The protection of personnel, hardware, programs, networks, and data from physical circumstances and events.

learn more… | top users | synonyms (1)

4
votes
4answers
124 views

Must a system be insecure against physical access? If so, why?

Inspired by: Why don't OSes protect against untrusted USB keyboards? Related: What can a hacker do when he has physical access to a system? (I address the points of its main answers below.) There ...
87
votes
6answers
14k views

My school wants to keep the details of our door authentication system a secret. Is that a good idea?

So, I am designing a door authentication system (can't really go into more detail) for our school, so that only authenticated persons can go through a certain internal door. They hold that its inner ...
76
votes
14answers
10k views

How can I protect myself from false accusations when our company practices password escrow?

During an internship for a small company, my boss created an account for me, so I generated a password and I used it. The next day, my boss told me to write down the password of my account on a piece ...
4
votes
0answers
45 views

Motion sensor door locks

I have seen several offices with electric locks for entry that have a sensor for exit. I assume it's some kind of motion or object detection sensor. This is odd because in many cases, there's a ...
3
votes
1answer
48 views

Loss of physical locks/password to safes

Safes can keep important information like part of a dual control password, smartcards and pendrives, and so on. What would be the best practices to prevent loss or damage to a physical locks to a ...
4
votes
2answers
71 views

Are passport stamps a reliable security feature? [closed]

Most countries in the world still place passport stamps on arrival/departure into the country. Theoretically it is then possibly to calculate the length of a person's stay in a specific country. Is ...
1
vote
0answers
31 views

What else can I do to protect my accounts? [closed]

I am trying to make sure all my accounts are secure from unauthorised access and have turned on all security measures that I can find to make sure my stuff is protected. Here is what I have in place: ...
-3
votes
2answers
79 views

Defense in depth

How is defense in depth strategy different from network security policy? What is the need to name it a "Defense In Depth", although you may simply name it "Network security policy"? Secondly if DID ...
3
votes
2answers
59 views

Shutdown if case opened

Assume the user has a full disk encrypted HDD in which their OS and files reside. They also have made attaching USB or any other device without first allowing it cause an automatic shutdown which ...
2
votes
0answers
26 views

Reasonable means of security in commercial dealings [closed]

I am writing a paper from a legal standpoint and I'm suggesting legislation for a new duty of care for private companies in the safeguarding of customer's personal information. This will not apply to ...
53
votes
8answers
6k views

Why would security cover things like natural disasters?

I'm taking a course which is designed with the CISSP certification in mind. Though the class is categorized as software engineering, we talked a lot about physical security and, in particular, floods, ...
2
votes
2answers
660 views

What is the security of random code for authenticating products?

I have seen a startup (Verify Kero) that is building a product for verifying consumer goods. It places a 16 digit secret code under scratch-able coating. Consumer finds the code behind coating and ...
19
votes
2answers
3k views

Why did the Papal conclave use a Faraday cage in 2013 when selecting the new pope?

The Wikipedia article about Faraday cages has this anecdote: A Faraday cage was used in 2013 by the Vatican to shield the Sistine Chapel from electronic eavesdropping during the secret papal ...
41
votes
8answers
5k views

Is physical security less important with disks on a server being encrypted?

If you could get physical access to a server, you could change the root/admin password even if you did not know the current password. However with encrypted disks, I don't think this is possible ...
35
votes
3answers
2k views

Evaluating the security of home security cameras

My parents have a vacation home out in the country and are looking to setup a home surveillance system for remote viewing. I've heard that there can be serious vulnerabilities in these products. What ...
1
vote
1answer
83 views

SSH Key vs Complex Password with Fail2Ban & Two Factor Authentication

Normally you hear that using an SSH Key is far more secure than using a regular password. However I've been wondering if this statement is really true. Let's say we have the following variables for ...
5
votes
0answers
187 views

Ethical Hacking Certification (CEH v9) From A Web Developer's Perspective [closed]

I just finished a week of training for the CEH v9 certification. I have two questions: What are some strategies I can take for studying for the CEH v9 certification coming at the test as a web ...
7
votes
3answers
92 views

Is it possible to determine if the BIOS has been modified between two points in time?

Is it possible to determine if the BIOS of a computer has been modified between two points in time from that computer while it's running ? Effectively I'd like to be able to gather the equivalent of ...
0
votes
1answer
28 views

Sophos Safeguard detecting content of zip files being uploaded

Is it possible to use Sophos safeguard to detect when computers in the network upload certain files online when they are compressed in a zip file? (or 7z or similar). I've seen it is possible with ...
37
votes
5answers
4k views

Risk of tampering when hardware shipment is delayed

I am currently receiving an order of computer parts in the mail including an SSD. Tracking showed that the package arrived in my town on day X, and was originally scheduled for delivery on day X as ...
4
votes
2answers
116 views

Can single-purpose PCs be useful as a security measure in this situation?

In the context of a small scale operation, we are considering use of single special purpose PCs allocated to single security-sensitive tasks - for example, certain financial operations. The intended ...
3
votes
2answers
115 views

Why fear hardware brought to China, when most of it comes from China?

A lot of people will bring disposable hardware (laptops, phones) to business trips to China, eg. Employee laptops in China. Considering that most of that hardware was manufactured there, what is the ...
135
votes
8answers
15k views

How should I set up emergency access to business-critical secrets in case I am “hit by a bus”?

I work as the primary developer and IT administrator for a small business. I want to ensure that business can continue even if I suddenly become unavailable for some reason. Much of what I do requires ...
2
votes
1answer
53 views

CISSP Cert: can an IT sales pro pursue CISSP? [closed]

I am a sales and product professional who has a total of 9 years experience in IT; related to selling products indirectly or directly. I started my career working as a product manager for hardware ...
2
votes
1answer
56 views

Apple's Keychain - good security?

This management system runs under a user's password. Should you let this software manage your Disk Utility encrypted folder passwords and the like (e.g. GnuPG!)? My thoughts are, "No." Why should ...
5
votes
1answer
85 views

Is the content of my RAM kept if the OS is shut down but the PC is still running?

I just asked myself if the content of my RAM is kept when I shut down the OS but the PC is still running. For example when I do apply updates they sometimes require a reboot. Is the informaiton that ...
1
vote
1answer
33 views

Cell number and imei details

Is there a device i can install to collect cell number and imei numbers for people within a vicinity? We want to install in an area for security reasons so that we are able to trace the people in the ...
3
votes
4answers
98 views

Thumbdrive and its obsolescence?

Using USB drives in the corporate environment is always the topic of security because viruses and malware can be introduced maliciously or unintentionally. For corporate environment, I am thinking to ...
8
votes
1answer
1k views

Is there a way to physically trace stolen hardware?

This must have been asked before, but I cannot find any related question. Is it possible to put into hardware, some kind of "transmitter", so that in the event of it getting stolen, it can be ...
32
votes
13answers
6k views

Laptop Anti-Theft Measures

A law firm I've been in contact with has recently been broken into 3 times in the past 4 months. In spite of a number of laptops and other equipment containing sensitive information being stolen, the ...
2
votes
0answers
60 views

I want to lock my Macbook lid shut. Where to buy? Alternatives? [closed]

I'm attempting to lock down a computer from unauthorized access. I own a macbook pro late 2011. Backstory I've gone through the basics with file vault and firmware password etc. I'm also getting a ...
13
votes
2answers
345 views

What does banking etc. server room protection look like? What happens if it fails?

Given that information security is derived from physical security, as evidenced by this theft, I'm curious as to what protection surrounds my bank account? There are two main avenues I'm interested ...
2
votes
2answers
84 views

Physical protection of your servers?

Here is a scenario. You are a small startup company that makes a video game. In your video game, you can exchange money for items. You are not dealing with the credit card/debit card directly but ...
1
vote
2answers
86 views

How could an hard-token be packaged such that the recipient could trust it?

I purchased a Yubikey NEO, which arrived in a small plastic thing, inside of a padded envelope. An attacker with access in transit would have had basically unlimited ability to manipulate it. Which ...
22
votes
12answers
5k views

Is it possible to prevent unauthorized copying or recording of data by photographing screens?

I am thinking on a way which would prevent unauthorized copying or recording of data by photographing screens. I also think, if the content of a screen is understable for an eye of a living human, it ...
2
votes
2answers
163 views

Securing physical access to your internet connection? (Apartment Utility Box)

I recently moved to a new apartment complex, had my DIY Time Warner box ready to go and hooked up my all my hardware. Everything booted fine but no connection to TW. I tested all the jacks in the ...
4
votes
5answers
452 views

Is encryption possible at the physical layer?

When we talk about encryption in relation to the OSI Model we usually hear about encryption at Application (Email - PGP), Transport (SSL), Network (IPSec) and even Data Link Layer (WPA). But I have ...
1
vote
4answers
95 views

Is it safe to use my personal password as my password in work related accounts?

For example I have this complex personal password cary1bondoc21cary2bondoc as my password and because I am forgetful I also want to used that in work related accounts like company email, etc. Is there ...
0
votes
1answer
247 views

Why isn't MSWindows product code kept secure? [closed]

Yesterday I have noticed MSWindows product code on KFC's machines is exposed to the public (photo below). It might be a mistake but it made me think of something a friend of mine told me once, how he ...
3
votes
2answers
161 views

Preventing boot from external media in case of theft of laptop or physical security breach in case of desktops?

I wanted to protect my Laptop from common theft. What I did was that I installed an anti-theft software on my Ubuntu 14.04. The guest account is enabled so that the thief can use my laptop while I ...
2
votes
1answer
93 views

Defense in depth vs single security architecture

Traditionally, we have been that defense in depth is the best practice approach if we want to secure our premises from security breach. However, I recently read about DoD's Joint information ...
-1
votes
1answer
94 views

A cctv system for a small shop [closed]

I am not sure if I should ask here but I really can't find any information anywhere else. A family member of mine (let's say X) runs a small fashion shop in Hong Kong, China. The problem is that ...
4
votes
5answers
332 views

Do I need to secure a computer from physical attacks when attackers can already harm in many other ways?

Recently, I was working on a computer system for a model railroad club. This computer system is capable of monitoring and controlling the positions of all the (physical) trains which could be ...
3
votes
3answers
141 views

What are the security implications of a dead laptop?

My laptop recently died. I've got a replacement, and I've already pulled both hard drives out of the old one and ensured that there's no disc in the DVD drive. As far as I know, that should ...
0
votes
2answers
92 views

Is there a cryptographic function that generates a reconizable visual pattern?

I have to build a system that will ultimately print a pass allowing access to a building. The validation of this ticket will be done manually (it can also be automatic but that's not likely at this ...
23
votes
2answers
3k views

How do Travel Sentry locks work? (supposedly openable only by security agencies)

Apparently Travel Sentry locks can only be opened: by their owner, by the TSA, CATSA and "other security agencies". How do they work technically? Is there some electronics embedded with ...
-1
votes
5answers
125 views

Security software to shutdown PC unless specific approach? [closed]

For future refence: In light of answers and critique, my question should have been: 1. How does one make sure a physical attacker with access to a powered, but locked FDE PC fails his/hers attempt to ...
3
votes
1answer
148 views

How can someone sniff dial-up connection using phone line?

Let's assume we have a computer that sends packets to the internet using dial-up connection, and we have access to the analog data on the phone line(we have access to the phone line), how can we make ...
4
votes
1answer
79 views

Should I wipe a brand new Machine and HDD ?

So I am buying a brand new machine and a HDD separate, when I buy this new HDD should I wipe it before I install it ? What necessary steps should I take to make sure it's pretty much clean of any ...
6
votes
3answers
333 views

Risk of spyware on seized devices

This question (Prevention measures against laptop seizure at US borders) addresses a number of techniques for securing data while crossing borders. Perhaps the most useful advice was to simply not ...