The protection of personnel, hardware, programs, networks, and data from physical circumstances and events.
1
vote
2answers
88 views
How to allow only some specific computer systems to access website? [duplicate]
I need a process to allow only certain computer systems access to the website irrespective of the network they are using.
Much like a Licensing system, I can provide a private key or something ...
2
votes
1answer
63 views
What cellular network is used for automobile theft recovery? Can that be used for PCs and mobile devices?
I'm interested in sending a remote wipe command to stolen IT devices, such as a cell phone, or wifi connected device. However most remote wipe technologies require that the cellular service (or wifi) ...
10
votes
2answers
517 views
“Friend” stole SD card. Tracing an SD card?
First off, let me say that I currently live in Mexico, a land filled with petty theft. I had a group of friends over last night, and they were looking at the photos on my camera. Today, I looked at my ...
1
vote
0answers
45 views
SAM Card deployment best practice
As part of my current project we will be deploying smart card readers containing SAM cards for decryption purposes. The deployment process involves a third party software integrator who will control ...
5
votes
1answer
78 views
Security differences between Passive and Active RFID tags
Most people are aware there are two types of RFID tags, active tags (ones that contain a power source of some kind) and passive tags (ones that are powered by the RF field).
I'd like to know if ...
4
votes
4answers
113 views
Block unauthorized user from getting access to intranet
What's the common way to block users from accessing intranet?
Right now, whoever plugs in a cable can access any intranet server freely. I want to change this behavior. But given that we run not only ...
13
votes
2answers
360 views
What is the difference between types of motion sensors?
So i understand there are a number of different motion sensor technologies out where including Active Infrared (AIRs), Passive Infrared (PIRs), Microwave motion sensors and Ultrasonic motion sensors.
...
16
votes
1answer
300 views
High-frequency noise deterrents
I've found that walking past certain boutique stores in my city that some places have installed very loud high-frequency noise generators. These cause a fair amount of discomfort for passers by that ...
2
votes
1answer
64 views
Removable FireWire port blocks
There are other questions here enquiring about disabling FireWire ports reversibly via software or irreversibly via hardware (e.g. epoxy/desoldering).
I would like to know if there are any reversible ...
2
votes
1answer
241 views
Changing locks on server cabinet [closed]
I work in higher education, and we have a server room with various server cabinets, mostly APC and Belkin. The room is secured via card swipe access, however each server rack has the same lock, which ...
1
vote
1answer
245 views
Is using Google Voice number for two-factor authentication a big mistake?
Two-factor authentication is growing in popularity as a security measure. For example, Google, Facebook, Twitter, and many other services all have two-step security options today as well as many banks ...
2
votes
3answers
240 views
If an ATM is stolen, how easy can the personal information of the users be recovered?
ATMs get occasionally stolen. How easy would be for the thiefs to retieve the PINs and other information of the users that have previously used the ATM? Is there a periodic wipe of all ...
126
votes
12answers
18k views
How is an ATM secure?
I'm curious why an ATM computer is considered secure. The general adage of "If an attacker has physical access to my machine, all bets are off," seems to not apply in this circumstance (since ...
0
votes
0answers
56 views
Any reference to this old ATM fault (collecting one of the notes before the rest will be taken back) [closed]
For an article I am writing, I would need to know if this fault was also in other countries and if so, I would really appreciate ANY link to newspaper/whatever so I can prove it.
It is an old fault ...
15
votes
5answers
986 views
What is the most security benefit of a clean desk policy?
Starting to study for Security+ using Darril Gibson's book I took the pre-exam and one of the latest questions is “What is the most security benefit of a clean desk policy?”
The choices are:
...
0
votes
2answers
94 views
bootp enabled by default on dhcp reduce security?
by default in Microsoft DHCP server configuration Bootp is enabled and choose both(accept DHCP request and Bootp )
i know that how this work and know about how configure two DHCP Server by Bootp ...
1
vote
3answers
107 views
Requirements for a smartphone anti-theft App
I recently installed Cerberus in my [personal] Android device to get some protection against theft (I'm not really interested in protecting its data, but rather in increasing the odds the device will ...
3
votes
3answers
286 views
Is there is a way to lock my USB port over the device physically?
Is there is a way to lock my USB port over the device physically ?
For example I am connecting the USB mouse and keyboard on an public computer but I do not want anyone to remove them physically. I ...
1
vote
1answer
86 views
What are my options for securely printing an OTP Scratchcard?
I want to print and distribute several One Time Passwords (OTPs) that can't be easily disclosed to a 3rd party in transit. (think the physical version of a TLS session for private secrets)
To me ...
4
votes
3answers
223 views
Live Linux which does not mount any hard drive in the computer
I am searching for a Linux System which runs from a CD and does not mount any hard drive of the computer.
I want to prevent any possiblity to write something on the hard drive of the computer and on ...
10
votes
3answers
2k views
Can law enforcement track a criminal through dynamic IP address?
I ask because a week ago my home was broken into and, among other things, my iMac computer was stolen. I am desperate to get it back because it has all the pictures of my daughters from the last ...
4
votes
2answers
782 views
How easily could be truecrypt and EFS cracked in this scenario
I suspect some info was subtracted in the past months from my laptop. Therefore Im looking for methods to encrypt my data. I want to try using truecrypt for the sensitive files folder plus EFS for ...
0
votes
6answers
422 views
Is an ATM alert system triggered by typing the PIN in reverse a secure solution?
Picture an ATM security system where, if the user types the PIN in reverse, the ATM alerts police, the customer's bank, or other parties.
Are there any ATM manufacturers that use this or a similar ...
5
votes
4answers
9k views
Can an employer access Whatsapp messages if you are using their servers?
Does anyone know if an employer can access whatsapp messages if you are using their servers? Whatsapp apparently say the messages are encrypted, but I'm not sure about this.
10
votes
1answer
233 views
Slot machine segfault: what can we determine?
We walked into a casino and saw this near the entrance. I don't have a specific question, but is there anything that would be interesting to share and explain from the image?
1
vote
1answer
104 views
how to protect from Network scanner on android?
How can I block and detect network scanners on android platforms to stop scanning vlan of my hot spot.
My question is:
which scanners they use?
how can i detect such scanners?
Can i protect ...
1
vote
4answers
292 views
Are malicious scripts in batch files detected by antiviruses?
we have many scripts in shared folders in our IT Department.
Are malicious scripts in batch files detected by antiviruses?
2
votes
3answers
164 views
Physical Security for USB Keys and Systems-on-a-Stick
Do there exist physical security devices for USB sticks that serve a function analogous to laptop locks (i.e. preventing smash-and-grab type attacks)?
If so, what are they and to what extent do they ...
6
votes
1answer
169 views
What is the difference between Simple Power Analysis and Differential Power Analysis?
What is the difference between Simple Power Analysis (SPA) and Differential Power Analysis (DPA) and why is it not possible to do an SPA attack on FPGAs?
My basic understanding is they are ...
1
vote
3answers
182 views
Keyless entry security systems and HIPAA implications
We are upgrading our office to have badged security doors. What I would particularly like to know is if Keyless Entry systems exist or are of decent quality. By this I mean, I would like the doors ...
-1
votes
2answers
1k views
windows firewall disabled with Norton Internet security or Norton Smart Firewall? [closed]
My Company decide to Change antiviruses and anti-spywares and firewalls.
How to apply changes in all clients and servers safety?
Norton say: ( in this article):
When you are using Windows ...
5
votes
3answers
186 views
Sourcing hardware that is least likely to contain backdoors
I understand that CPU silicon (for example) is scrutinized for backdoors but there are other aspects of a computer system that may "leak data" to the outside world unbeknownst to the owner regardless ...
2
votes
4answers
216 views
Detecting and filtering data over AC power lines?
Given that it's possible for the average consumer to send covert signals over normal AC lines how can an IT department identify and filter out this communication?
I'm not sure how difficult this is ...
0
votes
3answers
652 views
why Windows Firewall in XP cannot block outbound connections
wikipedia say: XP's Windows Firewall cannot block outbound connections; it is only capable of blocking inbound ones.
another article says: XP defends you with your traffic coming from the web but ...
1
vote
1answer
86 views
Best way to secure file removals in Windows remotely
I have Windows 2008 R2 box on colocation. I want to remove certain files with a high degree guarantee it cannot be recovered from physical HDD access.
Could someone please explain what levels of ...
0
votes
3answers
244 views
Petraeus scandal - what would have been a better way to communicate electronically [closed]
Not a security professional here but .... having read through how it happened, it's clear sending these emails from the shared account by Paula Broadwell was the problem (if I understand correctly). ...
-2
votes
5answers
1k views
Will antivirus detect all keyloggers?
Our company schedules Security Training courses for our personnel.
In order for us to test them, we develop code such as keyloggers which we email to our personnel to detect stupid personnel, and of ...
14
votes
2answers
1k views
How can vending machines be hacked? And how can I prevent it?
I am developing a vending machine and want to make it secure.
In a comment to my previous question, @Polynomial said "Vending machines (and similar devices) can often be pwned via buffer overflows on ...
6
votes
6answers
498 views
Is it safe to use virtual machines when examining malware?
We want to study for the CEH program and have downloaded 12 DVDs that 6 DVDs are software key-loggers, Trojans, etc. that are all detected by antivirus. This prevents us from examining them and ...
4
votes
2answers
521 views
How does syskey in Windows increase the security in a domain?
I use syskey in windows XP and Windows 7. I've read Microsoft's article but I have questions.
How does this solution increase security?
What are differences between using Syskey in a client that ...
76
votes
13answers
6k views
Why do we lock our computers?
It's common knowledge that if somebody has physical access to your machine they can do whatever they want with it1.
So why do we always lock our computers? If somebody has physical access to my ...
2
votes
2answers
207 views
A security checklist for choosing an internet hosting service provider for a virtual private server?
I am in the process of choosing an internet hosting service provider for my website. Besides looking at the reputation of the hosting provider through internet forums, is there a more concrete way of ...
26
votes
3answers
816 views
How can you judge the physical security of a padlock?
I recently learnt to pick locks. Eager to test out my skills, I tried picking a padlock I'd been using on a secure storage box for a number of years, and found that it only had one pin - I can get ...
0
votes
0answers
60 views
how to program my own TOKEN using atmega64 [closed]
I'm trying to create a sample security token with Atmega64, And now i'm a little confused about how to program that. As it mentioned in PKCS11 Document token hardware should support about 70 function.
...
3
votes
3answers
288 views
What are the security implications of phone based keyless entry systems?
I have just been reading about Lockitron which promises to provide phone based keyless entry for the home. As great an idea as this sounds it strikes me that it could come along with some very serious ...
2
votes
3answers
452 views
is it possible to create a login “key” out of a USB drive?
I was recently thinking about keeping my computer secure from physical access, and i decided that the safest way to keep my data under lock and key, was to do just that: Create a lock and key out of a ...
0
votes
0answers
124 views
How to set up VLAN network [closed]
I am designing my network to improve security and want to implement Vlans. My problem is that we already have a network 192.168.16.0/24 and have a lot of devices on this network already. From theory, ...
6
votes
3answers
124 views
Securing mail deliveries in a multi-tenant office building
I am concerned that that postal mail (and other deliveries not requiring a signature) may be at risk from theft or unauthorised access. My company is based in a multi-tenant office with an unattended ...
3
votes
1answer
232 views
Does setting a firmware password add security if FileVault 2 is enabled?
On an up-to-date OS X computer with FileVault 2 (whole-disk encryption, minus the recovery partition), is any security gained by setting a firmware password, as well?
5
votes
3answers
605 views
What can a hacker do when he has physical access to a system?
I mean, I'm a tech guy here in my region (not a hacker...). When I sit in the front of another person's PC, I notice a little fear about what I can do in the system.
It's obvious that I will not ...
