because a product claims it&#8217;s safe, it&#8217;s the best product for them?  It&#8217;s my question posed to you for the moment.  What makes people feel that their information is inherently secure in such a device, but they don&#8217;t realize that not only are they securing it from the outside world, but from themselves as well?</p>
]]></content:encoded>
			<wfw:commentRss>http://www.twoslashes.com/2007/12/12/ironkey-or-leadweight/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

