Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [hardware]

For attacks against, or best practices for physical components of an Information Technology system. It can consist of network equipment, servers, CPUs, hardware security module, smartcards, etc. When using this tag, also include an additional tag for the specific type of hardware.

2
votes
0answers
94 views

Why don't smartphone manufactures write the IMEI onto one time writable ROM so that it can't be tampered with? [on hold]

The title says it all basically. Even now, why is tampering IMEI possible at all? Shouldn't manufactures be using one time writable memory to embed IMEI into phones? Why don't they?
1
vote
0answers
49 views

Are there any observed Rowhammer attacks in the wild

Due to the latest news regarding Rowhammer and its applicability to ECC DRAM, I was wondering whether there are any Rowhammer attacks spotted in the wild. Given the various approaches to conduct a ...
2
votes
1answer
63 views

Does IOMMU protect against malware insertion through PCI Network card/Sound card DMA?

I've just read about this: https://www.tripwire.com/state-of-security/security-data-protection/backdoors-hardware-attacks-rakshasa-malware/ Asides from the question in the title, I'd also like to add ...
-1
votes
1answer
75 views

What hardware components in a laptop should be removed in order to prevent it from wirelessly communicating with other devices?

If you have a laptop, what hardware components should be removed in order to prevent it from wirelessly communicating with other devices? In other words, how can I prevent a laptop from getting ...
0
votes
1answer
47 views

The main things a cloud data center could inject into its hardware

So some cloud service providers like Amazon use custom hardware to improve different characteristics of their servers. This also means they can control the security better, because there is nothing ...
0
votes
1answer
28 views

Is it possible to completely prevent Speculative Execution Side-Channel attacks?

I'm learning about computer architecture recently, and I heard that branch prediction is really tricky but may improve the efficiency of cpu a lot, then I came across this term. My question is that is ...
0
votes
1answer
29 views

Commodity Conversion Cables with Write Blockers

Looking at write-blocking devices I've notice a large variety of specialized hardware based on different source connector types, including USB-to-USB write blockers. It seems as though it should be ...
2
votes
2answers
135 views

How to securely destroy old cellphone, to avoid personal data recuperation?

While cleaning I've found an old cellphone. This phone does not turn on, and I'm not sure if contains personal data. I would like to throw away this phone, but I'm concerted if this data can be ...
1
vote
3answers
65 views

Are DTMF tones decoded by the DTMF producer?

If I generate a DTMF(dual tone multi frequency) tone on phone A, clearly the tone gets decoded by the other phones (phone B, C...) on the call. Does the DTMF tone also get decoded by phone A? How is ...
60
votes
5answers
14k views

What are the risks of buying a used/refurbished computer? How can I mitigate those risks?

I bought a used computer that appears to be wiped clean, but can I be sure?
2
votes
3answers
76 views

Protect hdd from writing permanently

I am looking for a way to permanently lock an external hdd to read-only mode without a way for the external attacker to make it writable. If it is not possible to use a password or pin to make disk ...
0
votes
2answers
121 views

The most secure external hard drives on the market

Wondering what the most secure hard drives are on the market, as stuff like this points out that sometime the "encryption software" that comes bundled with external hard drives is probably insecure ...
0
votes
1answer
61 views

How to completely clear an external hard drive from scratch

I am currently wondering how to detect malware on an HDD, so trying to break apart the questions into smaller chunks. For this question I am wondering how to completely clear an external hard drive (...
1
vote
2answers
78 views

How to detect malware on an HDD from scratch

I am wondering how to detect a virus or malware or anything that exists on an HDD (I am thinking of external hard drives). Doing a quick search led to these which aren't quite related: Virus checking ...
2
votes
1answer
83 views

How to reuse a rewritable DVD from an unknown source?

I have a used rewritable DVD that I want to wipe and use to store new data. The DVD has been written to before by someone I don't know and can't necessarily trust. Is there a safe way to use the disc? ...
13
votes
1answer
4k views

New CVE-2018-5407 “PortSmash vulnerablity” in Intel CPU

I just heard in the news: Intel CPUs impacted by new PortSmash side-channel vulnerability. Is it as threatening as Meltdown/Spectre? Is it patched? What should we do to be safe? Does it affect AMD CPU'...
0
votes
2answers
121 views

PC hardware and firmware modified?

My company own some PCs and laptops. The firmware and hardware may have been modified. The adversary is a hacker who works for a mid sized company. It is not a three letter agency or the government. ...
0
votes
1answer
36 views

Decryption only on specific Device

Let's say I have a closed user group and want to send them encrypted data over an insecure channel. I have previously had access to their devices and could have installed a decryption key. Is there ...
1
vote
1answer
56 views

How do Field Programmable Gate Arrays (FPGAs) compare to Graphics Processing Units (GPUs); for cracking hashes?

As a general rule, GPUs are more effective than CPUs when it comes to performing acutely repetitive tasks, like iterating over lists and generating permutations of a set (i.e. exhausting dictionaries &...
2
votes
0answers
52 views

Can maliciously modified ACPI AML be executed without a reboot?

ACPI tables contain ACPI Machine Language, or AML, which is executed by an interpreter in the kernel at boot. Certain ACPI tables, such as the DSDT, are necessary to support hardware ACPI events such ...
3
votes
1answer
102 views

How to enforce on the OS level to recognise only certain keyboards

I give employees AES wireless keyboards. I would like to enforce the OS to only recognise the keyboard we supply. Is that possible? Assuming my employees OS are Windows 10, Ubuntu, Mac OSX. How could ...
-2
votes
1answer
149 views

A hardware spy chip was found in server equipment recently. How does it work? [closed]

According to Bloomberg (and many other sites) some servers manufactured in China and shipped to the US were infiltrated with a spy chip the size of an SMD capacitor (as it says in the article): https:/...
2
votes
1answer
75 views

Are there ways in determining if devices such as router have been tampered with?

In working with a number of non-profit organizations, devices such as routers that may have been used by other businesses are often acquired. Equally, devices are often inherited through other ...
2
votes
1answer
677 views

Use MAC Address to Identify Laptop Model? [closed]

Is it possible to use the first 6 characters (D8:9D:67) of a MAC address to learn the model/version of the device? For example, this MAC address belong to Hewlett Packard. But they manufacture ...
1
vote
1answer
133 views

System Encryption With Veracrypt/Truecrypt- What is the difference between Wipe Mode “None” and 3 pass, 1 pass etc?

First I wanted to make sure we're talking about using a Non-SSD Hard drive. I know SSD drives work differently. Here would be a good reference/guide on system encryption: https://www.howtogeek.com/...
0
votes
4answers
409 views

Should the recent Tiny Chip attack teach us to invest less in our security posture?

Now with upcoming new year budgets to purchase the next tools and services for protecting our company to increase organization posture against cyber attack, I can't stop thinking if we should reduce ...
3
votes
0answers
281 views

How does the Supermicro hardware trojan work? [closed]

Today Bloomberg published an article about a newly discovered hardware trojan found on Supermicro boards. The article is titled "The Big Hack". Unfortunately the article was not very specific about ...
0
votes
3answers
68 views

Can Windows take data from other OS running on same hardware?

I am looking for the way how to set up the my environments as I need more than one OS at once. I care about privacy and securities the most, that is my priority. But I can't refuse Windows in full. ...
2
votes
1answer
42 views

Vulnerabilities of IT system due to hardware?

Is there any relation between specific hardware (like specific kind of CPU etc) or laptop manufacturing brands and the hacked environments run on? Can this be measured in any way like stolen data or ...
1
vote
1answer
221 views

Server protection measures from authorities

I am on a project which is illegal in my nation but is not illegal anywhere in the world. In order not to get a 100yr sentence I should be prepared for seizures and forensics. I am running a server ...
1
vote
1answer
73 views

How to mitigate the risks of using new, third party imported electronic accessories?

As someone who is naturally good at recognizing risk and who are striving to maintain a wholistic view on security, I’m wondering how to evaluate and reduce the risks of hardware accessories (I.e. ...
1
vote
1answer
406 views

How to check hardware integrity?

When we download an ISO or any file we can hash it to ensure that the downloaded file has not been tempered i.e integrity of that file is preserved. But when I am buying a hardware device (monitor, ...
3
votes
1answer
198 views

If rowhammer only results in capacitor discharge, how can it flip 0 to 1?

In rowhammer, why will changing the voltage on one row cause the other row to open/close? Is it related to induction? How can it change bits from 0 to 1? I understand from 1 to 0 - voltage discharge, ...
0
votes
3answers
110 views

dongle development

I am to provide a hardware+software solution. The software is an application in c++ running on windows. The hardware is motherboard+processor+disk+memory. In order to protect the solution, I need to ...
4
votes
2answers
157 views

Security of WWAN cards in laptops

I'm thinking about buying a WWAN card for my laptop (like this one here), as it is more convenient to use than USB tethering. However, I'm concerned about the security risk that comes with such a card ...
0
votes
1answer
99 views

Which encrypted USB stick is the better option? [closed]

I am looking for a hardware encrypted USB stick to carry some important files such as my KeePassXC database, Key files, cryptocurrency wallets, certificates and other stuff with me. There are some ...
2
votes
0answers
37 views

Minimum set of ACS features to secure remote PCIe devices

According to a Google blog post, Google has been experimenting with providing raw access to PCIe devices in a remote environment. They set out to discover what Access Control Service features (ACS, ...
2
votes
1answer
111 views

How can an old hardware lead to a security failure?

I am working on critical cyber physical systems, and my work and research lead me to some questions. In the following, I assume that the attacker is not able to change the hardware of your system and ...
5
votes
3answers
2k views

Is the Linux kernel vulnerable to LazyFP (CVE-2018-3665)?

Recently, a side-channel attack was discovered that exploits lazy FPU state switching to leak the contents of MMX, SSE, and AVX registers. The vulnerability can only be exploited when lazy FPU saves ...
2
votes
1answer
125 views

Stolen laptop simulation - Pentest

One of the risks being simulated for organizations are stolen laptops. Was wondering if anyone had a methodology/list of items to check when assessing the security of Windows laptops. Here is my ...
4
votes
1answer
105 views

Is it possible to ensure that firmware doesn't keylog? [duplicate]

Not a conspiracy theory, just a thought experiment. Let's say some big smartphone manufacturer put keylogger (or any other malware) in their hardware. Would it be possible to reveal it with 100% ...
5
votes
1answer
299 views

Are PS/2 devices a risky piece of hardware for modern point of sale devices to be using?

This question is based off of a TempleOS question here on Super User. The gist is that PS/2 support seems to be disabled from many modern BIOS’es due to a possible security flaw in the protocol. ...
5
votes
1answer
191 views

What use does a TPM have for accurate timekeeping?

I stumbled across this image and something immediately stood out to me. This is a photograph of a discrete TPM card. That silver cylinder on the left is a crystal oscillator, used to tell time with ...
3
votes
1answer
111 views

Are IDE DMA attacks possible and is it possible to prevent them purely with software means without any IOMMU or other special hardware

I mean if it possible to safely plug a PCMCIA card into a PC without IOMMU? Such computers are very widespread, every digital TV or receiver has a CI+ slot, which is PCMCIA, and people insert there ...
0
votes
0answers
27 views

Possible physical interface attacks of BMCs on a server

Following from: here, Let's say you have a server at a data centre, but a hacker manages to find a way in and has access to your server. What are the attack possibilities regarding Baseboard ...
1
vote
0answers
51 views

Possible physical interface attacks of DMA on a server

Following from: here, Let's say you have a server at a data centre, but a hacker manages to find a way in and has access to your server. What are the attack possibilities regarding Direct Memory ...
0
votes
1answer
212 views

How can I check if my second hand Apple wireless keyboard contains a keylogger?

I just got a cheap second-hand magic keyboard (Apple). Is there any way to check if it's been key logged? I cannot see any screws or openings other than the one for the battery pack.
0
votes
2answers
108 views

Data recovery hardware need

In terms of data recovery, what is the actual technical need for dedicated hardware such as Atola, PC3000 or Deepspar? What are these devices doing that I cannot achieve using regular Hex/Digital ...
1
vote
1answer
134 views

Do Spectre(-NG) and Meltdown affect Mill?

Given what is publicly known about the Mill CPU, would it be affected by Spectre(-NG) or Meltdown style attacks? Why/why not?
2
votes
3answers
220 views

Wipe inaccessible hard drive before returning to vendor

My external backup drive broke recently. It just beeps but does not show up in Explorer but in Device Manager. Sadly this drive contains my unencrypted backups. (Not a failure I will repeat). Is ...