The physical components of an IT system.

learn more… | top users | synonyms

2
votes
0answers
205 views

how many sha1 hashes per time on current hardware [closed]

How many sha1 hashes per second can current hardware (say a 500$ gpu) compute, when the input is 256 byte long? (or any other length). The question behind is how long (or how costly) is it to mount a ...
2
votes
1answer
216 views

Can linux (be made to) detect foreign connections to the ram bus?

I've been made aware on many answers and some comments that an attacker can read memory while a system is still running by attaching some sort of connection directly to the ram bus. Can linux ...
2
votes
2answers
290 views

Performing an airport scan on my Mac for available WiFi networks pulls up multiple SSID with different mac address. What's going on?

I performed the following command to search for available WiFi networks in my apartment complex: /System/Library/PrivateFrameworks/Apple80211.framework/Versions/A/Resources/airport scan | grep OBC I ...
1
vote
3answers
2k views

How can this web page access the USB? [closed]

A friend bought a "smart" headset (working with voice commands). I had to install a software on Windows to be able to configure this headset. After downloading the software from the page, this page ...
1
vote
2answers
429 views

Seeking advice on how to build a box to brute force hashes? [closed]

I work in a startup security firm, and I need to build a GPU-based to brute force password/hashes, which can be used to validate password strength and test hashing algorithms. I expect some high ...
1
vote
1answer
66 views

Is a reversible microphone kill switch in hardware plausible? [closed]

I'm forking this from this question, to which I gave a partial answer. These folks claim that their hardware includes a physical kill switch for the internal microphone that reversibly interrupts the ...
1
vote
3answers
94 views

Why aren't hardware R/W switches used to defend hard drives?

ISTR back in the early days of (build your own) PCs having an old 486 PC with two hard drives, and hacking the "Turbo" switch on the front panel (remember those?) to be a read-protect switch for ...
1
vote
3answers
185 views

how to protect my data from malware/spyware that infected my BIOS?

we all know that some countries do their best to spy on their citizens and the citizen of other countries and that countries maybe have specialized spying agencies wither they are known or not, and, ...
1
vote
2answers
390 views

How to make data in hard disk unrecoverable on linux [duplicate]

I need to wipe completely the data on my hard disk so it's unrecoverable. I'm actually using Linux, i have seen this command on the web, but I don't know if its secure. shred -zvn 35 /dev/sdb
1
vote
1answer
96 views

What is the best way to perform penetration tests for free with and without software? [closed]

Is there any software or hardware that will perform penetration tests without a paid subscription? i.e. Free to use like Kali-linux etc. I would like to learn how to perform penetration tests. If ...
1
vote
1answer
277 views

Hardware Implementation of Encryption Algorithm

In the abstract of the AES-GCM RFC, the following passage is prominently included: [AES-GCM] can be efficiently implemented in hardware for speeds of 10 gigabits per second and above... Is the ...
1
vote
3answers
2k views

Best practices for firewall hardware

I'm planning to implement a linux based firewall/router with at least 6 x 1Gb NIC's (network with ~300 computers/server with >=8 VLANs) Can anybody recommend hardware best practices (reference to ...
1
vote
1answer
104 views

The use of SHA-1 in a cyber forensic

Let's say a hard disk (A) is retrieved from a system to make a clone of it on hard disk (B) and use this clone for a forensic investigation. Is SHA-1 secure enough to make sure that no other ...
1
vote
1answer
213 views

Is there a backdoor in the hardware of our smartphones?

I don't know for you but I always felt like Android especially is not safe. Is somebody - the government or other - able to listen to my microphone, or access my hard drive remotely ? I'm wondering ...
1
vote
1answer
384 views

Spying on insulated cables (electromagnetic/induction field)

I hope this is the right forum to ask this question. If not, please tell me where to go. From my understanding most cables have an electromagnetic field around them when data passes through them and ...
1
vote
1answer
281 views

Wireless Security Pen testing Setup

I had a Asus N82J laptop with a dual boot setup. I boot into Kali and Windows 7. Long story short because of my dual boot with Grub I corrupted my HDD the operating system kept moving blocks of ...
1
vote
1answer
920 views

File system history on USB drives

I want to find out who deleted a specific file from a USB disk. The disk is formatted as NTFS. The file was deleted while the disk was plugged into a Windows 7 system. However, while I do have ...
1
vote
2answers
89 views

How could an hard-token be packaged such that the recipient could trust it?

I purchased a Yubikey NEO, which arrived in a small plastic thing, inside of a padded envelope. An attacker with access in transit would have had basically unlimited ability to manipulate it. Which ...
1
vote
1answer
135 views

Can data be tampered with after expert clones a drive?

Introduction 3 computers were sealed and taken from a persons apartment. Investigators invited him to unseal the PCs, they were intact and they started the cloning process, however the hashes were ...
1
vote
1answer
163 views

How to prepare a used computer to handle sensitive information

After buying a used computer from a stranger, what steps should be taken to ensure it is safe to use for connecting to a network that handles sensitive information? (I am defining "sensitive" broadly: ...
1
vote
1answer
110 views

Importance of password strength with secure element?

Greetings SE security community. Background: I have a number of items like certificates, databases, and encrypted file systems that require private keys. In order to avoid having duplicates of these ...
1
vote
1answer
862 views

Is Intel AESNI supported by Xen in VPS/Cloud hosting environments? [closed]

I'm having trouble determining whether when using a hosting company that uses Xen virtualization and Intel processors with AESNI embedded encryption, I would have access to AESNI (i.e., is it an ...
1
vote
1answer
36 views

GPG/Bitcoin usb gadget device

My idea is to take a raspberry pi zero (or any embedded linux board) and shove GPG inside it to encrypt/decrypt/sign data with RSA/ECC (for bitcoin) via USB. Like a USB thing that holds your ...
1
vote
3answers
137 views

Is it possible for Apple or any other company to create fully encrypted smartphone?

From the latest Apple vs FBI story it's known that Apple is technically capable of changing the boot-loader of the iPhone to provide interface for brute-force finding of 4-digit password. I'm ...
1
vote
3answers
87 views

HTTPS client “pairing”

I've been redirected here from SuperUser, I hope the question is appropriate. I need to restrict usage of a certain site to a limited number of customers. More than that, actually: I would like to ...
1
vote
1answer
77 views

Are there any potential complications with these secure baseband ideas?

So I have been working on some ideas for securing cell phones from baseband level exploits and I was wondering if there are any potential complications with these solutions such as practicality or ...
1
vote
1answer
295 views

What does hardware full disk encryption imply?

I read the wikipedia article and few others, however I still don't have some things clear. The main question would be what does hardware full disk encryption imply for the user, however I have more ...
1
vote
1answer
97 views

PCI approved device, does it matter if my POS is PCI compliant if it just passes info to the gateway and does not store the encrypted card data?

If my Hardware device is on the PCI list from here https://www.pcisecuritystandards.org/approved_companies_providers/approved_pin_transaction_security.php Does my POS need to be PCI compliant since ...
1
vote
2answers
136 views

Renting a remote server with IPMI: is one vulnerable?

It has been reported in the media and some security conscious mailing lists that some IPMI-enabled servers, implementations and brands suffer serious security issues. When you go to a dedicated ...
1
vote
1answer
854 views

Disabling built-in Wi-Fi adapter and protecting Wi-Fi's MAC address on a laptop

I have an XP laptop with Wi-Fi issues - it connects / disconnects intermittently. Anyway, I bought a USB Wi-Fi that works well. My security question are: Is there a way to completely disable the ...
1
vote
0answers
13 views

How to identify and patch a hardware vulnerability?

Software and systems vulnerabilities are often patched with updates, or by avoiding the use of some OS or softwares that have multiple flaws. Regarding hardware vulnerabilities, I do not have a lot of ...
1
vote
0answers
18 views

Can a JTAG device be attached to a running system?

JTAG, or Joint Test Action Group, is a standard for debugging. Many modern motherboards, both on mobile devices and on desktops and workstations have JTAG ports. They allow a CPU to be controlled like ...
1
vote
2answers
70 views

How secure is a BIOS/UEFI hard drive password? [duplicate]

I'm buying some new machines and am concerned about security of the data should the machine be physically stolen. It's easy to take out the drive, image it, and read what you want. I could use file ...
1
vote
1answer
39 views

What is the difference between the different wiping methods used by DBAN?

I was wondering what is the difference between the various wiping methodologies that DBAN offers DBAN Website Once you start the program, there are a few methods available for wiping the disk. 1.- ...
1
vote
0answers
64 views

What can a malicious device on PCIe bus do? [closed]

What threat does a malicious device or a device with malicious firmware on a PCIe bus pose? Can such device access to RAM(only read or write)? All devices on PCIe can have that access(network card, or ...
1
vote
1answer
123 views

Identifying USB Device Anomalies..? [closed]

I have a laptop with 4 USB ports, and I have an external 4 port splitter that I purchased off amazon. Plugged into that is an external USB audio card. The audio card has a line-in port and an audio ...
1
vote
0answers
52 views

Is there hardware which can prove that data was not read? [closed]

I am looking for information on hardware. Is it possible for a hardware device to prove that some data was not read? If so, how does work? I read something about a quantum machine using a polarized ...
1
vote
1answer
41 views

Can one trace downloads in storage unit? [closed]

Does My Passport WD keep a history of downloads, transfers etc? In other words can user A detect user B's activity? Or can it just see the content of the storage unit?
1
vote
1answer
147 views

Are there vulnerabilities in display connections? [duplicate]

I have been in the market for a DisplayPort KVM. Most of these products come from small companies I have never heard of and possibly do not trust. I understand the risk of plugging in USB to any ...
1
vote
0answers
291 views

Disable HNAP on D-Link router [closed]

I'm concerned that Home Network Administration Protocol (HNAP) is a serious vulnerability that exposes consumer network routers to remote management by malicious entities such as government ...
0
votes
2answers
497 views

Transmitting malicious code over audio speakers

In a post that reads like science-fiction, a security researcher claims that malicious code was being passed between computers. A few quotes: ... "badBIOS," as Ruiu dubbed the malware, has the ...
0
votes
2answers
788 views

Bypassing Trusted Computing

I have not been able to find any information about trusted computing on the Internet. I am reasonably sure that its software manifestation can be bypassed by a Linux live disk, but what about hardware ...
0
votes
1answer
36 views

Potential FileVault problems in my setup

After FBI vs. Apple, I have a few questions about the security of my data. Here's my setup: AppleID is connected to local account I don't remember exactly, but I think I have selected option "Allow ...
0
votes
2answers
122 views

What exactly is endpoint security?

Would someone explain what endpoint security is, exactly? What do companies like McAfee and Symantec sell with their endpoint security suites? I also would like to learn if endpoint security ...
0
votes
2answers
424 views

ENCASE Forensic: Detect if someone ran CCleaner or CleanUp software

I have Encase. and I'd like to know where can I find if someone ran CCleaner Or CleanUp software to erase evidence.
0
votes
1answer
133 views

What's the best, most unique (and uneditable) hardware id or key for each computer? [closed]

I'm a C# programmer and I'm looking for the best way to "know" what hardware is running my software. What is the best uneditable and unique "hardware id" in each computer?
0
votes
1answer
530 views

How to ensure a second hand computer is safe to use [duplicate]

I'm planning to buy a second hand computer (2012 Mac mini, which is no longer available in stores). Because I'm not sure if there is any malware in the computer so I will perform hard format several ...
0
votes
1answer
260 views

Are there approaches/mechanism to detect hardware backdoors?

Background: A nice Chinese based manufacturer (AllWinner Technology Co.Ltd) produces very useful SoC used boards that often claim to be open source hardware. Question: If need be is there by way of ...
0
votes
2answers
90 views

Is there a way to prevent software from accessing hardware IDs?

I think this is related to this question, but I would like to know if there's also a way to prevent "third party" applications from seeing hardware IDs (motherboard, hard disks, and others), or giving ...
0
votes
2answers
86 views

Disk Wiping - How can I be sure [duplicate]

I am selling some hard drives but my question is. How can I be sure that the information is gone? Is there a good way to wipe the drives? What are ways I use to attempt to recover the data to ensure ...