Thanks everybody, there has been a lot of answers.
 The reason for doing this is licesing. And everything must work offline. So generating a hash would not protect me from byte-to-byte copying using something like dd.
As I have understood, there is no point-to-click solution for changing the hardware ID, so I guess I will just stick with that. Writing a driver or compiling a kernel is probably more expensive than the software is going to be anyway..
 

ERKI MÄNNISTE
QA Specialist
erki.manniste (at) webmedia (dot) ee [email concealed]
Telefon: +372 5233653
Webmedia Group AS

-----Original Message-----
From: John Morrison [mailto:john.morrison101 (at) gmail (dot) com [email concealed]]
Sent: Wednesday, April 11, 2012 2:32 PM
To: Erki Männiste
Cc: security-basics (at) securityfocus (dot) com [email concealed]
Subject: Re: uniquely identifing USB device

Erki,

Why do you want to identify the USB stick?

If it is to check if it is an authorised one could you not just store a unique hash on it? If it doesn't have a hash, or the hash does not match what you generated, it's not authorised. Just an MD5 hash might be enough.

John

On 5 April 2012 12:24, <erki.manniste (at) webmedia (dot) ee [email concealed]> wrote:
>
> Hi,
> I need to identify a usb stick uniquely and I have been trying to find
> out weather using just hardwareID is enough?
> I have heard of a driver that lets you emulate an usb device and set
> that ID, but quick googleing didn?t give any results. Does anybody
> know of something like that? Is it possible to (for someone with
> mediocre hacking
> skills) to manipulate with these values? Is there a better way to
> uniquely identify that device?
>
> Thanks,
> erki
>
> ----------------------------------------------------------------------
> -- Securing Apache Web Server with thawte Digital Certificate In this
> guide we examine the importance of Apache-SSL and who needs an SSL
> certificate.  We look at how SSL works, how it benefits your company
> and how your customers can tell if a site is secure. You will find out
> how to test, purchase, install and use a thawte Digital Certificate on
> your Apache web server. Throughout, best practices for set-up are
> highlighted to help you ensure efficient ongoing management of your
> encryption keys and digital certificates.
>
>
> http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be4
> 42f727d1
> ------------------------------------------------------------------------

>

------------------------------------------------------------------------

Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442
f727d1
------------------------------------------------------------------------

[ reply ]