The physical components of an IT system.

learn more… | top users | synonyms

1
vote
1answer
92 views

How to prepare a used computer to handle sensitive information

After buying a used computer from a stranger, what steps should be taken to ensure it is safe to use for connecting to a network that handles sensitive information? (I am defining "sensitive" broadly: ...
1
vote
1answer
58 views

Importance of password strength with secure element?

Greetings SE security community. Background: I have a number of items like certificates, databases, and encrypted file systems that require private keys. In order to avoid having duplicates of these ...
1
vote
1answer
4k views

What method of secure erase is sufficient for MacBook Pro SSD Drives? [duplicate]

I would like to securely erase the hard drive of a SSD in a MacBook Pro. The Disk Utility does not give me the option to wipe this drive even when I boot into the System Partition. (it is greyed ...
1
vote
1answer
666 views

Is Intel AESNI supported by Xen in VPS/Cloud hosting environments? [closed]

I'm having trouble determining whether when using a hosting company that uses Xen virtualization and Intel processors with AESNI embedded encryption, I would have access to AESNI (i.e., is it an ...
1
vote
2answers
530 views

Sun ILOM / Out of band management security concerns

I would like to get some outside opinion on this if possible, although I do not know what to ask. Sun ILOM is an Out-of-band management system. I understand it is a separate OS on the box that is ...
1
vote
1answer
59 views

How to minimize the risk posed by Intel AMT/ME's “ring -3 exploits”?

This question is about how to minimize the risk posed by Intel AMT/ME's ring -3 exploits? I'm looking for advice on common strategies and practices. Here is my current situation. I am parking my ...
1
vote
1answer
39 views

Are servers that do not implement time services vulnerable to clock skew attacks?

An article describes clock skew attack possibilities §§: These can be attacked by repeatedly connecting to the hidden service, causing its CPU load, hence temperature, to increase and so ...
1
vote
1answer
167 views

What does hardware full disk encryption imply?

I read the wikipedia article and few others, however I still don't have some things clear. The main question would be what does hardware full disk encryption imply for the user, however I have more ...
1
vote
1answer
70 views

PCI approved device, does it matter if my POS is PCI compliant if it just passes info to the gateway and does not store the encrypted card data?

If my Hardware device is on the PCI list from here https://www.pcisecuritystandards.org/approved_companies_providers/approved_pin_transaction_security.php Does my POS need to be PCI compliant since ...
1
vote
2answers
120 views

Renting a remote server with IPMI: is one vulnerable?

It has been reported in the media and some security conscious mailing lists that some IPMI-enabled servers, implementations and brands suffer serious security issues. When you go to a dedicated ...
1
vote
1answer
643 views

Disabling built-in Wi-Fi adapter and protecting Wi-Fi's MAC address on a laptop

I have an XP laptop with Wi-Fi issues - it connects / disconnects intermittently. Anyway, I bought a USB Wi-Fi that works well. My security question are: Is there a way to completely disable the ...
1
vote
0answers
25 views

Ring Oscillator: TRNG vs PUF

Ring oscillators can be used in hardware true random number generators (TRNG), and also in physically unclonable functions (PUFs). The designs seem fairly similar: TRNG based on ring oscillators: ...
1
vote
1answer
64 views

Are there vulnerabilities in display connections? [duplicate]

I have been in the market for a DisplayPort KVM. Most of these products come from small companies I have never heard of and possibly do not trust. I understand the risk of plugging in USB to any ...
1
vote
0answers
154 views

Disable HNAP on D-Link router

I'm concerned that Home Network Administration Protocol (HNAP) is a serious vulnerability that exposes consumer network routers to remote management by malicious entities such as government ...
0
votes
2answers
404 views

Transmitting malicious code over audio speakers

In a post that reads like science-fiction, a security researcher claims that malicious code was being passed between computers. A few quotes: ... "badBIOS," as Ruiu dubbed the malware, has the ...
0
votes
1answer
586 views

Buffer Overflow on Raspberry PI

Is the ARM processor used on the Raspberry Pi vulnerable to standard buffer overflows? That is, if a program that has a BO vulnerability is run on a Pi, will it be vulnerable to exploit? How does ...
0
votes
2answers
481 views

Bypassing Trusted Computing

I have not been able to find any information about trusted computing on the Internet. I am reasonably sure that its software manifestation can be bypassed by a Linux live disk, but what about hardware ...
0
votes
1answer
43 views

What's the best, most unique (and uneditable) hardware id or key for each computer? [closed]

I'm a C# programmer and I'm looking for the best way to "know" what hardware is running my software. What is the best uneditable and unique "hardware id" in each computer?
0
votes
1answer
127 views

How to ensure a second hand computer is safe to use [duplicate]

I'm planning to buy a second hand computer (2012 Mac mini, which is no longer available in stores). Because I'm not sure if there is any malware in the computer so I will perform hard format several ...
0
votes
2answers
67 views

Is there a way to prevent software from accessing hardware IDs?

I think this is related to this question, but I would like to know if there's also a way to prevent "third party" applications from seeing hardware IDs (motherboard, hard disks, and others), or giving ...
0
votes
2answers
74 views

Disk Wiping - How can I be sure [duplicate]

I am selling some hard drives but my question is. How can I be sure that the information is gone? Is there a good way to wipe the drives? What are ways I use to attempt to recover the data to ensure ...
0
votes
1answer
138 views

Are there any Layer 2 Wifi RFC proposals that isolate each connection from each other? (like a switch)

It's my understanding that everyone on the same Wifi protocol has full access to each other host that it is connected to. Is there any Wifi technology that allows for partitioning and isolation of ...
0
votes
2answers
1k views

Encrypted flash drives

I have searched the web for information on secure encrypted USB flash drives. I have found that the most secure encryption is hardware-based like Kingstom DT4000 for example. Why is a simple USB ...
0
votes
3answers
137 views

Hardware encryption for Flash Drives

Could someone tell me the difference between Hardware encryption and Software encryption? (With regards to flash drives, if it makes any difference). From what I understand, software encryption is ...
0
votes
1answer
99 views

Are there approaches/mechanism to detect hardware backdoors?

Background: A nice Chinese based manufacturer (AllWinner Technology Co.Ltd) produces very useful SoC used boards that often claim to be open source hardware. Question: If need be is there by way of ...
0
votes
1answer
128 views

What are the strengths and weaknesses of using a single 'burner' computer vs. many public access computers over a sustained period? [closed]

Assuming that the user is accessing/publishing related sensitive information over this period, and also assuming that they would take additional precautions in both scenarios, such as a Tails live ...
0
votes
1answer
64 views

Xbox and Playstation copyright protection vs PC

AFAIK, both Xbox one and PS4 use x86 IC very similar to PC. The questions are: 1/ How can they keep those console systems protected from cracker and software privacy? What is the main method to ...
0
votes
0answers
12 views

How many kbdclasses are normal?

I use a laptop and never had used any external keyboards. Is there a keylogger hiding? What to do?
0
votes
0answers
25 views

Secure delete with urandom? [duplicate]

What recovery techniques (if any) exist that can recover data from a mechanical HDD if the user has filled the disk with a single run of dd if=/dev/urandom of=/dev/[disk]? Or in other words: is this ...
0
votes
1answer
173 views

How far beyond using Shred should I go when deleting files? [duplicate]

Possible Duplicate: How can I reliably erase all information on a hard drive? I'm looking to securely erase my files. Is shred the best option besides ditching the hardware? To what lengths ...
-1
votes
1answer
57 views

Recommendations for installing OSSIM

I'm an apprentice in web security and I was assigned with the task of researching about OSSIM. Bear with my infinite ignorance as I take my questions to the stack exchange gurus. What I know so far: ...
-1
votes
1answer
83 views

Completely disabling microphone [duplicate]

Maybe not 100% on topic for this site but it seemed like a good place to ask. All laptops are now sold with webcams and microphones and I have use for neither. Taking care of the webcam is easy; ...
-1
votes
1answer
33 views

TPMs available on mobile with application access [closed]

I am looking for a mobile device, preferably a smartphone or a tablet, that contains a TPM (v1.2 or 2.0) and provides application access to it through an API. Does anyone know if any such devices ...
-2
votes
0answers
25 views

Access encrypted hard drive with password login [on hold]

I was doing an anti-virus scan and there was a .ecryptfs file that the scan would always get stuck on even for days, that is because it was encrypted file. Somehow I managed to disable the function of ...
-2
votes
0answers
22 views

how does VPN services works? [closed]

What kind of hardware infrastructure vpn services like hidemyass / cyberghostvpn / surfeasy, use ? . .