Tag Info

New answers tagged

2

Why not keep it very simple: Examinee enters name + other identifying information (e.g. drivers license or passport number) on first page of test. That info will be shown an all subsequent test screens somewhere in the header or footer. Then he puts his drivers license on the table in front of him. Meanwhile you print out an ordered list of license ...


2

Attack vector: Examinees may easily swap drives during or after the test, if there is no pre-authentication of which examinee gets assigned which token. Using just the token is not sufficient, as examinees may pre-arrange an SSN swap. A gives B his SSN. B startes the exam, generating a token for A's SSN on his usb stick. After the exam is completed, B ...


3

The short answer is no. Sure you can make your email very legitimate looking, that isn't the problem. The problem is you are conditioning your users to click on links in emails and email is a 100% insecure medium. Links in emails are an anti-pattern. "Official looking" isn't secure. Almost everything in your email can be replicated by a dedicated ...


1

Not really, or at least it is very hard. Recently a research paper on Stealthy Dopant-Level Hardware Trojans was published which shows how to include a Trojan into hardware that is so hard to detect that even if we optically compared the chip to a non-tampered unit we wouldn't find it. Read the abstract of the paper for an overview and if you want to know ...



Top 50 recent answers are included