Why SanDisk Gave the SD Card a Switch That Locks Nothing

Summary

The video explains how the SD card became a dominant storage format despite being designed with two security features that largely failed to serve their intended purposes.

Origins and design

SD was introduced in 1999 by SanDisk, Toshiba, and Panasonic as an evolution of the MultiMediaCard (MMC). It kept MMC’s 32 × 24 mm footprint and on-card controller, while adding thickness, two contacts for a 4-bit data path, and two security features. Early SD slots could also accept MMC cards, preserving backward compatibility.

The write-protect tab

The small sliding tab on full-size SD cards is not an electrical switch and does not communicate with the card’s controller. It creates a groove that a host device may detect with a mechanical lever. The host then decides in software whether to block writes, but the specification does not require hosts to check the tab.

As a result, a card marked “locked” can still be written to by a reader or device that ignores the tab.

The unused rights-management system

Every card made under the original SD specification included a hidden protected area for CPRM (Content Protection for Recordable Media). It stores cryptographic material used to control access to protected content. The system could also revoke authorization for certain devices on newly made cards.

CPRM was intended to support protected digital music and video, but the anticipated music distribution system never took hold outside limited uses, particularly in Japan. The protected area remained mandatory for about 20 years before a later specification made it optional.

Why SD prevailed

The founders formed the SD Association and a separate licensing organization, giving device makers a way to adopt the format without relying on a direct competitor such as Sony. Toshiba and Panasonic also committed to shipping devices with SD slots, so cards and compatible products arrived together.

SD spread through cameras, phones, handhelds, navigation devices, consoles, drones, and other electronics.

Other format features and changes

SDIO allowed the slot to support peripherals such as Bluetooth and Wi-Fi adapters, GPS receivers, and barcode scanners. MiniSD and then microSD reduced the card’s size. MicroSD omitted the write-protect tab, while full-size adapters recreated it mechanically.

Later capacity and file-system changes created compatibility issues for older readers.

Trade-offs and continuing issues

Phone makers gradually removed card slots, citing space, water resistance, and the speed advantage of internal storage. The video also points to the financial incentive to sell higher-capacity models upfront.

Because the card’s controller reports its own capacity, counterfeit cards can claim more storage than they actually contain. To detect them, write data across the claimed capacity, read it back, and compare.

Central conclusion

SD’s storage design succeeded, but its two security mechanisms did not: CPRM served a market that largely failed to materialize, and the write-protect tab depends on the host rather than enforcing protection within the card.

Reviews, guides, or tutorials

None. The video is a historical and technical analysis.

Main speaker/source

A single, unnamed narrator from The Objects We Held.