Here are the best ways around this that I have found The data is not stored contiguously on the flash memory, so if you change the controller, it will have no idea about the order data is stored in on the flash media. This means the chipset keeps track of which parts of the flash memory have been used the most and re-maps data to different parts of the physical flash memory to even things out. Flash memory implements wear leveling through this chipset You cannot just remove the control chipset and replace it. In most cases, if you enter the password incorrectly a number of times, the control chipset will initiate the entire flash memory being overwritten. You therefore cannot take a physical image or start to try to brute force encrytion. The removable storage device component of the U3 is not accessible by the host and does not even appear on the bus until this security mechanism allows it. When security is implemented in these devices, only the CD-ROM device and CDFS are presented to the file system where some software resides controlling access to the removable storage device. Encryption aside (which is another issue) in U3 devices, as discussed, the controller presents itself to the host as two separate devices, a CD-ROM device and a removable storage device. In a USB thumb drive you esentially have a controller chipset and flash memory. So i decided to use hardware solution and i got this , I work with a company for security and forensics, so the court send us a USB protected with password ( sandisk USB ) i try to use some software methods to bypass the password work's with v1 and v2 only they didn't work with U3 DĪnd i cant lunch brute force attack Because of the self-destruct feature ]

Sandisk secure access 3.0 download