The physical components of an IT system.

learn more… | top users | synonyms

1
vote
0answers
15 views

How to identify and patch a hardware vulnerability?

Software and systems vulnerabilities are often patched with updates, or by avoiding the use of some OS or softwares that have multiple flaws. Regarding hardware vulnerabilities, I do not have a lot of ...
0
votes
1answer
29 views

Samsung SSD 840/850 EVO with DiskCryptor?

Samsung's 840/850 EVO SSDs have hardware full disk encryption feature, however the stock disk management app (Magician) only mentions BitLocker's support. Encrypted Drive feature provided by ...
5
votes
2answers
140 views

Mitigating forensic memory acquisition when an attacker has physical access to a workstation

My question regards whether or not the mitigations I use are appropriate for my threat model. Please don't jump to conclusions and say "you need to use locks" or "you can't leave your computer ...
33
votes
7answers
5k views

Is it possible to secretly monitor/backdoor hardware?

I've recently gained an interest in anonymity and the technical aspects of it. Is it possible for hardware to be bugged and monitored? I.e, can a seller of a processor bug it in order to report what ...
1
vote
0answers
18 views

Can a JTAG device be attached to a running system?

JTAG, or Joint Test Action Group, is a standard for debugging. Many modern motherboards, both on mobile devices and on desktops and workstations have JTAG ports. They allow a CPU to be controlled like ...
1
vote
1answer
66 views

Is a reversible microphone kill switch in hardware plausible? [closed]

I'm forking this from this question, to which I gave a partial answer. These folks claim that their hardware includes a physical kill switch for the internal microphone that reversibly interrupts the ...
1
vote
3answers
94 views

Why aren't hardware R/W switches used to defend hard drives?

ISTR back in the early days of (build your own) PCs having an old 486 PC with two hard drives, and hacking the "Turbo" switch on the front panel (remember those?) to be a read-protect switch for ...
9
votes
2answers
309 views

Do I need to use the cipher command with a newer SSD to erase files?

I've used Eraser in the past, and recently became aware of the cipher command in Windows 8. Specifically, with the /w flag: /w removes data from portions of the volume it can access and have not ...
1
vote
1answer
39 views

What is the difference between the different wiping methods used by DBAN?

I was wondering what is the difference between the various wiping methodologies that DBAN offers DBAN Website Once you start the program, there are a few methods available for wiping the disk. 1.- ...
10
votes
2answers
12k views

Reversing an entry card - How to find out what type of RFID hardware I need to read the chip?

I have an acccess/entry card chip I want to copy for demonstrational purposes. However I am not sure how I can find out what type of RFID reader I need to get a hold of. Does anyone have a ...
4
votes
5answers
3k views

Is it ok to cut some digits from the front-face of a credit/debit card?

I'm a European expat living in Asia. I usually hide my credit card at my apartment. However, I'm a bit scared about losing it when I carry it (wallet robbed or lost). That's why I already scrubbed ...
4
votes
0answers
61 views

Cases where DBAN has won

Are there any real life cases where software such as DBAN (to securely erase disks) has beaten government/law enforcement agencies? I found this online which lists each time encryption has beaten ...
8
votes
2answers
170 views

Magnet to wipe HDD [duplicate]

This question is for HDD, not SDD. Would a Neodymium magnet like this one be strong enough to wipe the contents of a hard disk drive? How long would such an act take to destroy any data so it's not ...
2
votes
1answer
33 views

What buses carrying sensitive information on a running computer are vulnerable to sniffing?

Has there been any research on what buses in a computer can be analyzed while they are live, without rebooting the system to insert a proxy device? For example, I imagine I2C would be very easy to ...
1
vote
2answers
70 views

How secure is a BIOS/UEFI hard drive password? [duplicate]

I'm buying some new machines and am concerned about security of the data should the machine be physically stolen. It's easy to take out the drive, image it, and read what you want. I could use file ...
12
votes
7answers
4k views

Strategies against jamming attacks?

We have some devices which are designed to use standard frequencies/protocols, such as GSM, CDMA, GPS, Wifi and Bluetooth, among others. While our focus is not thought to be used for high-profile ...
46
votes
7answers
9k views

How are GPUs used in brute force attacks?

I have read that GPUs can be used in brute force attacks? But how can this be done and is there a need for any other hardware devices (hard disks for instance)? Note: I'm more interested in web ...
5
votes
1answer
2k views

What is “NAND mirroring”, the alleged technique that the FBI will use to crack the San Bernardino shooter's iPhone?

According to Ars Technica, Jonathan Zdziarski, a leading independent Apple iOS security researcher and forensics expert, has a theory about the FBI's newly discovered potential route into the ...
3
votes
2answers
131 views

Does Intel or Arm support private key memory?

I know some security processors have an isolated bus where you can store a private key and use it with hardware encryption without the key ever being stored in memory. Some even have key storage ...
0
votes
1answer
36 views

Potential FileVault problems in my setup

After FBI vs. Apple, I have a few questions about the security of my data. Here's my setup: AppleID is connected to local account I don't remember exactly, but I think I have selected option "Allow ...
3
votes
2answers
14k views

Are there GPS tracker for laptops?

Are there location tracker hardware (GPS receiver) which can be fitted inside of a laptop and it sends live location data to a remote location ? If yes, how to detect such trackers ?
4
votes
1answer
62 views

Regarding malware and hardware

Bit of a weird one, hope this is the appropriate venue: I've just purchased some Ethernet-over-power adapters that were returned to and repackaged by a brick and mortar retailer. I'm trying to be ...
1
vote
1answer
36 views

GPG/Bitcoin usb gadget device

My idea is to take a raspberry pi zero (or any embedded linux board) and shove GPG inside it to encrypt/decrypt/sign data with RSA/ECC (for bitcoin) via USB. Like a USB thing that holds your ...
0
votes
0answers
16 views

How difficult would it be for FBI to extract firmware from NAND chip and AES key from CPU? [duplicate]

Following the recent Apple and FBI news I started to think of ways for the FBI to gain access to this phone without erasing the data. I'm not entirely sure if this idea is possible, hence why I ask ...
-10
votes
1answer
127 views

How to protect my laptop screen from being hacked? [closed]

My laptop screen has been hacked, and I think that it is by Van Eck phreaking method. The attackers can see my screen, they are seeing my screen right now. I never even talk to them and these ...
1
vote
1answer
96 views

What is the best way to perform penetration tests for free with and without software? [closed]

Is there any software or hardware that will perform penetration tests without a paid subscription? i.e. Free to use like Kali-linux etc. I would like to learn how to perform penetration tests. If ...
2
votes
3answers
155 views

Using more routers makes my PC safer?

I have a router and my ISP provided me a new router. Makes sense using the two as PC -> router1 -> router2(internet) or I'm just slowing (small, 1 or 2ms) my internet for nothing?
1
vote
3answers
137 views

Is it possible for Apple or any other company to create fully encrypted smartphone?

From the latest Apple vs FBI story it's known that Apple is technically capable of changing the boot-loader of the iPhone to provide interface for brute-force finding of 4-digit password. I'm ...
4
votes
3answers
282 views

What use does a BIOS/EFI password have?

I have become quite a password-obsessed individual. I password-protect my HDDs, my files, and now even the BIOS/EFI on the various systems I own. But I have discovered that if you forget your BIOS ...
2
votes
2answers
290 views

Performing an airport scan on my Mac for available WiFi networks pulls up multiple SSID with different mac address. What's going on?

I performed the following command to search for available WiFi networks in my apartment complex: /System/Library/PrivateFrameworks/Apple80211.framework/Versions/A/Resources/airport scan | grep OBC I ...
33
votes
6answers
61k views

Can wiped SSD data be recovered?

I was reading another post on destroying IDE drives, and how you could remove data, wipe it, or just destroy the drive. The removed data would still be there in some state, although not easily ...
48
votes
6answers
9k views

Can RAM retain data after removal?

Is it possible for RAM to retain any data after power is removed? I don't mean within a few minutes such as cold boot Attacks but rather 24 hours plus. Working with classified systems the policy ...
1
vote
1answer
77 views

Are there any potential complications with these secure baseband ideas?

So I have been working on some ideas for securing cell phones from baseband level exploits and I was wondering if there are any potential complications with these solutions such as practicality or ...
3
votes
0answers
36 views

Where could the iOS security key be stored on the hard drive, *if printed* when enabling 2 Factor?

Apple allows people to print out their recovery key when enabling two factor. Taking the assumption that the local spooler may not do a great job of protecting, secure erasing, and eliminating traces ...
6
votes
1answer
156 views

Freshness for SGX enclaves

Future Intel processors will support SGX (Software Guard Extensions), which allows running security-critical software on your processor in a way that is isolated from all the other code. The hardware ...
-4
votes
1answer
45 views

Using stingray against police (idea) [closed]

This is focusing on UK mainly, where police radios are similar to mobile phones. Pretend it's possible to buy Stingray, the IMSI scanner. Pretend Jimmy is a criminal, waiting for a police raid at any ...
6
votes
4answers
556 views

What do you do to protect data on a Macbook in the event of theft/loss of the device?

What setup do you recommend to protect data on a MacBook in the event of theft/loss of the device? I'm specifically interested in Macs here, rather than laptops generally, and in concrete ...
29
votes
12answers
4k views

Is there a secure way to transfer data outside the Internet?

Since, recently, it has been proven that transferring data through the usb port is fundamentally flawed, I'm wondering if there are 100% secure ways to transfer data without using the Internet. ...
22
votes
6answers
36k views

How secure is WD MyPassport lock

I have a WD My Passport hard drive. There is an option that allows you to lock your hard drive with a password. How secure is this lock? They don't give details about the encryption algorith or the ...
3
votes
2answers
380 views

Is it possible to do Public Private Key Encryption on a chip (hardware)?

Does a chip exist which will take input data and output encrypted data in a public private key scheme, where the public key is on the chip and the private key is located remotely? The ultimate goal ...
5
votes
1answer
91 views

Is malware or screen capture possible with iMac as external display?

If using a foreign iMac as an external display (through the Thunderbolt to Thunderbolt, or Mini DisplayPort to Mini DisplayPort cable, and Command+F2 on the iMac, as per iMac Target Display Mode FAQ), ...
1
vote
3answers
185 views

how to protect my data from malware/spyware that infected my BIOS?

we all know that some countries do their best to spy on their citizens and the citizen of other countries and that countries maybe have specialized spying agencies wither they are known or not, and, ...
4
votes
3answers
909 views

Samsung SSD 850 EVO. Best way to protect personal data against thiefs

I'm wondering what is the best way to protect my personal data stored on Samsung SSD 850 EVO in Linux? I did some research and found this. To set an ATA password, simply access the BIOS, navigate ...
29
votes
3answers
2k views

Can malware be transmitted via a USB charger plugged into a wall socket?

I have a smart phone that I often plug into a wall socket for charging via a small adapter that rectifies the AC to DC power and transforms the voltage from line (120V or 240V) to 5 V DC, probably ...
1
vote
3answers
87 views

HTTPS client “pairing”

I've been redirected here from SuperUser, I hope the question is appropriate. I need to restrict usage of a certain site to a limited number of customers. More than that, actually: I would like to ...
0
votes
2answers
122 views

What exactly is endpoint security?

Would someone explain what endpoint security is, exactly? What do companies like McAfee and Symantec sell with their endpoint security suites? I also would like to learn if endpoint security ...
-1
votes
1answer
109 views

Can Malware Infect Hardware/Firmware

So, my MacBook Pro packed it in over the weekend after I drunkenly vomited all over the keys. I brought it to the Apple store (without the hard drive installed) for an assessment. The results of this ...
1
vote
0answers
64 views

What can a malicious device on PCIe bus do? [closed]

What threat does a malicious device or a device with malicious firmware on a PCIe bus pose? Can such device access to RAM(only read or write)? All devices on PCIe can have that access(network card, or ...
3
votes
2answers
126 views

Why fear hardware brought to China, when most of it comes from China?

A lot of people will bring disposable hardware (laptops, phones) to business trips to China, eg. Employee laptops in China. Considering that most of that hardware was manufactured there, what is the ...
2
votes
3answers
193 views

I didn't wipe my hard drive before I sold it. How would a criminal take advantage?

I just sold a Mac Mini, and I erased/formatted the hard drive before I turned it over, but I didn't wipe it securely (not wise, I know). How would a criminal take advantage of this fact? What is the ...