GoKawiilLenovo's fingerprint-secured USB drives found to use no real encryption
Security researcher Xusheng Li discovered that Lenovo's ThinkPlus FU100 fingerprint USB drive, marketed as AES-256 encrypted, was actually just an ordinary SD card whose fingerprint sensor merely gated the USB connection rather than encrypting any data. A related flaw in Lenovo's TSD303 SSD showed the device did encrypt data but transmitted the correct password in plain text over USB for verification, making it easy to intercept.