The physical components of an IT system.

learn more… | top users | synonyms

3
votes
3answers
147 views

What can manufactures of hardware do to prevent attacks on the firmware?

Given the revelations since The Equation Group was discovered. As well as that it is possible to not guarantee removal of a rootkit even with a nuke from high orbit. What properties of a harddrive ...
3
votes
2answers
487 views

How do hard-wired backdoors work?

How can a vulnerability be hardwired? Just read this article, which got me thinking. Is there simply vulnerable software running on a piece of hardware that is read/write only or..?
3
votes
2answers
137 views

Does Intel or Arm support private key memory?

I know some security processors have an isolated bus where you can store a private key and use it with hardware encryption without the key ever being stored in memory. Some even have key storage ...
3
votes
2answers
133 views

Why fear hardware brought to China, when most of it comes from China?

A lot of people will bring disposable hardware (laptops, phones) to business trips to China, eg. Employee laptops in China. Considering that most of that hardware was manufactured there, what is the ...
3
votes
4answers
261 views

I didn't wipe my hard drive before I sold it. How would a criminal take advantage?

I just sold a Mac Mini, and I erased/formatted the hard drive before I turned it over, but I didn't wipe it securely (not wise, I know). How would a criminal take advantage of this fact? What is the ...
3
votes
1answer
2k views

EMV Security? How is it possible that it's secure?

I recently read some articles on EMV and the various ways in which it has been improved over the years. I then read this which shows that it has been possible for some time to exploit EMV via a man ...
3
votes
1answer
6k views

Does microwaving a hard drive erase it?

Kind of a silly question, but I'm genuinely curious: (in part because I recently saw several questions that refer to "nuking" a hard drive...) what would a microwave DO to an HDD? Would it erase data ...
3
votes
1answer
284 views

Is this a security risk for us to lost TPM or others to access to reset BIOS ?

In the previous post Physically secure the system case it is recommended to physically protect the system. But in case stolen laptops where intruder have physical access to TPMs. What are the security ...
3
votes
1answer
2k views

Is hardware based disk encryption more secure that software based?

As a spin-off of my question on "Advice on buying an encrypted disk" -- and in an effort to address the question "how is hardware based disk encryption better?" -- I've started a new question. My ...
3
votes
1answer
220 views

HSM maintenance

I have a HSM that is an asset within a information security management system and the help desk team tells me that the device is displaying a critical failure alert. So my questions are: Must I ...
3
votes
3answers
482 views

Tamper proof hardware - not resistant

Can you make a TPM (or any piece of hardware) Completely tamper-proof? The “regular” tamper resistant hardware has various physical attacks http://www.milinda-perera.com/pdf/EKKLP12a.pdf I have been ...
3
votes
3answers
144 views

Hardware trojan besides network card?

We all can read news about "Hardware trojans" (it has grown in the recent few years..). But my question is: Besides the network card, could there be any HW trojan that can cause any real damage? ...
3
votes
2answers
1k views

Does a flatbed scanner remember any of its previous scans?

I'm about to get rid of an older scanner and I want to make sure that no one is able to acquire any sensitive information that was scanned previously with the machine. I assume it does have some kind ...
3
votes
1answer
277 views

Equipment required for sniffing data / address buses via EM emission

What kind of equipment would be required to sniff data from the electromagnetic emissions of data / address buses on an average motherboard? I'd imagine a sensitive hall probe, a faraday cage and ...
3
votes
3answers
331 views

Are there implementations of password hashing algorithms for major frameworks that utilizes specialized hardware like GPUs/FPGAs?

It is common knowledge that password cracking attempts can greatly benefit from specialized hardware such as large clusters of GPUs or FPGAs. Are there any implementations of the commonly recommended ...
3
votes
1answer
231 views

Smartphone motherboard - Does it hold any data?

I recently went for a smartphone repair and got its motherboard replaced. However, it didn't occur to me to ask for the damaged motherboard back. I had confidential credentials and data stored. No ...
3
votes
1answer
76 views

What can virtualisation infrastructure operators do about ring 0 SMM exploits?

Just saw this new privilege escalation from Ring 0 to SMM. Say I am operating a small VM/cloud infrastructure for internal people to run whatever they like, is there any way to prevent this ...
3
votes
2answers
394 views

Is it possible to do Public Private Key Encryption on a chip (hardware)?

Does a chip exist which will take input data and output encrypted data in a public private key scheme, where the public key is on the chip and the private key is located remotely? The ultimate goal ...
3
votes
1answer
330 views

Ring Oscillator: True Random Number Generator (TRNG) vs Physically Unclonable Function (PUF)

Ring oscillators can be used in hardware true random number generators (TRNG), and also in physically unclonable functions (PUFs). The designs seem fairly similar: TRNG based on ring oscillators: ...
3
votes
2answers
15k views

Are there GPS tracker for laptops?

Are there location tracker hardware (GPS receiver) which can be fitted inside of a laptop and it sends live location data to a remote location ? If yes, how to detect such trackers ?
3
votes
1answer
353 views

Trial version security

I am developing stand-alone software in BDS 2006. I want to provide a trial version for 6 months -- the user can use it for just 6 months, but no more on a particular system. I have handled most ...
3
votes
1answer
2k views

good product to physical lock down a mac mini server?

Since the recent theft of a mac mini and macbook pro Im looking into products to lock down the mac mini server 2011 model. There are many cable solutions out there like kensington but the mac mini has ...
3
votes
1answer
51 views

Can data be restored from a hard drive after using magnets to wipe the data?

Can a 512GB SATA hard disk be successfully restored after using magnets to wipe off it's data? From the movie: "The Core", https://youtu.be/g3KPSyNxnL8, rat using magnets to wipe his drive and puts ...
3
votes
1answer
69 views

Securing the bootloader

When using full disk encryption the bootloader is not encrypted thus allowing attacks like the Evil Maid. My question is how can I secure myself from this? Can I encrypt the drive or store it in a ...
3
votes
0answers
36 views

Where could the iOS security key be stored on the hard drive, *if printed* when enabling 2 Factor?

Apple allows people to print out their recovery key when enabling two factor. Taking the assumption that the local spooler may not do a great job of protecting, secure erasing, and eliminating traces ...
3
votes
0answers
116 views

How far should I go in protecting a user's SMBIOS UUID?

My server will be receiving data from several hundreds of computers. As part of keeping track of which computer sent what, I will be fingerprinting the hardware and keeping the results in my database. ...
3
votes
0answers
77 views

I want to lock my Macbook lid shut. Where to buy? Alternatives? [closed]

I'm attempting to lock down a computer from unauthorized access. I own a macbook pro late 2011. Backstory I've gone through the basics with file vault and firmware password etc. I'm also getting a ...
2
votes
3answers
184 views

Are scanners secure?

I have a dead tree document. In order to reduce the risk of being compromised, I would like to digitize and encrypt the document, and then destroy the physical copy. Let's assume my computer itself ...
2
votes
1answer
147 views

Are auto-mounting hard drives a security issue?

Why are hard drives mounted by default in Windows OS, while they aren't in Linux OS? Is that a security issue? If your computer was hacked, can unmounted drives be considered clean?
2
votes
1answer
554 views

How do I properly bury a hard disk drive to keep it healthy?

As a way of backing up big amounts of data (about 1-2 TB) I thought it's good idea to bury a hard disk drive (in a damage-preventing shell) to be able to dig it later and read all the data from it if ...
2
votes
2answers
183 views

Long term HDD storage solution

I have some HDDs which are encrypted to what I think is a decent standard. I want to lock these away in a remote storage facility, but am a little worried about EMP/Magnetic stuff from wiping the ...
2
votes
2answers
163 views

Is any company or group working on secure hardware architectures? [closed]

My impression is that mature Unix-like operating systems are less vulnerable to trojans that might be present, mainly because of well-debugged kernel code, including correct use of hardware memory ...
2
votes
2answers
210 views

Secure one way radio communication

I was thinking about the feasibility of one way remote control using radio signals. The sending hardware would be bound to a computer and therefore have enough computing power, while the reciever ...
2
votes
1answer
67 views

How do chips with write only functionality that store keys work?

I know there are HSMs that let you enter keys but you cannot read them out. Also the secure element in Android lets you do that too. You can enter keys in them and you can perform operations using ...
2
votes
1answer
1k views

Buffer Overflow on Raspberry PI

Is the ARM processor used on the Raspberry Pi vulnerable to standard buffer overflows? That is, if a program that has a BO vulnerability is run on a Pi, will it be vulnerable to exploit? How does ...
2
votes
2answers
162 views

Is bugged CPU mean “gameover” for whole Computer? [closed]

I'm looking for answer on such question. Imagine that CPU bugged on the factory simply like Blue Pill, but for the network's interconnections. How exactly firewall of OS could protect station ...
2
votes
1answer
810 views

What kind of hashing is generally used in log-in modules?

Do operating systems hash the log-in password? What hash function is used in Windows XP, 7, 8,Linux Ubuntu, Debian, MAC Lion OS X ,...? Where should I look to know these security considerations of an ...
2
votes
2answers
619 views

Sun ILOM / Out of band management security concerns

I would like to get some outside opinion on this if possible, although I do not know what to ask. Sun ILOM is an Out-of-band management system. I understand it is a separate OS on the box that is ...
2
votes
1answer
51 views

How to identify and patch a hardware vulnerability?

Software and systems vulnerabilities are often patched with updates, or by avoiding the use of some OS or softwares that have multiple flaws. Regarding hardware vulnerabilities, I do not have a lot of ...
2
votes
3answers
160 views

Using more routers makes my PC safer?

I have a router and my ISP provided me a new router. Makes sense using the two as PC -> router1 -> router2(internet) or I'm just slowing (small, 1 or 2ms) my internet for nothing?
2
votes
2answers
694 views

Are Yubi Keys secure “out of the box” when purchased for use with Yubi Cloud?

The YubiKey personalization tool allows someone to configure a YubiKey for HOTP, challenge response, and a variety of other authentication formats. YubiKey offers a number of personalization tools ...
2
votes
1answer
672 views

Keyboards with built in SmartCard reader. PIN/Password to unlock not via Computer

I am looking for keyboards with a built in SmartCard reader, where the Smartcard can be unlocked directly without going via the computer. The keyboards I found so far connect the SmartCard reader via ...
2
votes
2answers
405 views

Checklist for securing MacOSX

Is there a checklist for securing MacOSX machines?
2
votes
1answer
5k views

What method of secure erase is sufficient for MacBook Pro SSD Drives? [duplicate]

I would like to securely erase the hard drive of a SSD in a MacBook Pro. The Disk Utility does not give me the option to wipe this drive even when I boot into the System Partition. (it is greyed ...
2
votes
1answer
195 views

What devices/types of devices typically have unique associated ID numbers?

Background (not necessary to read; just what makes me ask): Say someone's computer has either been hacked, or is running software run by $LARGE_EVIL_CORPORATION, and the hacker/$L wants to collect as ...
2
votes
1answer
37 views

What buses carrying sensitive information on a running computer are vulnerable to sniffing?

Has there been any research on what buses in a computer can be analyzed while they are live, without rebooting the system to insert a proxy device? For example, I imagine I2C would be very easy to ...
2
votes
1answer
68 views

Is it possible to build completely verifiable hardware?

Reproducible builds like they are used for Bitcoin, Tor or the Debian package repository aim at making sure that the binaries you install exactly equate the source code that they are supposed to be ...
2
votes
1answer
293 views

Autopsy/SleuthKit in the courthouse? [closed]

I am studying digital forensics and have been working with both AccessData's FTK and Autopsy to analyze disks for different assignments. I keep hearing that Autopsy findings should not be admitted in ...
2
votes
1answer
80 views

Are servers that do not implement time services vulnerable to clock skew attacks?

An article describes clock skew attack possibilities §§: These can be attacked by repeatedly connecting to the hidden service, causing its CPU load, hence temperature, to increase and so ...
2
votes
3answers
489 views

Are there commercially available hardware encryption devices over USB? [closed]

I'm designing a system where some combination of hardware and software (lets call it an appliance...) sends asynchronous secure archival to the cloud. By secure, I mean, AES-256 encrypted, with AES ...