The Victorinox Secure penknife includes a biometric scanner for the USB drive - and a £100,000 prize if you can break into it.
Victorinox is so convinced that its latest biometric-secured flash drive – included as part of its top-end range of penknives – is secure, it's offering £100,000 to any enterprising hacker or cracker who can break into it.
As reported over on
The Register, the company is holding the competition at its New Bond Street store in London on Thursday the 25th and Friday the 26th of March.
The competition is looking to drum up interest in the company's latest Swiss Army knives, which feature an in-built USB flash drive with integral fingerprint scanner. If you don't swipe the right print, the device not only refuses to mount the drive but also e-mails its owner – and if no response is received within a certain time period, it automatically deletes the contents of the drive.
Those wishing to participate are encouraged to fill in the competition
application form. While not all that do will be selected to participate, those lucky few – the competition is limited to 24 entrants - who are will find themselves in for a treat: as well as a two-hour window to attempt to break the biometric-based security system on the drive in order to get their hands on the £100,000 top price, participants will get a Cybertool Lite penknife whether they are successful or not.
A successful crack is defined by Victorinox as reading a file stored in the secure partition “
in plaintext” without using the original password or fingerprint, and recording the attempt in such a way that Victorinox would be able to repeat the feat – and, more importantly, fix the flaw and improve the security of the device.
Any budding hackers fancy their chances at the £100,000 top prize, or are you tempted to enter simply to get your hands on the free penknife? Share your thoughts over in
the forums.
18 Comments
Discuss in the forums ReplyWish I was any where near good enough to bother applying!
Right you are! I'm heading over to Discovery on demand to see if that one is available. If my memory is correct, they went really advanced to crack the Microsoft fingerprint reader and really had to go over the top to do it using jelly mold fingertips with heating and a secret portion not shown on telly. However, the uncrackable $600 door lock was done with a photocopy of the finger print!
Since we can't use the original fingerprint, maybe all that is pointless?
How much you willing to bet that anyone that has the actual status of hacker wont be "selected" for this challenge
What would be the point in that? The idea of competitions like this and white hat hacking in general is to show up flaws in the system, and the best people at this are hardcore hackers.
Many hackers get offered jobs after successful high profile hacks.
In the UK anyway!
Police won't confiscate a Victorinox, or other multitool.
It has obvious purpose. In the UK, you can carry any <3.5" blade excluding locking or flick blades.
Any length or type may be carried if concealed with good verifiable reason. (Ie. I'm a member of a hunting club, heres the number. Or I'm a Scout Leader, hence the wonky uniform)
But anyway, on topic, surely the best way to crack it is to desolder the memory chip, and fit it to a pre-made sans hardware encryption reader?
Doesn't say anything about that being disallowed. Feel free to try to implement that master plan anyone - I won't be able to make it there. But if you win, your welcome to my PayPal ;)
(Unless, of course i consider your hacking skill to be upto the task of fauxing PP...)
something else with those "press finger against surface" type of devices.
And I know a print can remain even after cleaning the surface. Forensics sure have lifted prints from cleaned surfaces before. Of course depends on how good of a cleaner you are.
Just piggyback off the NAND flash and off you go.
Of course, if it's encrypted, it's slightly more difficult...
The point would be its a pr stunt and no company wants to give away 100k tbh. How can you think otherwise, considering they are only allowing 24 people that they "select"