Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
The results are in! See what nearly 90,000 developers picked as their most loved, dreaded, and desired coding languages and more in the 2019 Developer Survey.

Questions tagged [hardware]

For attacks against, or best practices for physical components of an Information Technology system. It can consist of network equipment, servers, CPUs, hardware security module, smartcards, etc. When using this tag, also include an additional tag for the specific type of hardware.

0
votes
0answers
40 views

Phoenix/Samsung BIOS/HDD security

I have a laptop bought in 2011. I want to protect its BIOS and HDD (data is already encrypted anyway). But I have seen these vulnerabilities: After 3 incorrect tries, I see "System Disabled" with ...
1
vote
1answer
71 views

Local area network multi-device network communication protocol

I am planning to build a local area network that will have one Master device and multiple Slave devices. The communication should be able to handle only ON/OFF functionality of the devices (devices ...
0
votes
2answers
72 views

What is risky about international travel?

I have seen guidelines which suggest that traveling overseas is particularly risky when it comes to protecting your intellectual property. I'm confused about what specifically are the factors that ...
0
votes
1answer
81 views

Does Apple supply hardware keyloggers? [closed]

I received a brand new Mac laptop for work that is basically ours and doesn’t have to be returned, even after quitting. It was inside the box and sealed. I was wondering if Apple supplies and installs ...
0
votes
0answers
51 views

Is Linux dangerous for secure environments because it's open source? [duplicate]

I work for a company that sells hardware products with Linux embedded into the product. We lost a job for a defense contractor due to our hardware running Linux. Their reason was "because it's open ...
0
votes
0answers
172 views

How to enable hardware encryption of intel ssd 660p 1TB?

How to enable hardware encryption of my intel ssd 660p 1TB? I can't find any useful information on the internet. I hope that the encryption function can be used for theft prevention. That is to say, ...
2
votes
1answer
173 views

Anomaly on new laptop. Does it suggest tampering?

My laptop has a plastic chassis whose panels click into place (no screws on the outside). When I bought it (new), there was a gap on one side along the seam joining the top and bottom halves of the ...
0
votes
1answer
52 views

External hard drive's hardware vulnerabilities [closed]

You have an external hard drive that was left in a public place. The data is encrypted. What are the hardware or software vulnerabilities one can use to get the encryption password when one decrypts ...
98
votes
9answers
19k views

Buying a “Used” Router

I am buying a "new" router from an open-box sale at a company that liquidates eCommerce returns. Plan to use it for a home network at cottage. I'm a bit nervous that it could have been modified by ...
3
votes
1answer
110 views

Why must Meltdown use probe array?

This is code snippet of Meltdown assembly language code: 1. ; rcx = kernel address, rbx = probe array 2. xor rax, rax 3. retry: 4. mov al, byte [rcx] 5. shl rax, 0xc 6. jz retry 7. mov rbx, ...
0
votes
0answers
72 views

How to securely generate a License tied to 1 Computer for each user

This question is related to my first question: How secure is this schema for Online Licensing System? I'm trying to sell a subscription based software and I can't find a good way to generate a serial ...
3
votes
0answers
113 views

How is it possible that the Metasploit meterpreter can take pictures without “notifying” the user?

Im curious how the Meterpreter can take pictures from my webcam without turning on the webcam LED? Ive read that you have to write/change a driver, or a firmware, or you just change some DLLs, but ...
2
votes
0answers
112 views

Why don't smartphone manufactures write the IMEI onto one time writable ROM so that it can't be tampered with? [closed]

The title says it all basically. Even now, why is tampering IMEI possible at all? Shouldn't manufactures be using one time writable memory to embed IMEI into phones? Why don't they?
1
vote
1answer
164 views

Are there any observed Rowhammer attacks in the wild

Due to the latest news regarding Rowhammer and its applicability to ECC DRAM, I was wondering whether there are any Rowhammer attacks spotted in the wild. Given the various approaches to conduct a ...
2
votes
1answer
100 views

Does IOMMU protect against malware insertion through PCI Network card/Sound card DMA?

I've just read about this: https://www.tripwire.com/state-of-security/security-data-protection/backdoors-hardware-attacks-rakshasa-malware/ Asides from the question in the title, I'd also like to add ...
-1
votes
1answer
83 views

What hardware components in a laptop should be removed in order to prevent it from wirelessly communicating with other devices?

If you have a laptop, what hardware components should be removed in order to prevent it from wirelessly communicating with other devices? In other words, how can I prevent a laptop from getting ...
0
votes
1answer
51 views

The main things a cloud data center could inject into its hardware

So some cloud service providers like Amazon use custom hardware to improve different characteristics of their servers. This also means they can control the security better, because there is nothing ...
0
votes
1answer
45 views

Is it possible to completely prevent Speculative Execution Side-Channel attacks?

I'm learning about computer architecture recently, and I heard that branch prediction is really tricky but may improve the efficiency of cpu a lot, then I came across this term. My question is that is ...
0
votes
1answer
34 views

Commodity Conversion Cables with Write Blockers

Looking at write-blocking devices I've notice a large variety of specialized hardware based on different source connector types, including USB-to-USB write blockers. It seems as though it should be ...
2
votes
2answers
175 views

How to securely destroy old cellphone, to avoid personal data recuperation?

While cleaning I've found an old cellphone. This phone does not turn on, and I'm not sure if contains personal data. I would like to throw away this phone, but I'm concerted if this data can be ...
1
vote
3answers
92 views

Are DTMF tones decoded by the DTMF producer?

If I generate a DTMF(dual tone multi frequency) tone on phone A, clearly the tone gets decoded by the other phones (phone B, C...) on the call. Does the DTMF tone also get decoded by phone A? How is ...
60
votes
5answers
15k views

What are the risks of buying a used/refurbished computer? How can I mitigate those risks?

I bought a used computer that appears to be wiped clean, but can I be sure?
2
votes
3answers
83 views

Protect hdd from writing permanently

I am looking for a way to permanently lock an external hdd to read-only mode without a way for the external attacker to make it writable. If it is not possible to use a password or pin to make disk ...
0
votes
2answers
136 views

The most secure external hard drives on the market

Wondering what the most secure hard drives are on the market, as stuff like this points out that sometime the "encryption software" that comes bundled with external hard drives is probably insecure ...
0
votes
1answer
64 views

How to completely clear an external hard drive from scratch

I am currently wondering how to detect malware on an HDD, so trying to break apart the questions into smaller chunks. For this question I am wondering how to completely clear an external hard drive (...
1
vote
2answers
151 views

How to detect malware on an HDD from scratch

I am wondering how to detect a virus or malware or anything that exists on an HDD (I am thinking of external hard drives). Doing a quick search led to these which aren't quite related: Virus checking ...
2
votes
1answer
86 views

How to reuse a rewritable DVD from an unknown source?

I have a used rewritable DVD that I want to wipe and use to store new data. The DVD has been written to before by someone I don't know and can't necessarily trust. Is there a safe way to use the disc? ...
13
votes
1answer
4k views

New CVE-2018-5407 “PortSmash vulnerablity” in Intel CPU

I just heard in the news: Intel CPUs impacted by new PortSmash side-channel vulnerability. Is it as threatening as Meltdown/Spectre? Is it patched? What should we do to be safe? Does it affect AMD CPU'...
0
votes
2answers
126 views

PC hardware and firmware modified?

My company own some PCs and laptops. The firmware and hardware may have been modified. The adversary is a hacker who works for a mid sized company. It is not a three letter agency or the government. ...
0
votes
1answer
40 views

Decryption only on specific Device

Let's say I have a closed user group and want to send them encrypted data over an insecure channel. I have previously had access to their devices and could have installed a decryption key. Is there ...
1
vote
1answer
67 views

How do Field Programmable Gate Arrays (FPGAs) compare to Graphics Processing Units (GPUs); for cracking hashes?

As a general rule, GPUs are more effective than CPUs when it comes to performing acutely repetitive tasks, like iterating over lists and generating permutations of a set (i.e. exhausting dictionaries &...
2
votes
0answers
80 views

Can maliciously modified ACPI AML be executed without a reboot?

ACPI tables contain ACPI Machine Language, or AML, which is executed by an interpreter in the kernel at boot. Certain ACPI tables, such as the DSDT, are necessary to support hardware ACPI events such ...
3
votes
1answer
109 views

How to enforce on the OS level to recognise only certain keyboards

I give employees AES wireless keyboards. I would like to enforce the OS to only recognise the keyboard we supply. Is that possible? Assuming my employees OS are Windows 10, Ubuntu, Mac OSX. How could ...
-2
votes
1answer
158 views

A hardware spy chip was found in server equipment recently. How does it work? [closed]

According to Bloomberg (and many other sites) some servers manufactured in China and shipped to the US were infiltrated with a spy chip the size of an SMD capacitor (as it says in the article): https:/...
2
votes
1answer
83 views

Are there ways in determining if devices such as router have been tampered with?

In working with a number of non-profit organizations, devices such as routers that may have been used by other businesses are often acquired. Equally, devices are often inherited through other ...
2
votes
1answer
1k views

Use MAC Address to Identify Laptop Model? [closed]

Is it possible to use the first 6 characters (D8:9D:67) of a MAC address to learn the model/version of the device? For example, this MAC address belong to Hewlett Packard. But they manufacture ...
1
vote
1answer
200 views

System Encryption With Veracrypt/Truecrypt- What is the difference between Wipe Mode “None” and 3 pass, 1 pass etc?

First I wanted to make sure we're talking about using a Non-SSD Hard drive. I know SSD drives work differently. Here would be a good reference/guide on system encryption: https://www.howtogeek.com/...
0
votes
4answers
417 views

Should the recent Tiny Chip attack teach us to invest less in our security posture?

Now with upcoming new year budgets to purchase the next tools and services for protecting our company to increase organization posture against cyber attack, I can't stop thinking if we should reduce ...
3
votes
0answers
293 views

How does the Supermicro hardware trojan work? [closed]

Today Bloomberg published an article about a newly discovered hardware trojan found on Supermicro boards. The article is titled "The Big Hack". Unfortunately the article was not very specific about ...
0
votes
3answers
73 views

Can Windows take data from other OS running on same hardware?

I am looking for the way how to set up the my environments as I need more than one OS at once. I care about privacy and securities the most, that is my priority. But I can't refuse Windows in full. ...
2
votes
1answer
47 views

Vulnerabilities of IT system due to hardware?

Is there any relation between specific hardware (like specific kind of CPU etc) or laptop manufacturing brands and the hacked environments run on? Can this be measured in any way like stolen data or ...
2
votes
1answer
249 views

Server protection measures from authorities

I am on a project which is illegal in my nation but is not illegal anywhere in the world. In order not to get a 100yr sentence I should be prepared for seizures and forensics. I am running a server ...
1
vote
1answer
83 views

How to mitigate the risks of using new, third party imported electronic accessories?

As someone who is naturally good at recognizing risk and who are striving to maintain a wholistic view on security, I’m wondering how to evaluate and reduce the risks of hardware accessories (I.e. ...
1
vote
1answer
748 views

How to check hardware integrity?

When we download an ISO or any file we can hash it to ensure that the downloaded file has not been tempered i.e integrity of that file is preserved. But when I am buying a hardware device (monitor, ...
4
votes
1answer
235 views

If rowhammer only results in capacitor discharge, how can it flip 0 to 1?

In rowhammer, why will changing the voltage on one row cause the other row to open/close? Is it related to induction? How can it change bits from 0 to 1? I understand from 1 to 0 - voltage discharge, ...
1
vote
3answers
114 views

dongle development

I am to provide a hardware+software solution. The software is an application in c++ running on windows. The hardware is motherboard+processor+disk+memory. In order to protect the solution, I need to ...
4
votes
2answers
220 views

Security of WWAN cards in laptops

I'm thinking about buying a WWAN card for my laptop (like this one here), as it is more convenient to use than USB tethering. However, I'm concerned about the security risk that comes with such a card ...
0
votes
1answer
118 views

Which encrypted USB stick is the better option? [closed]

I am looking for a hardware encrypted USB stick to carry some important files such as my KeePassXC database, Key files, cryptocurrency wallets, certificates and other stuff with me. There are some ...
2
votes
0answers
73 views

Minimum set of ACS features to secure remote PCIe devices

According to a Google blog post, Google has been experimenting with providing raw access to PCIe devices in a remote environment. They set out to discover what Access Control Service features (ACS, ...
2
votes
1answer
113 views

How can an old hardware lead to a security failure?

I am working on critical cyber physical systems, and my work and research lead me to some questions. In the following, I assume that the attacker is not able to change the hardware of your system and ...