Hacker News new | ask | show | jobs
by giancarlostoro 12 days ago
Anyone using forensic software can dump an image of your entire drive including all partitions, byte for byte copy. Just because you got away with being careless once doesn't mean this will work every time. If you don't want your files to be copied in encrypted or plain unencrypted form, don't bring them with you. You're better off re-downloading them over the web at that point.
1 comments

Unless they disassemble this drive, a forensic dump will only show the open partition.
A cursory X-Ray would show the internal SD. This product needs a hardware re-design (which I've seen other projects do) to have onboard flash instead.

Saying that, any proper investigation would read the firmware from the flash and identify the decryption routing anyway

It has an SD card because proper flash is expensive. Surely the people making "4TB" flash drives on Temu must be using the same methods, or else they will be soon.