The protection of personnel, hardware, programs, networks, and data from physical circumstances and events.
3
votes
1answer
279 views
What camera resolution is required to identify human faces?
I've been asked to recommend an IP-based security camera in attempt to prevent, or at least record, repeated acts of vandalism occurring at the front of a property.
Budget is a concern (The damage ...
3
votes
3answers
286 views
What are the security implications of phone based keyless entry systems?
I have just been reading about Lockitron which promises to provide phone based keyless entry for the home. As great an idea as this sounds it strikes me that it could come along with some very serious ...
3
votes
2answers
937 views
Safely disable firewire/thunderbolt, patching up DMA exposure
I understand that Firewire 400/800 and Thunderbolt have DMA enabled, and a malicious hardware device can easily read and manipulate system memory at will. If I disable the software drivers for these ...
3
votes
1answer
231 views
Does setting a firmware password add security if FileVault 2 is enabled?
On an up-to-date OS X computer with FileVault 2 (whole-disk encryption, minus the recovery partition), is any security gained by setting a firmware password, as well?
2
votes
4answers
211 views
Detecting and filtering data over AC power lines?
Given that it's possible for the average consumer to send covert signals over normal AC lines how can an IT department identify and filter out this communication?
I'm not sure how difficult this is ...
2
votes
3answers
441 views
is it possible to create a login “key” out of a USB drive?
I was recently thinking about keeping my computer secure from physical access, and i decided that the safest way to keep my data under lock and key, was to do just that: Create a lock and key out of a ...
2
votes
2answers
78 views
“Friend” stole SD card. Tracing an SD card?
First off, let me say that I currently live in Mexico, a land filled with petty theft. I had a group of friends over last night, and they were looking at the photos on my camera. Today, I looked at my ...
2
votes
3answers
240 views
If an ATM is stolen, how easy can the personal information of the users be recovered?
ATMs get occasionally stolen. How easy would be for the thiefs to retieve the PINs and other information of the users that have previously used the ATM? Is there a periodic wipe of all ...
2
votes
3answers
318 views
Cheap door logging for home?
Does someone here knows a cheap DIY door logging system?
What I have:
- 2 doors that needs to be logged
- 1 netbook (running OpenBSD with internet connection & root permissions), the two doors ...
2
votes
3answers
157 views
Physical Security for USB Keys and Systems-on-a-Stick
Do there exist physical security devices for USB sticks that serve a function analogous to laptop locks (i.e. preventing smash-and-grab type attacks)?
If so, what are they and to what extent do they ...
2
votes
2answers
369 views
External IP same as Internal IP security
Where I live my ISP does not give IP addresses out. My external IP address is the same as my external if I plug directly into the wall with no router. My ISP does give everybody a "router", that is ...
2
votes
2answers
207 views
A security checklist for choosing an internet hosting service provider for a virtual private server?
I am in the process of choosing an internet hosting service provider for my website. Besides looking at the reputation of the hosting provider through internet forums, is there a more concrete way of ...
2
votes
1answer
742 views
good product to physical lock down a mac mini server?
Since recent theft of a mac mini and macbook pro Im looking into products to lock down the mac mini server 2011 model. There are many cable solutions out there like kensington but the mac mini has no ...
2
votes
1answer
64 views
Removable FireWire port blocks
There are other questions here enquiring about disabling FireWire ports reversibly via software or irreversibly via hardware (e.g. epoxy/desoldering).
I would like to know if there are any reversible ...
2
votes
1answer
229 views
Changing locks on server cabinet [closed]
I work in higher education, and we have a server room with various server cabinets, mostly APC and Belkin. The room is secured via card swipe access, however each server rack has the same lock, which ...
2
votes
3answers
254 views
Is there such thing as a password enforced write protected flash drive?
We would like to provide a flash drive to a client, that they can boot to, which includes a read-only operating system of our own customization, probably Linux. Every boot, it starts from clean slate.
...
1
vote
3answers
181 views
Keyless entry security systems and HIPAA implications
We are upgrading our office to have badged security doors. What I would particularly like to know is if Keyless Entry systems exist or are of decent quality. By this I mean, I would like the doors ...
1
vote
4answers
282 views
Are malicious scripts in batch files detected by antiviruses?
we have many scripts in shared folders in our IT Department.
Are malicious scripts in batch files detected by antiviruses?
1
vote
3answers
96 views
What would be a good way to guarantee security of theft and loss of sensitive data in a shared rack?
Two of my servers are in a shared rack, we secure them by adding frontcovers to the machines.
The DC is always recording with a camera when one of the shared racks is opened and they write down what ...
1
vote
1answer
221 views
Is using Google Voice number for two-factor authentication a big mistake?
Two-factor authentication is growing in popularity as a security measure. For example, Google, Facebook, Twitter, and many other services all have two-step security options today as well as many banks ...
1
vote
1answer
195 views
What makes a secure smartcard secure? Is contactless/RFID better?
In short what security features exist that I should look for in a smart card?
What physical features exist, which are important?
It appears smart cards may exhibit different levels of wear and ...
1
vote
3answers
104 views
Requirements for a smartphone anti-theft App
I recently installed Cerberus in my [personal] Android device to get some protection against theft (I'm not really interested in protecting its data, but rather in increasing the odds the device will ...
1
vote
1answer
103 views
how to protect from Network scanner on android?
How can I block and detect network scanners on android platforms to stop scanning vlan of my hot spot.
My question is:
which scanners they use?
how can i detect such scanners?
Can i protect ...
1
vote
1answer
85 views
Best way to secure file removals in Windows remotely
I have Windows 2008 R2 box on colocation. I want to remove certain files with a high degree guarantee it cannot be recovered from physical HDD access.
Could someone please explain what levels of ...
1
vote
1answer
83 views
What are my options for securely printing an OTP Scratchcard?
I want to print and distribute several One Time Passwords (OTPs) that can't be easily disclosed to a 3rd party in transit. (think the physical version of a TLS session for private secrets)
To me ...
1
vote
0answers
31 views
SAM Card deployment best practice
As part of my current project we will be deploying smart card readers containing SAM cards for decryption purposes. The deployment process involves a third party software integrator who will control ...
0
votes
3answers
613 views
why Windows Firewall in XP cannot block outbound connections
wikipedia say: XP's Windows Firewall cannot block outbound connections; it is only capable of blocking inbound ones.
another article says: XP defends you with your traffic coming from the web but ...
0
votes
6answers
410 views
Is an ATM alert system triggered by typing the PIN in reverse a secure solution?
Picture an ATM security system where, if the user types the PIN in reverse, the ATM alerts police, the customer's bank, or other parties.
Are there any ATM manufacturers that use this or a similar ...
0
votes
3answers
244 views
Petraeus scandal - what would have been a better way to communicate electronically [closed]
Not a security professional here but .... having read through how it happened, it's clear sending these emails from the shared account by Paula Broadwell was the problem (if I understand correctly). ...
0
votes
2answers
91 views
bootp enabled by default on dhcp reduce security?
by default in Microsoft DHCP server configuration Bootp is enabled and choose both(accept DHCP request and Bootp )
i know that how this work and know about how configure two DHCP Server by Bootp ...
0
votes
1answer
207 views
Standards for physical Access Control systems
Hoping to help protect an IT installation, I've been looking into physical protection systems, specifically Access Control for protected areas. The field is quite big. Are there any US or ...
0
votes
0answers
56 views
Any reference to this old ATM fault (collecting one of the notes before the rest will be taken back) [closed]
For an article I am writing, I would need to know if this fault was also in other countries and if so, I would really appreciate ANY link to newspaper/whatever so I can prove it.
It is an old fault ...
0
votes
0answers
110 views
What RFID tags cannot be currently cloned? [closed]
Can anyone provide me with a list of RFID tags that are still currently secure? That is, they cannot be cloned or modified and no attacks have been demonstrated against them. For example MIFARE is ...
0
votes
0answers
60 views
how to program my own TOKEN using atmega64 [closed]
I'm trying to create a sample security token with Atmega64, And now i'm a little confused about how to program that. As it mentioned in PKCS11 Document token hardware should support about 70 function.
...
0
votes
0answers
123 views
How to set up VLAN network [closed]
I am designing my network to improve security and want to implement Vlans. My problem is that we already have a network 192.168.16.0/24 and have a lot of devices on this network already. From theory, ...
0
votes
0answers
130 views
Does anyone have recommendations for PenTest companies? [closed]
As our company is growing in size we've decided its time for a PenTest. We'd like to do several pentests. One on our actual stie hosted off site on a dedicated provider. One of our internal office ...
-1
votes
2answers
1k views
windows firewall disabled with Norton Internet security or Norton Smart Firewall? [closed]
My Company decide to Change antiviruses and anti-spywares and firewalls.
How to apply changes in all clients and servers safety?
Norton say: ( in this article):
When you are using Windows ...
-2
votes
5answers
1k views
Will antivirus detect all keyloggers?
Our company schedules Security Training courses for our personnel.
In order for us to test them, we develop code such as keyloggers which we email to our personnel to detect stupid personnel, and of ...
-2
votes
1answer
72 views
Is SE a bigger threat than breaking-and-entering or other threats? [closed]
Thinking about this week's topic I thought of something I would love to hear more about:
What is so special about Social Engineering? Is SE a bigger threat than breaking-and-entering?
This is not ...
