Questions tagged [hardware]

For attacks against, or best practices for physical components of an Information Technology system. It can consist of network equipment, servers, CPUs, hardware security module, smartcards, etc. When using this tag, also include an additional tag for the specific type of hardware.

Filter by
Sorted by
Tagged with
1
vote
1answer
132 views

What are the dangers of a firmware malware in 2021 and is it possible?

I was reading a few articles online about how some firmware can be altered into malware and essentially infect a hardware equipment for its entire life time. Like almost all SSDs in the industry ...
1
vote
2answers
110 views

secure Microphone Blocker for Apple devices (macOS and iOS)

Quote from Hardware for Protecting Privacy and Security Microphone Blocker A microphone blocker is a device that prohibits audio hacking, in the form of a hardware accessory for a smartphones, ...
4
votes
0answers
100 views

Can the glue of glitter-hot-glue sticks be used to provide evidence of electronics-hardware tampering?

I've been researching low-cost, yet strong, tamper-evident mechanisms, and purchased some low-cost glitter-hot-glue sticks as part of this research. The Amazon page advertising the sticks, seems to ...
0
votes
0answers
40 views

Can hardware identifcation be evaded/spoofed?

If I'm not wrong, one of the many ways companies track and collect data of people through the internet is by identifying their hardware. Getting the monitor resolution, figuring what CPU it is, etc. ...
0
votes
0answers
45 views

Is malware in an EC firmware a concern, when standard security is in place together with the rest of the computer having no malevolent tampering?

Question My question is whether malware in the embedded-controller firmware is something to worry about if the rest of the computer system is faithfully what it should be, together with standard ...
2
votes
1answer
84 views

Is it safe to download BIOS firmware from any place online?

Considering that all modern motherboards have code signature procedures in place like it is mentioned here: Is it possible for malware to be in the BIOS or in hardware? I was wondering is it safe to ...
40
votes
5answers
6k views

How can you trust that there is no backdoor in your hardware?

We know that Intel processors have one (ME) so it is definitely possible. In general, how could you even trust a piece of hardware like a CPU or network card, even if the manufacturer says there is no ...
98
votes
5answers
47k views

What is the benefit of having FIPS hardware-level encryption on a drive when you can use Veracrypt instead?

The expensive one: https://www.dustinhome.se/product/5010873750/ironkey-basic-s1000 The cheap one: https://www.dustinhome.se/product/5010887912/datatraveler-100-g3 Over 14,000 SEK difference in price. ...
0
votes
1answer
70 views

if computer is compromised, does hardware key still protect in ssh?

Let's say I sign into my local pc with a hardware key (eg yubicon). Let's say I further sign into a sensitive server (as root) via ssh using yubicon hardware key as well (ie only way to get into ...
7
votes
2answers
3k views

Can BadUSB be avoided by looking at the shapes and the controller model inside it?

I'm an average user. I don't take part or have any dangerous jobs. I know that there is no fixed solution for this type of attack. However, I think USB is still become common devices for average user. ...
2
votes
1answer
121 views

Are wedge attacks on EMV cards still viable?

I was looking around to see if wedge attacks on EMV cards are still viable or a solution has been implemented, and if so, have attackers found another way around the solution? The latest literature or ...
2
votes
1answer
127 views

Questions about A Monitor Darkly

In his presentation, A Monitor Darkly, Ang Cui demonstrates how to manipulate images on the monitor by getting the firmware to execute commands embedded in a pixel contained in an image being ...
-1
votes
1answer
284 views

Can I trust a used motherboard purchased from a seller in China? [duplicate]

The ASUS motherboard in an older PC I own failed. I purchased a replacement from a vendor on eBay, shipped from China (Shenzhen). Only after receiving the motherboard did it occur to me to wonder ...
-1
votes
1answer
65 views

How to detect software and hardware impairment? [closed]

How can I know if a pc has a backdoor in bios, and how to know if there is an hardware malicious impairment?
0
votes
2answers
94 views

Is it possible to create a hardware 'Plug and Play' TOR proxy?

Is there a way to use a device like a raspberrypi to create a kind of 'Plug and Play' TOR proxy? Ideally, a device would exist with an ethernet port as input and ethernet cable or USB as output which ...
1
vote
0answers
38 views

Best practices for checking security risks on used devices [closed]

If you are buying used device, laptop or game console, or a smartphone - what are the best practices for checking it’s security? How to check if device’s HW wasn’t modified or it is not coming with ...
1
vote
2answers
131 views

Hardware components based on which to generate password

I want to generate a password for a Keystore in java on Windows platform. I would like to make a HASH out of some hardware information from my computer and some salt. My question is: which hardware or ...
62
votes
15answers
15k views

Emergency method to erase all data off a machine within seconds

Imagine you are carrying highly sensitive information with you, maybe on a mission in a war zone. You get in an ambush and quickly need to erase all the files before they fall in the wrong hands. This ...
0
votes
0answers
93 views

Can I view the format history of a usb key?

Is there a way to view when changes were made to a USB key, such as when the USB key was formatted and/or when some files were transferred? I have seen this previous stackexchange question File system ...
-1
votes
1answer
54 views

Cyber Security in Hardware Products? [closed]

I am currently working on a product similar to smart locks that work with BLE identification. I can handle the hardware of the product very well (mechanics / electronics / embedded software), however, ...
1
vote
0answers
137 views

What is the current (mid-2020) status of hardware rootkit/malware and possible detection/monitoring?

I've posted a question (link) related to a potential compromised computer via SSH access with root user. Although no evidence of a break-in, I'm considering extended measures to ensure (as much as ...
0
votes
0answers
65 views

Can a headphone or earbud (bluetooth or wired) transmit malware between computers? [duplicate]

I have an old computer and I am sure it has trojan or malicious code but after that I bought new one. The problem is I did not change my old headphone that I used in my old computer and I plugged it ...
0
votes
1answer
95 views

iCloud deletion

If I delete photos which are stored in iCloud from my phone. (Which is also linked to my iPad) I know the data is then made ‘free space’ but is still on the phone In some format. If I delete it from ...
1
vote
0answers
74 views

Protect USB from reading by using PC identity

Is there any way (software or hardware solution) to create a usb drive that can make its contents readable only on specific PCs using their hardware serial numbers?
2
votes
1answer
64 views

Is being able to access /proc/ in Linux a security breach?

As a user, I can run ls proc and read the /proc directory of the hosting server and read most of the data inside it (~90%). > ls /proc 1 acpi cpuinfo execdomains ioports kmsg mdstat net scsi sys ...
0
votes
1answer
47 views

Are Thunderbolt-enabled computers without Thunderbolt ports vulnerable to Thunderspy?

Could these two attack scenarios exploit the recently publicized vulnerability? Using a Thunderbolt adapter like an USB-to-Thunderbolt adapter on a computer without any Thunderbolt port Temporarily ...
6
votes
2answers
202 views

Why did I never see those “spy signal jammers” for sale?

I recently watched a 1980s computer television programme about the problems of spying. Basically, they showed how anyone could buy relatively cheap and common hardware and then be able to sit outside ...
0
votes
1answer
56 views

Understanding the Secure Multi-party circuit for Stable Matching

I am reading the following paper: MPCircuits: Optimized Circuit Generation for Secure Multi-Party Computation link of paper I have following questions: why Preference of group1 starts from L_0 ...
1
vote
0answers
285 views

Prometheus node_exporter Metrics file discovered [closed]

I found a 'Metrics' file during a test containing: # HELP go_gc_duration_seconds A summary of the GC invocation durations. # TYPE go_gc_duration_seconds summary go_gc_duration_seconds{quantile="0"} 0....
0
votes
0answers
46 views

How to use potentially malicious hardware safely

I know the methods for running possible malicious programs safely but how do I keep my computer secure when I need to use a tool that might be malware. I cannot run it in a sandbox or virtual machine ...
0
votes
1answer
114 views

USB 3.0 write protection switch question

I bought a USB 3.0 flash drive with a write protection switch for use with a Linux live distribution. My question is, once the OS is installed and running, I tested it and I can still install programs ...
0
votes
0answers
186 views

Hardware vulnerabilities vs software threats

What are the key differences between them? I find both of them would also be able to retrieve data from the host system and both also could cause harm. I do not understand why there are people who ...
0
votes
0answers
108 views

Is it possible to debunk Intel Management Engine conspiracy theories using a data usage monitor device?

If there would be any backdoor in recent Intel CPU's, then it should send and receive data secretly. Isn't it possible to easily debunk this conspiracy theory by implementing a third physical device ...
40
votes
8answers
8k views

Are all USB-based attacks dependent on being able to inject keystrokes?

From what I've seen, USB-based attacks such as RubberDucky need to be able to open a terminal and then execute commands from there, usually to download and then install malware or to open a reverse ...
1
vote
2answers
104 views

Can you trust your computer devices to be safe to use if they have been in the hands of potential hackers? [duplicate]

Suppose you lose the bag containing your laptop along with its accessories or while travelling the police confiscate all your computer devices, can you safely use all the devices again if you format ...
2
votes
1answer
131 views

Best practice to secure hard-drive in case of theft or loss or unauthorized access?

Scenario: a person owns and used only a laptop (or PC) and on its hard drive is stored sensitive information, in addition, in browsers the logged-in sessions to gmail, facebook, server, etc...etc.. ...
2
votes
1answer
168 views

Is there a safe way to use external display with USB Type-C laptops?

Somewhat related to Is malware or screen capture possible with iMac as external display?, where we investigate the possibility of a DMA attack through DisplayPort, nowadays, many machines don't even ...
2
votes
1answer
389 views

Is the security seal on samsung phones proof that the phone has not been tampered with?

Samsung phones come with a security seal that says you should not buy the phone if it is broken. Is this proof that no one has tampered with the phone? Is there some way to take off the seal and ...
2
votes
1answer
98 views

Protecting private encrypted data on public computers

Consider an (Java) application that will be deployed on an off-the-shelf laptop in a public location. The laptop is not connected to any network or the internet. A USB barcode scanner is available as ...
0
votes
0answers
79 views

How to identify which device is malicious

I'm facing a surprising problem : A windows 10 computer seem to use keyboard and mouse by himself on the login screen. So I'm guessing : It's not a software intrusion, because it that way the ...
4
votes
0answers
95 views

What kind of attacks can hardware level memory encryption protect from?

Both AMD and Intel have introduced memory encryption at the hardware level. AMD calls this Secure Memory Encryption (SME), with the Intel version being Total Memory Encryption (TME). What kind of ...
-1
votes
1answer
55 views

threat intelligence gateway [closed]

A TOG (threat intelligence gateway) is a hardware piece that sits between the router and the firewall. The TIG uses the threat intelligence and filters out the malicious urls and IPs before reaching ...
0
votes
1answer
59 views

What credentials does this hardware device steal?

I was reading about this device the author made, however he did not specify WHAT he was able to steal from a locked computer. What credentials does this steal? https://room362.com/post/2016/snagging-...
1
vote
2answers
270 views

How to protect external hard drive from tampering?

I am looking to buy an external 1TB hard drive to store sensitive information on. External hard drives aren't (physically) small, and it may have to be left unattended at times. What can I do to ...
1
vote
1answer
759 views

Is there a unique way to identify a hardware?

I'm considering an environment in which I will have to identify a computer. In this scenario all hardware parts (CPU, HDDs, RAM, etc) won't change, while I'd like to consider a changing OS. The goal ...
9
votes
3answers
1k views

Ring -3 exploits and existence of other rings

Concept of Rings Rings were introduced in the forerunner of UNIX, Multics, and had 8 rings for reading, writing, executing and calling (I don't quite understand why it needed 8 rings to do this, if ...
4
votes
1answer
140 views

How can I challenge an attacker to reliably identify their hardware? [closed]

I distribute a client application where I would like to identify a user's hardware specifications when they begin interacting with my server. I am specifically interested in identifying the user's GPU ...
0
votes
3answers
291 views

Can PCB's contain spyware?

I'm thinking about purchasing a keyboard PCB from someone overseas, but I'm not 100% sure if it's safe. The firmware I'm going to install is QMK which is open source and I feel safe using it. ...
0
votes
3answers
696 views

Easiest way to secure my home network from work pc

I am about to start a work at home position using a mac. I will be using my own personal internet to connect to their servers through their VPN. I want to isolate my work PC from accessing my home ...
0
votes
1answer
350 views

How to make USB drive read only and write by a password or key or certificate?

I am trying to distribute a software, a simple exe file, that can be executed directly from an USB drive. I would like to make that USB drive read only to avoid any malware infection and accidental ...

1
2 3 4 5
11