IOSys

Yes, you are a paranoid victim of government bullshit, you obviously don't know that the US has been in conflict with Korea for over 50 years ..and they ain't the ones who started it . You lot killed some million Koreans, you think that will make them love you ?

WRONG .. (and waste of resources is exactly why encryption-programs do it btw) Also see http://en.wikipedia.org/wiki/Salt_(cryptography) http://en.wikipedia.org/wiki/Brute_force_attack for more info and some boring math ...

How are rainbow-tables going to help "crack" AES ? The reason they work so well on windows-pw's is the fact that the geniuses in redmont "decided" to store the unsalted hash of your windoze-pw on disk . (They also "decided" to use a weak RNG btw.. making it a pretty obvious backdoor IMO ) That is not the case with properly implemented AES (or any other well-reputable cipher for that matter) . If you take the well-known crypto-program TrueCrypt it salts your pw with SHA 512 and it does that at least 2000 times.. Even if you computed all the permutations in a huge rainbow-table you would STILL have to brute-force the key (potentially try every possible combination) because there is nothing to look-up.. Sorry but I'm just to lazy to do the math for you,suffice it to say that just the power-requirements to complete the task are astronomical, we are talking GIGAWATTS ..

"and so the only people likely to have the knowledge and computing power to break it are large governments." Why "break" anything if you have a backdoor ? The proof that AES has no government backdoor is the fact that they use it themselves .. It would be pretty stupid to use a cipher you KNOW is weak, wouldn't it ?

Is it this one ? http://en.wikipedia.org/wiki/Huawei_E220 You can flash the firmware, have a look here : http://www.huawei.com/mobileweb/en/doc/lis...e=-1&id=736 I don't know about removing the CD-ROM.. It contains the firmware so it's important if you are to use the device .. It's probably just a rebranded UFD-controller from one of the large manufacturers, you will need to disassemble the thing to ID it properly (they usualy leave the original markings )

There's only 2 problems with this : 1 : It's not true ! because : therefore : (and that includes U3 drives, you think M$ bought in on that for fun ?) 2 : None of you guys actually read the article, did you ? Besides, everybody seems totally obsessed with the "autorun"-part and are totally missing the actual point of "USB-hacks" .. that you can run anything you want on nearly ALL windows-boxes no matter what is installed and that physical access means pwnage .. btw : For those of you who find autorun a useful feature on your own computers (I do), there is a quite safe way to do it and it's even free : USB Drive Letter Manager www.uwe-sieber.de/usbdlm_e.html

You probably need to remove the LUN that the "USB-stick" resides on entirely .. but to my knowledge nobody has ever actually tried "burning" a ISO EXACTLY the size of the ENTIRE device to a sandisk U3-drive .. Still, it may not work, most of the production-tools I've seen for CD-ROM enabled UFD's don't allow to only create the CD-ROM.. (but a few do, the problem is that sandisks controllers are very poorly documented) Note : Even if you do succeed in this you probably won't be able to boot from those computers, some BIOS simply refuse to recognize the CD-ROM, others work perfectly . Even more interesting: Some systems will not recognise the CD-ROM on a cold-boot but will recognise it after a warm-boot ..

It also often speeds up name-resolving if you run a caching DNS-server like BIND . It's also more censor-ship resistant than using your ISP's DNS-server, especially if you live in countries like Saudi-Arabia, Iran, North Korea, China, Denmark, Libya ..

That's okay, I'm a whisky-man :) .. Besides, your problem gave me an idea !

Are the U3-files still on the CD-ROM ? If they are, try running "LaunchU3.exe" from the CD.. If they are not, get the files : -------------------------------------------------------------------------------- autorun.inf LaunchPad.zip LaunchU3.exe -------------------------------------------------------------------------------- put them in a ISO, mount it in Deamon and run LaunchU3.exe .

Have a look here .. http://translate.google.com/translate?hl=e...3Fname%3Diflash maybe you need one of the 209X, 2090E or maybe one of the "8bit" versions .. btw : there's a password you need to enter before you are allowed to commit any changes . I don't remember it, but it's in the manual, if you can find that ..

Have you tried running the LP-installer ? Usually it can restore the drive to factory state but I have never tried on pw-locked U3-drive . The U3 password locks access to the writeable part, IN HARDWARE ! , so it is quite possible you will need to fix that first .. NOTE : Do not flip the removable bit, sandisk's tools expect the flash-device to be "removable" and will not work if you have made it a "fixed" disk .

& LOL .. cozz this ain't a "vulnerability", it's a "feature" .

OK, do you remember the specific models you have had success with, so we can have them added to the list of supported devices ? I should probably add that there is a reason for why m$ has imposed this artificial limit : It seems that windows is incapable of writing a correct MBR/Partition-table on flash-media see f.ex : http://home.graffiti.net/jaclaz:graffiti.n...B/USBstick.html http://www.hjreggel.net/cardspeed/index.html#cs_calign.html or almost any Linux-geek board :) and that is why you are usually advised to use the HP-format tool when creating a bootable UFD .. The reason I keep mentioning the MPT's is that many controllers are multi-LUN capable, meaning that instead of partitioning the same LUN into two "drives", you "physically" divide the available Flash-RAM into two separate LUN's that will appear as separate "Fixed" storage-devices . The LUN's themselves can of course also be partitioned .

Good to hear it worked for you :) For those of you who don't have a UFD that "BootIt" works on you might be able to find the Mass Production Tool for your controller-chip here : http://translate.google.com/translate?hl=e...3Fname%3Diflash To correctly identify your controller, use "Chip Genius", also available from FlashBoot.ru PLZ Do read the manual/help-file before using the MPT .. or read some of the illustrated posts on flashboot.ru's forum before proceeding . INCORRECT USE OF MPT's CAN HARM YOUR FLASH-DRIVE .. (Lexars "BootIt" is perfectly safe to use, it works or it doesn't, no harm done in either case)

You are right, BIOS can see the partitions .. you may find this post interesting : http://www.boot-land.net/forums/index.php?...ost&p=62682 In order to create multiple partitions on a flash-drive under windows (any version) you need to make windows see the flash-drive as a "Fixed" disk instead of "removable" . There are 2 ways to do that : 1 : Use a filter-driver like the "Hitachi microdrive filter-driver", this will make any device configured to use the driver appear to windows as "Fixed" or use Anton Bassov's "dummydisk.sys" , the sourcecode is here : http://www.codeproject.com/KB/system/sovie...ct_hooking.aspx This one requires no configuration, all removable disks will appear as "Fixed" . 2 : Change the removable media bit in the flash-drives controller . For most flash-drives you will need the corresponding "Mass Production Tool" although a few popular UFD's can be "hacked" with Lexar's "BootIt"-tool, these are known to work : * Corsair Flash Voyager 16 GB * Corsair Flash Voyager GT 4 GB (VID_1B1C&PID_1A90) * Corsair Flash Voyager GT 16 GB * Corsair Flash Survivor 32GB * OCZ Rally2 32 GB * OCZ ATV 4GB * Buffalo Firestixx 1 GB (RUF2-S) (Any drive using the same controller-chip as one of the above is likely to work) The advantage of this approach is that you will be able to mount more than the first partition under windows without having to install drivers first . http://www.pendriveapps.com/2008/05/01/boo...-media-bit-tool

ChipGenius says you need : CBM209X UMPTool V1.9.17_A30515[20080515] it's usually very reliable .. I don't have that version, it's not on the russian site, never got around to registering an account at the chinese site; also, it seems they want money (or "points" as they call it ) and I don't know where to buy china-money.. maybe I could trade in some of wifeys WoW-gold :) But it does seem like something is working anyway, sometimes the MPT is backwards compatible .. Is it possible that you somehow have created 2 partitions ? Remember, under windows it is only possible to mount ONE partition (the first), if the device is seen as "REMOVABLE". If you want 2 partitions you must change them both to be "FIXED" (sometimes the MPT uses the terms "zip"(removable) and "HDD" (fixed) ) . Screenshots ?? Try this, Faststone Capture : http://www.321download.com/LastFreeware/fi...FSCapture53.zip and then post a screenie of the settings you use in the MPT..

You need to accurately identify the controller and then use the corresponding version of the tool . Use this to identify the controller and it's tool : http://209.85.129.132/translate_c?hl=en&am...CRIwMj_3S0ZH1hg Then download the tool from the link below instead of from the Chinese site the app links to : http://translate.google.com/translate?hl=e...3Fname%3Diflash I have no idea if this works in a VM under linux . The tools are for windows and rely on specialized drivers to communicate with the controller so I doubt it will work, at least not as intended .. btw : You didn't tell exactly what you tried to do .. but whatever it was, you must have missed something :)

For those who just want a simple way to save and restore your icon-layout there's "Icon-restore" http://users.rcn.com/taylotr/icon_restore.html

That is wrong. The CD-part is real and is also seen under Linux . Furthermore, some BIOS also recognize it and allow booting from it as USB-CD ROM .

Could you please tell me exactly what is wrong with spelling "Microsoft" "micr0$0ft" ? Is it wrong or what ? But considering this is mainly a place for sciddy wannabe-hackers I can see why you get a headache... You may be required to USE it !!

What do you mean by "U3", the whole sandisk-concept or just "has a CD-ROM that can autorun" ? If it's the later there are lots of drives with controllers that can do the CD-ROM trick .. A few examples here : http://hak5.org/forums/index.php?showtopic=8614

Thanks for reporting your findings :) Yes, we now have a general and easy way that works on sandisk drives larger than 4GB and your findings show that the newest LP-installer is still capable of resizing the CD-ROM .. Apparently, someone has discovered a method for USB-booting even if BIOS does not support it ! http://www.ubcd4win.com/forum/lofiversion/...php/t11375.html I'm not sure if that helps us with our "fake" CD-ROM drive troubles but it's still damn interesting !

Anyone remember that Swedish guy who set up a few TOR exit-nodes and sniffed them, collecting e-mails, logons etc etc from embassies,NGO's and the Office of the Dalai Lama ?

This post from the u3-community forum may interest you .. Unfortunately Sandisk has updated the LP-installer since and I don't know if this still works with the new version..