Questions tagged [hardware]

For attacks against, or best practices for physical components of an Information Technology system. It can consist of network equipment, servers, CPUs, hardware security module, smartcards, etc. When using this tag, also include an additional tag for the specific type of hardware.

Filter by
Sorted by
Tagged with
8
votes
1answer
1k views

Intel firmware/microcode updates that make processors “immune” to both Spectre and Meltdown?

Recently Intel has claimed the following in a press release (emphasis added): SANTA CLARA, Calif., Jan. 4, 2018 — Intel has developed and is rapidly issuing updates for all types of Intel-based ...
8
votes
1answer
505 views

Mitigating Meltdown by checking the faulting address in every page fault?

Short question Would checking if the faulting address for every page fault points to kernel memory reliably detect an attempted Meltdown exploit, on systems that lack Intel TSX (and thus cannot ...
1
vote
1answer
83 views

Are eavesdropping attacks possible on Ledger Nano S hardware wallets?

Regarding the Ledger Nano S hardware wallet for cryptocurrencies, I've heard it claimed that the private keys for the wallet are securely stored on the physical device and protected even if the PC is ...
11
votes
2answers
569 views

Does recent Intel hardware mitigate Meltdown at the hardware level?

Recently a security researcher made the following claim via Twitter (emphasis added): If you're running Windows, I'm about to publish a tool that checks if you have the "Variant 3: rogue data cache ...
1
vote
2answers
485 views

How does the Intel CPU design flaw affect us? [closed]

Today, I saw this in the news. I'm hesitant to install the fix, because I've heard it would slow down IO 50%, which is not acceptable for me. But a guy said that the flaw allows JavaScript in the ...
2
votes
3answers
381 views

Can I safely re-use an old, possibly compromised, hard drive?

I have a 1TB Seagate hard drive (old-style spinning disc :) ). I want to repurpose it if I can do so safely. It was as originally the primary system drive on a Win7 laptop. It may well have been ...
1
vote
0answers
157 views

Flash Descriptor write-protection defaults

According to Intel in this article, to exploit Intel SA 00086 an attacker needs physical access if Flash Descriptor write protections are enabled. I assembled my computer myself, and it doesn't look ...
3
votes
0answers
157 views

What is known about the latest vulnerability related to Linux Page Table Isolation patches? [duplicate]

Recently, on Hacker News front page, there was a post mentioning a new vulnerability that seems to affect Intel processors. The post is mostly speculation and there is no PoC or an exploit that I'm ...
26
votes
1answer
4k views

DMA attacks despite IOMMU isolation

If you're already familiar with PCI behavior and Linux's handling of DMA buffers, skip to the third section for my actual question. Otherwise read on for a small summary of how PCI devices perform ...
10
votes
3answers
944 views

Are there any laptops which feature hardware security modules to prevent password brute forcing, such as in iPhone's secure enclave

Both iPhones and Googles Pixel 2 phone feature security hardware chips that essentially prevent brute forcing of the passcode by having it be handled by a dedicated hardware security module. To my ...
1
vote
2answers
649 views

Checking for hardware vulnerabilities (like Intel Management Engine) semi-automated?

Is there a nice semi-automated way that I would just paste output of my /proc, lspci, or any other hardware description and get suggestions to what kind of vulnerabilities a given computer may be ...
4
votes
2answers
2k views

Are DVDs vulnerable to firmware malware (and assorted questions)? [closed]

I have a few questions about DVD drives. Are DVD drives and SATA interfaces vulnerable to issues like BadUSB caused by being able to reprogram firmware of the drive or disk or even spreading to other ...
4
votes
2answers
219 views

How to proceed with IoT Vulnerability assessment?

First: This is not one of those "How do I start hacking?" questions, but more of a "How do I begin testing a specific device?". It is a part of my Bachelor Thesis to perform a Vulnerability analysis/...
6
votes
1answer
424 views

Can any of the INTEL-SA-00086 vulnerabilities be exploited by an unprivileged user?

Several of the latest Intel Management Engine vulnerabilities are listed as local vulnerabilities, allowing code executing on the system to elevate its privileges to ME context. One of them (CVE-2017-...
0
votes
0answers
113 views

Re: Intel IME\physical-access exploits - Has a Manufacturer ever (unintentionally) released malware-infected PC Components?

Given the discovery that Intel's IME can be hacked by USB (since 2008), I started researching hardware level exploits - like the Stuxnet USB attack on Iran's Nuclear plant and I'm curious about the ...
5
votes
0answers
258 views

Security of TPM 1.2 for providing tamper-evidence against firmware modification

I would like to use a TPM for providing tamper-evidence to my workstation, using SRTM (Static Root-of-Trust for Measurement). Currently, I plan to have the TPM seal a one-time value which only I know, ...
3
votes
1answer
439 views

In the age of BadUSB, are micro SD cards a secure alternative media immune to those style of attacks? [duplicate]

Why or why not? As a corollary, I saw a presentation description in a recent CCC demonstrating the (non-hostile) use of micro SD cards as a cheap source of processing power. Does this render micro SD ...
1
vote
1answer
446 views

About the IEEE P1735 standard

I read this article from The hacker news (article). I understand the figure showing how P1735 works but I'm wondering, when you ship your IP (Intellectual Property) to a client, the code needs to be ...
15
votes
1answer
7k views

How can anyone access Intel's “backdoor OS”, MINIX?

I've read that all recent Intel-based machines include a secret MINIX-based OS, and that it even includes its own web-server. How does one access this OS's services from the main OS? Its purpose ...
1
vote
1answer
96 views

What architecture could be suitable for a secure environment?

According to these slides on replacing UEFI with Linux: Between Linux and the hardware are at least 2 ½ kernels. Are there any architectures that contain fewer layers between the main OS and the ...
1
vote
1answer
220 views

Inputstick : AES-128 encryption (CBC mode) over Bluetooth connection

There is "Inputstick" device offering way to transport passwords to computer over USB wireless via: AES-128 encryption (CBC mode) over Bluetooth connection http://inputstick.com/index.php/en/about-en/...
10
votes
2answers
4k views

Are (Intel) chipsets spying on us?

I had a conversation yesterday where someone claimed that I should only use (Intel) computers from before 2006. This was allegedly because after this, software has been embedded in the chipsets that ...
1
vote
1answer
354 views

Can we stop aimbots by introducing a “Protected Input Path” that ensures that mouse input really comes from the mouse?

When playing First Person Shooters online it's possible to stumble on opponents using aimbots. They are really a plague, and I was wondering whether there is anything that can be done to block them. ...
-1
votes
1answer
65 views

What hardware could be implanted on someones computer to bypass their VPN? [closed]

I was wondering what hardware could be used to bypass a VPN and get a user's email for example.
2
votes
1answer
1k views

Intel Management Engine vulnerabilities in CPUs without vPro

Intel Management Engine (ME) imposes a security risk (see here for example). As I understand ME is a part of Intel vPro. Does having an Intel CPU without vPro support mean ME is not fully functional ...
3
votes
0answers
37 views

Attaching new device in linux only after password

Is there way to restrict attaching new devices in linux, so when attaching new device via usb, PCI, firewire and any other way, new device will be enabled only after entering password?
3
votes
2answers
161 views

Is it still secure if a cryptographic key generated with OpenSSL while a backdoored HWRNG used?

Assuming I plugged a HWRNG in to my Linux machine, use OpenSSL to generate a RSA key pair and encrypted some text with AES. Later then, a researcher posted the HWRNG was backdoored. Should I consider ...
6
votes
1answer
1k views

Is Intel i3 CPU affected by the Intel ME vulnerability?

Hello I have an Intel® Core™ i3-2328M CPU @ 2.20GHz computer processor (I think Sandy Bridge). https://ark.intel.com/products/70927/Intel-Core-i3-2328M-Processor-3M-Cache-2_20-GHz I have heard about ...
1
vote
1answer
186 views

How to completely remove all traces of a file on Linux? (Overriding everything if needed)

How can I delete a file and completely remove it from the system FOREVER. I does have in mind that it's needed to override it. But how can I do that?
13
votes
2answers
2k views

How to find all the microphones in a room?

"Smart" devices are all around us nowadays and many of them have built-in mics which can be be misused to spy on you in cases when the device is hacked (which is rather probable to happen as there are ...
4
votes
1answer
1k views

Found my iPhone 6 somewhat open (possibly right after airport security), what (if anything) might have been done to it?

I was traveling by air very recently, and once I got home I noticed that the button on my iPhone 6 seemed to be more deeply recessed. After a while I realized that this did not make any sense ...
0
votes
2answers
2k views

Hardware / firmware backdoors : TPM as a security risk - How to turn it into security advantage?

--- Question: What are the exact risks of using TPM 2.0 or owning this integrated chip? In what circumstances? What are the solutions to minimize risks? Details: My primary goal was to try to find ...
6
votes
2answers
18k views

How to access Replay Protected Memory Block (RPMB) in eMMC?

RPMB is a special partition in eMMC 4.5. Internet research suggests that it is used for saving keys and is the only special partition that responds to commands like READ, WRITE. etc. Can anyone ...
0
votes
3answers
281 views

Is there a way to know when the microphone is recording? (Windows 10)

Is there an open source windows 10 trick (or a tweak/app) that would just turn ON/OFF the microphone or at least shows when it records? (For instance when it will record, it will show a red icon on ...
0
votes
3answers
347 views

Can OS protect us from backdoored CPU? [closed]

I was wondering if O.S. can act in such a way to hide from CPU what it is doing? I know that everything is computed only in CPU, but O.S. decides what that is, and keeps track of file system, etc. For ...
5
votes
3answers
357 views

Can a self-build router minimize the potential risk of intels management engine (ME)?

I read some stuff about intels ME and got interested because of its huge potential security threat to basically (more or less) every intel system since 2008. And I came across the great work of @igor-...
1
vote
1answer
107 views

Monitor with two simultaneous, seperate inputs: can an OS read from both inputs? [closed]

For example, if you have two computers connected to one monitor, at the same time: can the visuals being sent from computer #1 to the monitor be received by computer #2 ? In any kind of simple way ? ...
1
vote
1answer
247 views

Work from home, remote monitoring software, vpn, privacy

So I work for a company where I make and receive phone calls and connect to remote servers and workstations. I work from home, use a company laptop and connect to the company's network via software ...
0
votes
1answer
368 views

How would you totally isolate a laptop from any network? [closed]

I've been thinking hard about that Faraday's cage, but what if someone needed to use the computer ? Also, the laptop wouldn't be trusty, so you never know exactly what's inside, what could emit ...
10
votes
1answer
273 views

How to verify hardware is legitimate

We are working on a sensor that is going to be collecting data, passing it to a smart phone which then stores the data in a database. I need to be able to verify that the hardware is legitimate, so ...
-1
votes
1answer
111 views

MicroUSB equivilent of the Killer USB drive?

There's something so satisfying about the killer usb drive: https://arstechnica.com/security/2015/10/usb-killer-flash-drive-can-fry-your-computers-innards-in-seconds/ 220 volts straight to the ...
2
votes
2answers
2k views

Why are hardware based random number generators considered better than software based generators?

Hardware based random number generators (RNG) get their randomness from the noise around. Software based generators get this usually from user input, like moving the mouse over a screen (like ...
2
votes
2answers
152 views

How to ensure that a program is implemented as per your recommendation?

I have an security protocol whose implementation will be done by many third parties developers (lets call them as 'manufacturers') which in turn will be programmed in the embedded hardware designed by ...
5
votes
1answer
102 views

Get key by monitoring power consimption of AES hardware core?

Is it possible for an adversary to gain knowledge of the secret key by analyzing the power consumption of an AES hardware core? I think he/she can't, but I am having difficulty to give a reasonable ...
8
votes
2answers
2k views

Safe way to backup Bitcoin hardware wallet

On official site they (Trezor) emphasize that you should never store your recovery seed digitally. But this seems to me absolutely strange. First of all we live in 21st century. And paper (or even ...
5
votes
1answer
513 views

How would I secure my bios?

How would I fully secure my bios password/other settings from being reset/breached by pulling the battery out or by other means?
1
vote
0answers
156 views

Do Intel Atom CPUs have ME / AMT? [duplicate]

I cannot find much clear documentation about that, especially when it specifically comes to ME. Regarding AMT, as I understood it requires vPro and Atoms (at least usually) don't come with it. So is ...
7
votes
0answers
208 views

Using instruction set architecture (ISA) to stop stack overflows

I have been learning about using stack overflows to get arbitrary code execution, one of the tricks used is overwriting the return address to make control flow go the way you want it. Assuming our ...
4
votes
2answers
580 views

What is hardware security?

I guess hardware security refers to the security of it's firmware, but the firmware is just software, so why do we call it hardware security? If I am wrong, can anyone explain what is hardware ...
2
votes
0answers
1k views

Does any DRM system work within a Virtual Machine? [closed]

I'm running a few quick tests to see if any DRM system works on a VM. Notably, most DRM systems (haven't found one yet), don't work on a virtual device: iPhone Simulator on OSX (FairPlay) Windows ...

1 2 3
4
5
11