The physical components of an IT system.

learn more… | top users | synonyms

1
vote
1answer
630 views

Is Intel AESNI supported by Xen in VPS/Cloud hosting environments? [closed]

I'm having trouble determining whether when using a hosting company that uses Xen virtualization and Intel processors with AESNI embedded encryption, I would have access to AESNI (i.e., is it an ...
1
vote
2answers
513 views

Sun ILOM / Out of band management security concerns

I would like to get some outside opinion on this if possible, although I do not know what to ask. Sun ILOM is an Out-of-band management system. I understand it is a separate OS on the box that is ...
1
vote
1answer
151 views

What does hardware full disk encryption imply?

I read the wikipedia article and few others, however I still don't have some things clear. The main question would be what does hardware full disk encryption imply for the user, however I have more ...
1
vote
1answer
52 views

PCI approved device, does it matter if my POS is PCI compliant if it just passes info to the gateway and does not store the encrypted card data?

If my Hardware device is on the PCI list from here https://www.pcisecuritystandards.org/approved_companies_providers/approved_pin_transaction_security.php Does my POS need to be PCI compliant since ...
1
vote
2answers
119 views

Renting a remote server with IPMI: is one vulnerable?

It has been reported in the media and some security conscious mailing lists that some IPMI-enabled servers, implementations and brands suffer serious security issues. When you go to a dedicated ...
1
vote
1answer
614 views

Disabling built-in Wi-Fi adapter and protecting Wi-Fi's MAC address on a laptop

I have an XP laptop with Wi-Fi issues - it connects / disconnects intermittently. Anyway, I bought a USB Wi-Fi that works well. My security question are: Is there a way to completely disable the ...
1
vote
0answers
24 views

Are servers that do not implement time services vulnerable to clock skew attacks?

An article describes clock skew attack possibilities §§: These can be attacked by repeatedly connecting to the hidden service, causing its CPU load, hence temperature, to increase and so ...
1
vote
1answer
48 views

Are there vulnerabilities in display connections? [duplicate]

I have been in the market for a DisplayPort KVM. Most of these products come from small companies I have never heard of and possibly do not trust. I understand the risk of plugging in USB to any ...
1
vote
0answers
130 views

Disable HNAP on D-Link router

I'm concerned that Home Network Administration Protocol (HNAP) is a serious vulnerability that exposes consumer network routers to remote management by malicious entities such as government ...
0
votes
2answers
381 views

Transmitting malicious code over audio speakers

In a post that reads like science-fiction, a security researcher claims that malicious code was being passed between computers. A few quotes: ... "badBIOS," as Ruiu dubbed the malware, has the ...
0
votes
1answer
493 views

Buffer Overflow on Raspberry PI

Is the ARM processor used on the Raspberry Pi vulnerable to standard buffer overflows? That is, if a program that has a BO vulnerability is run on a Pi, will it be vulnerable to exploit? How does ...
0
votes
2answers
450 views

Bypassing Trusted Computing

I have not been able to find any information about trusted computing on the Internet. I am reasonably sure that its software manifestation can be bypassed by a Linux live disk, but what about hardware ...
0
votes
1answer
107 views

How to ensure a second hand computer is safe to use [duplicate]

I'm planning to buy a second hand computer (2012 Mac mini, which is no longer available in stores). Because I'm not sure if there is any malware in the computer so I will perform hard format several ...
0
votes
2answers
65 views

Is there a way to prevent software from accessing hardware IDs?

I think this is related to this question, but I would like to know if there's also a way to prevent "third party" applications from seeing hardware IDs (motherboard, hard disks, and others), or giving ...
0
votes
2answers
73 views

Disk Wiping - How can I be sure [duplicate]

I am selling some hard drives but my question is. How can I be sure that the information is gone? Is there a good way to wipe the drives? What are ways I use to attempt to recover the data to ensure ...
0
votes
1answer
126 views

Are there any Layer 2 Wifi RFC proposals that isolate each connection from each other? (like a switch)

It's my understanding that everyone on the same Wifi protocol has full access to each other host that it is connected to. Is there any Wifi technology that allows for partitioning and isolation of ...
0
votes
2answers
1k views

Encrypted flash drives

I have searched the web for information on secure encrypted USB flash drives. I have found that the most secure encryption is hardware-based like Kingstom DT4000 for example. Why is a simple USB ...
0
votes
3answers
108 views

Hardware encryption for Flash Drives

Could someone tell me the difference between Hardware encryption and Software encryption? (With regards to flash drives, if it makes any difference). From what I understand, software encryption is ...
0
votes
1answer
72 views

Are there approaches/mechanism to detect hardware backdoors?

Background: A nice Chinese based manufacturer (AllWinner Technology Co.Ltd) produces very useful SoC used boards that often claim to be open source hardware. Question: If need be is there by way of ...
0
votes
3answers
1k views

Can Malware Physically Damage A Hard Drive?

I recently responded to an incident of supposed malware infection. The symptoms where simply "my computer is freezes at random times". The response ended with replacement of the physical hard drive ...
0
votes
1answer
107 views

What are the strengths and weaknesses of using a single 'burner' computer vs. many public access computers over a sustained period? [closed]

Assuming that the user is accessing/publishing related sensitive information over this period, and also assuming that they would take additional precautions in both scenarios, such as a Tails live ...
0
votes
0answers
40 views

Xbox and Playstation copyright protection vs PC

AFAIK, both Xbox one and PS4 use x86 IC very similar to PC. The questions are: 1/ How can they keep those console systems protected from cracker and software privacy? What is the main method to ...
0
votes
0answers
11 views

How many kbdclasses are normal?

I use a laptop and never had used any external keyboards. Is there a keylogger hiding? What to do?
0
votes
0answers
25 views

Secure delete with urandom? [duplicate]

What recovery techniques (if any) exist that can recover data from a mechanical HDD if the user has filled the disk with a single run of dd if=/dev/urandom of=/dev/[disk]? Or in other words: is this ...
0
votes
1answer
163 views

How far beyond using Shred should I go when deleting files? [duplicate]

Possible Duplicate: How can I reliably erase all information on a hard drive? I'm looking to securely erase my files. Is shred the best option besides ditching the hardware? To what lengths ...
-1
votes
1answer
29 views

Recommendations for installing OSSIM

I'm an apprentice in web security and I was assigned with the task of researching about OSSIM. Bear with my infinite ignorance as I take my questions to the stack exchange gurus. What I know so far: ...
-1
votes
1answer
69 views

Completely disabling microphone [duplicate]

Maybe not 100% on topic for this site but it seemed like a good place to ask. All laptops are now sold with webcams and microphones and I have use for neither. Taking care of the webcam is easy; ...
-1
votes
1answer
26 views

TPMs available on mobile with application access [closed]

I am looking for a mobile device, preferably a smartphone or a tablet, that contains a TPM (v1.2 or 2.0) and provides application access to it through an API. Does anyone know if any such devices ...