From owner-freebsd-security@FreeBSD.ORG  Fri Feb 20 06:45:38 2015
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id 8F120EE4
 for <freebsd-security@freebsd.org>; Fri, 20 Feb 2015 06:45:38 +0000 (UTC)
Received: from phk.freebsd.dk (phk.freebsd.dk [130.225.244.222])
 by mx1.freebsd.org (Postfix) with ESMTP id 48E9AA7C
 for <freebsd-security@freebsd.org>; Fri, 20 Feb 2015 06:45:37 +0000 (UTC)
Received: from critter.freebsd.dk (unknown [192.168.60.3])
 by phk.freebsd.dk (Postfix) with ESMTP id 662023B8A2;
 Fri, 20 Feb 2015 06:45:31 +0000 (UTC)
Received: from critter.freebsd.dk (localhost [127.0.0.1])
 by critter.freebsd.dk (8.14.9/8.14.9) with ESMTP id t1K6jRak061529;
 Fri, 20 Feb 2015 06:45:27 GMT (envelope-from phk@phk.freebsd.dk)
To: Henry Baker <hbaker1@pipeline.com>
Subject: Re: [Cryptography] trojans in the firmware
In-reply-to: <E1YOTjj-0004uI-59@elasmtp-mealy.atl.sa.earthlink.net>
From: "Poul-Henning Kamp" <phk@phk.freebsd.dk>
References: <E1YNSQU-0004pW-Oh@elasmtp-kukur.atl.sa.earthlink.net>
 <E3B30770-BB81-47F1-895D-14CF7FCFC0BE@lrw.com> <54E2B04C.9080707@av8n.com>
 <E1YNuOT-0004uN-CV@elasmtp-mealy.atl.sa.earthlink.net>
 <54E436FB.9000709@deadhat.com>
 <CAAMy4USCzQDO=k3yhZ_LVb4ivz4k5qTCasm3KCen+y1yi8oa+w@mail.gmail.com>
 <CAD2Ti29bD6f7tTq=FgGQDXD43C+zTW0fOWYrbCeTCBmiu0bBqA@mail.gmail.com>
 <E1YOGNA-0004BG-UT@elasmtp-banded.atl.sa.earthlink.net>
 <E1YOTjj-0004uI-59@elasmtp-mealy.atl.sa.earthlink.net>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <61527.1424414727.1@critter.freebsd.dk>
Content-Transfer-Encoding: quoted-printable
Date: Fri, 20 Feb 2015 06:45:27 +0000
Message-ID: <61528.1424414727@critter.freebsd.dk>
Cc: cypherpunks@cpunks.org, freebsd-security@freebsd.org,
 cryptography@metzdowd.com, grarpamp <grarpamp@gmail.com>
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.18-1
Precedence: list
List-Id: "Security issues \[members-only posting\]"
 <freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security/>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>, 
 <mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 20 Feb 2015 06:45:38 -0000

--------
In message <E1YOTjj-0004uI-59@elasmtp-mealy.atl.sa.earthlink.net>, Henry B=
aker =

writes:

>BTW, what's the point of AES encryption on this pre-p0wned device?
>More security theatre?
>
>http://hothardware.com/reviews/samsung-portable-ssd-t1-review

It's so that you can decommision the drive without destroying it.

Pulverizing electronics gets you hazardous waste under EU's ROHS/WEEE
rules.  Throwing away the AES key gives you run-of-the-mill electronic
garbage.


-- =

Poul-Henning Kamp       | UNIX since Zilog Zeus 3.20
phk@FreeBSD.ORG         | TCP/IP since RFC 956
FreeBSD committer       | BSD since 4.3-tahoe    =

Never attribute to malice what can adequately be explained by incompetence=
.