The protection of personnel, hardware, programs, networks, and data from physical circumstances and events.

learn more… | top users | synonyms (1)

3
votes
2answers
307 views

Valid Characters For Magnetic stripe

We bought some Magnetic stripe cards and I'm writing a program that will get talked to by a mag card reader. What I need help with is that I can't, for the life of me, find out what characters are ...
3
votes
2answers
1k views

What are the pros and cons of using a password safe instead of writing passwords on paper?

Many companies have policy again writing passwords and paper and I wonder if there reasoning is sound. Is it always better to use a software password safe than writing passwords on paper? Here are ...
3
votes
2answers
1k views

What risks are there with a Bluetooth based door lock, and are there any mitigations?

There are a few interesting Bluetooth door locks on the market that use version Bluetooth 4.0 however there seems to be a few issues with this E0 Encryption flaws Risks during pairing Attacks ...
3
votes
2answers
422 views

Door locks & deadbolt appropriate for exterior office door with decorative glass next to it

Suppose I have an office door that has decorative glass on one side of the door. The risk to me is that the window pane could be shattered and a gloved hand can manually unlock and open the door from ...
3
votes
3answers
585 views

What are the security implications of phone based keyless entry systems?

I have just been reading about Lockitron which promises to provide phone based keyless entry for the home. As great an idea as this sounds it strikes me that it could come along with some very serious ...
3
votes
1answer
94 views

What can be done to prevent disruption of hardware in the event of a powerful solar flare?

I'm under the impression that a sufficiently powerful solar flare can temporarily disrupt and even damage electronics. Are there any practical approaches that one could take to minimize this ...
3
votes
3answers
202 views

Risk when attacker has only physical access to a computer's USB port

Attacker has only access to USB port and can either attach a device or pen-drive to a computer, that can be on or off. Imagine a scenario where non-reliable people have access to offices, either ...
3
votes
1answer
2k views

good product to physical lock down a mac mini server?

Since the recent theft of a mac mini and macbook pro Im looking into products to lock down the mac mini server 2011 model. There are many cable solutions out there like kensington but the mac mini has ...
3
votes
1answer
635 views

Does setting a firmware password add security if FileVault 2 is enabled?

On an up-to-date OS X computer with FileVault 2 (whole-disk encryption, minus the recovery partition), is any security gained by setting a firmware password, as well?
2
votes
9answers
1k views

How to secure a public device against abuse? [closed]

What I mean by public device? E.g. in Germany we have small stations to charge cars powered by electricity. This stations are small towers with a flap. Behind the flap are plugs to connect the tower ...
2
votes
8answers
841 views

Finding Hidden Keylogger Through Forcing a Computation Error

It must be possible to detect keylogging by close scrutiny of timing between physical keystroke execution and the character's eventual occurrence on the screen. I've had a friend show me this with ...
2
votes
4answers
748 views

Detecting and filtering data over AC power lines?

Given that it's possible for the average consumer to send covert signals over normal AC lines how can an IT department identify and filter out this communication? I'm not sure how difficult this is ...
2
votes
2answers
335 views

Physically Blocking All PC Ports?

I've got a laptop that is currently 'Air Gapped' that I want to further secure by locking down the USB ports and NIC. I've disabled the NIC from the BIOS, removed the WiFi and bluetooth modules. But I ...
2
votes
4answers
1k views

Are malicious scripts in batch files detected by antiviruses?

we have many scripts in shared folders in our IT Department. Are malicious scripts in batch files detected by antiviruses?
2
votes
3answers
88 views

What are the security implications of a dead laptop?

My laptop recently died. I've got a replacement, and I've already pulled both hard drives out of the old one and ensured that there's no disc in the DVD drive. As far as I know, that should ...
2
votes
2answers
2k views

How to allow only some specific computer systems to access website? [duplicate]

I need a process to allow only certain computer systems access to the website irrespective of the network they are using. Much like a Licensing system, I can provide a private key or something ...
2
votes
3answers
1k views

Cheap door logging for home?

Does someone here knows a cheap DIY door logging system? What I have: - 2 doors that needs to be logged - 1 netbook (running OpenBSD with internet connection & root permissions), the two doors ...
2
votes
2answers
96 views

Preventing boot from external media in case of theft of laptop or physical security breach in case of desktops?

I wanted to protect my Laptop from common theft. What I did was that I installed an anti-theft software on my Ubuntu 14.04. The guest account is enabled so that the thief can use my laptop while I ...
2
votes
1answer
53 views

Defense in depth vs single security architecture

Traditionally, we have been that defense in depth is the best practice approach if we want to secure our premises from security breach. However, I recently read about DoD's Joint information ...
2
votes
1answer
344 views

From how far away can passive RFID tags be read?

I have been told in the past that with specialized equipment, passive RFID tags could be read at 1100 feet. This seemed a bit far fetched to me, and sure enough, a quick Google search turned up ...
2
votes
1answer
2k views

How to secure my network, laptop, ipad and email accounts which are possibly hacked?

Background Last month I noticed lots of failed emails in my inbox and after few minutes I lost my access to my Yahoo Mail. My friends informed me that they have received spam emails from me. So I ...
2
votes
2answers
82 views

Securing physical access to your internet connection? (Apartment Utility Box)

I recently moved to a new apartment complex, had my DIY Time Warner box ready to go and hooked up my all my hardware. Everything booted fine but no connection to TW. I tested all the jacks in the ...
2
votes
1answer
808 views

Are there HIPAA requirements to encrypt our database hosted in AWS

I'm developing Medical Billing & EHR Software. On completion we are planning to use AWS for hosting and thus provide SAAS. Do we need to encrypt the MySQL database in order to keep HIPAA ...
2
votes
2answers
136 views

Securing data on a server

I have a server which has 'loose' physical security (somewhat easy for the entire server to get stolen). For the sake of the question, let's assume that anyone can access the server physically, what ...
2
votes
4answers
6k views

Is using Google Voice number for two-factor authentication a big mistake?

Two-factor authentication is growing in popularity as a security measure. For example, Google, Facebook, Twitter, and many other services all have two-step security options today as well as many banks ...
2
votes
2answers
837 views

Physical Security for USB Keys and Systems-on-a-Stick

Do there exist physical security devices for USB sticks that serve a function analogous to laptop locks (i.e. preventing smash-and-grab type attacks)? If so, what are they and to what extent do they ...
2
votes
2answers
847 views

External IP same as Internal IP security

Where I live my ISP does not give IP addresses out. My external IP address is the same as my external if I plug directly into the wall with no router. My ISP does give everybody a "router", that is ...
2
votes
1answer
90 views

How can someone sniff dial-up connection using phone line?

Let's assume we have a computer that sends packets to the internet using dial-up connection, and we have access to the analog data on the phone line(we have access to the phone line), how can we make ...
2
votes
1answer
90 views

Web App Protection and Sign On

I have a client that wants to protect access to a web app in case the employee leaves because the app gives access to clients, sales, etc. He wants to "hide" the login credentials to this app and ...
2
votes
1answer
197 views

Removable FireWire port blocks

There are other questions here enquiring about disabling FireWire ports reversibly via software or irreversibly via hardware (e.g. epoxy/desoldering). I would like to know if there are any reversible ...
2
votes
2answers
553 views

A security checklist for choosing an internet hosting service provider for a virtual private server?

I am in the process of choosing an internet hosting service provider for my website. Besides looking at the reputation of the hosting provider through internet forums, is there a more concrete way of ...
2
votes
1answer
105 views

Can Polygraphs be effectively 'beaten'? [closed]

This article suggests that polygraphs are rather rudimentary and thus very susceptible to being 'beaten'. In pop culture we see all the time movies where polygraphs are beaten -but with great ...
2
votes
1answer
2k views

Changing locks on server cabinet [closed]

I work in higher education, and we have a server room with various server cabinets, mostly APC and Belkin. The room is secured via card swipe access, however each server rack has the same lock, which ...
2
votes
3answers
689 views

Is there such thing as a password enforced write protected flash drive?

We would like to provide a flash drive to a client, that they can boot to, which includes a read-only operating system of our own customization, probably Linux. Every boot, it starts from clean slate. ...
2
votes
0answers
37 views

How do I start securing a virtual appliance to avoid manipulation? [closed]

We have created an amateur software product related with monitoring and management of specific services. It has been made in Python and runs a web service as frontend to show the data in a nice way ...
2
votes
0answers
43 views

Advanced research in securing development environment when offered via remote access

With this question I am looking for a direction or suggestions towards advanced research that might be going on currently in designing remote access environments for the development environment(DE) ...
2
votes
1answer
210 views

Can linux (be made to) detect foreign connections to the ram bus?

I've been made aware on many answers and some comments that an attacker can read memory while a system is still running by attaching some sort of connection directly to the ram bus. Can linux ...
2
votes
0answers
121 views

SAM Card deployment best practice

As part of my current project we will be deploying smart card readers containing SAM cards for decryption purposes. The deployment process involves a third party software integrator who will control ...
2
votes
2answers
354 views

What are my options for securely printing an OTP Scratchcard?

I want to print and distribute several One Time Passwords (OTPs) that can't be easily disclosed to a 3rd party in transit. (think the physical version of a TLS session for private secrets) To me ...
1
vote
2answers
1k views

How can I protect myself against programs that turn the webcam on without the indicator light? [duplicate]

Webcams can be turned on without the indicator light: to prevent unwanted use, I wonder whether there exist applications warning that the webcam is being used, or any other kind of protection. ...
1
vote
4answers
72 views

Is it safe to use my personal password as my password in work related accounts?

For example I have this complex personal password cary1bondoc21cary2bondoc as my password and because I am forgetful I also want to used that in work related accounts like company email, etc. Is there ...
1
vote
3answers
369 views

Environmentally friendly ways to destroy hard drives

The best method to prevent others from reading the data on hard drives is to destroy the drives physically: a sledgehammer is a cheap and effective tool to prevent the data from being read again. ...
1
vote
3answers
142 views

What would be a good way to guarantee security of theft and loss of sensitive data in a shared rack?

Two of my servers are in a shared rack, we secure them by adding frontcovers to the machines. The DC is always recording with a camera when one of the shared racks is opened and they write down what ...
1
vote
1answer
42 views

Securing sesitive data from developers

I have an enterprise application running that uses both MySQL and Mongodb datastores. My development team all have ssh access to the machine in order to perform application releases, maintenance etc. ...
1
vote
1answer
120 views

Is there is a reason for data-cables shredding?

Just to make sure, is there is a reason for shredding any type of data cables? Is it OK to throw them away just as they are? Thanks.
1
vote
1answer
270 views

How much information can be obtained from observing someone type their password?

Seems like it wouldn't be too hard to determine if someone is using all lowercase, special characters, or even the length of their password. In fact, the length might be discovered from audio only. ...
1
vote
1answer
412 views

What makes a secure smartcard secure? Is contactless/RFID better?

In short what security features exist that I should look for in a smart card? What physical features exist, which are important? It appears smart cards may exhibit different levels of wear and ...
1
vote
2answers
19 views

Destroying sensitive partition

I've got multiple partitions on a computer, one for basic, day to day user stuff, and one for pentesting and security. The pentesting partition is encrypted. Could anyone give me, and everyone else, a ...
1
vote
2answers
1k views

Best practices for notebook anti-theft. Computer tracking

I am buying a new Thinkpad with an in-built GPS/Cellular modem. I am thinking what are the best practices for making the notebook secure in case of theft. I am planning to do full disk encryption and ...
1
vote
1answer
94 views

Is there a value in using portable programs on a USB key?

If I am working writing a text document in a text editor (say notepad or MS word, or ...) then I can save the file and the encrypt this file. I can then try to erase the original file by overwriting ...