this post was submitted on 19 Feb 2024
1 points (100.0% liked)

Privacy

31993 readers
543 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

It seems like the benefits are having the device lock/wipe itself after a set amount of attempts in case of a brute force attack and not having to run software to decrypt the drive on the device you plug it into.

I included a picture of the IronKey Keypad 200 but that's just because it's the first result that came up when I was looking for an example. There seem to be a few other manufacturers and models out there and they probably have different features.

I am curious what do you think of them? Do you think they are useful? Do you find it more a novelty?


It was an ExplainingComputers video titled Very Useful Small Computing Things that made me think of them.

(page 2) 50 comments
sorted by: hot top controversial new old
[–] [email protected] 0 points 9 months ago* (last edited 9 months ago) (2 children)

These are handy if you have to move sensitive information but I've experienced more than one event at work where irreplaceable files were lost due to user error on these type of drives.

I couldn't tell you about the lifespan of these devices either, something tells me the keys won't last more than a few years if it's being used regularly.

load more comments (2 replies)
[–] [email protected] 0 points 9 months ago (1 children)

I'll store my weird shit on an unsecured hard drive stashed in the woods. Like those that came before me, and those before me.

load more comments (1 replies)
[–] [email protected] 0 points 9 months ago

I wouldn't trust any part of its hardware and software to store anything worth encrypting on it

[–] [email protected] 0 points 9 months ago* (last edited 9 months ago) (1 children)

Hardware signing devices have lots of utility because they keep the key from ever being on the machine (which is more likely to be compomised). Think ledger or trezor for your Bitcoin. Hardware encryption devices are just really expensive and black-box ways to avoid Veracrypt.

If your encryption algorithm is secure, you have no use for automatic lock-out. If it's not, automatic lockout won't do much against an attacker with physical access to the device. Unless they are dumb enough to trigger the lockout AND the internal memory wipes itself sufficiently well AND/OR the attacker doesn't have the resources to reverse engineer the device.

load more comments (1 replies)
[–] [email protected] 0 points 9 months ago

I see one use-case, If you're going w/ sth illegal as hell to a place where you might get arrested and searched for just being there i.e a protest, nuking your (illegal) data might save your ass.

[–] [email protected] 0 points 9 months ago

Too expensive. Use software encryption instead

[–] [email protected] 5 points 9 months ago (4 children)

Nice just look at the most worn buttons

[–] [email protected] 0 points 9 months ago* (last edited 9 months ago) (11 children)

Permutations have entered the chat

load more comments (11 replies)
[–] [email protected] 0 points 9 months ago

It seems like these drives can use up to 15 digit pins and lock out after a set number of attempts. I don't if that would be a huge issue

[–] [email protected] 1 points 9 months ago

Damn. Dude just comes in and ends the entire discussion.

load more comments (1 replies)
[–] [email protected] 0 points 9 months ago

I have one as a 'last resort' option. It's got backups of BitWarden, Aegis and Standard Notes and is only connected to my machine during backups.

[–] [email protected] 1 points 9 months ago (4 children)

Do encryption in software. History taught us hard lessons about this.

[–] [email protected] 0 points 9 months ago (1 children)

Can you think of some notable examples of hardware based encryption failing?

[–] [email protected] 0 points 9 months ago* (last edited 9 months ago) (2 children)
[–] [email protected] 0 points 9 months ago (1 children)

There's no password involved in that demo

[–] [email protected] 0 points 9 months ago

That wasn't part of the assignment. ;)

[–] [email protected] 0 points 9 months ago

Here is an alternative Piped link(s):

https://m.piped.video/watch?v=beMtNM7nwfQ

Piped is a privacy-respecting open-source alternative frontend to YouTube.

I'm open-source; check me out at GitHub.

load more comments (3 replies)
[–] [email protected] 0 points 9 months ago (1 children)

Couldn't the data be cloned and cracked off device without having to worry about the pin code?

[–] [email protected] 0 points 9 months ago (3 children)

Overkill and overpriced. If you're on Windows, bitlocker is enough. If you're on Linux, LUKS is enough.

I've used Apricorn drives at previous jobs. They're cool and very much fit for purpose, but I'd have a hard time justifying the significant price premium when software is nearly as good, free, and works with any drive.

[–] [email protected] 0 points 9 months ago* (last edited 9 months ago)

That seems to be the consensus. Would be significantly overkill and more of a neat novelty for a local backup of my taxes that's just going to sit on my desk.

[–] [email protected] 0 points 9 months ago

Bitlocker shouldn't be considered secure as it is a Windows only encryption that is a black box for the most part. Additionally your decryption keys are send to Microsoft

[–] [email protected] 0 points 9 months ago (1 children)

Eh, I wouldn't trust a US company (that can be served an NSL and is obligated to install backdoors) to do your FDE.

For windows, veracrypt is safer than bitlocker

[–] [email protected] 0 points 9 months ago* (last edited 9 months ago) (2 children)

Is possible to veracrypt an entire Windows install?

[–] [email protected] 0 points 9 months ago
[–] [email protected] 0 points 9 months ago

system disk encryption is possible, yes.

[–] [email protected] 0 points 9 months ago (1 children)

Looks find to me, depending on your use case, everything would have a use case

Many people mention airport red flags and checks, for me I never had any issues with the airport stuff, except one time in China when I had a full case of wires, really 10kg of wires, and they just asked me me to open and show, np

[–] [email protected] 0 points 9 months ago (3 children)

Why did you have a 10kg bag of wires?

[–] [email protected] 0 points 9 months ago (2 children)

I like wires! Who doesn't like wires??

I donct have much stuff, but i have a lot of electronics, and at that moment i was very into sdr, so, wires, antennas, adapters, antennas, wires, and also additional hdmis, vgas, ethernet cables, usb, chargers, etc, etc, etc

[–] [email protected] 0 points 9 months ago (1 children)
[–] [email protected] 0 points 9 months ago

Here is an alternative Piped link(s):

Farnsworth, is that you?

Piped is a privacy-respecting open-source alternative frontend to YouTube.

I'm open-source; check me out at GitHub.

[–] [email protected] 0 points 9 months ago

Fair, I do like wires

[–] [email protected] 0 points 9 months ago

What do you buy when you're in China. Dude wanted cheap wires. Let him have his cheap wires.

[–] [email protected] 0 points 9 months ago (2 children)

What, do you work at a Chinese airport or something?

[–] [email protected] 0 points 9 months ago (2 children)

I'm the one asking questions here!

[–] [email protected] 0 points 9 months ago* (last edited 9 months ago)

You said I'd be conducting the interview when I walked in here. Now, exactly how much pot did you smoke?

[–] [email protected] 0 points 9 months ago

What's your spaghetti policy here

[–] [email protected] 0 points 9 months ago (1 children)

It's very hard to actually secure something someone has physical access to and that can be disassembled.

[–] [email protected] 0 points 9 months ago

I have this device and use it to store my keepassxc and onlykey backups, and it's useful to me because I've stopped using passwords (I only need to remember the pins for these devices which can unlock my keepass dbs that have everything else).

It seems secure enough for my use case, especially since the files I store in it are themselves encrypted (the onlykey backup still requires a pin), but I still want them to be difficult to access.

I've had to rely on it before but only because I didn't prepare a backup onlykey ahead of time- ideally it should be one of many recovery methods. But so far it's worked great for me.

[–] [email protected] 0 points 9 months ago (1 children)

One thing I can tell you, it's that you can't use them as bootable drives to install an OS from. And if you try to pass the USB connection from an ESXi host to a VM on it, it won't work.

Aside from that, they're really annoying to work with.

load more comments (1 replies)
load more comments
view more: ‹ prev next ›