A researcher pointed Codex at four encrypted USB products. The first key was sitting in the executable, found in seven minutes
Xusheng Li published four teardowns with no CVEs and no vendor notice. The failures are key management and authentication design rather than cryptography, and one product shipped hidden accounts with fixed passwords.
