Some suppliers can modify the Hardware ID string in the USB sticks, this is the approach I took when introducing endpoint security in my organisation.

-----Original Message-----

From: listbounce (at) securityfocus (dot) com [email concealed] [mailto:listbounce (at) securityfocus (dot) com [email concealed]] On Behalf Of Thugzclub

Sent: 06 April 2012 04:05

To: erki.manniste (at) webmedia (dot) ee [email concealed]

Cc: security-basics (at) securityfocus (dot) com [email concealed]

Subject: Re: uniquely identifing USB device

This is challenging. For instance, many USB sticks are supplied by the same hardware vendor...

On 5 Apr 2012, at 11:24, erki.manniste (at) webmedia (dot) ee [email concealed] wrote:

> Hi,

> I need to identify a usb stick uniquely and I have been trying to find out weather using just hardwareID is enough?

> I have heard of a driver that lets you emulate an usb device and set that ID, but quick googleing didn t give any results. Does anybody know of something like that? Is it possible to (for someone with mediocre hacking skills) to manipulate with these values? Is there a better way to uniquely identify that device?

>

> Thanks,

> erki

>

> ----------------------------------------------------------------------

> -- Securing Apache Web Server with thawte Digital Certificate In this

> guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

>

> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be4

> 42f727d1

> ----------------------------------------------------------------------

> --

>

------------------------------------------------------------------------

Securing Apache Web Server with thawte Digital Certificate In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442
f727d1

------------------------------------------------------------------------

[ reply ]