A security researcher has discovered that Lenovo's fingerprint-protected USB drive, marketed as featuring hardware encryption, is actually just a standard unencrypted SD card housed in a plastic case with a non-functional fingerprint scanner. The device, sold under the model name Lenovo Fingerprint USB Drive, claims to secure data via biometric authentication, but teardowns and analysis show the fingerprint sensor is not connected to any encryption mechanism. Users who believe their data is protected are effectively storing it on a regular, readable memory card. The finding has sparked widespread criticism online, with many calling it deceptive marketing. Security experts warn that relying on such devices for sensitive data could lead to accidental exposure. Lenovo has not yet issued a formal response to the allegations.
The discovery was first highlighted on Hacker News, where the story quickly gained traction, accumulating 131 points and 54 comments. The article originates from a Reddit thread in the r/technology community, where users shared images and technical breakdowns of the drive's internal components. The lack of actual encryption hardware inside the casing confirms fears that many consumer-grade 'secure' USB drives may be more marketing than technology.
Source: Hacker News · Summarized by HeadlinesBriefing