Hi Steve. Long time Security Now fan. Thanks for all you do.
I was just drafting up an email for my organization to warn them about the Fraudulent Flashdrive Epidemic. When I do this, I try to put myself into the mindset of the user so I can "dumb it down" for the non-techs.
During this process, and in reading the ValidDrive page, I noticed that it doesn't mention one behaviour in these drives that I found in a drive I had. That is that, as long as it had memory to use, it actually did write the lastest file(s) to the drive, and they could be read back successfully.
Through trial-and-error I found that the last 30GB or so stored were retrievable on a supposedly 128GB drive. That's actually a lot of video (when it's not HD), so if I hadn't been doing some speed testing, I wouldn't have known for quite some time, since I really only revew the most recent stuff to make sure it was saved properly.
This was about a year ago, and I figured I just got a bad drive. But I kept the drive, and when ValidDrive came out, I tested it, and it really only had 32GB. (I suspect that the file system didn't need much because they were big files.)
The reason I mention this is that it shows a more insidious mind at work. Many users really only look at the last few files they've stored, and just keep adding them a few at a time. So using this nasty trick, one could use this drive for years without knowing it's trashing your older files in FIFO-style order. (Maybe FIFT - First In, First Trashed?)
Anyway, thought I'd mention it. Thanks again for all you do to make ME look good at work!
- Dayton