Questions tagged [hardware]

For attacks against, or best practices for physical components of an Information Technology system. It can consist of network equipment, servers, CPUs, hardware security module, smartcards, etc. When using this tag, also include an additional tag for the specific type of hardware.

41 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
7
votes
0answers
208 views

Using instruction set architecture (ISA) to stop stack overflows

I have been learning about using stack overflows to get arbitrary code execution, one of the tricks used is overwriting the return address to make control flow go the way you want it. Assuming our ...
6
votes
1answer
556 views

Are there any observed Rowhammer attacks in the wild

Due to the latest news regarding Rowhammer and its applicability to ECC DRAM, I was wondering whether there are any Rowhammer attacks spotted in the wild. Given the various approaches to conduct a ...
5
votes
0answers
264 views

Security of TPM 1.2 for providing tamper-evidence against firmware modification

I would like to use a TPM for providing tamper-evidence to my workstation, using SRTM (Static Root-of-Trust for Measurement). Currently, I plan to have the TPM seal a one-time value which only I know, ...
4
votes
0answers
113 views

Can the glue of glitter-hot-glue sticks be used to provide evidence of electronics-hardware tampering?

I've been researching low-cost, yet strong, tamper-evident mechanisms, and purchased some low-cost glitter-hot-glue sticks as part of this research. The Amazon page advertising the sticks, seems to ...
4
votes
0answers
105 views

What kind of attacks can hardware level memory encryption protect from?

Both AMD and Intel have introduced memory encryption at the hardware level. AMD calls this Secure Memory Encryption (SME), with the Intel version being Total Memory Encryption (TME). What kind of ...
3
votes
0answers
380 views

How is it possible that the Metasploit meterpreter can take pictures without “notifying” the user?

Im curious how the Meterpreter can take pictures from my webcam without turning on the webcam LED? Ive read that you have to write/change a driver, or a firmware, or you just change some DLLs, but ...
3
votes
0answers
37 views

Attaching new device in linux only after password

Is there way to restrict attaching new devices in linux, so when attaching new device via usb, PCI, firewire and any other way, new device will be enabled only after entering password?
3
votes
1answer
115 views

How to enforce on the OS level to recognise only certain keyboards

I give employees AES wireless keyboards. I would like to enforce the OS to only recognise the keyboard we supply. Is that possible? Assuming my employees OS are Windows 10, Ubuntu, Mac OSX. How could ...
2
votes
2answers
174 views

Open-Source Hardware Security Modules (HSM)

Are there any Open-Source Hardware Security Modules (meeting OSHWA requirements)? I've worked with Utimaco HSMs, but I'm not a big fan of closed-source hardware -- especially when it comes to security ...
2
votes
1answer
235 views

Is there a safe way to use external display with USB Type-C laptops?

Somewhat related to Is malware or screen capture possible with iMac as external display?, where we investigate the possibility of a DMA attack through DisplayPort, nowadays, many machines don't even ...
2
votes
0answers
155 views

Can maliciously modified ACPI AML be executed without a reboot?

ACPI tables contain ACPI Machine Language, or AML, which is executed by an interpreter in the kernel at boot. Certain ACPI tables, such as the DSDT, are necessary to support hardware ACPI events such ...
2
votes
0answers
412 views

Minimum set of ACS features to secure remote PCIe devices

According to a Google blog post from 2017, Google has been experimenting with providing raw access to PCIe devices in a remote environment. They set out to discover what Access Control Service ...
2
votes
0answers
125 views

How can I verify the algorithm used for FDE is actually AES-128?

I would like to check whether the algorithm that is used to encrypt my SSD drive is actually AES-128. I wanted to read the raw disk data, encrypt them myself and then diff the data against the ...
2
votes
0answers
54 views

How hard is it to read MCU ram while running?

I know it's possible (but rather hard as it involves using acid on the chip) to read flash memory from a MCU. However how hard is it to read the ram of an MCU while it is running? Corrollary question ...
2
votes
0answers
73 views

Mobile processors with hardware support for efficient bounds checking

Are there any mobile or embedded processors that provide hardware support for efficient bounds checking? Intel's newest x86 processors provide MPX, which enables compilers to add automatic bounds ...
2
votes
0answers
77 views

Potential hazards for reusing an X.509 private key for multiple services?

One thing I've been thinking about for a while is using a X.509 private key stored in a hardware security device (think YubiKey et al) on a one-per-machine basis. Theoretically, it should be possible ...
1
vote
0answers
53 views

Has hackers ever used a microarchitectural side channel to launch an attack?

I'm a student of computer architecture and I just got through a class on Hardware Security. We spent a considerable amount of time learning about microarchitectural side channels, reading papers on ...
1
vote
2answers
161 views

Hardware components based on which to generate password

I want to generate a password for a Keystore in java on Windows platform. I would like to make a HASH out of some hardware information from my computer and some salt. My question is: which hardware or ...
1
vote
0answers
220 views

What is the current (mid-2020) status of hardware rootkit/malware and possible detection/monitoring?

I've posted a question (link) related to a potential compromised computer via SSH access with root user. Although no evidence of a break-in, I'm considering extended measures to ensure (as much as ...
1
vote
0answers
74 views

Protect USB from reading by using PC identity

Is there any way (software or hardware solution) to create a usb drive that can make its contents readable only on specific PCs using their hardware serial numbers?
1
vote
0answers
130 views

Is it possible to debunk Intel Management Engine conspiracy theories using a data usage monitor device?

If there would be any backdoor in recent Intel CPU's, then it should send and receive data secretly. Isn't it possible to easily debunk this conspiracy theory by implementing a third physical device ...
1
vote
0answers
88 views

Possible physical interface attacks of DMA on a server

Following from: here, Let's say you have a server at a data centre, but a hacker manages to find a way in and has access to your server. What are the attack possibilities regarding Direct Memory ...
1
vote
0answers
158 views

Flash Descriptor write-protection defaults

According to Intel in this article, to exploit Intel SA 00086 an attacker needs physical access if Flash Descriptor write protections are enabled. I assembled my computer myself, and it doesn't look ...
1
vote
0answers
246 views

No authentication, AES encrypted JSON over UDP

I was recently assigned the task of testing a new hardware device which communicates with a JSON API over UDP. For some reason or another, it was decided that AES-CBC-128 should be used to encrypt ...
0
votes
1answer
74 views

Are there any existing JTAG (hardware debugging) based malware detection systems, and if not, why?

JTAG System software debug support is for many software developers the main reason to be interested in JTAG. Many silicon architectures such as PowerPC, MIPS, ARM, x86 built an entire software debug, ...
0
votes
1answer
84 views

How secure is Heads for detecting tampering or infection of firmware or boot sector? (Pureboot)

I'm thinking of getting a Librem laptop with Pureboot which uses Heads (with the Librem key) for tamper detection. But I've heard rumours that there are weaknesses or vulnerabilities so I wanted to ...
0
votes
0answers
38 views

Examine BADUSB, reflash with Arduino IDE

The situation: I received a BADUSB device probably based on Atmega 32u4, armed with some kind of payload. I'd like to extract and analyze the payload. Then I'd like to reflash the device with my own ...
0
votes
0answers
42 views

Can hardware identifcation be evaded/spoofed?

If I'm not wrong, one of the many ways companies track and collect data of people through the internet is by identifying their hardware. Getting the monitor resolution, figuring what CPU it is, etc. ...
0
votes
0answers
53 views

Is malware in an EC firmware a concern, when standard security is in place together with the rest of the computer having no malevolent tampering?

Question My question is whether malware in the embedded-controller firmware is something to worry about if the rest of the computer system is faithfully what it should be, together with standard ...
0
votes
0answers
114 views

Can I view the format history of a usb key?

Is there a way to view when changes were made to a USB key, such as when the USB key was formatted and/or when some files were transferred? I have seen this previous stackexchange question File system ...
0
votes
1answer
123 views

iCloud deletion

If I delete photos which are stored in iCloud from my phone. (Which is also linked to my iPad) I know the data is then made ‘free space’ but is still on the phone In some format. If I delete it from ...
0
votes
1answer
68 views

Understanding the Secure Multi-party circuit for Stable Matching

I am reading the following paper: MPCircuits: Optimized Circuit Generation for Secure Multi-Party Computation link of paper I have following questions: why Preference of group1 starts from L_0 ...
0
votes
0answers
46 views

How to use potentially malicious hardware safely

I know the methods for running possible malicious programs safely but how do I keep my computer secure when I need to use a tool that might be malware. I cannot run it in a sandbox or virtual machine ...
0
votes
0answers
79 views

How to identify which device is malicious

I'm facing a surprising problem : A windows 10 computer seem to use keyboard and mouse by himself on the login screen. So I'm guessing : It's not a software intrusion, because it that way the ...
0
votes
1answer
854 views

Requiring hardware key at boot-up on normal laptop

I am sure that a question like this already exists and has probably been answered. I just couldn't find any results (probably due to my inability to word my question correctly). We use laptops at ...
0
votes
0answers
94 views

How to securely generate a License tied to 1 Computer for each user

This question is related to my first question: How secure is this schema for Online Licensing System? I'm trying to sell a subscription based software and I can't find a good way to generate a serial ...
0
votes
0answers
32 views

Possible physical interface attacks of BMCs on a server

Following from: here, Let's say you have a server at a data centre, but a hacker manages to find a way in and has access to your server. What are the attack possibilities regarding Baseboard ...
0
votes
0answers
113 views

Re: Intel IME\physical-access exploits - Has a Manufacturer ever (unintentionally) released malware-infected PC Components?

Given the discovery that Intel's IME can be hacked by USB (since 2008), I started researching hardware level exploits - like the Stuxnet USB attack on Iran's Nuclear plant and I'm curious about the ...
0
votes
0answers
32 views

Retrieve information about “memory protection”

I read in Wikipedia that there were two ways to achieve "memory protection" Access control lists "Traits" where a SUN processor used traits for pointer and the memory. That particular processor had ...
0
votes
0answers
45 views

Is the SanDisk ULLtraDIMM secure after power-down?

I found an interesting product last night called the SanDisk ULLtradDimm SSD (product page), which essentially claims drastic performance gains by plugging an SSD into a standard DDR3 memory channel. ...
-1
votes
1answer
130 views

Can hardware be infected with remote administration malware?

can a READ-ONLY dvd/cd player have firmware in it get infected with a RAT? I read 2 different opinions here, a yes and a no. It is in relation to if a RAT gets onto computer via ip address or opening ...