Questions tagged [hardware]

For attacks against, or best practices for physical components of an Information Technology system. It can consist of network equipment, servers, CPUs, hardware security module, smartcards, etc. When using this tag, also include an additional tag for the specific type of hardware.

Filter by
Sorted by
Tagged with
5
votes
2answers
7k views

Where is the Bitlocker key stored without the Trusted-Platform Module (TPM)?

I've seen many Windows clients with Bitlocker installed without the Trusted-Platform Module (TPM) enabled. This requires manual changes in the Group Policy since by default it's not possible to enable ...
1
vote
1answer
117 views

Will this router setup add a good layer of security?

I'm looking at doing this, where I have 2 routers in the setup to protect a group of networked computers from other computers. It would look like this: Internet - Modem - Router A (other computers) -...
2
votes
3answers
116 views

Security of different Filesystems

Are there any preferred filesystems that have some boni regarding security and confidentiality? Or does it really not matter if I, for example, encrypt a HDD with LUKS? As an example, I read that the ...
5
votes
2answers
1k views

WD My Cloud Vulnerabilities - What is at risk?

Recently there were around 70 vulnerabilities found within Western Digital's "My Cloud" devices. I am curious to know more about the scope of these vulnerabilities. All of the vulnerabilities have ...
3
votes
1answer
180 views

How would you remove the malware from a router or switch?

With the recent release of vault 7 was just wondering if you were to purchase a piece of network equipment off of eBay (or anything else for that matter?) that the CIA installed malware onto, how ...
22
votes
3answers
25k views

How practical is a laser microphone and how to protect against it?

A laser microphone is a "surveillance device that uses a laser beam to detect sound vibrations in a distant object". - Wikipedia. It's also known as a Laser Based Listening System (LBLS). Firstly, ...
3
votes
3answers
13k views

Is it possible to find the manufacturer of a BLE device from it's mac address?

Tools like nmap are able to identify the make of a device based on it's mac address. Is there a tool or a reference to identify the make of a Bluetooth Low Energy device based on its mac address?
0
votes
0answers
32 views

Retrieve information about “memory protection”

I read in Wikipedia that there were two ways to achieve "memory protection" Access control lists "Traits" where a SUN processor used traits for pointer and the memory. That particular processor had ...
2
votes
1answer
109 views

What should be in top-down IoT Security Policy for companies engineering products to market? [closed]

You are a company creating consumer-facing IoT Devices, What things should go in a IoT product/data security policy? Initial thoughts: Privacy, Control Gates, cryptography, vulnerability/decision ...
2
votes
0answers
125 views

How can I verify the algorithm used for FDE is actually AES-128?

I would like to check whether the algorithm that is used to encrypt my SSD drive is actually AES-128. I wanted to read the raw disk data, encrypt them myself and then diff the data against the ...
1
vote
1answer
186 views

What is the security risk of the Macbook Pro Touchbar?

The new MacBook Pro has a touch bar that has been banned for students taking the bar exam. What is the issue that would cause this response? Data leakage Cheat sheets Add in apps could alter the ...
-1
votes
1answer
130 views

Can hardware be infected with remote administration malware?

can a READ-ONLY dvd/cd player have firmware in it get infected with a RAT? I read 2 different opinions here, a yes and a no. It is in relation to if a RAT gets onto computer via ip address or opening ...
1
vote
1answer
518 views

is it possible to avoid hardware backdoors? [closed]

Hi I have recently started to learn about data protection. After the snowden events it seems pretty certain that intelligence agency may have planted backdoors in hardware. I have got a few questions ...
1
vote
1answer
81 views

Wireless Adapter + Arduino 'Bug'

First, I am new to ethical hacking. And also I just realized that I need a wireless adapter for wireless attacks. I'm currently mastering Python, and some basic knowledge in Bash and Arduino. What I ...
3
votes
1answer
1k views

How to find out if your webcam and LED have been hardwired or not

In these days webcam and LED in some laptops are interlocked either on a firmware base or a hardware base. Is there any possibility to determine whether or not the LED connection to the webcam is ...
1
vote
2answers
148 views

Persistent exploits on “baremetal” cloud hosting services

There are several cloud providers that offer "baremetal" hosting where tenants are allowed root-level access to the OS running directly on the hardware. What is the risk that a previous malicious ...
-4
votes
1answer
2k views

Webcam hack while laptop is offline

Well, basically the subject says for it self. Is it actually possible to hack the webcam of a PC that is turned off? We're not talking about an infected machine. For example, by remotely turning ...
0
votes
2answers
178 views

Embedded Surveillance Devices [closed]

There is a very suspicious man living in my building. I noticed a new imbedded device at the shared entrance which he claims is a monoxide detector. As an aside, there is no need for a monoxide ...
1
vote
1answer
122 views

Is it possible for a hacker to cause hardware dysfunction? [duplicate]

Sorry, I am noob to security. Is it possible to blow up a computer by hacking it or at least provoke a hardware dysfunction?
7
votes
2answers
325 views

If smart hardware is evil can I still securely run software?

I was thinking. And I was searching the Internet. I want to check if there is more than I found. I considered asking on crypto.se. But the question might involve hardware and out of the box thinking. ...
3
votes
1answer
177 views

Are there any IoT Systematic Creation Security Checklists?

Are you aware of any publicly available documents that would help IoT/Connected product creators develop a systematic/programmatic approach and/or process to securing such new age devices?
15
votes
1answer
4k views

How can a hacker disable the LED attached to a webcam without critically damaging the hardware?

Some webcams have an LED next to it which notifies the user it's working. Hackers are supposed to be able to disable this LED in order to spy their victims without their knowledge, but how can you ...
5
votes
0answers
2k views

Storing SSH keys on a dedicated hardware device [closed]

When setting up a remote SSH access for an automated job, I realized that one of the main risks would be that the client machine gets hacked and the key stolen, giving the attacker access to the ...
2
votes
3answers
2k views

How safe is a 3.5mm headphone jack on a laptop? [duplicate]

Not sure if there is a more proper stackexchange for this... I have heard vaguely of problems with usb devices being insecure for obvious reasons, but what about headphone jacks? Can they impersonate ...
0
votes
2answers
4k views

can a power bank be used to plant malware?

A power bank has some sort of circuitry, but I am not sure if there is any software on a power bank or if they are only pure batteries, but people are connecting their mobile phones and laptops to ...
3
votes
1answer
269 views

Is it possible to do research in both Computer Architecture and Security

I just finished with my MSc in Computer Science and Engineering (Security study-line) with a thesis on cache timing attacks on virtualized environments. I also have an MEng in Electronic and ...
1
vote
0answers
242 views

No authentication, AES encrypted JSON over UDP

I was recently assigned the task of testing a new hardware device which communicates with a JSON API over UDP. For some reason or another, it was decided that AES-CBC-128 should be used to encrypt ...
33
votes
9answers
7k views

Is it safe to use cheap USB data cables?

Websites like Amazon and eBay sell USB data cables for a pittance, often of unknown or dubious provenance. Should I be wary of using these cables to transfer data to or from my devices? Is it ...
3
votes
5answers
1k views

Is there a security benefit of using a Virtual Machine over dual booting?

I was looking at a question asking about Dual booting in SuperUser, and I was if there is added protection of using a VM over dual booting. From what I've been told, a VM is it's own sandbox, and ...
1
vote
0answers
64 views

Researchers Bypass ASLR Protection on Intel Haswell CPUs [closed]

See Softpedia and research paper. Could we somehow prevent this attack on various OS?
0
votes
1answer
1k views

Which is more secure? AMD DASH or Intel vPro [closed]

In term of overall security is AMD DASH or Intel vPro preferable? They both have: Hardware virtualization Remote Manageability Hardware-enhanced security etc... I can't really distinguish the ...
1
vote
2answers
3k views

Bypassing HDD Passwords

I dismantled a broken old laptop for spare parts. I'm trying to salvage the old Seagate mechanical HDD but it (firmware?) is password protected. I'm not sure if that means it's encrypted or not. ...
20
votes
2answers
7k views

What is known about the capabilities of AMD's Secure Processor?

I've found a fair amount of research about what Intel's ME does, including the "Intel x86 considered harmful (Chapter 4 is about ME)" survey paper by Joanna Rutkowska, but I'm having a much ...
2
votes
0answers
54 views

How hard is it to read MCU ram while running?

I know it's possible (but rather hard as it involves using acid on the chip) to read flash memory from a MCU. However how hard is it to read the ram of an MCU while it is running? Corrollary question ...
2
votes
2answers
493 views

Disk write-protection at the hardware level

A friend told me about a hardware piece which protects the hard drive from saving changes made to it, so that when the computer is rebooted it remains the same as it was the last time. Does such a ...
0
votes
1answer
178 views

Should a secure boot process be aware of the peripherals/hardware?

I know the question is rather broad because I am not specifying which hardware and which OS, but that is intentional. I know there should be a root of trust verification in hardware (ROM) before the ...
0
votes
1answer
96 views

Can I build trusted electronics device now a day?

For example, if I want to build my own circuit to read or test USB stick content, then often I must use a computer to write driver, load driver... That computer must use an OS like Windows or Linux......
0
votes
2answers
844 views

What are the technical specifications for the Apple iPhone 7 fingerprint reader?

I'm looking for technical material that describes the quality of the iPhone 7 fingerprint reader, and ideally previous models as well. My hope, is that the specification is more in alignment with ...
1
vote
3answers
272 views

HDD Good for Encryption?

Ok so I keep second guessing myself whether of not I should use encryption on this drive. I just found out it's not an SSD and here I was asking questions on encryption on SSDS. Huhh..... But yeah, ...
11
votes
1answer
537 views

Which memory modules are known to be vulnerable to or secure against Rowhammer/Flip Feng Shui?

Many memory modules from different manufacturers have been tested for vulnerability to the Rowhammer exploit. However, some researchers have anonymised their results, possibly for responsible ...
4
votes
1answer
2k views

Can my college Wi-Fi admin obtain the serial number/IMEI of my device?

I am using my own device on my college's Wi-Fi. I've heard that many pieces of information about my device such as my OS version is sent through a browser such as Google Chrome. But how can he obtain ...
2
votes
2answers
122 views

Using a usb to hide logs on computer?

I have been wondering for a while, since (for example on WindowsOS) logs are stored of user activity on the computer and can be retrieved later on by forensic experts easily. Can a user use an ...
2
votes
2answers
2k views

Hardware-backed Keychain for iOS and Android

I'm researching on hardware-backed keychain for iOS and Android, in order to store some certificates in hardware rather than software. According to Android docs (https://source.android.com/security/...
1
vote
2answers
212 views

What is meant by “Bulk Equipment Interference”?

In a recent BBC article about the UK's Snoopers Charter it mentions the term Bulk Equiptment Interference. It states: But he expressed some reservations about a fourth practice - bulk equipment ...
2
votes
0answers
73 views

Mobile processors with hardware support for efficient bounds checking

Are there any mobile or embedded processors that provide hardware support for efficient bounds checking? Intel's newest x86 processors provide MPX, which enables compilers to add automatic bounds ...
1
vote
1answer
532 views

Could you recover data from a fully encrypted disk if it's damaged?

I red the cold boot paper and how they manage to recover the original private key even if it's partially corrupted and it got me thinking. Suppose you have a fully encrypted disk via, say, truecrypt ,...
1
vote
1answer
556 views

Evaluation board for side channel attacks [closed]

I have started working on side channel attacks particularly focusing on DPA and DEMA for different cryptographic algorithms; targeting FPGA devices. I want to measure the power and EM radiated out of ...
1
vote
1answer
110 views

Store Virus/Keylogger on hardware component?

Is it possible to store a virus or key logger or something of that kind on a hardware that transmits data? I have recently bought a USB from Aliexpres and there is a bump on the cable, I did some ...
1
vote
1answer
193 views

HPET effects on CSPRNG for Linux OS

HPET or High Precision Event Timer is a hardware built-in clock source available in most processors. I would use the computer to generate CSPRNG and do cryptographic operations. My question is: Is ...
5
votes
1answer
264 views

Could the unused Mali GPU in the Libre Tea Computer Card be a security risk?

The Libre Tea Computer Card is a single-board computer that comes without any proprietary software (at least that’s the goal, it’s currently in crowdfunding): […] all firmware and kernel sources ...

1
3 4
5
6 7
11