Questions tagged [hardware]

For attacks against, or best practices for physical components of an Information Technology system. It can consist of network equipment, servers, CPUs, hardware security module, smartcards, etc. When using this tag, also include an additional tag for the specific type of hardware.

Filter by
Sorted by
Tagged with
-1
votes
1answer
10 views

What credentials does this hardware device steal?

I was reading about this device the author made, however he did not specify WHAT he was able to steal from a locked computer. What credentials does this steal? https://room362.com/post/2016/snagging-...
1
vote
2answers
151 views

How to protect external hard drive from tampering?

I am looking to buy an external 1TB hard drive to store sensitive information on. External hard drives aren't (physically) small, and it may have to be left unattended at times. What can I do to ...
0
votes
0answers
33 views

Is the ATA Security Feature Set implemented on all SATA HDD's? [on hold]

Is the ATA Security Feature Set implemented on all SATA HDD's? From what I've read, it's an optional part of the specification, but it seems like pretty much all drives implemented it. The reason is ...
1
vote
1answer
141 views

Is there a unique way to identify a hardware?

I'm considering an environment in which I will have to identify a computer. In this scenario all hardware parts (CPU, HDDs, RAM, etc) won't change, while I'd like to consider a changing OS. The goal ...
7
votes
2answers
154 views

Ring -3 exploits and existence of other rings

Concept of Rings Rings were introduced in the forerunner of UNIX, Multics, and had 8 rings for reading, writing, executing and calling (I don't quite understand why it needed 8 rings to do this, if ...
-1
votes
0answers
15 views

How can I create a 2FA usb for using sudo? [migrated]

I want to create a secure system in which logging in to the system and using sudo requires using both password and a usb. Is there some way I can turn a regular usb into 2FA key? Can you explain the ...
0
votes
0answers
33 views

Are the security basics of a non-wifi router different from securing your desktop? [duplicate]

I have studied much about securing a desktop from enabling firewall to browsing internet safely among other things. I also know that many steps can be taken to improve the security of wifi routers. ...
4
votes
1answer
132 views

How can I challenge an attacker to reliably identify their hardware? [closed]

I distribute a client application where I would like to identify a user's hardware specifications when they begin interacting with my server. I am specifically interested in identifying the user's GPU ...
0
votes
3answers
127 views

Can PCB's contain spyware?

I'm thinking about purchasing a keyboard PCB from someone overseas, but I'm not 100% sure if it's safe. The firmware I'm going to install is QMK which is open source and I feel safe using it. ...
0
votes
2answers
138 views

Easiest way to secure my home network from work pc

I am about to start a work at home position using a mac. I will be using my own personal internet to connect to their servers through their VPN. I want to isolate my work PC from accessing my home ...
0
votes
1answer
73 views

How to make USB drive read only and write by a password or key or certificate?

I am trying to distribute a software, a simple exe file, that can be executed directly from an USB drive. I would like to make that USB drive read only to avoid any malware infection and accidental ...
0
votes
1answer
111 views

Requiring hardware key at boot-up on normal laptop

I am sure that a question like this already exists and has probably been answered. I just couldn't find any results (probably due to my inability to word my question correctly). We use laptops at ...
0
votes
1answer
441 views

Estimating Password Cracking Speed Based on GPU?

I was wondering if there was a calculator or formula I could use to find a rough estimation of the time it takes to crack hashes based on GPU. I am trying to assess how much performance I would lose/...
1
vote
1answer
106 views

How secure is a Mac if it passes Apple Diagnostics?

Recently I brought my MacBook Air to a Genius Bar to perform a clean MacOS installation. For security purposes, I asked for a hardware check as well. The Genius Bar technician ran Apple Diagnostics, ...
2
votes
1answer
178 views

Do video cards store any personal information? Should they be destroyed when getting rid of them?

I realize this question sounds a bit ridiculous but I figured it couldn't really hurt to ask. I am in the process of getting rid of some old computers of mine, and I know that I need to destroy the ...
43
votes
4answers
9k views

Should one buy new hardware after a system compromise?

If there are places on a laptop malicious programs can leave elements, hooks, backdoors etc, in locations such as BIOS, device controllers, firmware etc - what confidence can one have in wiping the ...
2
votes
2answers
161 views

Does “Restore Factory Defaults” Wipe Out My Data Completely?

I used to have a IBM Thinkpad (Lenovo) T440. I have been using that laptop for over 8 years. This device has been reset to factory default multiple times (probably up to 6-10 times if not more) ...
1
vote
1answer
266 views

Is there a “no-spy, no-backdoors standard” for telecom hardware manufacturing?

The BBC News article Huawei says willing to sign 'no-spy' agreements reports the following: Huawei has also said it is independent from the Chinese government, but some countries have blocked it ...
11
votes
2answers
756 views

What are the new MDS attacks, and how can they be mitigated?

Several new hardware side-channels were discovered called MDS attacks, which allow reading arbitrary memory, like Meltdown. Many existing mitigations are useless against them. The relevant CVEs are: ...
2
votes
1answer
121 views

Is faulty RAM a security risk?

If the RAM is only slightly faulty, so that the machine boots apparently normally, but sometimes crashes. Can the fault be leveraged somehow?
0
votes
1answer
32 views

A SIM module-based security system and radio signal interruptions

I would like to setup a simple alarm system using something like a Raspberry Pi or Arduino, some sensors, and a SIM module to send me an alarm when an intrusion is detected. If I were dealing with an ...
3
votes
2answers
333 views

What are the differences between HSM and SE?

What are the differences between a Hardware Security Module (HSM) and a Secure Element (SE)? Can both terms be used interchangeably? I came across various related question (TMP vs. HSM and TPM vs. SE)...
0
votes
0answers
50 views

Phoenix/Samsung BIOS/HDD security

I have a laptop bought in 2011. I want to protect its BIOS and HDD (data is already encrypted anyway). But I have seen these vulnerabilities: After 3 incorrect tries, I see "System Disabled" with ...
1
vote
1answer
84 views

Local area network multi-device network communication protocol

I am planning to build a local area network that will have one Master device and multiple Slave devices. The communication should be able to handle only ON/OFF functionality of the devices (devices ...
0
votes
1answer
234 views

What is risky about international travel?

I have seen guidelines which suggest that traveling overseas is particularly risky when it comes to protecting your intellectual property. I'm confused about what specifically are the factors that ...
0
votes
1answer
92 views

Does Apple supply hardware keyloggers? [closed]

I received a brand new Mac laptop for work that is basically ours and doesn’t have to be returned, even after quitting. It was inside the box and sealed. I was wondering if Apple supplies and installs ...
0
votes
0answers
56 views

Is Linux dangerous for secure environments because it's open source? [duplicate]

I work for a company that sells hardware products with Linux embedded into the product. We lost a job for a defense contractor due to our hardware running Linux. Their reason was "because it's open ...
2
votes
1answer
181 views

Anomaly on new laptop. Does it suggest tampering?

My laptop has a plastic chassis whose panels click into place (no screws on the outside). When I bought it (new), there was a gap on one side along the seam joining the top and bottom halves of the ...
0
votes
1answer
92 views

External hard drive's hardware vulnerabilities [closed]

You have an external hard drive that was left in a public place. The data is encrypted. What are the hardware or software vulnerabilities one can use to get the encryption password when one decrypts ...
98
votes
9answers
20k views

Buying a “Used” Router

I am buying a "new" router from an open-box sale at a company that liquidates eCommerce returns. Plan to use it for a home network at cottage. I'm a bit nervous that it could have been modified by ...
3
votes
1answer
143 views

Why must Meltdown use probe array?

This is code snippet of Meltdown assembly language code: 1. ; rcx = kernel address, rbx = probe array 2. xor rax, rax 3. retry: 4. mov al, byte [rcx] 5. shl rax, 0xc 6. jz retry 7. mov rbx, ...
0
votes
0answers
78 views

How to securely generate a License tied to 1 Computer for each user

This question is related to my first question: How secure is this schema for Online Licensing System? I'm trying to sell a subscription based software and I can't find a good way to generate a serial ...
3
votes
0answers
134 views

How is it possible that the Metasploit meterpreter can take pictures without “notifying” the user?

Im curious how the Meterpreter can take pictures from my webcam without turning on the webcam LED? Ive read that you have to write/change a driver, or a firmware, or you just change some DLLs, but ...
2
votes
0answers
130 views

Why don't smartphone manufactures write the IMEI onto one time writable ROM so that it can't be tampered with? [closed]

The title says it all basically. Even now, why is tampering IMEI possible at all? Shouldn't manufactures be using one time writable memory to embed IMEI into phones? Why don't they?
4
votes
1answer
279 views

Are there any observed Rowhammer attacks in the wild

Due to the latest news regarding Rowhammer and its applicability to ECC DRAM, I was wondering whether there are any Rowhammer attacks spotted in the wild. Given the various approaches to conduct a ...
2
votes
1answer
154 views

Does IOMMU protect against malware insertion through PCI Network card/Sound card DMA?

I've just read about this: https://www.tripwire.com/state-of-security/security-data-protection/backdoors-hardware-attacks-rakshasa-malware/ Asides from the question in the title, I'd also like to add ...
-1
votes
1answer
94 views

What hardware components in a laptop should be removed in order to prevent it from wirelessly communicating with other devices?

If you have a laptop, what hardware components should be removed in order to prevent it from wirelessly communicating with other devices? In other words, how can I prevent a laptop from getting ...
0
votes
1answer
52 views

The main things a cloud data center could inject into its hardware

So some cloud service providers like Amazon use custom hardware to improve different characteristics of their servers. This also means they can control the security better, because there is nothing ...
0
votes
0answers
74 views

Is it possible to completely prevent Speculative Execution Side-Channel attacks?

I'm learning about computer architecture recently, and I heard that branch prediction is really tricky but may improve the efficiency of cpu a lot, then I came across this term. My question is that is ...
0
votes
1answer
44 views

Commodity Conversion Cables with Write Blockers

Looking at write-blocking devices I've notice a large variety of specialized hardware based on different source connector types, including USB-to-USB write blockers. It seems as though it should be ...
2
votes
2answers
252 views

How to securely destroy old cellphone, to avoid personal data recuperation?

While cleaning I've found an old cellphone. This phone does not turn on, and I'm not sure if contains personal data. I would like to throw away this phone, but I'm concerted if this data can be ...
1
vote
3answers
164 views

Are DTMF tones decoded by the DTMF producer?

If I generate a DTMF(dual tone multi frequency) tone on phone A, clearly the tone gets decoded by the other phones (phone B, C...) on the call. Does the DTMF tone also get decoded by phone A? How is ...
61
votes
5answers
16k views

What are the risks of buying a used/refurbished computer? How can I mitigate those risks?

I bought a used computer that appears to be wiped clean, but can I be sure?
2
votes
3answers
91 views

Protect hdd from writing permanently

I am looking for a way to permanently lock an external hdd to read-only mode without a way for the external attacker to make it writable. If it is not possible to use a password or pin to make disk ...
0
votes
2answers
163 views

The most secure external hard drives on the market [closed]

Wondering what the most secure hard drives are on the market, as stuff like this points out that sometime the "encryption software" that comes bundled with external hard drives is probably insecure ...
0
votes
1answer
67 views

How to completely clear an external hard drive from scratch

I am currently wondering how to detect malware on an HDD, so trying to break apart the questions into smaller chunks. For this question I am wondering how to completely clear an external hard drive (...
1
vote
2answers
335 views

How to detect malware on an HDD from scratch

I am wondering how to detect a virus or malware or anything that exists on an HDD (I am thinking of external hard drives). Doing a quick search led to these which aren't quite related: Virus checking ...
2
votes
1answer
88 views

How to reuse a rewritable DVD from an unknown source?

I have a used rewritable DVD that I want to wipe and use to store new data. The DVD has been written to before by someone I don't know and can't necessarily trust. Is there a safe way to use the disc? ...
13
votes
1answer
4k views

New CVE-2018-5407 “PortSmash vulnerablity” in Intel CPU

I just heard in the news: Intel CPUs impacted by new PortSmash side-channel vulnerability. Is it as threatening as Meltdown/Spectre? Is it patched? What should we do to be safe? Does it affect AMD CPU'...
2
votes
3answers
186 views

PC hardware and firmware modified?

My company own some PCs and laptops. The firmware and hardware may have been modified. The adversary is a hacker who works for a mid sized company. It is not a three letter agency or the government. ...