Questions tagged [hardware]

For attacks against, or best practices for physical components of an Information Technology system. It can consist of network equipment, servers, CPUs, hardware security module, smartcards, etc. When using this tag, also include an additional tag for the specific type of hardware.

Filter by
Sorted by
Tagged with
-1
votes
0answers
51 views

Do 4k IP security cameras with uncompressed 4k video output exist? [closed]

Are there any companies selling IP security cameras that produce uncompressed 4k RAW video output (to NVR, or even to cal sd-card)? Almost all popular brands compress using H.265 (HEVC) which works ...
0
votes
0answers
5 views

If flashrom tool don't have support for rom chip what are the ways you can extract data without it? [migrated]

I am currently working on a Netgear router having MX25L1606E rom chip, my goal is to extract firmware for reverse engineering but flashrom don't have support for it. So question is how someone can ...
0
votes
0answers
55 views

Could a Hardware Token Defeat a Keylogger?

I would like to improve my understanding of keyloggers by asking what is feasible with current technology. That is, I mean to be asking a conceptual question that doesn't verge into sci-fi. My ...
1
vote
2answers
79 views

Can you trust your computer devices to be safe to use if they have been in the hands of potential hackers? [duplicate]

Suppose you lose the bag containing your laptop along with its accessories or while travelling the police confiscate all your computer devices, can you safely use all the devices again if you format ...
2
votes
1answer
101 views

Best practice to secure hard-drive in case of theft or loss or unauthorized access?

Scenario: a person owns and used only a laptop (or PC) and on its hard drive is stored sensitive information, in addition, in browsers the logged-in sessions to gmail, facebook, server, etc...etc.. ...
0
votes
1answer
77 views

Is there a safe way to use external display with USB Type-C laptops?

Somewhat related to Is malware or screen capture possible with iMac as external display?, where we investigate the possibility of a DMA attack through DisplayPort, nowadays, many machines don't even ...
2
votes
1answer
89 views

Is the security seal on samsung phones proof that the phone has not been tampered with?

Samsung phones come with a security seal that says you should not buy the phone if it is broken. Is this proof that no one has tampered with the phone? Is there some way to take off the seal and ...
2
votes
1answer
90 views

Protecting private encrypted data on public computers

Consider an (Java) application that will be deployed on an off-the-shelf laptop in a public location. The laptop is not connected to any network or the internet. A USB barcode scanner is available as ...
0
votes
0answers
76 views

How to identify which device is malicious

I'm facing a surprising problem : A windows 10 computer seem to use keyboard and mouse by himself on the login screen. So I'm guessing : It's not a software intrusion, because it that way the ...
3
votes
0answers
62 views

What kind of attacks can hardware level memory encryption protect from?

Both AMD and Intel have introduced memory encryption at the hardware level. AMD calls this Secure Memory Encryption (SME), with the Intel version being Total Memory Encryption (TME). What kind of ...
-1
votes
1answer
50 views

threat intelligence gateway [closed]

A TOG (threat intelligence gateway) is a hardware piece that sits between the router and the firewall. The TIG uses the threat intelligence and filters out the malicious urls and IPs before reaching ...
0
votes
1answer
53 views

What credentials does this hardware device steal?

I was reading about this device the author made, however he did not specify WHAT he was able to steal from a locked computer. What credentials does this steal? https://room362.com/post/2016/snagging-...
1
vote
2answers
168 views

How to protect external hard drive from tampering?

I am looking to buy an external 1TB hard drive to store sensitive information on. External hard drives aren't (physically) small, and it may have to be left unattended at times. What can I do to ...
1
vote
1answer
155 views

Is there a unique way to identify a hardware?

I'm considering an environment in which I will have to identify a computer. In this scenario all hardware parts (CPU, HDDs, RAM, etc) won't change, while I'd like to consider a changing OS. The goal ...
8
votes
3answers
314 views

Ring -3 exploits and existence of other rings

Concept of Rings Rings were introduced in the forerunner of UNIX, Multics, and had 8 rings for reading, writing, executing and calling (I don't quite understand why it needed 8 rings to do this, if ...
0
votes
0answers
35 views

Are the security basics of a non-wifi router different from securing your desktop? [duplicate]

I have studied much about securing a desktop from enabling firewall to browsing internet safely among other things. I also know that many steps can be taken to improve the security of wifi routers. ...
4
votes
1answer
136 views

How can I challenge an attacker to reliably identify their hardware? [closed]

I distribute a client application where I would like to identify a user's hardware specifications when they begin interacting with my server. I am specifically interested in identifying the user's GPU ...
0
votes
3answers
146 views

Can PCB's contain spyware?

I'm thinking about purchasing a keyboard PCB from someone overseas, but I'm not 100% sure if it's safe. The firmware I'm going to install is QMK which is open source and I feel safe using it. ...
0
votes
2answers
164 views

Easiest way to secure my home network from work pc

I am about to start a work at home position using a mac. I will be using my own personal internet to connect to their servers through their VPN. I want to isolate my work PC from accessing my home ...
0
votes
1answer
86 views

How to make USB drive read only and write by a password or key or certificate?

I am trying to distribute a software, a simple exe file, that can be executed directly from an USB drive. I would like to make that USB drive read only to avoid any malware infection and accidental ...
0
votes
1answer
370 views

Requiring hardware key at boot-up on normal laptop

I am sure that a question like this already exists and has probably been answered. I just couldn't find any results (probably due to my inability to word my question correctly). We use laptops at ...
0
votes
1answer
1k views

Estimating Password Cracking Speed Based on GPU?

I was wondering if there was a calculator or formula I could use to find a rough estimation of the time it takes to crack hashes based on GPU. I am trying to assess how much performance I would lose/...
1
vote
1answer
112 views

How secure is a Mac if it passes Apple Diagnostics?

Recently I brought my MacBook Air to a Genius Bar to perform a clean MacOS installation. For security purposes, I asked for a hardware check as well. The Genius Bar technician ran Apple Diagnostics, ...
2
votes
1answer
179 views

Do video cards store any personal information? Should they be destroyed when getting rid of them?

I realize this question sounds a bit ridiculous but I figured it couldn't really hurt to ask. I am in the process of getting rid of some old computers of mine, and I know that I need to destroy the ...
42
votes
4answers
9k views

Should one buy new hardware after a system compromise?

If there are places on a laptop malicious programs can leave elements, hooks, backdoors etc, in locations such as BIOS, device controllers, firmware etc - what confidence can one have in wiping the ...
2
votes
2answers
172 views

Does “Restore Factory Defaults” Wipe Out My Data Completely?

I used to have a IBM Thinkpad (Lenovo) T440. I have been using that laptop for over 8 years. This device has been reset to factory default multiple times (probably up to 6-10 times if not more) ...
1
vote
1answer
282 views

Is there a “no-spy, no-backdoors standard” for telecom hardware manufacturing?

The BBC News article Huawei says willing to sign 'no-spy' agreements reports the following: Huawei has also said it is independent from the Chinese government, but some countries have blocked it ...
11
votes
2answers
823 views

What are the new MDS attacks, and how can they be mitigated?

Several new hardware side-channels were discovered called MDS attacks, which allow reading arbitrary memory, like Meltdown. Many existing mitigations are useless against them. The relevant CVEs are: ...
2
votes
1answer
138 views

Is faulty RAM a security risk?

If the RAM is only slightly faulty, so that the machine boots apparently normally, but sometimes crashes. Can the fault be leveraged somehow?
0
votes
1answer
39 views

A SIM module-based security system and radio signal interruptions

I would like to setup a simple alarm system using something like a Raspberry Pi or Arduino, some sensors, and a SIM module to send me an alarm when an intrusion is detected. If I were dealing with an ...
3
votes
2answers
689 views

What are the differences between HSM and SE?

What are the differences between a Hardware Security Module (HSM) and a Secure Element (SE)? Can both terms be used interchangeably? I came across various related question (TMP vs. HSM and TPM vs. SE)...
0
votes
0answers
55 views

Phoenix/Samsung BIOS/HDD security

I have a laptop bought in 2011. I want to protect its BIOS and HDD (data is already encrypted anyway). But I have seen these vulnerabilities: After 3 incorrect tries, I see "System Disabled" with ...
1
vote
1answer
91 views

Local area network multi-device network communication protocol

I am planning to build a local area network that will have one Master device and multiple Slave devices. The communication should be able to handle only ON/OFF functionality of the devices (devices ...
0
votes
1answer
236 views

What is risky about international travel?

I have seen guidelines which suggest that traveling overseas is particularly risky when it comes to protecting your intellectual property. I'm confused about what specifically are the factors that ...
0
votes
1answer
96 views

Does Apple supply hardware keyloggers? [closed]

I received a brand new Mac laptop for work that is basically ours and doesn’t have to be returned, even after quitting. It was inside the box and sealed. I was wondering if Apple supplies and installs ...
0
votes
0answers
59 views

Is Linux dangerous for secure environments because it's open source? [duplicate]

I work for a company that sells hardware products with Linux embedded into the product. We lost a job for a defense contractor due to our hardware running Linux. Their reason was "because it's open ...
2
votes
1answer
186 views

Anomaly on new laptop. Does it suggest tampering?

My laptop has a plastic chassis whose panels click into place (no screws on the outside). When I bought it (new), there was a gap on one side along the seam joining the top and bottom halves of the ...
0
votes
1answer
144 views

External hard drive's hardware vulnerabilities [closed]

You have an external hard drive that was left in a public place. The data is encrypted. What are the hardware or software vulnerabilities one can use to get the encryption password when one decrypts ...
97
votes
9answers
22k views

Buying a “Used” Router

I am buying a "new" router from an open-box sale at a company that liquidates eCommerce returns. Plan to use it for a home network at cottage. I'm a bit nervous that it could have been modified by ...
3
votes
1answer
168 views

Why must Meltdown use probe array?

This is code snippet of Meltdown assembly language code: 1. ; rcx = kernel address, rbx = probe array 2. xor rax, rax 3. retry: 4. mov al, byte [rcx] 5. shl rax, 0xc 6. jz retry 7. mov rbx, ...
0
votes
0answers
81 views

How to securely generate a License tied to 1 Computer for each user

This question is related to my first question: How secure is this schema for Online Licensing System? I'm trying to sell a subscription based software and I can't find a good way to generate a serial ...
3
votes
0answers
144 views

How is it possible that the Metasploit meterpreter can take pictures without “notifying” the user?

Im curious how the Meterpreter can take pictures from my webcam without turning on the webcam LED? Ive read that you have to write/change a driver, or a firmware, or you just change some DLLs, but ...
2
votes
0answers
139 views

Why don't smartphone manufactures write the IMEI onto one time writable ROM so that it can't be tampered with? [closed]

The title says it all basically. Even now, why is tampering IMEI possible at all? Shouldn't manufactures be using one time writable memory to embed IMEI into phones? Why don't they?
5
votes
1answer
338 views

Are there any observed Rowhammer attacks in the wild

Due to the latest news regarding Rowhammer and its applicability to ECC DRAM, I was wondering whether there are any Rowhammer attacks spotted in the wild. Given the various approaches to conduct a ...
2
votes
1answer
173 views

Does IOMMU protect against malware insertion through PCI Network card/Sound card DMA?

I've just read about this: https://www.tripwire.com/state-of-security/security-data-protection/backdoors-hardware-attacks-rakshasa-malware/ Asides from the question in the title, I'd also like to add ...
-1
votes
1answer
95 views

What hardware components in a laptop should be removed in order to prevent it from wirelessly communicating with other devices?

If you have a laptop, what hardware components should be removed in order to prevent it from wirelessly communicating with other devices? In other words, how can I prevent a laptop from getting ...
0
votes
1answer
55 views

The main things a cloud data center could inject into its hardware

So some cloud service providers like Amazon use custom hardware to improve different characteristics of their servers. This also means they can control the security better, because there is nothing ...
0
votes
1answer
47 views

Commodity Conversion Cables with Write Blockers

Looking at write-blocking devices I've notice a large variety of specialized hardware based on different source connector types, including USB-to-USB write blockers. It seems as though it should be ...
2
votes
2answers
312 views

How to securely destroy old cellphone, to avoid personal data recuperation?

While cleaning I've found an old cellphone. This phone does not turn on, and I'm not sure if contains personal data. I would like to throw away this phone, but I'm concerted if this data can be ...
1
vote
3answers
226 views

Are DTMF tones decoded by the DTMF producer?

If I generate a DTMF(dual tone multi frequency) tone on phone A, clearly the tone gets decoded by the other phones (phone B, C...) on the call. Does the DTMF tone also get decoded by phone A? How is ...