Lenovo's 'encrypted' fingerprint USB drive is just an unencrypted SD card in a fancy case — AI-assisted follow-up finds a backdoor and hardcoded keys in other ‘secure’ USB products

Security researcher Xusheng Li discovered that Lenovo’s ThinkPlus FU100 fingerprint USB stick lacks encryption entirely, functioning as a standard SD card inside a protective case. An AI-assisted follow-up investigation using tools like Codex also uncovered hardcoded keys, backdoor accounts, and plaintext password transmission flaws across multiple other secure USB storage products from various vendors. Open article →