RE: uniquely identifing USB device



Thanks everybody, there has been a lot of answers.
 The reason for doing this is licesing. And everything must work offline. So generating a hash would not protect me from byte-to-byte copying using something like dd.
As I have understood, there is no point-to-click solution for changing the hardware ID, so I guess I will just stick with that. Writing a driver or compiling a kernel is probably more expensive than the software is going to be anyway..
 

ERKI MÄNNISTE
QA Specialist
erki.manniste@xxxxxxxxxxx
Telefon: +372 5233653
Webmedia Group AS



-----Original Message-----
From: John Morrison [mailto:john.morrison101@xxxxxxxxx]
Sent: Wednesday, April 11, 2012 2:32 PM
To: Erki Männiste
Cc: security-basics@xxxxxxxxxxxxxxxxx
Subject: Re: uniquely identifing USB device

Erki,

Why do you want to identify the USB stick?

If it is to check if it is an authorised one could you not just store a unique hash on it? If it doesn't have a hash, or the hash does not match what you generated, it's not authorised. Just an MD5 hash might be enough.

John

On 5 April 2012 12:24, <erki.manniste@xxxxxxxxxxx> wrote:

Hi,
I need to identify a usb stick uniquely and I have been trying to find
out weather using just hardwareID is enough?
I have heard of a driver that lets you emulate an usb device and set
that ID, but quick googleing didn’t give any results. Does anybody
know of something like that? Is it possible to (for someone with
mediocre hacking
skills) to manipulate with these values? Is there a better way to
uniquely identify that device?

Thanks,
erki

----------------------------------------------------------------------
-- Securing Apache Web Server with thawte Digital Certificate In this
guide we examine the importance of Apache-SSL and who needs an SSL
certificate.  We look at how SSL works, how it benefits your company
and how your customers can tell if a site is secure. You will find out
how to test, purchase, install and use a thawte Digital Certificate on
your Apache web server. Throughout, best practices for set-up are
highlighted to help you ensure efficient ongoing management of your
encryption keys and digital certificates.


http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be4
42f727d1
------------------------------------------------------------------------


------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate. We look at how SSL works, how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------



Relevant Pages

  • Re: uniquely identifing USB device
    ... Why do you want to identify the USB stick? ... If it doesn't have a hash, ... Securing Apache Web Server with thawte Digital Certificate ...
    (Security-Basics)
  • Re: SQL Storing Passwords?
    ... First of all, storing salts next to a hash is not bad design, it ... we examine the importance of Apache-SSL and who needs an SSL ... use a thawte Digital Certificate on your Apache web server. ...
    (Security-Basics)
  • Re: [opensuse] clean tmp directories automatically fails.
    ... Hash: SHA1 ... On Friday, 2013-04-26 at 08:45 -0400, Anton Aylward wrote: ... Stick a USB device in and ...
    (SuSE)
  • newbie question
    ... I have an USB device and driver for it. ... "Take this file and return the hash of it". ... I have to write an application that communicates with this device. ...
    (microsoft.public.development.device.drivers)
  • Re: usb device permissions
    ... Hash: SHA1 ... > permissions to a usb device when plugged in. ...
    (freebsd-questions)