Lmao "FU100" is an appropriate model name

different flaw in Lenovo’s TSD303 external SSD. Its data actually was encrypted, but the drive sent the correct password back over USB in plain text for the software to compare,

Are we doing client side verification again already? I thought we had just remembered not to do it recently.

So... how good are the rest then?

We've spent a whack on different secure USB drives

can we PLEASE stop linking stuff from shit-ass sites that use quasi-malware services like Ad-Shield (the service behind the notorious html-load(dot)com, error-report(dot)com etc.)?

These sites intentionally break and block access when a DNS based ad blocker is used. Not because the site can't load - it actually loads perfectly fine behind the blockout - but because these fuckers intentionally unload CSS to break the site if ads won't load... via the same exact methods web malware loads malicious scripts.

Wait wait - is it also advertised as a 1TB card that's configured to show 1TB of space when you plug it in, but then it's really just a 4GB card?

an interim fix using epoxy over the card.

Lmao encase that shit. Bro, we just need more physical security, trust me.

clearly a feature for when the sd card fails. think of how easy it will be to replace.

discovered what Li calls backdoor accounts on another maker’s drive, as well as hardcoded keys in other supposedly secure USB storage products.

What i always say; hardware-based encryption is not secure. It's always in the triangle between speed, security and cost, the vendors go for speed and cost.

And then there's stuff like this:

but the drive sent the correct password back over USB in plain text for the software to compare, making it easy to capture

Cookie-cutting on the developer side.