[Cryptography] trojans in the firmware

Poul-Henning Kamp phk at phk.freebsd.dk
Fri Feb 20 06:45:38 UTC 2015


--------
In message <E1YOTjj-0004uI-59 at elasmtp-mealy.atl.sa.earthlink.net>, Henry Baker 
writes:

>BTW, what's the point of AES encryption on this pre-p0wned device?
>More security theatre?
>
>http://hothardware.com/reviews/samsung-portable-ssd-t1-review

It's so that you can decommision the drive without destroying it.

Pulverizing electronics gets you hazardous waste under EU's ROHS/WEEE
rules.  Throwing away the AES key gives you run-of-the-mill electronic
garbage.


-- 
Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
phk at FreeBSD.ORG         | TCP/IP since RFC 956
FreeBSD committer       | BSD since 4.3-tahoe    
Never attribute to malice what can adequately be explained by incompetence.


More information about the freebsd-security mailing list