Home
Calendar
Certifications
Columns
Features
Forum
Resources
Vitals
Latest Additions
April 2013 Free Giveaway Sponsor - eLearnSecurity
Human Intelligence to Navigate the Security Data Deluge
February 2013 Free Giveaway Winner of SANS CyberCon Training
Interview: Bugcrowd Founders on Herding Ninjas for Crowdsourced Bug Bounties
Network Forensics: The Tree in the Forest
March 2013 Free Giveaway Sponsor - Mile2
Book Review: Violent Python
February 2013 Free Giveaway Sponsor - SANS
Holiday 2012 Free Giveaway Winner of Metasploit Pro by Rapid7
Course Review: SANS FOR408 Computer Forensic Investigations – Windows In-Depth
The Security Consulting Sugar High
Tutorial: Fun with SMB on the Command Line
Interview: Ilia Kolochenko, CEO of High-Tech Bridge
October 2012 Free Giveaway Winner of LearningGate Training
The Broken: Assessing Corporate Security in 2012 to Make a Better 2013
EH-Net Login
Welcome Guest.
Username:
Password:
Remember me
Lost Password?
No account yet?
Register
Who's Online
We have 36 guests online
You are here:
Home
Columns
Murray
[Article]-Review: Pen Tester Sets Sights on the IronKey
EH-Net
May 22, 2013, 03:02:21 PM
Welcome,
Guest
. Please
login
or
register
.
Did you miss your
activation email?
1 Hour
1 Day
1 Week
1 Month
Forever
Login with username, password and session length
News
: Go back to The Ethical Hacker Network Online Magazine
Home Page
Home
Help
Calendar
Login
Register
EH-Net
>
Columns
>
Murray
(Moderator:
don
) >
[Article]-Review: Pen Tester Sets Sights on the IronKey
Pages: [
1
]
Go Down
« previous
next »
Print
Author
Topic: [Article]-Review: Pen Tester Sets Sights on the IronKey (Read 61324 times)
0 Members and 1 Guest are viewing this topic.
don
Editor-In-Chief
Administrator
Hero Member
Offline
Posts: 4165
Editor-In-Chief
[Article]-Review: Pen Tester Sets Sights on the IronKey
«
on:
June 11, 2009, 09:12:33 PM »
There's been a lot of chatter about this device in our forums over the last year. Take a look at what Mike thinks. Is it yet another in a long line of inadequate hardware devices? Take a look.
Permanent link:
[Article]-Review: Pen Tester Sets Sites on the IronKey
Quote
After more than 10 years in the information security industry and a significant amount of time running a lab that tests products, I’m a pretty difficult guy to impress with technology. And I’m
NEVER
nice to vendors. They hate me. As an example, when running said test lab, we once had a vendor give a client six-figures worth of software when the client told them that we’d be testing it before they purchased. The client was happy, so we did our jobs even though we never tested a thing.
The only product I have ever had a net positive review of was the Safeboot disk encryption product, and even then, it was a case of being damned with faint praise. I believe that the entire positive part of our assessment was: “the product works as advertised.”
So, when Don approached me to do a review of the
IronKey Personal
, I knew I was going to rip it apart. I was going to write a scathing review of how terrible their product is and why these “gimmicky” pieces of hardware don’t work. Because they usually don’t.
Let us know what you think and if you'd like to see other hardware reviews by Mr. Murray.
Don
«
Last Edit: June 22, 2009, 11:15:54 AM by don
»
Logged
CISSP, MCSE, CSTA, Security+ SME
former33t
Full Member
Offline
Posts: 226
Re: [Article]-Review: Pen Tester Sets Sites on the IronKey
«
Reply #1 on:
June 11, 2009, 09:23:47 PM »
I'm impressed (both with the review and the product). If Mr. Murray is willing to do more reviews, I'd be interested to read them.
Logged
Certifications: CREA, MCSE: Security, CCNA, Security+, other junk
UNIX
Hero Member
Offline
Posts: 1235
Re: [Article]-Review: Pen Tester Sets Sites on the IronKey
«
Reply #2 on:
June 12, 2009, 12:19:48 AM »
I have not read it yet but I would like to know if you bought it yourself or if it was supplied by IronKey?
Logged
BillV
Hero Member
Offline
Posts: 1892
Re: [Article]-Review: Pen Tester Sets Sites on the IronKey
«
Reply #3 on:
June 12, 2009, 06:58:11 AM »
Nice review and a good, quick read. Enjoyed it. Also good to see that the IronKey stood up against the tests (especially the washing machine test). Might have to look into one of these. Thanks.
BillV
Logged
recursivenickname
Newbie
Offline
Posts: 7
Re: [Article]-Review: Pen Tester Sets Sites on the IronKey
«
Reply #4 on:
June 12, 2009, 07:47:54 AM »
Interesting review, and it's good to know that the Ironkey stands up well to attacks. I'm curious, though, about the password recovery system, which is an online service. Was any attempt made to recover the password? What was the result?
I don't know that I care how secure the hardware is, if the recovery password is as easy to get as Palin's yahoo mail account.
I'm also morbidly curious to see how the device behaves after it "self-destructs"...
Logged
Andrew Waite
Hero Member
Offline
Posts: 928
Re: [Article]-Review: Pen Tester Sets Sites on the IronKey
«
Reply #5 on:
June 12, 2009, 09:07:45 AM »
Great review, I've always looked at the IronKey as a 'I can do that myself with free tools' and dismissed the cost. Think I definitely need a re-think.
Not sure about the washing-machine aspect as a selling point though, I've had a couple of freebies withstand the same punishment, albeit after I glued the casings back together (how my washing machine survives the things I leave in my pockets is beyond me)
Regarding the possibility of future reviews, I'll join the 'if you make it, they will come' school of thought. If you keep writing, I'll keep reading
Logged
--
http://www.infosanity.co.uk
--
http://blog.infosanity.co.uk
johnscot
Guest
Re: [Article]-Review: Pen Tester Sets Sites on the IronKey
«
Reply #6 on:
June 12, 2009, 01:22:01 PM »
Hi all,
Ok you maybe wating to know is the IronKey really as good as they say it is, well I think it is I have 2 of them, the self destruct really works trust me I have done it to 4 of them (Don't ask all my fault) you would also have a good idea of how the IronKey works if you pop over to there forum as well at
https://www.ironkey.com/forum
yes that is HTTPS.
Also try looking on youtube as well for the
http://www.youtube.com/watch?v=0zT1Gs4MGH8&feature=channel_page
just a guess but some one said in this thread that they have free pen drive that stand up to the wash test check out that link first and see if they will stand up to that
I really love my IronKey's and would tell any one to get one.
Logged
mjw
Newbie
Offline
Posts: 2
Re: [Article]-Review: Pen Tester Sets Sites on the IronKey
«
Reply #7 on:
June 12, 2009, 02:12:44 PM »
Sorry. Didn't find the article particularly useful. I get that you like the device, however you didn't detail the tests that you did or the results. Therefore, I'm left to wonder how the device actually performed. It's obvious that you're pleased with the results, but you didn't communicate why.
Logged
jason
Hero Member
Offline
Posts: 1012
Re: [Article]-Review: Pen Tester Sets Sites on the IronKey
«
Reply #8 on:
June 12, 2009, 02:19:43 PM »
Good review. I too would like to see more detail on the testing that you did.
Logged
dalepearson
Sr. Member
Offline
Posts: 357
Re: [Article]-Review: Pen Tester Sets Sites on the IronKey
«
Reply #9 on:
June 12, 2009, 04:40:18 PM »
Good liitle review there, I have had my ironkey for over a year (helps I got it for free to review at the time) but I have always said its a cracking bit of kit.
Thanks for taking the time.
Logged
:: Subliminal Hacking ::
/
:: Security Active Blog ::
Andrew Waite
Hero Member
Offline
Posts: 928
Re: [Article]-Review: Pen Tester Sets Sites on the IronKey
«
Reply #10 on:
June 13, 2009, 03:51:20 AM »
Quote from: johnscot on June 12, 2009, 01:22:01 PM
Also try looking on youtube as well for the
http://www.youtube.com/watch?v=0zT1Gs4MGH8&feature=channel_page
just a guess but some one said in this thread that they have free pen drive that stand up to the wash test check out that link first and see if they will stand up to that
Nope, don't know if my freebie would stand up to that. But there's not much chance of me getting my clothes laundered in the worlds most powerful washing machine either. So I'd say the point is moot.
Not saying the IronKey isn't a good device (I've never seen one to know), but so far my free/cheap drives have stood up to the punishment I've put them through
in real life
, I don't need more than that.The risk/protection versus cost doesn't add up for my requirements.
(Other than my geeky side going 'Oh Oh Shiney....' in a Homer-esque manner)
Logged
--
http://www.infosanity.co.uk
--
http://blog.infosanity.co.uk
UNIX
Hero Member
Offline
Posts: 1235
Re: [Article]-Review: Pen Tester Sets Sites on the IronKey
«
Reply #11 on:
June 13, 2009, 11:22:44 AM »
Quote from: mjw on June 12, 2009, 02:12:44 PM
Sorry. Didn't find the article particularly useful. I get that you like the device, however you didn't detail the tests that you did or the results. Therefore, I'm left to wonder how the device actually performed. It's obvious that you're pleased with the results, but you didn't communicate why.
Quote from: jason on June 12, 2009, 02:19:43 PM
Good review. I too would like to see more detail on the testing that you did.
I read it and thought the same. However, as I got my own IronKey yesterday I will do a more in-depth review very soon after I have tested it for some time.
I will inform you when it is finished and pm you a link to my website where you can find it.
Logged
UNIX
Hero Member
Offline
Posts: 1235
Re: [Article]-Review: Pen Tester Sets Sights on the IronKey
«
Reply #12 on:
July 01, 2009, 01:32:11 AM »
As promised I made also a review on the IronKey and tried to give a little more details on the device itself.
It can be found on my website
here
.
If you have any more questions please feel free to ask.
Feedback is appreciated.
Logged
don
Editor-In-Chief
Administrator
Hero Member
Offline
Posts: 4165
Editor-In-Chief
Re: [Article]-Review: Pen Tester Sets Sights on the IronKey
«
Reply #13 on:
July 20, 2009, 03:33:32 PM »
Submitted to digg:
http://digg.com/security/Review_Pen_Tester_Sets_Sights_on_the_IronKey
Don
Logged
CISSP, MCSE, CSTA, Security+ SME
Pages: [
1
]
Go Up
Print
« previous
next »
Jump to:
Please select a destination:
-----------------------------
EH-Net
-----------------------------
=> Calendar Of Events
===> ChicagoCon 2007
===> ChicagoCon 2008s
===> ChicagoCon 2008f
===> ChicagoCon 2009s
=> Ethical Hacktivism
=> News Items and General Discussion About EH-Net
===> Greetings
=> Special Events
-----------------------------
Ethical Hacking Discussions and Related Certifications
-----------------------------
=> General Certification
===> Networking
===> OS
===> Security
=> Compliance, Regulations & Standards
=> Control Systems
=> Cyber Warfare
=> Forensics
===> CCE / MCCE - (Master) Certified Computer Examiner
===> CHFI - Computer Hacking Forensic Investigator
===> EnCE - EnCase® Certified Examiner
===> GCFA - GIAC Certified Forensics Analyst
=> Hardware
=> Incident Response
===> CSIH - Computer Security Incident Handler
===> GCIH - GIAC Certified Incident Handler
=> Malware
===> Advisories
=> Mobile
=> Network Pen Testing
===> CEH - Certified Ethical Hacker
===> CPTC - Certified Penetration Testing Consultant
===> CPTE - Certified Penetration Testing Engineer
===> CSTA - Certified Security Testing Associate
===> eCPPT - eLearnSecurity Certified Professional Penetration Tester
===> ECSA - EC-Council Certified Security Analyst
===> GPEN - GIAC Certified Penetration Tester
===> OSCP - Offensive Security Certified Professional
=> Physical Security
=> Programming
=> Social Engineering
=> Web Applications
=> Wireless
===> CWNP Certs
===> GAWN - GIAC Assessing Wireless Networks
===> OSWP - Offensive Security Wireless Professional
=> Other
-----------------------------
Columns
-----------------------------
=> Editor-In-Chief
=> Andress
=> Gates
=> Haddix
=> Hadnagy
=> Heffner
=> Hoffman
=> Linn
=> RichM
=> Murray
=> J. Peltier
=> Weidman
=> Wilson
-----------------------------
Features
-----------------------------
=> /root
=> Book Reviews
=> Opinions
=> Skillz
===> Examples
===> May 06 - Star Hacks, Episode V: The Empire Hacks Back
===> July 06 - Hack Bill!
===> Sept 06 - Netcat in the Hat
===> Nov 06 - Hitch-Hackers Guide to the Galaxy
===> Dec 06 - A Christmas (Hacking) Story
===> Feb 07 - Charlottes Web Site
===> April 07 - Microsoft Office Space
===> June 07 - Serenity Hack
===> Oct 07 - Worst. Ethical. Hacker. Challenge. Ever.
===> Dec 07 - Frosty the Snow Crash
===> March 2008 - It Happened One Friday
===> Oct 2008 - Scooby Doo and the Crypto Caper
===> Dec 08 - Santa Claus Is Hacking to Town
===> Feb 2009 - Brady Bunch Boondoggle
===> July 2009 - Prison Break
===> October 2009 - SSHliders
===> December 2009 - Miracle on Thirty-Hack Street
===> December 2010 - The Nightmare Before Charlie Browns Christmas
-----------------------------
Resources
-----------------------------
=> Career Central
===> Looking For Work
===> Looking To Hire
=> Links to cool sites.
=> Mass Media
=> News from the Outside World
=> Tools
=> Tutorials
===> Tutorial Requests
Loading...
Exclusive Deal
SANSFIRE 2013
June 15 - 22
5% Off
w/ Code
:
EHN_5
SANS Deals 4 EH-Netters
5% OFF
Any
SANS Course
in Any Format!
Coupon Code:
EHN_5
Including
SANS Rocky Mountain 2013
&
SANS Boston 2013
Polls
Compared to this year, 2013 will be:
Great!
Better.
About the same.
Little worse.
FUBAR!
Recent Forum Topics
Greetings
: Hi from the UK
(0) by
C_B
Network Pen Testing
: AIX Vulnerability Assessments
(2) by
ras76
Tutorials
: Need guidance
(9) by
hanyhasan
Programming
: Finished Python Course in Codecademy now what?
(15) by
hanyhasan
Network Pen Testing
: Ruby on Rails Vulnerabilities / Attacks in BackTrack 5 r3
(0) by
SUdoctstudent
Network Pen Testing
: De-ICE 1.140 released!
(2) by
superkojiman
General Certification
: CPT Practical Submission
(1) by
UNIX
OSCP - Offensive Security Certified Professional
: Failed my first attempt at the OSCP exam
(94) by
azmatt
Tools
: Social-Engineer Toolkit (SET) Version 5.0 “The Wild West” Released
(2) by
m0wgli
Malware
: EICAR?
(3) by
UKSecurityGuy
Advisories
: HTB23154: Multiple Vulnerabilities in Exponent CMS
(0) by
AndyP
Advisories
: HTB23153: Multiple Vulnerabilities in Jojo CMS
(0) by
AndyP
Advisories
: HTB23151: Cross-Site Request Forgery (CSRF) in UMI.CMS
(0) by
AndyP
OSCP - Offensive Security Certified Professional
: Class Scheduled 6/8 - Linux n00b
(7) by
Taemyks
OSCP - Offensive Security Certified Professional
: OSCP exam scheduled
(6) by
gbhat
Incident Response
: LinkedIn Forensics
(0) by
AFENTIS_Forensics
General Certification
: Red Team/Blue Team
(1) by
ajohnson
Career Central
: Starter cert?
(3) by
Grendel
Network Pen Testing
: Beginner Ethical Hacker
(1) by
m0wgli
Web Applications
: Nessus and Nikto
(4) by
Seen
Network Pen Testing
: Cracking salted MD5 hash
(4) by
n37sh@rk
CEH - Certified Ethical Hacker
: Passed my C|EH
(3) by
n37sh@rk
Mass Media
: EC-council hacked, irony at his best?
(0) by
j0rDy
Web Applications
: SQL Injection into an INSERT statement.
(6) by
eyenit0
Network Pen Testing
: Solution for sipXtapi INVITE Message CSeq Field Header Remote Overflow
(1) by
m0wgli
Web Applications
: dns
(2) by
H1t M0nk3y
EH-Net News Feeds
Latest Additions
Privacy Notice
for TDCC & All Properties
Free Business and Tech Magazines and eBooks
© 2013 The Ethical Hacker Network
Joomla!
is Free Software released under the GNU/GPL License.