The physical components of an Information Technology system. It can consist of network equipment, servers, CPUs, hardward security module, smartcards, etc. When using this tag, also include an additional tag for the specific type of hardware.

learn more… | top users | synonyms

0
votes
1answer
14 views

HPET effects on CSPRNG for Linux OS

HPET or High Precision Event Timer is a hardware built-in clock source available in most processors. I would use the computer to generate CSPRNG and do cryptographic operations. My question is: Is ...
3
votes
0answers
29 views

Could the unused Mali GPU in the Libre Tea Computer Card be a security risk?

The Libre Tea Computer Card is a single-board computer that comes without any proprietary software (at least that’s the goal, it’s currently in crowdfunding): […] all firmware and kernel sources ...
14
votes
3answers
5k views

Surveillance: blocking laptop's microphone from spying on you?

It is a known fact that your laptop camera can be hacked to spy on you. While the most often mentioned remedy is very low tech yet effective, everyone seems to omit the fact that the microphone can be ...
0
votes
0answers
32 views

Burn new firmware on a Disk on Key for bad usb

DOK=Disk on key - sorry for that I have recently read about the bad usb exploit and I'm looking to make one of my own (for studying of course). I've been thinking of taking a DOK and burnning a new ...
2
votes
1answer
68 views

What is the difference between the different wiping methods used by DBAN?

I was wondering what is the difference between the various wiping methodologies that DBAN offers DBAN Website Once you start the program, there are a few methods available for wiping the disk. 1.- ...
4
votes
1answer
221 views

How are Intel/Amd Microcode Issues Delivered? Is it possible to block them?

After reading this article, I am really curious as to how, exactly processor microcode updates from Intel or AMD are issued. In what way is the data transmitted? Is it possibly to 'firewall' these ...
3
votes
3answers
102 views

“Mousejack” a wired (non-wireless) mouse

Is it possible a wired mouse can be a malicious device? For example, could a keylogger be installed within a wired mouse that captures keystrokes and sends these to an external server via the internet ...
34
votes
6answers
67k views

Can wiped SSD data be recovered?

I was reading another post on destroying IDE drives, and how you could remove data, wipe it, or just destroy the drive. The removed data would still be there in some state, although not easily ...
0
votes
4answers
293 views

Hardware encryption for flash drives

Could someone tell me the difference between hardware encryption and software encryption? (With regards to flash drives, if it makes any difference). From what I understand, software encryption is ...
1
vote
2answers
95 views

Bruteforcing hardware-encrypted SSD

Can you bruteforce a hardware-encrypted SSD drive? I mean recovering the password needed to unlock the drive. Is there any software could do this? Here the focus is the software that could do the job....
10
votes
5answers
385 views

Mitigating forensic memory acquisition when an attacker has physical access to a workstation

My question regards whether or not the mitigations I use are appropriate for my threat model. Please don't jump to conclusions and say "you need to use locks" or "you can't leave your computer ...
56
votes
7answers
6k views

Closed source binary blobs in chipsets - privacy threat?

I wanted to buy a Librem Purism 13 because I care about my privacy and generally wanted a laptop to test Linux on. However, I was advised against it because it uses Intel i5 processors which contain ...
0
votes
0answers
58 views

Securing data with three USB drives problem

Here is a problem. There is a single piece of sensitive data, which is subject to update and invalidate previous non-updated copies (think of password-protected Bitcoin Core wallet.dat). There are ...
1
vote
3answers
109 views

HTTPS client “pairing”

I've been redirected here from SuperUser, I hope the question is appropriate. I need to restrict usage of a certain site to a limited number of customers. More than that, actually: I would like to ...
1
vote
1answer
221 views

Why does Mark Zuckerberg cover his headphone jack with tape?

I can understand covering the camera or microphone but why the audio jack? Mark Zuckerberg have shared a photo to his Facebook account and celebrating the growing user base of Instagram which is ...
7
votes
1answer
53 views

Does the use of a smartphone's Secure Element really offer security benefits to a banking app?

My bank's Android application allows users to perform financial transactions without the use of the physical token generator (which requires an ATM card to be inserted and a valid PIN to be provided) ...
8
votes
1answer
213 views

Cases where DBAN has won

Are there any real life cases where software such as DBAN (to securely erase disks) has beaten government/law enforcement agencies? I found this online which lists each time encryption has beaten ...
1
vote
1answer
79 views

Creating a system to try new software out

I am using Windows 10 and I like it. I would like to experiment without doing harm to my main system that I work with. Experimenting means, downloading software from doubtful sources, executing ...
3
votes
1answer
76 views

Can data be restored from a hard drive after using magnets to wipe the data? [duplicate]

Can a 512GB SATA hard disk be successfully restored after using magnets to wipe off it's data? From the movie: "The Core", https://youtu.be/g3KPSyNxnL8, rat using magnets to wipe his drive and puts ...
75
votes
8answers
18k views

How is 'Removing RAM' a security risk?

Today I was watching a video on 'Ethical Hacking' where, while discussing hardware attacks, the narrator said: Removing RAM or components from a desktop or a laptop Here's a screenshot: I ...
1
vote
1answer
58 views

What is a device that scans the network it is connected to called?

Are there any devices (computer, switch, router, etc.) witch integrate licensed software like Nessus or Nexpose in a way that you can just drop them in a network and scan that network remote? If so, ...
6
votes
6answers
568 views

Crash a computer using waves or similar techniques?

I am trying to prevent a potential attack, by first learning how to perform it. Pretend there is a cheap £20 - £50 computer, which an attacker with physical access to wishes to crash. This computer ...
9
votes
4answers
1k views

How to track a laptop after theft?

Our company had a break-in this evening and a laptop was stolen. The data on the laptop was not super-sensitive (luckily); however, we would like to be able to track the laptop if at all possible. ...
20
votes
5answers
11k views

Recover the prior contents of RAM from a turned-off PC?

I've heard that if your PC is turned off, then an attacker can recover the RAM from the last session. I find this hard to believe. How could it be done?
1
vote
1answer
76 views

Is there any architecture where the data storage is completely separate?

I want the hard disk where my data is stored to be secure from foreign external access. Is there a physical possibility to protect my hard disk or any kind of data storage, like a computer ...
25
votes
5answers
39k views

How secure is WD MyPassport lock

I have a WD My Passport hard drive. There is an option that allows you to lock your hard drive with a password. How secure is this lock? They don't give details about the encryption algorith or the ...
3
votes
4answers
554 views

Can malware bridge external storage HW power-off switches?

Right now I have a backup setup which involves a 3.5" external USB-HDD with a seperate power-supply (as is usual for such drives). This HDD is internally a standard SATA HDD with USB+Power wrappers. ...
3
votes
4answers
275 views

I didn't wipe my hard drive before I sold it. How would a criminal take advantage?

I just sold a Mac Mini, and I erased/formatted the hard drive before I turned it over, but I didn't wipe it securely (not wise, I know). How would a criminal take advantage of this fact? What is the ...
2
votes
1answer
62 views

How to identify and patch a hardware vulnerability?

Software and systems vulnerabilities are often patched with updates, or by avoiding the use of some OS or softwares that have multiple flaws. Regarding hardware vulnerabilities, I do not have a lot of ...
0
votes
1answer
90 views

Samsung SSD 840/850 EVO with DiskCryptor?

Samsung's 840/850 EVO SSDs have hardware full disk encryption feature, however the stock disk management app (Magician) only mentions BitLocker's support. Encrypted Drive feature provided by ...
33
votes
7answers
5k views

Is it possible to secretly monitor/backdoor hardware?

I've recently gained an interest in anonymity and the technical aspects of it. Is it possible for hardware to be bugged and monitored? I.e, can a seller of a processor bug it in order to report what ...
1
vote
0answers
28 views

Can a JTAG device be attached to a running system?

JTAG, or Joint Test Action Group, is a standard for debugging. Many modern motherboards, both on mobile devices and on desktops and workstations have JTAG ports. They allow a CPU to be controlled like ...
1
vote
1answer
79 views

Is a reversible microphone kill switch in hardware plausible? [closed]

I'm forking this from this question, to which I gave a partial answer. These folks claim that their hardware includes a physical kill switch for the internal microphone that reversibly interrupts the ...
1
vote
3answers
110 views

Why aren't hardware R/W switches used to defend hard drives?

ISTR back in the early days of (build your own) PCs having an old 486 PC with two hard drives, and hacking the "Turbo" switch on the front panel (remember those?) to be a read-protect switch for ...
9
votes
2answers
385 views

Do I need to use the cipher command with a newer SSD to erase files?

I've used Eraser in the past, and recently became aware of the cipher command in Windows 8. Specifically, with the /w flag: /w removes data from portions of the volume it can access and have not ...
10
votes
2answers
13k views

Reversing an entry card - How to find out what type of RFID hardware I need to read the chip?

I have an acccess/entry card chip I want to copy for demonstrational purposes. However I am not sure how I can find out what type of RFID reader I need to get a hold of. Does anyone have a ...
4
votes
5answers
3k views

Is it ok to cut some digits from the front-face of a credit/debit card?

I'm a European expat living in Asia. I usually hide my credit card at my apartment. However, I'm a bit scared about losing it when I carry it (wallet robbed or lost). That's why I already scrubbed ...
8
votes
2answers
229 views

Magnet to wipe HDD [duplicate]

This question is for HDD, not SDD. Would a Neodymium magnet like this one be strong enough to wipe the contents of a hard disk drive? How long would such an act take to destroy any data so it's not ...
2
votes
1answer
37 views

What buses carrying sensitive information on a running computer are vulnerable to sniffing?

Has there been any research on what buses in a computer can be analyzed while they are live, without rebooting the system to insert a proxy device? For example, I imagine I2C would be very easy to ...
1
vote
2answers
236 views

How secure is a BIOS/UEFI hard drive password? [duplicate]

I'm buying some new machines and am concerned about security of the data should the machine be physically stolen. It's easy to take out the drive, image it, and read what you want. I could use file ...
14
votes
7answers
5k views

Strategies against jamming attacks?

We have some devices which are designed to use standard frequencies/protocols, such as GSM, CDMA, GPS, Wifi and Bluetooth, among others. While our focus is not thought to be used for high-profile ...
46
votes
7answers
9k views

How are GPUs used in brute force attacks?

I have read that GPUs can be used in brute force attacks? But how can this be done and is there a need for any other hardware devices (hard disks for instance)? Note: I'm more interested in web ...
6
votes
1answer
3k views

What is “NAND mirroring”, the alleged technique that the FBI will use to crack the San Bernardino shooter's iPhone?

According to Ars Technica, Jonathan Zdziarski, a leading independent Apple iOS security researcher and forensics expert, has a theory about the FBI's newly discovered potential route into the ...
3
votes
2answers
159 views

Does Intel or Arm support private key memory?

I know some security processors have an isolated bus where you can store a private key and use it with hardware encryption without the key ever being stored in memory. Some even have key storage ...
0
votes
1answer
48 views

Potential FileVault problems in my setup

After FBI vs. Apple, I have a few questions about the security of my data. Here's my setup: AppleID is connected to local account I don't remember exactly, but I think I have selected option "Allow ...
4
votes
2answers
17k views

Are there GPS tracker for laptops?

Are there location tracker hardware (GPS receiver) which can be fitted inside of a laptop and it sends live location data to a remote location ? If yes, how to detect such trackers ?
4
votes
1answer
69 views

Regarding malware and hardware

Bit of a weird one, hope this is the appropriate venue: I've just purchased some Ethernet-over-power adapters that were returned to and repackaged by a brick and mortar retailer. I'm trying to be ...
1
vote
1answer
37 views

GPG/Bitcoin usb gadget device

My idea is to take a raspberry pi zero (or any embedded linux board) and shove GPG inside it to encrypt/decrypt/sign data with RSA/ECC (for bitcoin) via USB. Like a USB thing that holds your (...
0
votes
0answers
16 views

How difficult would it be for FBI to extract firmware from NAND chip and AES key from CPU? [duplicate]

Following the recent Apple and FBI news I started to think of ways for the FBI to gain access to this phone without erasing the data. I'm not entirely sure if this idea is possible, hence why I ask ...
-9
votes
1answer
265 views

How to protect my laptop screen from being hacked? [closed]

My laptop screen has been hacked, and I think that it is by Van Eck phreaking method. The attackers can see my screen, they are seeing my screen right now. I never even talk to them and these ...