Lenovo's 'encrypted' fingerprint USB drive is just an unencrypted SD card in a fancy case — AI-assisted follow-up finds a backdoor and hardcoded keys in other ‘secure’ USB products
Toms Hardware
1 lis 2026, 13:04Hardware
1 min read
Security researcher Xusheng Li discovered that a Lenovo ThinkPlus FU100 fingerprint USB drive, marketed as an AES-256-encrypted device, actually contained an unencrypted SD card internally.
The device’s fingerprint reader only unlocked the USB connection, leaving all data on the card completely unencrypted.
The fingerprint reader only enabled the USB connection, and nothing on the card was actually encrypted.
Li’s AI-assisted follow-up last week revealed that other makers’ drives also contained backdoor accounts and hardcoded keys, further undermining their security claims.
Related
Article written by AI
Z.ai GLM-4.7-FlashFree