Key points
- A supposedly protected USB drive contained hidden accounts using the passwords 123456 and SECZURE.COM; either account could decrypt files without the administrator password.
- Three other encryption and copy-protection products used keys that did not depend on the user's password and could be extracted from the software or files on the drive.
- Reverse engineer Xusheng Li used an AI agent to analyze the products, with one utility reportedly analyzed in seven minutes after a single prompt.
Context
The case illustrates how AI-assisted reverse engineering can shorten the process of examining encryption and copy-protection mechanisms. For developers and technical decision-makers, it highlights the need to verify that access credentials, administrative protections, and embedded cryptographic keys are independently secure.
What this means for you
Directly applicable
Developers and technical decision-makers can use the findings as a checklist for testing whether encryption products truly separate administrative access, user credentials, and embedded cryptographic keys.
Who benefits: Developers and technical decision-makers who evaluate or maintain USB encryption and copy-protection products benefit from concrete methods for identifying hidden access paths and weak key designs.