The use of physical measures (such as locks and tamper-proofing) or policies (such as Clean Desk) in order to protect sensitive information from unauthorized access.

learn more… | top users | synonyms (1)

4
votes
4answers
203 views

How can I prevent someone from carrying out a file from a machine

Assume the following scenario: You have to set up a machine in a way that a user is unable to bring out a certain set of files (or a single file only) from that machine while he has to be able to ...
4
votes
3answers
2k views

Is there is a way to lock my USB port over the device physically?

Is there is a way to lock my USB port over the device physically ? For example I am connecting the USB mouse and keyboard on an public computer but I do not want anyone to remove them physically. I ...
4
votes
1answer
4k views

What camera resolution is required to identify human faces?

I've been asked to recommend an IP-based security camera in attempt to prevent, or at least record, repeated acts of vandalism occurring at the front of a property. Budget is a concern (The damage ...
4
votes
2answers
2k views

How does syskey in Windows increase the security in a domain?

I use syskey in windows XP and Windows 7. I've read Microsoft's article but I have questions. How does this solution increase security? What are differences between using Syskey in a client that ...
4
votes
4answers
4k views

Block unauthorized user from getting access to intranet

What's the common way to block users from accessing intranet? Right now, whoever plugs in a cable can access any intranet server freely. I want to change this behavior. But given that we run not only ...
4
votes
5answers
336 views

Do I need to secure a computer from physical attacks when attackers can already harm in many other ways?

Recently, I was working on a computer system for a model railroad club. This computer system is capable of monitoring and controlling the positions of all the (physical) trains which could be ...
4
votes
1answer
84 views

Should I wipe a brand new Machine and HDD ?

So I am buying a brand new machine and a HDD separate, when I buy this new HDD should I wipe it before I install it ? What necessary steps should I take to make sure it's pretty much clean of any ...
4
votes
1answer
1k views

Write-protection at hardware level for security

It seems to me that to maximise server security, one ought - in addition to the usual security measures implemented in software - to prevent the overwriting of certain parts of the server system, such ...
4
votes
3answers
327 views

Disable USB keyboard pluggability on MacBook

I'm concerned about USB devices being physically attached to my MacBook laptop when I am about to unlock my computer or while my computer is unlocked. My threat model involves an attacker who is ...
4
votes
1answer
105 views

Motion sensor door locks

I have seen several offices with electric locks for entry that have a sensor for exit. I assume it's some kind of motion or object detection sensor. This is odd because in many cases, there's a ...
4
votes
2answers
128 views

Could Google Mail or Google Drive work as a path to a company's network?

I am a newbie to data security and would like to ask few questions related to Google Mail and Google Drive. What I want to know is how these two apps could be used to access a company's network AND ...
3
votes
4answers
382 views

Help to account all the points of physical access to a rack server to steal software

Let's say I want to move my 1U Dell server to co-location site with a hostile company who will try to steal my code (this is almost 90% probability if I dont take steps)... The limitation for their ...
3
votes
3answers
2k views

Finding hidden cameras

Let's say Alice, Bob, and Mallory all live together in a house. Mallory decides to go on vacation, but before leaving, she decides to play a game with Bob and Alice. She makes two claims: She has ...
3
votes
4answers
955 views

Detecting and filtering data over AC power lines?

Given that it's possible for the average consumer to send covert signals over normal AC lines how can an IT department identify and filter out this communication? I'm not sure how difficult this is ...
3
votes
2answers
970 views

What to do when GSM/Wifi is jammed and ethernet cables are cut?

So.. There are household alarm systems (to defend against burglars) which send SMS/e-mail alerts if an intruder has been detected or an alert is trigged. However, Mobile networks can be jammed, and ...
3
votes
4answers
839 views

If an ATM is stolen, how easy can the personal information of the users be recovered?

ATMs get occasionally stolen. How easy would be for the thiefs to retieve the PINs and other information of the users that have previously used the ATM? Is there a periodic wipe of all ...
3
votes
4answers
375 views

Is there a security device to register unauthorised physical access?

I understand that it is not possible to secure your software if a third party has physical access to the box (eg colo). So may be I can install some sort of hardware (like a seal) which only need to ...
3
votes
3answers
144 views

What are the security implications of a dead laptop?

My laptop recently died. I've got a replacement, and I've already pulled both hard drives out of the old one and ensured that there's no disc in the DVD drive. As far as I know, that should ...
3
votes
2answers
495 views

Door locks & deadbolt appropriate for exterior office door with decorative glass next to it

Suppose I have an office door that has decorative glass on one side of the door. The risk to me is that the window pane could be shattered and a gloved hand can manually unlock and open the door from ...
3
votes
3answers
4k views

is it possible to create a login “key” out of a USB drive?

I was recently thinking about keeping my computer secure from physical access, and i decided that the safest way to keep my data under lock and key, was to do just that: Create a lock and key out of a ...
3
votes
4answers
1k views

Are malicious scripts in batch files detected by antiviruses?

We have many scripts in shared folders in our IT Department. Are malicious scripts in batch files detected by antiviruses?
3
votes
2answers
288 views

What value security wise, if any, does a digital handwritten signature have?

Here's an example of what I mean: (It's basically the same thing as a traditional signature.) Given I've never seen someone fail this control, it's unclear to me what real security such a system ...
3
votes
2answers
75 views

Shutdown if case opened

Assume the user has a full disk encrypted HDD in which their OS and files reside. They also have made attaching USB or any other device without first allowing it cause an automatic shutdown which ...
3
votes
2answers
126 views

Why fear hardware brought to China, when most of it comes from China?

A lot of people will bring disposable hardware (laptops, phones) to business trips to China, eg. Employee laptops in China. Considering that most of that hardware was manufactured there, what is the ...
3
votes
3answers
848 views

Alternate Workstation Lock mechanism

We're all aware of the need for physical security. Everytihng from locks on doors to locking your computer when you leave it. I'm having trouble with some people leaving their stations up as they ...
3
votes
2answers
1k views

How do you keep track of numerous keys in the workplace?

Where I'm currently working there is a policy where various assets (including laptops) have to be cable locked and in the tech support department we have so many transient assets it's becoming ...
3
votes
1answer
831 views

When a company asks to test physical security, what are some techniques one could use to gain entry?

When a company asks to test physical/infrastructure security, what are some techniques one could use to test employees? This could include good excuses to gain access to some hardware/software.
3
votes
5answers
215 views

How should I store a physical written copy of my password? [duplicate]

I can employ all the fancy encryption and the randomest of passwords to my hard drive, but it won't do me any good if I don't remember how to log in. It seems sensible to write down my password, ...
3
votes
4answers
100 views

Thumbdrive and its obsolescence?

Using USB drives in the corporate environment is always the topic of security because viruses and malware can be introduced maliciously or unintentionally. For corporate environment, I am thinking to ...
3
votes
2answers
191 views

Preventing boot from external media in case of theft of laptop or physical security breach in case of desktops?

I wanted to protect my Laptop from common theft. What I did was that I installed an anti-theft software on my Ubuntu 14.04. The guest account is enabled so that the thief can use my laptop while I ...
3
votes
1answer
1k views

How hard is it to read flash memory off a chip?

What are the parameters in play, and what is a rough estimate of the hardness of the task of reading the contents of flash memory off a microcontroller? Of course, it is assumed that there is no ...
3
votes
2answers
447 views

Valid Characters For Magnetic stripe

We bought some Magnetic stripe cards and I'm writing a program that will get talked to by a mag card reader. What I need help with is that I can't, for the life of me, find out what characters are ...
3
votes
2answers
2k views

What are the pros and cons of using a password safe instead of writing passwords on paper?

Many companies have policy again writing passwords and paper and I wonder if there reasoning is sound. Is it always better to use a software password safe than writing passwords on paper? Here are ...
3
votes
3answers
612 views

What are the security implications of phone based keyless entry systems?

I have just been reading about Lockitron which promises to provide phone based keyless entry for the home. As great an idea as this sounds it strikes me that it could come along with some very serious ...
3
votes
1answer
114 views

What can be done to prevent disruption of hardware in the event of a powerful solar flare?

I'm under the impression that a sufficiently powerful solar flare can temporarily disrupt and even damage electronics. Are there any practical approaches that one could take to minimize this ...
3
votes
1answer
60 views

Wiping magnetic stripe on card with magnet?

I asked a question a while back on using magnets (for example powerful Neodymium ones) to wipe a HDD, and got shown a good article proving it is not possible to wipe data. Pretend I am about to ...
3
votes
1answer
56 views

Loss of physical locks/password to safes

Safes can keep important information like part of a dual control password, smartcards and pendrives, and so on. What would be the best practices to prevent loss or damage to a physical locks to a ...
3
votes
3answers
272 views

Risk when attacker has only physical access to a computer's USB port

Attacker has only access to USB port and can either attach a device or pen-drive to a computer, that can be on or off. Imagine a scenario where non-reliable people have access to offices, either ...
3
votes
1answer
53 views

Information Security on a lost android phone

Recently, my android mobile phone was lost/stolen. I had logged into several applications such as Facebook, Paytm, etc. Thus, there are chances that my personal/ transaction details might be leaked. ...
3
votes
1answer
2k views

good product to physical lock down a mac mini server?

Since the recent theft of a mac mini and macbook pro Im looking into products to lock down the mac mini server 2011 model. There are many cable solutions out there like kensington but the mac mini has ...
3
votes
1answer
712 views

Does setting a firmware password add security if FileVault 2 is enabled?

On an up-to-date OS X computer with FileVault 2 (whole-disk encryption, minus the recovery partition), is any security gained by setting a firmware password, as well?
3
votes
0answers
75 views

I want to lock my Macbook lid shut. Where to buy? Alternatives? [closed]

I'm attempting to lock down a computer from unauthorized access. I own a macbook pro late 2011. Backstory I've gone through the basics with file vault and firmware password etc. I'm also getting a ...
2
votes
9answers
2k views

How to secure a public device against abuse? [closed]

What I mean by public device? E.g. in Germany we have small stations to charge cars powered by electricity. This stations are small towers with a flap. Behind the flap are plugs to connect the tower ...
2
votes
8answers
1k views

Finding Hidden Keylogger Through Forcing a Computation Error

It must be possible to detect keylogging by close scrutiny of timing between physical keystroke execution and the character's eventual occurrence on the screen. I've had a friend show me this with ...
2
votes
2answers
665 views

What is the security of random code for authenticating products?

I have seen a startup (Verify Kero) that is building a product for verifying consumer goods. It places a 16 digit secret code under scratch-able coating. Consumer finds the code behind coating and ...
2
votes
2answers
103 views

Physical protection of your servers?

Here is a scenario. You are a small startup company that makes a video game. In your video game, you can exchange money for items. You are not dealing with the credit card/debit card directly but ...
2
votes
2answers
193 views

Securing physical access to your internet connection? (Apartment Utility Box)

I recently moved to a new apartment complex, had my DIY Time Warner box ready to go and hooked up my all my hardware. Everything booted fine but no connection to TW. I tested all the jacks in the ...
2
votes
4answers
108 views

Is it safe to use my personal password as my password in work related accounts?

For example I have this complex personal password cary1bondoc21cary2bondoc as my password and because I am forgetful I also want to used that in work related accounts like company email, etc. Is there ...
2
votes
2answers
423 views

Physically Blocking All PC Ports?

I've got a laptop that is currently 'Air Gapped' that I want to further secure by locking down the USB ports and NIC. I've disabled the NIC from the BIOS, removed the WiFi and bluetooth modules. But I ...
2
votes
2answers
3k views

How to allow only some specific computer systems to access website? [duplicate]

I need a process to allow only certain computer systems access to the website irrespective of the network they are using. Much like a Licensing system, I can provide a private key or something ...