Questions tagged [hardware]

For attacks against, or best practices for physical components of an Information Technology system. It can consist of network equipment, servers, CPUs, hardware security module, smartcards, etc. When using this tag, also include an additional tag for the specific type of hardware.

Filter by
Sorted by
Tagged with
1
vote
0answers
62 views

What traces are left on a flash card reader after using it?

If one uses a micro SD card with a card reader on Windows, or on Linux, or on Android, would there be a way to forensically determine on which computer the card reader was used? I know OS can log ...
1
vote
1answer
91 views

What traces are left on a USB stick after using it?

If one uses a FAT32-formatted USB stick on Windows, Linux, or Android, would there be a way to determine on which computer the USB stick was used by examining the USB stick? I know OS can log which ...
0
votes
1answer
100 views

How common are firmware infections?

Hard drive firmware infections were documented in 2015: The hacking tool, believed to be a product of the NSA, is significant because subverting the firmware gives the attackers God-like control of ...
1
vote
1answer
83 views

Cross OS GPU based malware

I've been doing some research into GPU based malwares, and would like to know if there is a way to run them on a dual boot scenario with the code being executed only on one Operational System and be &...
0
votes
0answers
56 views

Hacking MBUX system

I read the report from tencent about MBUX hacking and wonder if it still works? Are there any known countermeasurements to this kind of hacking? What did Mercedes do to prevent this? https://keenlab....
-1
votes
2answers
205 views

What does it take to brute force 42 hex characters [closed]

What does it take to brute force something like this 00f54a5851e9372b87810a8e60cdd2e7cfd80b6e31 I can brute force anything else like iambad, blackapple1, etc But how can I brute force something like ...
1
vote
2answers
146 views

Scanning for malicious hardware on display replacement for a smartphone

I recently bought a replacement display for my smartphone on ebay from a national supplier. I later realized that it does not have the Huawei logo printed on it, but it is working fine. There were ...
0
votes
0answers
56 views

rdmsr Command not found Checking for MDS Vulnerability

Running dmesg on my Xubuntu 20.04.1 system shows multiple processor vulnerabilities including MDS vulnerable. I was trying to follow the info in What are the new MDS attacks, and how can they be ...
5
votes
1answer
244 views

Since TPM firmware is updatable can it be exploited by malicious hardware actors?

I have been reading about TPM for months and one thing seems to be odd. I noticed that TPM firmware can be updated in certain brands. Like "Lenovo" or this link which links a bunch of brands....
0
votes
1answer
108 views

Is there a hardware-constrained method for removing content from the internet?

I recently came across this viral post on Facebook: As of the time of this question, the post has more than 37,000 likes, 33,000 shares and 1.5k comments. Most of the comments are positive, ...
1
vote
1answer
542 views

Using Hardware Encryption on NVME SSD used as the boot device

I have a question relating to implementing encryption of data at rest. This is possibly more suited to another stackexchange site, so please let me know where would be better to post if I'm a little ...
1
vote
1answer
186 views

Tricking a windows 10 computer into thinking a USB being plugged in is a mouse for code execution [closed]

Is it possible to "trick" a Windows 10 PC into thinking a flash drive is a mouse to execute code on the machine? If so, how? Note: I'm not trying to do anything malicious. All of this is ...
1
vote
1answer
106 views

Are there any existing JTAG (hardware debugging) based malware detection systems, and if not, why?

JTAG System software debug support is for many software developers the main reason to be interested in JTAG. Many silicon architectures such as PowerPC, MIPS, ARM, x86 built an entire software debug, ...
0
votes
0answers
42 views

Wondering if a USB dongle for gaming controller could have malware installed [duplicate]

I purchased a usb gaming controller used. It has a usb dongle that plugs into the PC and a I assume its bluetooth. Is it possible for the USB dongle to contain a keylogger that starts up when I plug ...
3
votes
2answers
355 views

Open-Source Hardware Security Modules (HSM)

Are there any Open-Source Hardware Security Modules (meeting OSHWA requirements)? I've worked with Utimaco HSMs, but I'm not a big fan of closed-source hardware -- especially when it comes to security ...
-1
votes
1answer
110 views

Can data be stored anywhere else on a MacBook besides the SSD?

Imagine the following scenario: There exist all kinds of information on my SSD. Now I take away the SSD of my MacBook Pro, replace it, and reboot. I should have a MacBook that is on factory settings, ...
1
vote
1answer
77 views

How are hardware wallets and other hardware-based security devices audited?

One selling point of the Trezor crypto currency wallets is that they are, supposedly, "open source". It is not clear to me exactly what assurance this provides, since I do not know what ...
0
votes
1answer
169 views

How secure is Heads for detecting tampering or infection of firmware or boot sector? (Pureboot)

I'm thinking of getting a Librem laptop with Pureboot which uses Heads (with the Librem key) for tamper detection. But I've heard rumours that there are weaknesses or vulnerabilities so I wanted to ...
1
vote
0answers
69 views

Has hackers ever used a microarchitectural side channel to launch an attack?

I'm a student of computer architecture and I just got through a class on Hardware Security. We spent a considerable amount of time learning about microarchitectural side channels, reading papers on ...
2
votes
1answer
52 views

Root of Trust - The general Mechanism of how RoT Authenticates higher levels of software

I've been reading many research articles about RoT - Root of Trust - for establishing a chained root of trust going up from BIOS to the Kernel. However, most of the article go briefly on how RoT works ...
0
votes
0answers
49 views

Examine BADUSB, reflash with Arduino IDE

The situation: I received a BADUSB device probably based on Atmega 32u4, armed with some kind of payload. I'd like to extract and analyze the payload. Then I'd like to reflash the device with my own ...
1
vote
1answer
583 views

Is it possible to crack a laptop's encrypted hard disk?

In a talk about a lost or stolen laptop, it is said that: even with hard drive encryption, eventually they can crack these secrets But strong encryption is practically impossible to break. For ...
1
vote
1answer
197 views

Is there a downside to using a Ledger Nano S or X as both a crypto wallet and a 2FA key?

Newbie question, I guess. I want to get a cold wallet for increased security. I also want to start using hardware 2FA (e.g. for e-mail). I see that Ledger advertises 2FA capabilities ('FIDO U2F') on ...
2
votes
1answer
451 views

What are the dangers of a firmware malware in 2021 and is it possible?

I was reading a few articles online about how some firmware can be altered into malware and essentially infect a hardware equipment for its entire life time. Like almost all SSDs in the industry ...
1
vote
2answers
327 views

secure Microphone Blocker for Apple devices (macOS and iOS)

Quote from Hardware for Protecting Privacy and Security Microphone Blocker A microphone blocker is a device that prohibits audio hacking, in the form of a hardware accessory for a smartphones, ...
4
votes
0answers
131 views

Can the glue of glitter-hot-glue sticks be used to provide evidence of electronics-hardware tampering?

I've been researching low-cost, yet strong, tamper-evident mechanisms, and purchased some low-cost glitter-hot-glue sticks as part of this research. The Amazon page advertising the sticks, seems to ...
0
votes
0answers
51 views

Can hardware identifcation be evaded/spoofed?

If I'm not wrong, one of the many ways companies track and collect data of people through the internet is by identifying their hardware. Getting the monitor resolution, figuring what CPU it is, etc. ...
0
votes
0answers
76 views

Is malware in an EC firmware a concern, when standard security is in place together with the rest of the computer having no malevolent tampering?

Question My question is whether malware in the embedded-controller firmware is something to worry about if the rest of the computer system is faithfully what it should be, together with standard ...
2
votes
1answer
140 views

Is it safe to download BIOS firmware from any place online?

Considering that all modern motherboards have code signature procedures in place like it is mentioned here: Is it possible for malware to be in the BIOS or in hardware? I was wondering is it safe to ...
40
votes
5answers
7k views

How can you trust that there is no backdoor in your hardware?

We know that Intel processors have one (ME) so it is definitely possible. In general, how could you even trust a piece of hardware like a CPU or network card, even if the manufacturer says there is no ...
98
votes
5answers
48k views

What is the benefit of having FIPS hardware-level encryption on a drive when you can use Veracrypt instead?

The expensive one: https://www.dustinhome.se/product/5010873750/ironkey-basic-s1000 The cheap one: https://www.dustinhome.se/product/5010887912/datatraveler-100-g3 Over 14,000 SEK difference in price. ...
0
votes
1answer
104 views

if computer is compromised, does hardware key still protect in ssh?

Let's say I sign into my local pc with a hardware key (eg yubicon). Let's say I further sign into a sensitive server (as root) via ssh using yubicon hardware key as well (ie only way to get into ...
7
votes
2answers
3k views

Can BadUSB be avoided by looking at the shapes and the controller model inside it?

I'm an average user. I don't take part or have any dangerous jobs. I know that there is no fixed solution for this type of attack. However, I think USB is still become common devices for average user. ...
2
votes
1answer
254 views

Are wedge attacks on EMV cards still viable?

I was looking around to see if wedge attacks on EMV cards are still viable or a solution has been implemented, and if so, have attackers found another way around the solution? The latest literature or ...
2
votes
1answer
202 views

Questions about A Monitor Darkly

In his presentation, A Monitor Darkly, Ang Cui demonstrates how to manipulate images on the monitor by getting the firmware to execute commands embedded in a pixel contained in an image being ...
-1
votes
1answer
564 views

Can I trust a used motherboard purchased from a seller in China? [duplicate]

The ASUS motherboard in an older PC I own failed. I purchased a replacement from a vendor on eBay, shipped from China (Shenzhen). Only after receiving the motherboard did it occur to me to wonder ...
-1
votes
1answer
93 views

How to detect software and hardware impairment? [closed]

How can I know if a pc has a backdoor in bios, and how to know if there is an hardware malicious impairment?
0
votes
2answers
130 views

Is it possible to create a hardware 'Plug and Play' TOR proxy?

Is there a way to use a device like a raspberrypi to create a kind of 'Plug and Play' TOR proxy? Ideally, a device would exist with an ethernet port as input and ethernet cable or USB as output which ...
1
vote
0answers
50 views

Best practices for checking security risks on used devices [closed]

If you are buying used device, laptop or game console, or a smartphone - what are the best practices for checking it’s security? How to check if device’s HW wasn’t modified or it is not coming with ...
1
vote
2answers
207 views

Hardware components based on which to generate password

I want to generate a password for a Keystore in java on Windows platform. I would like to make a HASH out of some hardware information from my computer and some salt. My question is: which hardware or ...
62
votes
15answers
16k views

Emergency method to erase all data off a machine within seconds

Imagine you are carrying highly sensitive information with you, maybe on a mission in a war zone. You get in an ambush and quickly need to erase all the files before they fall in the wrong hands. This ...
0
votes
0answers
147 views

Can I view the format history of a usb key?

Is there a way to view when changes were made to a USB key, such as when the USB key was formatted and/or when some files were transferred? I have seen this previous stackexchange question File system ...
-1
votes
1answer
67 views

Cyber Security in Hardware Products? [closed]

I am currently working on a product similar to smart locks that work with BLE identification. I can handle the hardware of the product very well (mechanics / electronics / embedded software), however, ...
2
votes
0answers
257 views

What is the current (mid-2020) status of hardware rootkit/malware and possible detection/monitoring?

I've posted a question (link) related to a potential compromised computer via SSH access with root user. Although no evidence of a break-in, I'm considering extended measures to ensure (as much as ...
0
votes
0answers
69 views

Can a headphone or earbud (bluetooth or wired) transmit malware between computers? [duplicate]

I have an old computer and I am sure it has trojan or malicious code but after that I bought new one. The problem is I did not change my old headphone that I used in my old computer and I plugged it ...
0
votes
1answer
157 views

iCloud deletion

If I delete photos which are stored in iCloud from my phone. (Which is also linked to my iPad) I know the data is then made ‘free space’ but is still on the phone In some format. If I delete it from ...
1
vote
0answers
86 views

Protect USB from reading by using PC identity

Is there any way (software or hardware solution) to create a usb drive that can make its contents readable only on specific PCs using their hardware serial numbers?
2
votes
1answer
92 views

Is being able to access /proc/ in Linux a security breach?

As a user, I can run ls proc and read the /proc directory of the hosting server and read most of the data inside it (~90%). > ls /proc 1 acpi cpuinfo execdomains ioports kmsg mdstat net scsi sys ...
0
votes
1answer
70 views

Are Thunderbolt-enabled computers without Thunderbolt ports vulnerable to Thunderspy?

Could these two attack scenarios exploit the recently publicized vulnerability? Using a Thunderbolt adapter like an USB-to-Thunderbolt adapter on a computer without any Thunderbolt port Temporarily ...
6
votes
2answers
225 views

Why did I never see those "spy signal jammers" for sale?

I recently watched a 1980s computer television programme about the problems of spying. Basically, they showed how anyone could buy relatively cheap and common hardware and then be able to sit outside ...

1
2 3 4 5
11