Hack a Fingerprint USB flashdrive

[chewbacalips]

About 2 to 3 years ago, I found a Transcend JetFlash (JF210) USB flashdrive in the middle of the street. No one was around who appeared to be the rightful owner, so it became my property. This was a public place with no lost and found, so I don't feel guilty. Anyway, it's 2GB and would come in handy. However, it's locked with a fingerprint and/or password. I know these things can be unlocked with hacking techniques fairly easily (or so I've read), but I can't find exact instructions on how to do it. Would anyone care to help me?

[setarip_old]

Just throw it away. If you need a similar drive, it'll only cost you $5 to $10...

[osgZach]

A little more than $5 or $10 in any useful storage capacity (http://www.google.com/search?q=Fingerprint+USB+thumb+drives&hl=en&newwindow=1&safe=off&client=firefox-a&hs=QSW&rls=org.mozilla:en-US:official&prmd=ivns&source=lnms&tbs=shop:1&ei=QpyLTdClBJK40QGd-PT2DQ&sa=X&oi=mode_link&ct=mode&cd=5&ved=0CC8Q_AUoBA&biw=1920&bih=898)

Not much more for what looks like a decent one, but still probably close to $100 for a good quality one.

I don't blame him for trying to use something he found for free

[haggi]

Well, you need to find out if the unlocking is done inside the flash drive or if it's done via the pc software.

If the unlocking is done inside the PC -> easy one, hack the software.
If it's done inside the stick -> time for a hardware logic analyzer. If you don't have one, as it's much more expensive than an average thumb drive -> trash the drive.

[chewbacalips]

When you plug it in, you have to log in via PC software. Any ideas on software hacking?

[LoRd_MuldeR]

When you plug it in, you have to log in via PC software. Any ideas on software hacking?

There are some sticks with a faulty design, which check the key only in the software. After the check, the software will simply send a "magic" unlock command to the hardware.

If, however, the product was designed properly, the software just sends over the key (password) to the hardware and all the checking/unlocking is done solely inside the hardware.

In that case (and assuming there are no further serious security flaws in that stick) you are lost - at least without special $$$ equipment.

Of course you can always do a "brute force" attack on the password, but unless the owner of the stick has chosen "weak" password this won't succeed in reasonable time.

Moreover I think you should never have taken the USB stick of someone else. And especially you should not try to get access to this person's data. So I'm going to close this topic!

(As setarip_old said, you can buy your own USB stick for little mone)