Free Republic
Browse · Search
General/Chat
Topics · Post Article

Skip to comments.

Are External USB Drives a Target for Espionage?
7/26/2009 | poiuqwer

Posted on 07/26/2009 1:46:23 PM PDT by poiuqwer

I suspect that China might be stealing our confidential data that is stored (or backed up) on external USB hard disks, such as those 1 TB commodities sold as Costco for $100.

Early this year, I bought two 1 TB external USB drives to backup my computer. These drives cost a little over $100 with a five-year warranty. I figured, for redundancy, I’d copy my main C-drive data files to both drives, just in case one dies.

Sure enough, six months later, I get the Windows XP error message “USB Device Not Recognized: one of the USB devices attached to this computer has malfunctioned, and Windows does not recognize it”.

I’m a technician. I know how to diagnose whether it really did fail or was something else. For example, I switched ports, shuffled devices, and tried it on other machines. The USB drive no longer works and it’s not the computer. I cannot access the disk and I no longer get a drive letter. I neither let the drive over heat nor did I bump it while it was running. It just failed.

Here’s where it becomes interesting. It’s terribly easy for me to return this drive. I just go online, fill out a form, attach it to the containing box, and mail it off for $5. The manufacturer will return a new drive with no questions asked. I have done this before. BUT, I noticed on the back of the drive that it was manufactured in China.

Now I have to ask my suspicious self these questions:

(1) What if only the internal USB port (not the actual drive) has burned out? Then the drive would still be perfectly intact, but useless to me. If I return it (so easily done and encouraged to do) then is my drive shipped back to Communist China?

(2) Could China have an army of thousands of PRC engineers that merely pop these returned drives out of the USB container, plug them into a Borg-like array of SATA and IDE ports that automatically start downloading the files building a huge secret database that is cross referenced with the people and companies that returned it? They have an address and company name for sure. They will definitely have all sorts of data on the drives.

(3) What if the USB devices are engineered to stochastically burn out first; before the actual internal drive? Would this be a method for China to get Americans to ship their data back to them completely intact after six months of stuffing data on them? I know that without the USB port working, I cannot cryptographically wipe the disk before I send it back. If I open the case to bypass the USB port and access the “still working” drive directly, then the warranty becomes invalid.

This is why I RAID stripe my external disks (or encrypt them) so that when I return any one disk, no complete information is on them. But how many people bother? I know lots of people that just return them with a grimace on their face.


TOPICS: Computers/Internet; Conspiracy; Science; Society
KEYWORDS: china; chinesejunk; computers; espionage; hacking; harddisks; security; usb
Navigation: use the links below to view more comments.
first previous 1-2021-4041-6061-65 last
To: Malsua

> Can’t be done unless you work at a scrap yard and attach
> it to a magnetic car hoist.

:)

Here’s a commercially available bulk eraser/degausser.

http://www.magnetechcorp.com/Hard_drive_eraser.htm

Very pricey, though.

Better to just swallow the cost of a new drive, and use the old one for target practice.


61 posted on 07/29/2009 5:20:42 AM PDT by Westbrook (Having more children does not divide your love, it multiplies it.)
[ Post Reply | Private Reply | To 58 | View Replies]

To: poiuqwer

I sincerely doubt it.

While made in China, the drives are purchased and distributed by companies in the US. Even if you send it back to “the manufacturer”, it’s not going to China but rather some tech shop here in the states. If the drive itself is bad, they’ll junk it, not send it overseas for repairs.

Anyone with sensitive data, in most government and/or military uses, also works under a policy that once a drive is used, it cannot ever leave chain of custody. If a drive fails, it is replaced, not repaired, and the original drive is destroyed. (Hence why drives should be in a proper RAID configuration, preferably with hot-swap drives for any type of production system.)

Now, that’s not to say that some unscrupulous tech won’t pull your personal data off of a drive sent in for repairs. But that tech doesn’t have to be working for the PRC to be doing that...


62 posted on 07/29/2009 5:21:29 AM PDT by kevkrom (Obama: Stuck on "Stupidly")
[ Post Reply | Private Reply | To 1 | View Replies]

To: Westbrook
Very pricey, though.

That's where I was going. A standard magnet(even super strong ones), or even bulk VHS tape erasers simply don't have enough to erase a hard drive.

63 posted on 07/29/2009 5:40:53 AM PDT by Malsua
[ Post Reply | Private Reply | To 61 | View Replies]

To: poiuqwer

How do you “RAID” external USB drives?


64 posted on 07/29/2009 6:15:47 AM PDT by DuncanWaring (The Lord uses the good ones; the bad ones use the Lord.)
[ Post Reply | Private Reply | To 18 | View Replies]

To: Squantos

Oh she’d just SHOOT me! I probably wouldn’t even see it coming. :-)


65 posted on 07/30/2009 5:22:54 PM PDT by hiredhand (Understand the CRA and why we're facing economic collapse - see my about page.)
[ Post Reply | Private Reply | To 52 | View Replies]


Navigation: use the links below to view more comments.
first previous 1-2021-4041-6061-65 last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
General/Chat
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson