I Made a Secure USB Drive for Journalists and Hardware Hackers!

[@RetiredAccount3737]

"This is your data, if you choose to copy it. This flash drive will self destruct in 15 seconds" Not entirely relevant, But I also remembered "All Aperture equipment will function up to 4000 degrees kelvin"

[@penelopet3725]

Some feedback that may or may not be possible. When plugged in normally does the USB have to appear broken, could it not actually store data on it. Then someone doing a security check would be less suspicious about its contents or that it has a hidden compartment. As someone who has absolutely NO tech knowledge please don't troll me about how wrong this suggestion is. Thanks

[@interruptlabs]

With the IC I used, I don't have the option to present some false data, but I've gotten this feedback a lot. Thanks for the comment :)

[@JaroslawFiliochowski]

Plug it once, show partition A. Plug it thrice, show partition B. Would be more sneaky.

[@JakMang]

Maybe I missed something, but won’t police start plugging in usb drives three times as a matter of practice?

[@Montso]

I'm guessing configurable number of plug-ins and delays ( can use an indicator LED for that) would be good security upgrade.

[@AbroLinx]

You're overestimating the cognitive ability of a law enforcement officer

[@interruptlabs]

@@AbroLinx lol

[@nuovoaccount998]

i think it would be useful to have a timeout after a while it formats itself. The problem is the data should be overwritten oterhwise it's easily recoverable, what do you think

[@1288832]

Наверно любая программа восстановления данных, найдет этим данные... Хотя если доступ физически нет к чипу, то может и норм.

[@interruptlabs]

Hey thanks, I don't speak Russian but I used translate and got "Probably any data recovery program will find the data... Although if there is no physical access to the chip, then it may be fine." Yes, there is no physical access to the chip, so it is impossible for any software to recover the data.

[@waitandhope]

Amazing

[@interruptlabs]

Thanks for the support :)

[@travelfar4230]

Where can i find the full circuit schematics for this project? And would the USB function exactly like a traditional USB. i.e. could I boot a live operating system from the USB?

[@interruptlabs]

github.com/o7-machinehum/ovrdrive I havn't tried booting an OS off it, but as long as you can do the three times trick before your bootloader it shouldn't be a problem.

[@Aera223]

@@interruptlabs that might work on my alienware, which has longer bios time due to it checking the cd/dvd slot... but probably quite tricky on other devices

[@switchenglish_au]

Such a great video of the designer of this walking around in his bedroom, trying to sell me this. Professional level = 0

[@interruptlabs]

Gotta keep it real 🤘🤘🤘

[@Aera223]

Finally :)

[@interruptlabs]

Thanks for the support!

[@frootloops6584]

I don't want to be mean, I love that people are publishing their designs. Let me give you some constructive critisism. Calling this a "secure" flash drive is misleading, and if actually used for sensitive data, potentially dangerous. The whole security relies on obscurity, which is universally accepted to be bad practice. Even if the device wasn't open source, your security model can be defeated by accident. I understand you say it's supposed to be used with cryptography, but why is this not built-in? There are encryption schemes which offer plausible deniability (I believe this is your main argument). What benefit is there in using your device over a standard flash drive with any encryption scheme of my choice? I believe the argument could be made that it was more user friendly if the encryption is built-in, but it isn't. Secondly, it seems like you don't use any type of secure hardware, but standard components. With this, it is trivial to dump the flash, reverse-engineer the microcontroller software and completely disable this security feature.

[@Aera223]

It wasn't built in because, as stated earlier in the video, using encryption in some countries overtly, can cause you to be presumed guilty

[@frootloops6584]

What you describe is called plausible deniability. As I said, you can set up your encryption to achieve the same thing.

[@interruptlabs]

Thanks for the feedback :) !

[@nuovoaccount998]

that's just sapiens nonsense we don't care about that @@Aera223

[@realkrzaku]

Sounds good, doesn't work.

[@rootwin_official]

ㅤㅤㅤ

[@R0lNUJ]