The physical components of an IT system.

learn more… | top users | synonyms

3
votes
1answer
198 views

Equipment required for sniffing data / address buses via EM emission

What kind of equipment would be required to sniff data from the electromagnetic emissions of data / address buses on an average motherboard? I'd imagine a sensitive hall probe, a faraday cage and ...
3
votes
3answers
176 views

Are there implementations of password hashing algorithms for major frameworks that utilizes specialized hardware like GPUs/FPGAs?

It is common knowledge that password cracking attempts can greatly benefit from specialized hardware such as large clusters of GPUs or FPGAs. Are there any implementations of the commonly recommended ...
3
votes
2answers
487 views

Electromagnetic induction attacks - reverse TEMPEST?

I know that electromagnetic emissions from a device can be used to extract information from a system, e.g. TEMPEST or Van Eck phreaking. I also know it's possible to induce a signal into a ...
3
votes
2answers
222 views

What are the pros and cons of using yubikey with ssd hardware encryption?

I'm considering trying out yubikey and I've recently discovered that the (crucial m500) SSD I recently bought supports hardware encryption. I think it should be possible to use a yubikey to provide ...
3
votes
1answer
325 views

Trial version security

I am developing stand-alone software in BDS 2006. I want to provide a trial version for 6 months -- the user can use it for just 6 months, but no more on a particular system. I have handled most ...
2
votes
2answers
297 views

Literature about IT security from a hardware standpoint

Can you point me to any book, blog, paper, anything about IT security on the lowest possible level (hardware)? I'm primary interested in the motherboard, CPU & GPU, however, if you know any good ...
2
votes
1answer
129 views

Are auto-mounting hard drives a security issue?

Why are hard drives mounted by default in Windows OS, while they aren't in Linux OS? Is that a security issue? If your computer was hacked, can unmounted drives be considered clean?
2
votes
2answers
326 views

Seeking advice on how to build a box to brute force hashes? [closed]

I work in a startup security firm, and I need to build a GPU-based to brute force password/hashes, which can be used to validate password strength and test hashing algorithms. I expect some high ...
2
votes
2answers
116 views

Is any company or group working on secure hardware architectures? [closed]

My impression is that mature Unix-like operating systems are less vulnerable to trojans that might be present, mainly because of well-debugged kernel code, including correct use of hardware memory ...
2
votes
2answers
332 views

How do hard-wired backdoors work?

How can a vulnerability be hardwired? Just read this article, which got me thinking. Is there simply vulnerable software running on a piece of hardware that is read/write only or..?
2
votes
2answers
138 views

Is bugged CPU mean “gameover” for whole Computer? [closed]

I'm looking for answer on such question. Imagine that CPU bugged on the factory simply like Blue Pill, but for the network's interconnections. How exactly firewall of OS could protect station ...
2
votes
1answer
797 views

EMV Security? How is it possible that it's secure?

I recently read some articles on EMV and the various ways in which it has been improved over the years. I then read this which shows that it has been possible for some time to exploit EMV via a man ...
2
votes
2answers
73 views

Secure one way radio communication

I was thinking about the feasibility of one way remote control using radio signals. The sending hardware would be bound to a computer and therefore have enough computing power, while the reciever ...
2
votes
2answers
286 views

Are Yubi Keys secure “out of the box” when purchased for use with Yubi Cloud?

The YubiKey personalization tool allows someone to configure a YubiKey for HOTP, challenge response, and a variety of other authentication formats. YubiKey offers a number of personalization tools ...
2
votes
2answers
248 views

Checklist for securing MacOSX

Is there a checklist for securing MacOSX machines?
2
votes
1answer
816 views

Is hardware based disk encryption more secure that software based?

As a spin-off of my question on "Advice on buying an encrypted disk" -- and in an effort to address the question "how is hardware based disk encryption better?" -- I've started a new question. My ...
2
votes
1answer
416 views

Are there GPS tracker for laptops?

Are there location tracker hardware (GPS receiver) which can be fitted inside of a laptop and it sends live location data to a remote location ? If yes, how to detect such trackers ?
2
votes
1answer
125 views

What devices/types of devices typically have unique associated ID numbers?

Background (not necessary to read; just what makes me ask): Say someone's computer has either been hacked, or is running software run by $LARGE_EVIL_CORPORATION, and the hacker/$L wants to collect as ...
2
votes
1answer
2k views

good product to physical lock down a mac mini server?

Since recent theft of a mac mini and macbook pro Im looking into products to lock down the mac mini server 2011 model. There are many cable solutions out there like kensington but the mac mini has no ...
2
votes
1answer
87 views

Old hardware for encryption and backdoor free

I've read and seen articles on backdoors in the processors or at least the idea of that would render software based encryption worthless. I do know that routers and lots of the newer devices all have ...
2
votes
1answer
209 views

How does YubiKey protects it's secret key?

From what I understand, a YubiKey stores a secret key which can be used to generate passwords to enter a server. How does a YubiKey protect it's secret key? If it is plugged into an infected ...
2
votes
1answer
339 views

TrueCrypt External Multimedia Hard Drive

I have an external multimedia hard drive (1.36TB). I made 4 partitions of 350GB each. Then I shredded the free disc space of all the partitions. Now I want to put Truecrypt on the disk. I can't ...
2
votes
0answers
381 views

OPAL Hardware Encryption on Linux [closed]

I recently bought a laptop with an SSD which complies with the Self encrypting Drive OPAL specification. I was offerd to setup encryption while installing Linux, but my guess was that this was going ...
2
votes
1answer
190 views

Can linux (be made to) detect foreign connections to the ram bus?

I've been made aware on many answers and some comments that an attacker can read memory while a system is still running by attaching some sort of connection directly to the ram bus. Can linux ...
1
vote
3answers
623 views

How can this web page access the USB? [closed]

A friend bought a "smart" headset (working with voice commands). I had to install a software on Windows to be able to configure this headset. After downloading the software from the page, this page ...
1
vote
2answers
381 views

Are there sensors/devices to be used for reading magnetic bits of hard disk

I would like to ask about the availability of any sensor or device that can be used to read magnetic bits inside hard disks? I tried to google that but I did not see any useful thing till now. I think ...
1
vote
1answer
199 views

How do I properly bury a hard disk drive to keep it healthy?

As a way of backing up big amounts of data (about 1-2 TB) I thought it's good idea to bury a hard disk drive (in a damage-preventing shell) to be able to dig it later and read all the data from it if ...
1
vote
3answers
379 views

How is it on some removable media, when enabling/disabling password protection the changes happen immediately?

For example I have a WD Passport external hard drive. After installing WD security I can enable and disable password protection, however the settings basically get applied instantaneously. Does this ...
1
vote
1answer
354 views

Buffer Overflow on Raspberry PI

Is the ARM processor used on the Raspberry Pi vulnerable to standard buffer overflows? That is, if a program that has a BO vulnerability is run on a Pi, will it be vulnerable to exploit? How does ...
1
vote
3answers
969 views

Best practices for firewall hardware

I'm planning to implement a linux based firewall/router with at least 6 x 1Gb NIC's (network with ~300 computers/server with >=8 VLANs) Can anybody recommend hardware best practices (reference to ...
1
vote
3answers
62 views

Hardware trojan besides network card?

We all can read news about "Hardware trojans" (it has grown in the recent few years..). But my question is: Besides the network card, could there be any HW trojan that can cause any real damage? ...
1
vote
1answer
112 views

Wireless Security Pen testing Setup

I had a Asus N82J laptop with a dual boot setup. I boot into Kali and Windows 7. Long story short because of my dual boot with Grub I corrupted my HDD the operating system kept moving blocks of ...
1
vote
1answer
319 views

Keyboards with built in SmartCard reader. PIN/Password to unlock not via Computer

I am looking for keyboards with a built in SmartCard reader, where the Smartcard can be unlocked directly without going via the computer. The keyboards I found so far connect the SmartCard reader via ...
1
vote
1answer
530 views

File system history on USB drives

I want to find out who deleted a specific file from a USB disk. The disk is formatted as NTFS. The file was deleted while the disk was plugged into a Windows 7 system. However, while I do have ...
1
vote
1answer
569 views

What kind of hashing is generally used in log-in modules?

Do operating systems hash the log-in password? What hash function is used in Windows XP, 7, 8,Linux Ubuntu, Debian, MAC Lion OS X ,...? Where should I look to know these security considerations of an ...
1
vote
1answer
23 views

Importance of password strength with secure element?

Greetings SE security community. Background: I have a number of items like certificates, databases, and encrypted file systems that require private keys. In order to avoid having duplicates of these ...
1
vote
1answer
3k views

What method of secure erase is sufficient for MacBook Pro SSD Drives? [duplicate]

I would like to securely erase the hard drive of a SSD in a MacBook Pro. The Disk Utility does not give me the option to wipe this drive even when I boot into the System Partition. (it is greyed ...
1
vote
1answer
567 views

Is Intel AESNI supported by Xen in VPS/Cloud hosting environments? [closed]

I'm having trouble determining whether when using a hosting company that uses Xen virtualization and Intel processors with AESNI embedded encryption, I would have access to AESNI (i.e., is it an ...
1
vote
2answers
478 views

Sun ILOM / Out of band management security concerns

I would like to get some outside opinion on this if possible, although I do not know what to ask. Sun ILOM is an Out-of-band management system. I understand it is a separate OS on the box that is ...
1
vote
1answer
115 views

What does hardware full disk encryption imply?

I read the wikipedia article and few others, however I still don't have some things clear. The main question would be what does hardware full disk encryption imply for the user, however I have more ...
1
vote
1answer
36 views

PCI approved device, does it matter if my POS is PCI compliant if it just passes info to the gateway and does not store the encrypted card data?

If my Hardware device is on the PCI list from here https://www.pcisecuritystandards.org/approved_companies_providers/approved_pin_transaction_security.php Does my POS need to be PCI compliant since ...
1
vote
2answers
106 views

Renting a remote server with IPMI: is one vulnerable?

It has been reported in the media and some security conscious mailing lists that some IPMI-enabled servers, implementations and brands suffer serious security issues. When you go to a dedicated ...
1
vote
1answer
513 views

Disabling built-in Wi-Fi adapter and protecting Wi-Fi's MAC address on a laptop

I have an XP laptop with Wi-Fi issues - it connects / disconnects intermittently. Anyway, I bought a USB Wi-Fi that works well. My security question are: Is there a way to completely disable the ...
1
vote
1answer
39 views

Long term HDD storage solution

I have some HDDs which are encrypted to what I think is a decent standard. I want to lock these away in a remote storage facility, but am a little worried about EMP/Magnetic stuff from wiping the ...
1
vote
3answers
109 views

Are there commercially available hardware encryption devices over USB? [closed]

I'm designing a system where some combination of hardware and software (lets call it an appliance...) sends asynchronous secure archival to the cloud. By secure, I mean, AES-256 encrypted, with AES ...
1
vote
1answer
32 views

Are there vulnerabilities in display connections? [duplicate]

I have been in the market for a DisplayPort KVM. Most of these products come from small companies I have never heard of and possibly do not trust. I understand the risk of plugging in USB to any ...
1
vote
0answers
90 views

Disable HNAP on D-Link router

I'm concerned that Home Network Administration Protocol (HNAP) is a serious vulnerability that exposes consumer network routers to remote management by malicious entities such as government ...
1
vote
0answers
246 views

What hardware tools are useful to detect cyber crimes? [closed]

As the title says, I would ask about some tools or sensors that are available to be used to detect cyber crimes, specially I am looking for sensors that can be used to read and recover data from ...
0
votes
2answers
342 views

Transmitting malicious code over audio speakers

In a post that reads like science-fiction, a security researcher claims that malicious code was being passed between computers. A few quotes: ... "badBIOS," as Ruiu dubbed the malware, has the ...
0
votes
2answers
350 views

Bypassing Trusted Computing

I have not been able to find any information about trusted computing on the Internet. I am reasonably sure that its software manifestation can be bypassed by a Linux live disk, but what about hardware ...