The physical components of an IT system.

learn more… | top users | synonyms

4
votes
5answers
642 views

Are there any hardware HSMs that can host/run custom applications using the HSM processor(s) within the hardened security boundary?

It seems that the majority of commercially available hardware HSMs are only designed to allow authenticated users to generate, store, and use cryptographic keys with various cryptographic algorithms ...
0
votes
0answers
8 views

Delay time clicking of contextual menu on the mouse [migrated]

I have such trouble: when i choose a folder/softwares and clicking second right clicker of mouse on the my desktop or elsewhere context window needs time to appear. Why needs it time to appear? what ...
2
votes
2answers
63 views

Long term HDD storage solution

I have some HDDs which are encrypted to what I think is a decent standard. I want to lock these away in a remote storage facility, but am a little worried about EMP/Magnetic stuff from wiping the ...
5
votes
2answers
914 views

How does the encryption of FPGA works?

I know that FPGAS of Altera enables you to encrypt the RTL code while you work with it, what I can't understand is why it is really encrypted since once I have the FPGA, I can take it and with flash ...
9
votes
5answers
626 views

Can a mobile phone battery contain malware?

It has 3 terminals and is presumably a smart battery. I bought it on ebay recently for $2.74 USD and that included postage from China to Australia. It would normally retail for maybe $40 - $50. The ...
9
votes
2answers
281 views

How do you know a computer is not compromised when you first get it?

How do you know a computer is not compromised when you first get it? How do you know that manufacturers have not intentionally built vulnerabilities into the system?
1
vote
1answer
49 views

How to prepare a used computer to handle sensitive information

After buying a used computer from a stranger, what steps should be taken to ensure it is safe to use for connecting to a network that handles sensitive information? (I am defining "sensitive" broadly: ...
4
votes
3answers
106 views

Do cell-phones exist with open source baseband processors?

In a recent question (can't seem to find now), someone asked: Is it possible to track a phone which is off? and received a response of Who's to say that it's really off? Your phone has both ...
1
vote
1answer
29 views

Importance of password strength with secure element?

Greetings SE security community. Background: I have a number of items like certificates, databases, and encrypted file systems that require private keys. In order to avoid having duplicates of these ...
8
votes
2answers
5k views

Reversing an entry card - How to find out what type of RFID hardware I need to read the chip?

I have an acccess/entry card chip I want to copy for demonstrational purposes. However I am not sure how I can find out what type of RFID reader I need to get a hold of. Does anyone have a ...
4
votes
1answer
242 views

HeartBleed and Closed Source Hardware like Cisco

With the release of heartbleed how does one protect themselves with closed source networking hardware like cisco? Especially hardware with VPN variety. Would it be best to replaced such systems with ...
1
vote
3answers
63 views

Hardware trojan besides network card?

We all can read news about "Hardware trojans" (it has grown in the recent few years..). But my question is: Besides the network card, could there be any HW trojan that can cause any real damage? ...
1
vote
1answer
378 views

Buffer Overflow on Raspberry PI

Is the ARM processor used on the Raspberry Pi vulnerable to standard buffer overflows? That is, if a program that has a BO vulnerability is run on a Pi, will it be vulnerable to exploit? How does ...
1
vote
3answers
121 views

Are there commercially available hardware encryption devices over USB? [closed]

I'm designing a system where some combination of hardware and software (lets call it an appliance...) sends asynchronous secure archival to the cloud. By secure, I mean, AES-256 encrypted, with AES ...
4
votes
1answer
107 views

Why are countermeasures against control-flow hijacking attacks mostly implemented in software?

I wonder why countermeasures against code-injection and control-flow hijacking attacks (e.g. stack-based buffer overflows and heap-based buffer overflows) are mostly implemented in software. Examples ...
1
vote
1answer
36 views

PCI approved device, does it matter if my POS is PCI compliant if it just passes info to the gateway and does not store the encrypted card data?

If my Hardware device is on the PCI list from here https://www.pcisecuritystandards.org/approved_companies_providers/approved_pin_transaction_security.php Does my POS need to be PCI compliant since ...
2
votes
1answer
91 views

Old hardware for encryption and backdoor free

I've read and seen articles on backdoors in the processors or at least the idea of that would render software based encryption worthless. I do know that routers and lots of the newer devices all have ...
0
votes
3answers
234 views

Can Malware Physically Damage A Hard Drive?

I recently responded to an incident of supposed malware infection. The symptoms where simply "my computer is freezes at random times". The response ended with replacement of the physical hard drive ...
3
votes
5answers
1k views

Is it ok to cut some digits from the front-face of a credit/debit card?

I'm a European expat living in Asia. I usually hide my credit card at my apartment. However, I'm a bit scared about losing it when I carry it (wallet robbed or lost). That's why I already scrubbed ...
5
votes
3answers
9k views

How secure is WD MyPassport lock

I have a WD My Passport hard drive. There is an option that allows you to lock your hard drive with a password. How secure is this lock? They don't give details about the encryption algorith or the ...
2
votes
2answers
78 views

Secure one way radio communication

I was thinking about the feasibility of one way remote control using radio signals. The sending hardware would be bound to a computer and therefore have enough computing power, while the reciever ...
9
votes
2answers
2k views

Free/Libre software to handle TCG OPAL 2.0-compliant Self-Encrypting Drives (SEDs)?

I'm in search of a free/libre software that is able to handle OPAL (2.0)-compliant SEDs (i.e. manage the setting of Pre-Boot Authentification (PBA) environment, encryption keys...). It could be a ...
1
vote
1answer
32 views

Are there vulnerabilities in display connections? [duplicate]

I have been in the market for a DisplayPort KVM. Most of these products come from small companies I have never heard of and possibly do not trust. I understand the risk of plugging in USB to any ...
7
votes
2answers
218 views

Building's server room is unlocked: What danger is my building in?

In one of the buildings I work in, there are lawyers and accountants, web developers and marketers, and numerous other small businesses. Everyone's (shared) internet is routed through the same server ...
5
votes
1answer
189 views

Is the SD card write protection hard-wired or optional?

According to Wikipedia, the SD card reader recognizes if the little tab on the left of the SD card is in the "lock" position or not. Thus, a SD card reader can still write on the SD card even if the ...
0
votes
2answers
61 views

Is there a way to prevent software from accessing hardware IDs?

I think this is related to this question, but I would like to know if there's also a way to prevent "third party" applications from seeing hardware IDs (motherboard, hard disks, and others), or giving ...
3
votes
0answers
523 views

OPAL Hardware Encryption on Linux [closed]

I recently bought a laptop with an SSD which complies with the Self encrypting Drive OPAL specification. I was offerd to setup encryption while installing Linux, but my guess was that this was going ...
7
votes
3answers
107 views

How to trust ICs?

While it is theoretically possible to thoroughly examine the source code of Open Source Software to check for backdoors (neglecting a Ken Thompson hack), and given sufficiently adequate knowledge in ...
13
votes
2answers
29k views

Can wiped SSD data be recovered?

I was reading another post on destroying IDE drives, and how you could remove data, wipe it, or just destroy the drive. The removed data would still be there in some state, although not easily ...
10
votes
1answer
394 views

Is the Litecoin Scrypt hashing technique a threat to hashed passwords?

The Bitcoin alternative, Litecoin uses a different algorithm to protect the block chain, namely Scrypt (not Sha256). Given that GPU accelerators exists, and ASICS are due to be released, does the ...
0
votes
1answer
59 views

What are the strengths and weaknesses of using a single 'burner' computer vs. many public access computers over a sustained period? [closed]

Assuming that the user is accessing/publishing related sensitive information over this period, and also assuming that they would take additional precautions in both scenarios, such as a Tails live ...
1
vote
1answer
121 views

What does hardware full disk encryption imply?

I read the wikipedia article and few others, however I still don't have some things clear. The main question would be what does hardware full disk encryption imply for the user, however I have more ...
1
vote
1answer
209 views

How do I properly bury a hard disk drive to keep it healthy?

As a way of backing up big amounts of data (about 1-2 TB) I thought it's good idea to bury a hard disk drive (in a damage-preventing shell) to be able to dig it later and read all the data from it if ...
34
votes
11answers
5k views

Is it possible to turn a computer into a bomb?

I know this newspaper article sounds absurd. Even if a machine is compromised we (should) have hardware safe guards in all our devices to prevent the software from damaging the hardware. But is it ...
2
votes
3answers
414 views

How is it on some removable media, when enabling/disabling password protection the changes happen immediately?

For example I have a WD Passport external hard drive. After installing WD security I can enable and disable password protection, however the settings basically get applied instantaneously. Does this ...
1
vote
1answer
122 views

Wireless Security Pen testing Setup

I had a Asus N82J laptop with a dual boot setup. I boot into Kali and Windows 7. Long story short because of my dual boot with Grub I corrupted my HDD the operating system kept moving blocks of ...
1
vote
0answers
99 views

Disable HNAP on D-Link router

I'm concerned that Home Network Administration Protocol (HNAP) is a serious vulnerability that exposes consumer network routers to remote management by malicious entities such as government ...
0
votes
2answers
62 views

Disk Wiping - How can I be sure [duplicate]

I am selling some hard drives but my question is. How can I be sure that the information is gone? Is there a good way to wipe the drives? What are ways I use to attempt to recover the data to ensure ...
2
votes
1answer
711 views

Are there GPS tracker for laptops?

Are there location tracker hardware (GPS receiver) which can be fitted inside of a laptop and it sends live location data to a remote location ? If yes, how to detect such trackers ?
4
votes
3answers
171 views

Disk Erasing Security - Odd Number of Writes

As one can find in the Disk Utility/Erase/Security Options section, there are two options for erasing disks securely - zero out 7 times or zero out 35 times. Where these numbers come from?
4
votes
4answers
218 views

How do we know if the hard disk we just bought is “clean”?

When we buy a new hard disk drive, what steps can we take to ensure that it is virus-free? For example, there are many vendors selling hard disk drives on Amazon. When we purchase one, how do we know ...
10
votes
3answers
1k views

Possible to prevent Juice Jacking by only connecting USB pins 1 & 4?

According to this accepted answer, there is no phone on the market today that is immune from "Juice Jacking"*. I think an easy way to mitigate this threat is to have a filter that blocks USB pins 2 ...
7
votes
2answers
455 views

How to circumvent compromised CPUs in major FOSS operating systems

As Matthew Green puts it, "the NSA has been ... Working with hardware ... vendors to weaken encryption and random number generators." At this stage, however, there is little public knowledge of which ...
36
votes
8answers
7k views

How can I reliably erase all information on a hard drive?

As storage technologies change over time, using different encodings and remappings to deal with sector errors, the best way to permanently erase/wipe/shred data changes also. Methods for flash drives ...
1
vote
1answer
545 views

File system history on USB drives

I want to find out who deleted a specific file from a USB disk. The disk is formatted as NTFS. The file was deleted while the disk was plugged into a Windows 7 system. However, while I do have ...
6
votes
1answer
321 views

Can malicious code be contained outside the filesystem on a USB drive?

I've personally seen it recommended that every time a user inserts a USB thumb drive into a computer, that the thumb drive be scanned for potential malware and malicious code. However, if all that's ...
23
votes
6answers
4k views

Can a hard drive be destroyed by drowning?

These are some ways of disposing of hard drives: Special firms, degaussing, hammering, pulling apart. Can this be accomplished more quickly by drowning it? Fill a bucket with water, maybe add some ...
4
votes
1answer
345 views

Write-protection at hardware level for security

It seems to me that to maximise server security, one ought - in addition to the usual security measures implemented in software - to prevent the overwriting of certain parts of the server system, such ...
9
votes
2answers
541 views

Can I use hardware random number generation on my computer? Am I already using it?

A lot of computer security depends on encryption: SSL connections, TCP packet sequencing, encrypted files, etc. These depend on random number generation to ensure that attackers can't guess the ...
3
votes
2answers
234 views

What are the pros and cons of using yubikey with ssd hardware encryption?

I'm considering trying out yubikey and I've recently discovered that the (crucial m500) SSD I recently bought supports hardware encryption. I think it should be possible to use a yubikey to provide ...