The use of physical measures (such as locks and tamper-proofing) or policies (such as Clean Desk) in order to protect sensitive information from unauthorized access.

learn more… | top users | synonyms (1)

4
votes
2answers
123 views

Can single-purpose PCs be useful as a security measure in this situation?

In the context of a small scale operation, we are considering use of single special purpose PCs allocated to single security-sensitive tasks - for example, certain financial operations. The intended ...
3
votes
2answers
126 views

Why fear hardware brought to China, when most of it comes from China?

A lot of people will bring disposable hardware (laptops, phones) to business trips to China, eg. Employee laptops in China. Considering that most of that hardware was manufactured there, what is the ...
25
votes
5answers
4k views

How does a clean desk policy provide security benefits?

I'm starting to study for Security+ using Darril Gibson's book. I took the pre-exam and one of the questions is “What is the most important security benefit of a clean desk policy?” The choices are: ...
2
votes
1answer
65 views

CISSP Cert: can an IT sales pro pursue CISSP? [closed]

I am a sales and product professional who has a total of 9 years experience in IT; related to selling products indirectly or directly. I started my career working as a product manager for hardware ...
2
votes
1answer
66 views

Apple's Keychain - good security?

This management system runs under a user's password. Should you let this software manage your Disk Utility encrypted folder passwords and the like (e.g. GnuPG!)? My thoughts are, "No." Why should ...
5
votes
1answer
92 views

Is the content of my RAM kept if the OS is shut down but the PC is still running?

I just asked myself if the content of my RAM is kept when I shut down the OS but the PC is still running. For example when I do apply updates they sometimes require a reboot. Is the informaiton that ...
2
votes
1answer
36 views

Cell number and imei details

Is there a device i can install to collect cell number and imei numbers for people within a vicinity? We want to install in an area for security reasons so that we are able to trace the people in the ...
3
votes
4answers
100 views

Thumbdrive and its obsolescence?

Using USB drives in the corporate environment is always the topic of security because viruses and malware can be introduced maliciously or unintentionally. For corporate environment, I am thinking to ...
8
votes
1answer
1k views

Is there a way to physically trace stolen hardware?

This must have been asked before, but I cannot find any related question. Is it possible to put into hardware, some kind of "transmitter", so that in the event of it getting stolen, it can be ...
17
votes
2answers
24k views

What is the difference between types of motion sensors?

So i understand there are a number of different motion sensor technologies out where including Active Infrared (AIRs), Passive Infrared (PIRs), Microwave motion sensors and Ultrasonic motion sensors. ...
2
votes
1answer
5k views

What method of secure erase is sufficient for MacBook Pro SSD Drives? [duplicate]

I would like to securely erase the hard drive of a SSD in a MacBook Pro. The Disk Utility does not give me the option to wipe this drive even when I boot into the System Partition. (it is greyed ...
23
votes
12answers
6k views

Is it possible to prevent unauthorized copying or recording of data by photographing screens?

I am thinking on a way which would prevent unauthorized copying or recording of data by photographing screens. I also think, if the content of a screen is understable for an eye of a living human, it ...
3
votes
0answers
75 views

I want to lock my Macbook lid shut. Where to buy? Alternatives? [closed]

I'm attempting to lock down a computer from unauthorized access. I own a macbook pro late 2011. Backstory I've gone through the basics with file vault and firmware password etc. I'm also getting a ...
2
votes
5answers
1k views

Cheap door logging for home?

Does someone here knows a cheap DIY door logging system? What I have: - 2 doors that needs to be logged - 1 netbook (running OpenBSD with internet connection & root permissions), the two doors ...
1
vote
2answers
89 views

How could an hard-token be packaged such that the recipient could trust it?

I purchased a Yubikey NEO, which arrived in a small plastic thing, inside of a padded envelope. An attacker with access in transit would have had basically unlimited ability to manipulate it. Which ...
108
votes
12answers
23k views

What's to stop someone from 3D print cloning a key?

My friend just posted a picture of her key to instagram and it occurred to me that with such a high res photo, the dimensions of the key could easily be worked out. Therefore the key could be ...
2
votes
0answers
125 views

SAM Card deployment best practice

As part of my current project we will be deploying smart card readers containing SAM cards for decryption purposes. The deployment process involves a third party software integrator who will control ...
6
votes
2answers
4k views

Safely disable firewire/thunderbolt, patching up DMA exposure

I understand that Firewire 400/800 and Thunderbolt have DMA enabled, and a malicious hardware device can easily read and manipulate system memory at will. If I disable the software drivers for these ...
4
votes
3answers
328 views

Disable USB keyboard pluggability on MacBook

I'm concerned about USB devices being physically attached to my MacBook laptop when I am about to unlock my computer or while my computer is unlocked. My threat model involves an attacker who is ...
5
votes
5answers
579 views

Is encryption possible at the physical layer?

When we talk about encryption in relation to the OSI Model we usually hear about encryption at Application (Email - PGP), Transport (SSL), Network (IPSec) and even Data Link Layer (WPA). But I have ...
-1
votes
4answers
5k views

why Windows Firewall in XP cannot block outbound connections [closed]

wikipedia say: XP's Windows Firewall cannot block outbound connections; it is only capable of blocking inbound ones. another article says: XP defends you with your traffic coming from the web but ...
2
votes
4answers
108 views

Is it safe to use my personal password as my password in work related accounts?

For example I have this complex personal password cary1bondoc21cary2bondoc as my password and because I am forgetful I also want to used that in work related accounts like company email, etc. Is there ...
1
vote
1answer
259 views

Why isn't MSWindows product code kept secure? [closed]

Yesterday I have noticed MSWindows product code on KFC's machines is exposed to the public (photo below). It might be a mistake but it made me think of something a friend of mine told me once, how he ...
29
votes
2answers
29k views

Is there any way to tell if CCTV is on or not?

Is there any way that an attacker can identify if a CCTV camera is on/operational without direct physical access to the cable/camera? If it is on, is there any way an attacker can tell if its being ...
3
votes
2answers
192 views

Preventing boot from external media in case of theft of laptop or physical security breach in case of desktops?

I wanted to protect my Laptop from common theft. What I did was that I installed an anti-theft software on my Ubuntu 14.04. The guest account is enabled so that the thief can use my laptop while I ...
-1
votes
1answer
124 views

A cctv system for a small shop [closed]

I am not sure if I should ask here but I really can't find any information anywhere else. A family member of mine (let's say X) runs a small fashion shop in Hong Kong, China. The problem is that ...
2
votes
1answer
122 views

Defense in depth vs single security architecture

Traditionally, we have been that defense in depth is the best practice approach if we want to secure our premises from security breach. However, I recently read about DoD's Joint information ...
4
votes
5answers
336 views

Do I need to secure a computer from physical attacks when attackers can already harm in many other ways?

Recently, I was working on a computer system for a model railroad club. This computer system is capable of monitoring and controlling the positions of all the (physical) trains which could be ...
23
votes
7answers
1k views

Securing the security guy's home office: what should we do?

I read an article in the latest InfoSecurity magazine (an infosec trade rag by Elsevier) saying that us security professionals aren't necessarily taking the correct steps to protect our own home ...
3
votes
3answers
144 views

What are the security implications of a dead laptop?

My laptop recently died. I've got a replacement, and I've already pulled both hard drives out of the old one and ensured that there's no disc in the DVD drive. As far as I know, that should ...
0
votes
2answers
96 views

Is there a cryptographic function that generates a reconizable visual pattern?

I have to build a system that will ultimately print a pass allowing access to a building. The validation of this ticket will be done manually (it can also be automatic but that's not likely at this ...
22
votes
2answers
3k views

How do Travel Sentry locks work? (supposedly openable only by security agencies)

Apparently Travel Sentry locks can only be opened: by their owner, by the TSA, CATSA and "other security agencies". How do they work technically? Is there some electronics embedded with ...
4
votes
2answers
128 views

Could Google Mail or Google Drive work as a path to a company's network?

I am a newbie to data security and would like to ask few questions related to Google Mail and Google Drive. What I want to know is how these two apps could be used to access a company's network AND ...
-1
votes
5answers
129 views

Security software to shutdown PC unless specific approach? [closed]

For future refence: In light of answers and critique, my question should have been: 1. How does one make sure a physical attacker with access to a powered, but locked FDE PC fails his/hers attempt to ...
2
votes
1answer
181 views

How can someone sniff dial-up connection using phone line?

Let's assume we have a computer that sends packets to the internet using dial-up connection, and we have access to the analog data on the phone line(we have access to the phone line), how can we make ...
4
votes
1answer
84 views

Should I wipe a brand new Machine and HDD ?

So I am buying a brand new machine and a HDD separate, when I buy this new HDD should I wipe it before I install it ? What necessary steps should I take to make sure it's pretty much clean of any ...
6
votes
3answers
339 views

Risk of spyware on seized devices

This question (Prevention measures against laptop seizure at US borders) addresses a number of techniques for securing data while crossing borders. Perhaps the most useful advice was to simply not ...
0
votes
2answers
64 views

Can I add a new user to an unencrypted Windows installation from a Windows installation disk?

I recall hearing this before, the ability to boot up a Windows PC with an unencrypted hard drive using an installation disk/usb, and use the command line utility on the Windows installation disk to ...
13
votes
3answers
1k views

In what cases can overly strict security policies be detrimental to organisations?

In a philosophical sense is heterogeneous security, a system where people are given more autonomy, better than security policies/procedures written in stone? I've worked at some companies where ...
28
votes
2answers
2k views

Can a connected USB device read all data from the USB bus?

Is it possible for a (malicious) (hardware) USB device to access all the data that is transferred through the USB bus and then read/store this information, essentially sniffing all transferred data? ...
1
vote
2answers
25 views

Destroying sensitive partition

I've got multiple partitions on a computer, one for basic, day to day user stuff, and one for pentesting and security. The pentesting partition is encrypted. Could anyone give me, and everyone else, a ...
41
votes
11answers
9k views

Is it possible to turn a computer into a bomb?

I know this newspaper article sounds absurd. Even if a machine is compromised we (should) have hardware safe guards in all our devices to prevent the software from damaging the hardware. But is it ...
6
votes
2answers
156 views

How to handle decomissioned/donated/RMAed printers?

Printers, nowadays, almost always include some form of non-volatile storage that keep tracks of pretty much everything that went through the device. In the case of larger, "departmental" system that ...
24
votes
1answer
11k views

High-frequency noise deterrents

I've found that walking past certain boutique stores in my city that some places have installed very loud high-frequency noise generators. These cause a fair amount of discomfort for passers by that ...
1
vote
0answers
97 views

Information Security classification [closed]

I've been interested in IT security for a bit (~1 year) and had a bit of experience with NSM as well as web security. I want to have an overview of the entire industry, with all relevant niches and ...
1
vote
0answers
88 views

Vetting new IT development staff [closed]

In the realm of software development what would be the best way to vet prospective employees? We handle potentially sensitive information, and a code base which could be potentially lucrative to ...
0
votes
3answers
2k views

Is it possible to install spyware in password protected android phone?

I own samsung galaxy y, an android. I suspect my roommate has installed spyware in my phone. Is it possible to install spyware in password protected android phone ?
0
votes
1answer
90 views

Ensuring security of a Disaster Recovery Plan

The Disaster Recovery Plan (DRP) is a document that outlines, in detail, the actions that should be taken to restore systems & files in the event of a catastrophe. The fact that these plans hold ...
10
votes
4answers
38k views

Can an employer access Whatsapp messages if you are using their servers?

Does anyone know if an employer can access whatsapp messages if you are using their servers? Whatsapp apparently say the messages are encrypted, but I'm not sure about this.
5
votes
2answers
5k views

How many unique house keys can possibly exist?

A Yahoo! answers user suggested that there are 5^5 possible unique configurations for a physical key, but the answer wasn't sourced. I wondered if anyone had similar numbers for how many possible key ...