DISCOVERING A BACKDOOR AND FLAWS IN MORE ENCRYPTED USB DRIVES

Summary from the TLDR InfoSec newsletter

Vector 35 researcher Xusheng Li pointed Codex at Binary Ninja's MCP server and recovered the keys hardcoded in NetacFileLock, KakaSoft USB Copy Protection, and Nexcopy Copy Secure in 7 to 26 minutes each. In each product, the key was fixed in the binary, derived from an embedded seed, or unlocked by a certificate in the viewer, so the user's password never protected the files. Separately, time-travel debugging turned up two hidden accounts in SecZure's YutianDun drive, with passwords as weak as "123456", that could decrypt any file. Li skipped vendor disclosure because drives already in the field can't be patched, and he argued that client-side validation is never secure, so buyers should only trust drives that derive their encryption key from the user's password.