The protection of personnel, hardware, programs, networks, and data from physical circumstances and events.

learn more… | top users | synonyms (1)

1
vote
1answer
112 views

What cellular network is used for automobile theft recovery? Can that be used for PCs and mobile devices?

I'm interested in sending a remote wipe command to stolen IT devices, such as a cell phone, or wifi connected device. However most remote wipe technologies require that the cellular service (or wifi) ...
-4
votes
5answers
196 views

Why do most cars use physical keys and no PIN?

Why do car makers rely on physical start keys, which can be stolen by home burglars and then used to start the vehicle? Why don't they use more secure methods such as a personal PIN, or a pin code to ...
4
votes
4answers
319 views

Are keys or RFID tags more secure access control solutions?

Just musing to myself, what is the preferable access control mechanism in high security environments? Locks and Keys or RFID tags? Going under the assumption that the locks/keys are not knoow to be ...
4
votes
2answers
1k views

I am always Hibernating my System, is there any risk for my Encrypted drive with BitLocker?

I am Always Hibernating my Laptop, for faster booting, I encrypted sensitive drive by BitLocker, what if my Laptop stolen and attacker knew that it was in hybernate mode, can he decrypt my hard?
18
votes
5answers
2k views

What is the most security benefit of a clean desk policy?

Starting to study for Security+ using Darril Gibson's book I took the pre-exam and one of the latest questions is “What is the most security benefit of a clean desk policy?” The choices are: ...
6
votes
1answer
97 views

Building access card that has an identification role

The main question is should a building access card have the corporate logo on it? In this organization, the employee ID card is separate from building access card. We currently do not have the logo ...
1
vote
0answers
165 views

Security Features in Bond Paper (Certificate)? [closed]

We are printing certificates and diplomas in bond paper and we found some fraud copy of our certificates. The only feature we have for security is an embossed stamp in GPA, also we have printed 3 ...
4
votes
4answers
973 views

Does a commercially available self destructing HDD (set in BIOS) exist?

Does a self destructing HDD (physically destruction) that will destroy after a certain time exist, or when I use some software to initiate its self-destruction? I guess it need to be set in BIOS or ...
3
votes
2answers
306 views

How do you keep track of numerous keys in the workplace?

Where I'm currently working there is a policy where various assets (including laptops) have to be cable locked and in the tech support department we have so many transient assets it's becoming ...
23
votes
2answers
4k views

Is there any way to tell if CCTV is on or not?

Is there any way that an attacker can identify if a CCTV camera is on/operational without direct physical access to the cable/camera? If it is on, is there any way an attacker can tell if its being ...
0
votes
1answer
3k views

What method of secure erase is sufficient for MacBook Pro SSD Drives? [duplicate]

I would like to securely erase the hard drive of a SSD in a MacBook Pro. The Disk Utility does not give me the option to wipe this drive even when I boot into the System Partition. (it is greyed ...
8
votes
3answers
497 views

Storing Credit Cards

Okay, so storing digitized credit card information/records is a well documented process when it comes to best practices. I recently got asked how a company can store, retrieve and process physical ...
62
votes
5answers
4k views

Somebody bumped into me, next day my storage unit was burglarized

While I was walking in the street, somebody carrying a laptop bag bumped into me, and the next day I found out that my storage unit was burglarized and some important items were stolen. My storage ...
5
votes
1answer
197 views

Motorola Human Authentication Pill/Vitamin Security?

This appears to be hot news today, Motorola announced a form of pill that a user can swallow which is activated and powered by stomach acids and transmits a signal back which can be used to ...
6
votes
2answers
943 views

Should magnetic locks automatically release in the event of a fire alarm?

Basically what the title says, you'll find many buildings have these types of door locks which can usually be opened by using a RFID token. While this example photo is glass, lets assume that the ...
2
votes
1answer
185 views

Can linux (be made to) detect foreign connections to the ram bus?

I've been made aware on many answers and some comments that an attacker can read memory while a system is still running by attaching some sort of connection directly to the ram bus. Can linux ...
1
vote
2answers
799 views

How to allow only some specific computer systems to access website? [duplicate]

I need a process to allow only certain computer systems access to the website irrespective of the network they are using. Much like a Licensing system, I can provide a private key or something ...
10
votes
2answers
1k views

“Friend” stole SD card. Tracing an SD card?

First off, let me say that I currently live in Mexico, a land filled with petty theft. I had a group of friends over last night, and they were looking at the photos on my camera. Today, I looked at my ...
140
votes
12answers
24k views

How is an ATM secure?

I'm curious why an ATM computer is considered secure. The general adage of "If an attacker has physical access to my machine, all bets are off," seems to not apply in this circumstance (since ...
5
votes
1answer
241 views

Security differences between Passive and Active RFID tags

Most people are aware there are two types of RFID tags, active tags (ones that contain a power source of some kind) and passive tags (ones that are powered by the RF field). I'd like to know if ...
4
votes
4answers
1k views

Block unauthorized user from getting access to intranet

What's the common way to block users from accessing intranet? Right now, whoever plugs in a cable can access any intranet server freely. I want to change this behavior. But given that we run not only ...
13
votes
2answers
3k views

What is the difference between types of motion sensors?

So i understand there are a number of different motion sensor technologies out where including Active Infrared (AIRs), Passive Infrared (PIRs), Microwave motion sensors and Ultrasonic motion sensors. ...
20
votes
1answer
3k views

High-frequency noise deterrents

I've found that walking past certain boutique stores in my city that some places have installed very loud high-frequency noise generators. These cause a fair amount of discomfort for passers by that ...
8
votes
1answer
381 views

How to apply IT Security knowledge to Home Security?

Today my car got stolen from my house, and it is possible the person who did it has access to my home. I try to take secure measures online to maintain security, yet it seems I never paid attention to ...
2
votes
1answer
120 views

Removable FireWire port blocks

There are other questions here enquiring about disabling FireWire ports reversibly via software or irreversibly via hardware (e.g. epoxy/desoldering). I would like to know if there are any reversible ...
6
votes
4answers
24k views

Can an employer access Whatsapp messages if you are using their servers?

Does anyone know if an employer can access whatsapp messages if you are using their servers? Whatsapp apparently say the messages are encrypted, but I'm not sure about this.
5
votes
2answers
2k views

Safely disable firewire/thunderbolt, patching up DMA exposure

I understand that Firewire 400/800 and Thunderbolt have DMA enabled, and a malicious hardware device can easily read and manipulate system memory at will. If I disable the software drivers for these ...
2
votes
1answer
724 views

Changing locks on server cabinet [closed]

I work in higher education, and we have a server room with various server cabinets, mostly APC and Belkin. The room is secured via card swipe access, however each server rack has the same lock, which ...
2
votes
3answers
320 views

If an ATM is stolen, how easy can the personal information of the users be recovered?

ATMs get occasionally stolen. How easy would be for the thiefs to retieve the PINs and other information of the users that have previously used the ATM? Is there a periodic wipe of all ...
0
votes
2answers
253 views

bootp enabled by default on dhcp reduce security?

by default in Microsoft DHCP server configuration Bootp is enabled and choose both(accept DHCP request and Bootp ) i know that how this work and know about how configure two DHCP Server by Bootp ...
1
vote
3answers
189 views

Requirements for a smartphone anti-theft App

I recently installed Cerberus in my [personal] Android device to get some protection against theft (I'm not really interested in protecting its data, but rather in increasing the odds the device will ...
3
votes
3answers
1k views

Is there is a way to lock my USB port over the device physically?

Is there is a way to lock my USB port over the device physically ? For example I am connecting the USB mouse and keyboard on an public computer but I do not want anyone to remove them physically. I ...
1
vote
1answer
196 views

What are my options for securely printing an OTP Scratchcard?

I want to print and distribute several One Time Passwords (OTPs) that can't be easily disclosed to a 3rd party in transit. (think the physical version of a TLS session for private secrets) To me ...
0
votes
6answers
1k views

Is an ATM alert system triggered by typing the PIN in reverse a secure solution?

Picture an ATM security system where, if the user types the PIN in reverse, the ATM alerts police, the customer's bank, or other parties. Are there any ATM manufacturers that use this or a similar ...
4
votes
3answers
407 views

Live Linux which does not mount any hard drive in the computer

I am searching for a Linux System which runs from a CD and does not mount any hard drive of the computer. I want to prevent any possiblity to write something on the hard drive of the computer and on ...
13
votes
3answers
12k views

Can law enforcement track a criminal through dynamic IP address?

I ask because a week ago my home was broken into and, among other things, my iMac computer was stolen. I am desperate to get it back because it has all the pictures of my daughters from the last ...
10
votes
1answer
375 views

Slot machine segfault: what can we determine?

We walked into a casino and saw this near the entrance. I don't have a specific question, but is there anything that would be interesting to share and explain from the image?
2
votes
4answers
386 views

Detecting and filtering data over AC power lines?

Given that it's possible for the average consumer to send covert signals over normal AC lines how can an IT department identify and filter out this communication? I'm not sure how difficult this is ...
1
vote
1answer
127 views

how to protect from Network scanner on android?

How can I block and detect network scanners on android platforms to stop scanning vlan of my hot spot. My question is: which scanners they use? how can i detect such scanners? Can i protect ...
2
votes
3answers
345 views

Physical Security for USB Keys and Systems-on-a-Stick

Do there exist physical security devices for USB sticks that serve a function analogous to laptop locks (i.e. preventing smash-and-grab type attacks)? If so, what are they and to what extent do they ...
6
votes
1answer
596 views

What is the difference between Simple Power Analysis and Differential Power Analysis?

What is the difference between Simple Power Analysis (SPA) and Differential Power Analysis (DPA) and why is it not possible to do an SPA attack on FPGAs? My basic understanding is they are ...
0
votes
3answers
251 views

Keyless entry security systems and HIPAA implications

We are upgrading our office to have badged security doors. What I would particularly like to know is if Keyless Entry systems exist or are of decent quality. By this I mean, I would like the doors ...
7
votes
3answers
349 views

Sourcing hardware that is least likely to contain backdoors

I understand that CPU silicon (for example) is scrutinized for backdoors but there are other aspects of a computer system that may "leak data" to the outside world unbeknownst to the owner regardless ...
3
votes
4answers
251 views

Is there a security device to register unauthorised physical access?

I understand that it is not possible to secure your software if a third party has physical access to the box (eg colo). So may be I can install some sort of hardware (like a seal) which only need to ...
-3
votes
1answer
5k views

windows firewall disabled with Norton Internet security or Norton Smart Firewall? [closed]

My Company decide to Change antiviruses and anti-spywares and firewalls. How to apply changes in all clients and servers safety? Norton say: ( in this article): When you are using Windows ...
0
votes
3answers
2k views

why Windows Firewall in XP cannot block outbound connections

wikipedia say: XP's Windows Firewall cannot block outbound connections; it is only capable of blocking inbound ones. another article says: XP defends you with your traffic coming from the web but ...
1
vote
1answer
96 views

Best way to secure file removals in Windows remotely

I have Windows 2008 R2 box on colocation. I want to remove certain files with a high degree guarantee it cannot be recovered from physical HDD access. Could someone please explain what levels of ...
0
votes
3answers
273 views

Petraeus scandal - what would have been a better way to communicate electronically [closed]

Not a security professional here but .... having read through how it happened, it's clear sending these emails from the shared account by Paula Broadwell was the problem (if I understand correctly). ...
17
votes
2answers
2k views

How can vending machines be hacked? And how can I prevent it?

I am developing a vending machine and want to make it secure. In a comment to my previous question, @Polynomial said "Vending machines (and similar devices) can often be pwned via buffer overflows on ...
6
votes
6answers
2k views

Is it safe to use virtual machines when examining malware?

We want to study for the CEH program and have downloaded 12 DVDs that 6 DVDs are software key-loggers, Trojans, etc. that are all detected by antivirus. This prevents us from examining them and ...