0

In my application i need to give permission to given pen drive to be allowed to access or not. I'm using pen drive's serial number to give permission here i want to know if all pen drive has serial number or not and if they have then the serial number is unique or not.

Hetal Jariwala
  • 33
  • 1
  • 7
  • Arguably it depends on which serial number you mean (the volume, the partition table, and the hardware all have different serial numbers) but I believe the answer is the same in all cases: no, you can't rely on them being unique. If the hypothetical bad guy doesn't have access to the pen drive in question you might be OK, but of course in that case you could just as easily stick a key in a file on the drive. – Harry Johnston Dec 21 '12 at 01:21

2 Answers2

1

As per this link its NOT. you may go through the blog post!

Mullaly
  • 320
  • 4
  • 18
  • Info from the linked page: there are many tools that allow to edit, temporarily change or emulate pen drive serial number. Even without these tools cheaper models of pen drives reuse the same serial numbers. – Artemix Dec 20 '12 at 08:12
1

Even if it was unique (which it isn't), you shouldn't give permission based on something that can be easily spoofed.

austere
  • 157
  • 7
  • It is not about giving something it is of allowing pen drives in system so what should i use it suppose to be serial number. can u suggest any thing else...?? – Hetal Jariwala Dec 22 '12 at 11:44
  • I guessed from your question that you required some kind of trust system? Otherwise the serial number wouldn't matter at all and you'd allow USB drives through unconditionally -- in any case serial numbers are not the way to reliably identify what a drive is. In fact, very simple circuits can spoof limited functionality of any device you can imagine. – austere Dec 23 '12 at 05:06