The physical components of an IT system.

learn more… | top users | synonyms

4
votes
1answer
25 views

do i need to use the cipher command with a newer SSD to erase files?

I've used Eraser in the past, and recently became aware of the cipher command in Windows 8. Specifically, with the /w flag: /w removes data from portions of the volume it can access and have not ...
8
votes
1answer
96 views

How to make sure that the cryptographic hardware accelerator is being used in am335x?

I want to use the AES hardware accelerator in am335x. I was able to generate the cryptodev.ko and cryptosoft.ko drivers. From my application program I am making use of openssl apis in CBC mode, and I ...
28
votes
6answers
15k views

How reliable is a write protection switch on a USB flash drive?

I'm currently using a USB flash drive with a live distribution. At times I would plug it into terminals I cannot trust. My threat model here is solely the risk of unauthorized modifications to the ...
-1
votes
0answers
6 views

Allow email client to send and receive data through modem-router firewall [migrated]

I'm working to allow my email client (Thunderbird) to send and receive data from remote servers, but when my modem-router firewall is turned on it doesn't work. As a result, I must setup a custom ...
58
votes
5answers
31k views

How do you destroy an old hard drive?

How do you destroy an old hard drive? To be clear, unlike questions Secure hard drive disposal: How to erase confidential information and How can I reliably erase all information on a hard drive? I do ...
2
votes
1answer
88 views

Is it possible to do Public Private Key Encryption on a chip (hardware)?

Does a chip exist which will take input data and output encrypted data in a public private key scheme, where the public key is on the chip and the private key is located remotely? The ultimate goal ...
3
votes
1answer
42 views

Securing the bootloader

When using full disk encryption the bootloader is not encrypted thus allowing attacks like the Evil Maid. My question is how can I secure myself from this? Can I encrypt the drive or store it in a ...
35
votes
2answers
4k views

How can it be easy to write but “impossible” to extract the private key from a crypto token?

A number of crypto-dongles make the claim that it is impossible to extract the stored private key once written. Yubico: The YubiKey AES Key information can never be extracted from a YubiKey ...
4
votes
2answers
171 views

Disable USB keyboard pluggability on MacBook

I'm concerned about USB devices being physically attached to my MacBook laptop when I am about to unlock my computer or while my computer is unlocked. My threat model involves an attacker who is ...
10
votes
4answers
6k views

Recover the prior contents of RAM from a turned-off PC?

I've heard that if your PC is turned off, then an attacker can recover the RAM from the last session. I find this hard to believe. How could it be done?
6
votes
3answers
5k views

Tool or Process to check for AES-NI support on processor?

In another question, Thomas' answer mentioned the AES-NI instruction set, which piqued my curiosity. Is there a tool or process available out there to check whether the instruction set is available ...
2
votes
1answer
41 views

Is it possible to build completely verifiable hardware?

Reproducible builds like they are used for Bitcoin, Tor or the Debian package repository aim at making sure that the binaries you install exactly equate the source code that they are supposed to be ...
0
votes
0answers
21 views

Is the SanDisk ULLtraDIMM secure after power-down?

I found an interesting product last night called the SanDisk ULLtradDimm SSD (product page), which essentially claims drastic performance gains by plugging an SSD into a standard DDR3 memory channel. ...
2
votes
1answer
24 views

Is there an implementation of a trust on software on a host?

What I'm after is a trust that is established between the hardware and the software intended to use that hardware. This may require a certificate "burned in" to a specialized chip. The open SSL may ...
13
votes
5answers
23k views

How secure is WD MyPassport lock

I have a WD My Passport hard drive. There is an option that allows you to lock your hard drive with a password. How secure is this lock? They don't give details about the encryption algorith or the ...
1
vote
1answer
34 views

Identifying USB Device Anomalies..? [closed]

I have a laptop with 4 USB ports, and I have an external 4 port splitter that I purchased off amazon. Plugged into that is an external USB audio card. The audio card has a line-in port and an audio ...
0
votes
0answers
26 views

Can Bluetooth be man in the middle'd at the L2CAP layer?

Bluetooth HID devices can be man in the middle'd with two bluetooth dongles and this code http://ossmann.com/shmoo-2010/ Is this technique limited to just HID profile bluetooth devices or could this ...
1
vote
0answers
29 views

Potential hazards for reusing an X.509 private key for multiple services?

One thing I've been thinking about for a while is using a X.509 private key stored in a hardware security device (think YubiKey et al) on a one-per-machine basis. Theoretically, it should be possible ...
3
votes
1answer
110 views

Ring Oscillator: True Random Number Generator (TRNG) vs Physically Unclonable Function (PUF)

Ring oscillators can be used in hardware true random number generators (TRNG), and also in physically unclonable functions (PUFs). The designs seem fairly similar: TRNG based on ring oscillators: ...
3
votes
2answers
501 views

How does YubiKey protects it's secret key?

From what I understand, a YubiKey stores a secret key which can be used to generate passwords to enter a server. How does a YubiKey protect it's secret key? If it is plugged into an infected ...
0
votes
2answers
82 views

How to make data in hard disk unrecoverable on linux [duplicate]

I need to wipe completely the data on my hard disk so it's unrecoverable. I'm actually using Linux, i have seen this command on the web, but I don't know if its secure. shred -zvn 35 /dev/sdb
1
vote
0answers
39 views

Is there hardware which can prove that data was not read? [closed]

I am looking for information on hardware. Is it possible for a hardware device to prove that some data was not read? If so, how does work? I read something about a quantum machine using a polarized ...
14
votes
5answers
3k views

Are consumer-grade routers any more or less vulnerable? [closed]

I apologize if this is an obvious question, I'm not very familiar with hardware. I am planning on hosting a few personal websites from my home, but I'm concerned about my security. I'm using a fairly ...
1
vote
1answer
87 views

Is there a backdoor in the hardware of our smartphones?

I don't know for you but I always felt like Android especially is not safe. Is somebody - the government or other - able to listen to my microphone, or access my hard drive remotely ? I'm wondering ...
4
votes
1answer
62 views

Should I wipe a brand new Machine and HDD ?

So I am buying a brand new machine and a HDD separate, when I buy this new HDD should I wipe it before I install it ? What necessary steps should I take to make sure it's pretty much clean of any ...
1
vote
1answer
35 views

Can one trace downloads in storage unit? [closed]

Does My Passport WD keep a history of downloads, transfers etc? In other words can user A detect user B's activity? Or can it just see the content of the storage unit?
22
votes
2answers
931 views

Aviation security - Lessons to learn from PlaneSploit

A somewhat related question has already been asked (What would one need to do in order to hijack a satellite?), only at a more abstract level. Now we have a presentation by Hugo Teso from n.runs AG ...
3
votes
1answer
163 views

HSM maintenance

I have a HSM that is an asset within a information security management system and the help desk team tells me that the device is displaying a critical failure alert. So my questions are: Must I ...
2
votes
1answer
93 views

What comprises the AIS-31 standard for TRNGs?

I'm researching how my smart card's chipset generates random numbers. According to a source in forums the YubiKey NEO is based on the A700x chipset from NXP. The page for the chipset indicates that ...
63
votes
7answers
21k views

Is it possible the person sitting across from me at Starbucks was trying to hack my laptop?

I was using my laptop at a Starbucks on a table, and a person was using a laptop on the same table across from me, a couple seats to my side. He flicked some plastic thing across the table towards my ...
6
votes
2answers
479 views

What are the differences between TPM and HSM?

TPM (Trusted Platform Module) and HSM (Hardware Security Module) are considered as cryptoprocessor, but what are the differences exactly? Does one of them have more advantages than another?
4
votes
1answer
104 views

Is there any protection against malicious devices on a CAN bus?

CAN (controller area network) is a bus used in all modern cars. You can read a lot of the cars information over this bus and I think (but I'm not too sure about this) that some critical control ...
40
votes
11answers
7k views

Is it possible to turn a computer into a bomb?

I know this newspaper article sounds absurd. Even if a machine is compromised we (should) have hardware safe guards in all our devices to prevent the software from damaging the hardware. But is it ...
1
vote
0answers
94 views

how many sha1 hashes per time on current hardware [closed]

How many sha1 hashes per second can current hardware (say a 500$ gpu) compute, when the input is 256 byte long? (or any other length). The question behind is how long (or how costly) is it to mount a ...
7
votes
1answer
91 views

Anonymity of sneakernet: identifiable information on removable storage

Alice, an anonymous informant, would like to transmit digital documents to Bob while maintaining her anonymity. For whatever reason, she chooses to copy the documents to some kind of physical ...
2
votes
0answers
34 views

Is malware or screen capture possible with iMac as external display?

If using a foreign iMac as an external display (through the Thunderbolt to Thunderbolt, or Mini DisplayPort to Mini DisplayPort cable, and Command+F2 on the iMac, as per iMac Target Display Mode FAQ), ...
2
votes
2answers
84 views

What use does a BIOS/EFI password have?

I have become quite a password-obsessed individual. I password-protect my HDDs, my files, and now even the BIOS/EFI on the various systems I own. But I have discovered that if you forget your BIOS ...
2
votes
1answer
162 views

PGP key on smart card: why do I need a “secret key” on disk?

I have a YubiKey NEO on which I have the OpenPGP applet and I have a PGP key installed. I work on 3 different computers and I initialized the card on computer bob. I'm now at computer rob. Someone ...
4
votes
0answers
48 views

software can be audited, is there an equivalent for hardware?

In software, code auditing can be used as a means to gain trust into a software. Of course closed, proprietary software would complicate this, and require to do reverse engineering. Anyway there seems ...
2
votes
2answers
145 views

Long term HDD storage solution

I have some HDDs which are encrypted to what I think is a decent standard. I want to lock these away in a remote storage facility, but am a little worried about EMP/Magnetic stuff from wiping the ...
2
votes
0answers
58 views

How are Intel/Amd Microcode Issues Delivered? Is it possible to block them?

After reading this article, I am really curious as to how, exactly processor microcode updates from Intel or AMD are issued. In what way is the data transmitted? Is it possibly to 'firewall' these ...
0
votes
1answer
90 views

Xbox and Playstation copyright protection vs PC

AFAIK, both Xbox one and PS4 use x86 IC very similar to PC. The questions are: 1/ How can they keep those console systems protected from cracker and software privacy? What is the main method to ...
2
votes
0answers
128 views

Performing an airport scan on my Mac for available WiFi networks pulls up multiple SSID with different mac address. What's going on?

I performed the following command to search for available WiFi networks in my apartment complex: /System/Library/PrivateFrameworks/Apple80211.framework/Versions/A/Resources/airport scan | grep OBC I ...
4
votes
0answers
2k views

OPAL Hardware Encryption [closed]

I recently bought a laptop which has OPAL compliant Self encrypting hard drive. I wanted to know how I could use/check the status of the Hardware Encryption features of an OPAL drive (windows, linux ...
4
votes
1answer
104 views

Realistic: Exploiting a computer on BIOS/ hardware level in less than an hour? (Infinite preparation time)

I wonder how hard it it to infect a laptop or netbook in 60 minutes or less in a way the victim cannot easily clean their machine by wiping hard disk drives. Let's assume the following: The ...
1
vote
3answers
92 views

What can manufactures of hardware do to prevent attacks on the firmware?

Given the revelations since The Equation Group was discovered. As well as that it is possible to not guarantee removal of a rootkit even with a nuke from high orbit. What properties of a harddrive ...
2
votes
3answers
192 views

Tamper proof hardware - not resistant

Can you make a TPM (or any piece of hardware) Completely tamper-proof? The “regular” tamper resistant hardware has various physical attacks http://www.milinda-perera.com/pdf/EKKLP12a.pdf I have been ...
3
votes
1answer
407 views

Intel SGX and MSRs - what do developers need to know?

Intel SGX is an intriguing new technology that will ship as part of upcoming Intel processors. It is designed to enable running software in a secure enclave. Code running in the enclave will be ...
10
votes
3answers
494 views

Sourcing hardware that is least likely to contain backdoors

I understand that CPU silicon (for example) is scrutinized for backdoors but there are other aspects of a computer system that may "leak data" to the outside world unbeknownst to the owner regardless ...
1
vote
1answer
120 views

Spying on insulated cables (electromagnetic/induction field)

I hope this is the right forum to ask this question. If not, please tell me where to go. From my understanding most cables have an electromagnetic field around them when data passes through them and ...