BEFORE YOU INSTALL U3 PLEASE BACK UP ALL OF YOUR DATA!  

1. Download regular U3 version Titanium Plus - U3 Updater (does not include beinsync backup software)

2. Run the Titanium Plus - U3 Updater and follow the wizard to complete the update.

Many of us need a version that does not include the BeInSync application!

We did not buy a hardware-AES-encrypted drive only to have our private data transmitted to a server registered to a foreign-national firm located in Israel:

Registrant:
   BeInSync
   23 Begin Rd.
   Tel Aviv 66184
   Israel

We do not want the the BeInSync "TitaniumProxy.exe" consuming 67MB of RAM whenever our Titanium Plus drives are inserted.  Nor do we want the CPU overhead or taskbar real estate of the unwanted BeInSync application.

We do not want the BeInSync application "reminding" us to register our drive every time we insert it. 

We do not want our expensive Titanium Plus Drives to nag us to "upgrade" to a paid account after the six month trial period.

There is no technical reason, whatsoever, why an installer cannot quickly and easily be created that omits the BeInSync application.  It can be done in less than a day. 

If it would help, I would be happy to discuss the WINRAR self-extracting archive (u3updater1.0.7.8-plus.exe) which contains launchpad.iso, which, in turn, contains launchpad.zip, which contains the BeInSync application files.  I'm sure that between us, it would be a simple matter to produce a version for users who do not wish to use the BeInSync application.

---

fmaxwell wrote:

Many of us need a version that does not include the BeInSync application!

 

 

---

Then WHY did YOU buy the Titanium Plus and NOT the Titanium that does not have the BeInSync software???????  The only difference between the two is, you guessed it, one has the backup software, and one does not.

Wow, way to buy a product that is advertised with a feature, and then complain because it has the feature.

---

fuzzy_logic wrote:

 

Then WHY did YOU buy the Titanium Plus and NOT the Titanium that does not have the BeInSync software???????  The only difference between the two is, you guessed it, one has the backup software, and one does not.

 

 

Wow, way to buy a product that is advertised with a feature, and then complain because it has the feature.

---

I bought the Titanium Plus because it has hardware based AES encryption, which the Titanium does not! 

I already had a Titanium but needed the hardware encryption to satisfy requirements at my work.  And guess what:  People who want hardware encryption to protect their data are often the same ones who don't want their data being shipped off to some random third party, foreign-national firm for "backup."

P.S.  I guess it also never occurred to you that others who bought the Ti+ may have decided that they didn't like BeInSync enough to pay for it or that they were horrified by the 67+MB overhead that it imposes at all times.  Apparently, you feel that everyone who bought the Ti+ has a moral obligation to either pay for the BeInSync service or be saddled with constant nagging.

I am not going to apologize, because you are wrong. 

The same level of hardware encryption is used on the Titanium AND Titanium Plus; it is built into the U3 controller.  This controller encrypts and decrypts on the fly.  If you want to lock the controller from decrypting without permission, you must enable the Security feature in the LaunchPad.  Then the hardware will not start to decrypt the data until the password is entered.

The Titanium Plus also encrypts the data using AES on its way to the backup servers, which, of course, are not at BeInSync, but at an Amazon.com Datacenter.

As for the 67MB overhead, that is neither here nor there.  I would have assumed the flash drive was purchased with the intent to use the backup feature, and when they found out it was too processor intensive, they would at that point decide they did not want it.  And, if they don't like the flash drive, they return it to the place of purchase.

You bought something because you THOUGHT it offered something that it did not, and then got mad when it did exactly as it said it would do.

Oh, and really, let's face it, if you were that worried about encryption, you would not be messing around with consumer level devices.

You would have only accepted nothing less than this:

http://sandisk.com/OEM/ProductCatalog(1400)-Cruzer_Enterprise_FIPS_Edition.aspx

I am not going to apologize, because you are wrong.

The same level of hardware encryption is used on the Titanium AND Titanium Plus; it is built into the U3 controller.

You're in a hole.  Stop digging.

1.  U3 is software, not hardware.
2.  There is nothing on the SanDisk site that advertises the regular Titanium as having hardware encryption, however, the Titanium Plus product page says "Password protection and AES hardware encryption."  Show me where the Titanium is advertised as having hardware-based AES encryption.

3.  You are still wrong.

fuzzy_logic wrote:

The Titanium Plus also encrypts the data using AES on its way to the backup servers, which, of course, are not at BeInSync, but at an Amazon.com Datacenter.

Wow!  You really don't understand the difference between encrypted transport and encrypted storage.  It's decrypted at the other end, giving complete access to BeInSync personnel -- and anyone who breaches their security.  What good does AES hardware encryption and physical security on my Titanium Plus do if someone hacks into the BeInSync servers?    

You really don't want to argue encryption and security with me; I headed up a team that got a C2 evalution on a PC-based workstation.  I architected a secure, private network to move sensitive non-commercial data between the U.S. and one of its allies.  I've architected, presented, defended, and implemented secure workstations and networks that satisfied computer security experts at the highest levels.

fuzzy_logic wrote:

As for the 67MB overhead, that is neither here nor there.  I would have assumed the flash drive was purchased with the intent to use the backup feature

Then you would have been wrong -- again.  I bought the drive because it met the requirement for providing hardware encryption, the U3 software, and a ruggedized case.  Who are you to tell everyone who purchased the device that its use of 67MB is "neither here nor there"?  You don't know what they will be using the drive on.

From the Sandisk Titanium Plus FAQ:

Can I disable the online backup?
Yes. You can opt out of online backup completely, or you can temporarily pause online backup.

If I "opt out of online backup completely," I expect it to be complete:  No 67MB backup software loading, no nag messages to "register" with BeInSync,  no system tray icons, and no storage of the backup software on my flash drive.

From the Sandisk Titanium Plus FAQ:

What are the product's requirements?
The backup service requires a computer running Windows 2000 (SP4), Windows XP or Windows Vista.

Note that it did not say that the computer needed a spare 67MB of free RAM that would be consumed at all times when the device was plugged in.  When there is no mention of the RAM required, the device should be using a trivial amount of it, not 67MB.

fuzzy_logic wrote:
 

And, if they don't like the flash drive, they return it to the place of purchase.

No, I'm going to demand that the device perform as advertised:  That I be able to opt-out of the online backup completely    

    You bought something because you THOUGHT it offered something that it did not, and then got mad when it did exactly as it said it would do.

I bought a device to do exactly what the manufacturer said it would do:  Provide hardware AES encryption, the U3 launcher, and a rugged housing.  What makes me mad is that Sandisk is trying to force me to run software that they said I could completely opt out of using.

Come on, I've seen your user name; you're obviously someone who believes in truth in advertising.

fuzzy_logic wrote:

Oh, and really, let's face it, if you were that worried about encryption, you would not be messing around with consumer level devices.

 

You would have only accepted nothing less than this:

 

Not all of us are looking for centralized IS management of our thumb drives.  You also seem to think that security is all-or-nothing; that we either need to operate in a Tempest shielded SCIF accessed with biometric scanners, passcodes, and active token badges or that we should feel perfectly comfortable storing all of our data on myspace.  Those of us with security expertise and credentials know that the appropriate level of security is based on what is being protected.  The security to protect your credit card number is not the same as the security used to protect U.S. defense assets which is not the same as the security to protect valuable commercial trade secrets.

fuzzy_logic is right. both the titanium and the titanium + use 128 bit AES hardware encryption. both devices use the same controller and it is this controller that provides the hardware encryption. just because it is not advertised does not mean it is not so.

FYI Cruzer Contour also boasts AES hardware encryption.

http://www.sandisk.com/Products/Catalog(1225)-SanDiskExtreme_Cruzer_Contour_USB_Flash_Drive.aspx

you are correct the data transfer to the servers is encrypted but the data stored on the servers is not. the servers used are amazon s3 server platform.

personally i dont see the big deal over 67MB of used memory. yes it seems to be bit of a hog but i never see a performance hit because of this. moot point though because it is personal opinion.

you can actually opt out of online backup completely. of course to do this you will need to completely remove u3 and since removing u3 removes the password protection you will not have any data security.

sorry to say but your device is performing exactly as advertised. and yes you do have the option to completely opt out of online backup you just choose not to because you want password protection.

i agree that sandisk should provide an option to remove just the backup software app so hopefully someone there will take note of this post.  

drlucky,

Thanks for that level-headed reply.

No offense intended, but telling my employer, and our customers, that a thumb drive provides hardware encryption because some guys in an online forum say that it does, is not going to cut it.  Even if it's the same part number controller chip, there's no guarantee that encryption cannot be enabled or disabled via a one-time-programmable fuse (like many microcontrollers employ).  Sandisk is not obligated to provide, or continue to provide, 256bit AES encryption on drives that they don't advertise it on.

Thanks for the tip on the Contour.  I may look into that one as an alternative.

67MB is not a big deal on my home system or my laptop.  It's a very big deal on some of the embedded systems that I plug the drive into.  It's a big deal to many users with older systems. It's a big deal to many online gamers.

As to losing U3 and AES encryption in order to completely opt out of the online backup, that would not cut it on the truth in advertising FTC rules.  That's like an SUV manufacturer advertising that "you can completely remove the third row seats" but not mentioning that doing so disables all airbags, leaves the radio non-functional, and causes the speedomer to stop working.

But I am glad that we agree that Sandisk should provide a way to really remove/disable the BeInSync software.  Thanks for that support.

P.S.  According to Sandisk, the Titanium Plus will be replacing the Titanium in the U.S. in 2008, so this becomes a bigger issue soon if that happens.