The protection of personnel, hardware, programs, networks, and data from physical circumstances and events.
2
votes
1answer
37 views
What cellular network is used for automobile theft recovery? Can that be used for PCs and mobile devices?
I'm interested in sending a remote wipe command to stolen IT devices, such as a cell phone, or wifi connected device. However most remote wipe technologies require that the cellular service (or wifi) ...
8
votes
2answers
381 views
“Friend” stole SD card. Tracing an SD card?
First off, let me say that I currently live in Mexico, a land filled with petty theft. I had a group of friends over last night, and they were looking at the photos on my camera. Today, I looked at my ...
1
vote
0answers
35 views
SAM Card deployment best practice
As part of my current project we will be deploying smart card readers containing SAM cards for decryption purposes. The deployment process involves a third party software integrator who will control ...
126
votes
12answers
18k views
How is an ATM secure?
I'm curious why an ATM computer is considered secure. The general adage of "If an attacker has physical access to my machine, all bets are off," seems to not apply in this circumstance (since ...
5
votes
1answer
75 views
Security differences between Passive and Active RFID tags
Most people are aware there are two types of RFID tags, active tags (ones that contain a power source of some kind) and passive tags (ones that are powered by the RF field).
I'd like to know if ...
4
votes
4answers
110 views
Block unauthorized user from getting access to intranet
What's the common way to block users from accessing intranet?
Right now, whoever plugs in a cable can access any intranet server freely. I want to change this behavior. But given that we run not only ...
13
votes
2answers
332 views
What is the difference between types of motion sensors?
So i understand there are a number of different motion sensor technologies out where including Active Infrared (AIRs), Passive Infrared (PIRs), Microwave motion sensors and Ultrasonic motion sensors.
...
16
votes
1answer
281 views
High-frequency noise deterrents
I've found that walking past certain boutique stores in my city that some places have installed very loud high-frequency noise generators. These cause a fair amount of discomfort for passers by that ...
13
votes
3answers
249 views
Risks of Mullions in High Security Areas
I have a storage space full of information assets. The room itself is sound; there are no windows, the walls go all the ceiling, and there is only a single entrance with two good stout doors and high ...
8
votes
1answer
336 views
How to apply IT Security knowledge to Home Security?
Today my car got stolen from my house, and it is possible the person who did it has access to my home. I try to take secure measures online to maintain security, yet it seems I never paid attention to ...
2
votes
1answer
64 views
Removable FireWire port blocks
There are other questions here enquiring about disabling FireWire ports reversibly via software or irreversibly via hardware (e.g. epoxy/desoldering).
I would like to know if there are any reversible ...
4
votes
4answers
8k views
Can an employer access Whatsapp messages if you are using their servers?
Does anyone know if an employer can access whatsapp messages if you are using their servers? Whatsapp apparently say the messages are encrypted, but I'm not sure about this.
3
votes
2answers
942 views
Safely disable firewire/thunderbolt, patching up DMA exposure
I understand that Firewire 400/800 and Thunderbolt have DMA enabled, and a malicious hardware device can easily read and manipulate system memory at will. If I disable the software drivers for these ...
2
votes
1answer
232 views
Changing locks on server cabinet [closed]
I work in higher education, and we have a server room with various server cabinets, mostly APC and Belkin. The room is secured via card swipe access, however each server rack has the same lock, which ...
2
votes
3answers
240 views
If an ATM is stolen, how easy can the personal information of the users be recovered?
ATMs get occasionally stolen. How easy would be for the thiefs to retieve the PINs and other information of the users that have previously used the ATM? Is there a periodic wipe of all ...
1
vote
1answer
224 views
Is using Google Voice number for two-factor authentication a big mistake?
Two-factor authentication is growing in popularity as a security measure. For example, Google, Facebook, Twitter, and many other services all have two-step security options today as well as many banks ...
0
votes
0answers
56 views
Any reference to this old ATM fault (collecting one of the notes before the rest will be taken back) [closed]
For an article I am writing, I would need to know if this fault was also in other countries and if so, I would really appreciate ANY link to newspaper/whatever so I can prove it.
It is an old fault ...
15
votes
5answers
978 views
What is the most security benefit of a clean desk policy?
Starting to study for Security+ using Darril Gibson's book I took the pre-exam and one of the latest questions is “What is the most security benefit of a clean desk policy?”
The choices are:
...
0
votes
2answers
92 views
bootp enabled by default on dhcp reduce security?
by default in Microsoft DHCP server configuration Bootp is enabled and choose both(accept DHCP request and Bootp )
i know that how this work and know about how configure two DHCP Server by Bootp ...
1
vote
3answers
106 views
Requirements for a smartphone anti-theft App
I recently installed Cerberus in my [personal] Android device to get some protection against theft (I'm not really interested in protecting its data, but rather in increasing the odds the device will ...
3
votes
3answers
266 views
Is there is a way to lock my USB port over the device physically?
Is there is a way to lock my USB port over the device physically ?
For example I am connecting the USB mouse and keyboard on an public computer but I do not want anyone to remove them physically. I ...
0
votes
0answers
110 views
What RFID tags cannot be currently cloned? [closed]
Can anyone provide me with a list of RFID tags that are still currently secure? That is, they cannot be cloned or modified and no attacks have been demonstrated against them. For example MIFARE is ...
1
vote
1answer
84 views
What are my options for securely printing an OTP Scratchcard?
I want to print and distribute several One Time Passwords (OTPs) that can't be easily disclosed to a 3rd party in transit. (think the physical version of a TLS session for private secrets)
To me ...
26
votes
7answers
5k views
Are powerline ethernet adapters inherently secure?
I have 2 Zyxel PLA407 powerline adapters. Router is downstairs connected to one adapter, other adapter is upstairs about 30 feet away connected to a desktop. I have a house, not an apartment or ...
0
votes
6answers
416 views
Is an ATM alert system triggered by typing the PIN in reverse a secure solution?
Picture an ATM security system where, if the user types the PIN in reverse, the ATM alerts police, the customer's bank, or other parties.
Are there any ATM manufacturers that use this or a similar ...
4
votes
3answers
219 views
Live Linux which does not mount any hard drive in the computer
I am searching for a Linux System which runs from a CD and does not mount any hard drive of the computer.
I want to prevent any possiblity to write something on the hard drive of the computer and on ...
10
votes
3answers
1k views
Can law enforcement track a criminal through dynamic IP address?
I ask because a week ago my home was broken into and, among other things, my iMac computer was stolen. I am desperate to get it back because it has all the pictures of my daughters from the last ...
4
votes
2answers
746 views
How easily could be truecrypt and EFS cracked in this scenario
I suspect some info was subtracted in the past months from my laptop. Therefore Im looking for methods to encrypt my data. I want to try using truecrypt for the sensitive files folder plus EFS for ...
10
votes
1answer
230 views
Slot machine segfault: what can we determine?
We walked into a casino and saw this near the entrance. I don't have a specific question, but is there anything that would be interesting to share and explain from the image?
2
votes
4answers
212 views
Detecting and filtering data over AC power lines?
Given that it's possible for the average consumer to send covert signals over normal AC lines how can an IT department identify and filter out this communication?
I'm not sure how difficult this is ...
1
vote
1answer
103 views
how to protect from Network scanner on android?
How can I block and detect network scanners on android platforms to stop scanning vlan of my hot spot.
My question is:
which scanners they use?
how can i detect such scanners?
Can i protect ...
1
vote
4answers
284 views
Are malicious scripts in batch files detected by antiviruses?
we have many scripts in shared folders in our IT Department.
Are malicious scripts in batch files detected by antiviruses?
2
votes
3answers
158 views
Physical Security for USB Keys and Systems-on-a-Stick
Do there exist physical security devices for USB sticks that serve a function analogous to laptop locks (i.e. preventing smash-and-grab type attacks)?
If so, what are they and to what extent do they ...
6
votes
1answer
162 views
What is the difference between Simple Power Analysis and Differential Power Analysis?
What is the difference between Simple Power Analysis (SPA) and Differential Power Analysis (DPA) and why is it not possible to do an SPA attack on FPGAs?
My basic understanding is they are ...
28
votes
12answers
3k views
Is it possible to turn a computer into a bomb?
I know this newspaper article sounds absurd. Even if a machine is compromised we (should) have hardware safe guards in all our devices to prevent the software from damaging the hardware. But is it ...
1
vote
3answers
181 views
Keyless entry security systems and HIPAA implications
We are upgrading our office to have badged security doors. What I would particularly like to know is if Keyless Entry systems exist or are of decent quality. By this I mean, I would like the doors ...
5
votes
3answers
184 views
Sourcing hardware that is least likely to contain backdoors
I understand that CPU silicon (for example) is scrutinized for backdoors but there are other aspects of a computer system that may "leak data" to the outside world unbeknownst to the owner regardless ...
3
votes
4answers
213 views
Is there a security device to register unauthorised physical access?
I understand that it is not possible to secure your software if a third party has physical access to the box (eg colo). So may be I can install some sort of hardware (like a seal) which only need to ...
-1
votes
2answers
1k views
windows firewall disabled with Norton Internet security or Norton Smart Firewall? [closed]
My Company decide to Change antiviruses and anti-spywares and firewalls.
How to apply changes in all clients and servers safety?
Norton say: ( in this article):
When you are using Windows ...
0
votes
3answers
625 views
why Windows Firewall in XP cannot block outbound connections
wikipedia say: XP's Windows Firewall cannot block outbound connections; it is only capable of blocking inbound ones.
another article says: XP defends you with your traffic coming from the web but ...
1
vote
1answer
85 views
Best way to secure file removals in Windows remotely
I have Windows 2008 R2 box on colocation. I want to remove certain files with a high degree guarantee it cannot be recovered from physical HDD access.
Could someone please explain what levels of ...
0
votes
3answers
244 views
Petraeus scandal - what would have been a better way to communicate electronically [closed]
Not a security professional here but .... having read through how it happened, it's clear sending these emails from the shared account by Paula Broadwell was the problem (if I understand correctly). ...
-2
votes
5answers
1k views
Will antivirus detect all keyloggers?
Our company schedules Security Training courses for our personnel.
In order for us to test them, we develop code such as keyloggers which we email to our personnel to detect stupid personnel, and of ...
14
votes
2answers
1k views
How can vending machines be hacked? And how can I prevent it?
I am developing a vending machine and want to make it secure.
In a comment to my previous question, @Polynomial said "Vending machines (and similar devices) can often be pwned via buffer overflows on ...
6
votes
6answers
493 views
Is it safe to use virtual machines when examining malware?
We want to study for the CEH program and have downloaded 12 DVDs that 6 DVDs are software key-loggers, Trojans, etc. that are all detected by antivirus. This prevents us from examining them and ...
4
votes
2answers
504 views
How does syskey in Windows increase the security in a domain?
I use syskey in windows XP and Windows 7. I've read Microsoft's article but I have questions.
How does this solution increase security?
What are differences between using Syskey in a client that ...
76
votes
13answers
6k views
Why do we lock our computers?
It's common knowledge that if somebody has physical access to your machine they can do whatever they want with it1.
So why do we always lock our computers? If somebody has physical access to my ...
2
votes
2answers
207 views
A security checklist for choosing an internet hosting service provider for a virtual private server?
I am in the process of choosing an internet hosting service provider for my website. Besides looking at the reputation of the hosting provider through internet forums, is there a more concrete way of ...
3
votes
3answers
288 views
What are the security implications of phone based keyless entry systems?
I have just been reading about Lockitron which promises to provide phone based keyless entry for the home. As great an idea as this sounds it strikes me that it could come along with some very serious ...
26
votes
3answers
814 views
How can you judge the physical security of a padlock?
I recently learnt to pick locks. Eager to test out my skills, I tried picking a padlock I'd been using on a secure storage box for a number of years, and found that it only had one pin - I can get ...
