Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [physical]

The use of physical measures (such as locks and tamper-proofing) or policies (such as Clean Desk) in order to protect sensitive information from unauthorized access.

2
votes
2answers
75 views

Security and thumb drive [duplicate]

If my laptop is locked, can a thumb drive be able to still infect my computer, or create a backdoor, or any other security risk if it's plugged into it. If so what are some example
0
votes
1answer
34 views

Does the number of fingerprints we leave represent a security threat to the banking system?

A number of major banks are allowing users to log in to their bank accounts with only fingerprints. It was occurring to me, though: how many fingerprints does the average person leave per day? How ...
2
votes
1answer
144 views

What is the fastest way to brute force a hardware code

Where I live, there is a keypad with numbers from 0 to 9 and two letters, A and B. Using it I noticed that the code was checked on the last 5 things entered. If I were to try every code on the keypad,...
1
vote
1answer
21 views

Liquid security scenario

I'm a part of a small team of undergraduate developers taking a course on developing Arduino and Raspberry Pi applications with a focus on the Internet of Things. Our current task is to imagine, ...
3
votes
2answers
215 views

Is there any way somebody could hack into my brain?

Before you close this, I'm actually serious. Could somebody, in theory, have conked me out behind a Chiles, cirucular-sawed my brain out, and plugged me up to a machine capable of brain simulation? ...
101
votes
19answers
21k views

Defence methods against tailgating

This is a follow-up question to this one: Roles to play when tailgaiting into a residential building How do you protect yourself or your company against tailgaters? What is the best answer when you ...
0
votes
4answers
78 views

Assessing risks Physical security of devices

I have several devices and flash drives that need to be secured. I haven't been able to find any good physical security measures to protect those devices. What are my options? What do you use, if ...
41
votes
7answers
13k views

How resistant are barcodes and QR-codes against attempts to change stored data?

Assume we want to protect a document against manipulating and forging. So, we encode some sensitive information of the document and store it in a QR-code inserted in the document. Can we be sure that ...
12
votes
2answers
713 views

Securing a Laptop from a Foreign Intelligence Agency

What would be the best practices for securing a single-purpose Windows laptop against a determined foreign intelligence agency from tampering with data on the machine? The machine would be used ...
3
votes
1answer
198 views

If rowhammer only results in capacitor discharge, how can it flip 0 to 1?

In rowhammer, why will changing the voltage on one row cause the other row to open/close? Is it related to induction? How can it change bits from 0 to 1? I understand from 1 to 0 - voltage discharge, ...
1
vote
1answer
143 views

Are unbranded home security camera secure? [closed]

I plan on buying a couple of cheap cameras for my home. I plan to put them just inside the doors like the laundry door, I won't be putting them in the bedroom or living room. My major concern is how ...
4
votes
2answers
124 views

resource on physical security that calls out doorknobs as being more secure than door handles

A manager invited me to try and test the physical security of his office door lock (by non-destructive means, i.e. not ramming the door down). I found that since the door opened from inside by a ...
4
votes
1answer
246 views

How does full memory encryption in newer processes protect against DMA attacks?

Upcoming Intel CPUs have TME, current AMD processors have SME. These are full-memory encryption techniques to protect against physical attacks such as cold boot attacks. Both support encrypting the ...
2
votes
2answers
480 views

Why is an HSM required to protect CA certificates (rather than a regular USB token)?

Typical USB tokens (Nitrokey, YubiKey...) allow an everyday user to store PGP keys and use them to encrypt email, harddrives and so on. The same vendors also offer distinct products called HSMs (...
0
votes
0answers
64 views

Feasibility of using serial port/cable to act as a simple data diode?

I'm trying to determine the feasibility of using a serial port/cable to act as a simple and cheap data diode. I'll be connecting 2 Windows PCs (1 of which is on a secured network) using a 1-way null ...
8
votes
4answers
421 views

Why would taking my laptop home be encouraged for security reasons?

My company's infosec policy contains a statement to the effect that I am encouraged to bring my laptop home with me to that it never leaves my possession/control. This doesn't seem useful, from a ...
3
votes
1answer
109 views

Is there some type of x-ray that can see through HSM or shielded integrated circuit?

I know that security-oriented products can easily protect their contents from even the most sensitive commercial x-rays, which can see objects at about 0.5µm. But let's put cost limits aside (or ...
3
votes
1answer
391 views

Is it possible to bypass USB access restriction placed by the Active Directory? [closed]

I've been tasked with an onsite engagement to see what I can find from one of their laptops. They have a policy in place to block USB access through the Active Directory, e.g. When you try to access ...
126
votes
5answers
24k views

Is momentary physical access dangerous?

I’m asking the question with these conditions: The device (computer or mobile phone) is in a running state. “Momentary” refers to a reasonably short period of time, such as 5 to 10 seconds. The ...
4
votes
1answer
291 views

Can an air-gapped PC receive malicious code even when completely clean, apart from all physically attacks?

The Basic question is in the title there are more questions bellow but it is in context of the question in the title...hopefully What i have read is that it can eavesdrop the Airgap PC via acoustic ...
1
vote
0answers
34 views

How to secure unique identification of physical resources in a distributed system?

I'm attempting to build a mechanism to prevent frauds and provide traceability of physical resources in a distributed system. The idea is straightforward: the resource travels hop-by-hop on a network ...
2
votes
1answer
91 views

Possible physical interface attacks on a server [duplicate]

Let's say you have a server at a data centre, but a hacker manages to find a way in and has access to your server. What are the attack possibilities with all the interfaces available? Are there any ...
-1
votes
1answer
69 views

International communications after nuclear fallout [closed]

Is there a (nuclear fallout) scenario imaginable where international communications are thrown back to the stone age? Meaning: Satellites are EMP'd out of the sky Transoceanic cables are cut ...
34
votes
7answers
5k views

What are the real physical risks of casual social media publishing?

aka "how to scare my family into stopping publishing their life online?" I do not publish personal photos / opinions publicly online as a rule. I never gave hard thoughts about that but I believe ...
7
votes
1answer
311 views

What are good methods of visual security?

What are good methods of visually securing sensitive information that might appear on your screen from the outside world? An example to illustrate my question would be the following: You're sat in ...
-2
votes
2answers
155 views

Creating portable bash terminal & cmd to USB [closed]

Developing my toolkit and I want to have a safe edition of cmd.exe and bash on a usb. Why? These can be tampered with by attackers and I want a version I know is safe from manipulation. Any ...
2
votes
2answers
822 views

Security and Veracrypt [closed]

I have a few questions about Security and Veracrypt and hope you can clarify it for me. I don't want the VeraCrypt hidden volume I created to be damaged. If I mount the hidden volume and transfer ...
153
votes
12answers
30k views

4-dial combination padlock: Is it more secure to zero it out or to blindly spin the dials after locking?

I am partially responsible for some resources protected by a 4-dial combination lock like this one: There are two things that people will usually do after they've locked it: reset all the digits to ...
2
votes
2answers
126 views

What security standards apply to physical security for an infosec office

I'm looking for actual specific standards that apply to physical access control for Information Security office space. Long story short, our building manager wants an open office concept, and in order ...
3
votes
2answers
127 views

Securely storing account credentials/information for critical company services - the bus factor

Question: I'm trying to figure out best practices for storing authentication credentials for critical company services - hosting services, domain registration services, recruiting portals, etc... To ...
0
votes
2answers
123 views

What would 'best practice' look like in protecting critical infrastructure against state actor cyber attack?

I was reading this article from the New York Times, which details the alarming degree to which the IT systems running critical civic infrastructure have allegedly been compromised by Russian cyber ...
2
votes
1answer
147 views

If and why should any personal information be destroyed before putting scrap paper into the recycle container?

Well this question may not be about computers, but it most definitely is about information security, so I'll give it a try... I've been repeatedly told in my life that I should always carefully check ...
-3
votes
1answer
186 views

Why are mailboxes unsecure? [closed]

Why can anyone go up to a mailbox and just take the mail out of it? Some mailboxes, like at townhouses and apartments, have locks, but the mailboxes at single family homes that I have seen do not. Isn’...
1
vote
3answers
691 views

Wired VS Wireless Mouse & Keyboard Security

Wired VS Wireless Mouse & Keyboard Security For someone who is trying to maintain the highest level of security, which option proposes the LEAST amount of security flaws? Wired Keyboard & ...
40
votes
6answers
9k views

How “scrambled” is the data on a RAID5 disk?

My concern is the disposal of a replaced disk from a private RAID5 disk array. I have had to replace a disk from my personal RAID5 disk-array. It had started developing errors, so out it went. But ...
-1
votes
3answers
602 views

Shutdown vs sleep

From a security point of view, is sleep safer than shutdown in laptops? Shutdown only needs to be done after monthly updates, since shutdown "saves" settings, "changes" etc, then reboots. Sleep only ...
4
votes
2answers
709 views

Are DVDs vulnerable to firmware malware (and assorted questions)? [closed]

I have a few questions about DVD drives. Are DVD drives and SATA interfaces vulnerable to issues like BadUSB caused by being able to reprogram firmware of the drive or disk or even spreading to other ...
4
votes
2answers
193 views

How to make a secure communication between UHF reader and UHF RFID Tag?

I found some boom barriers,used for gate system, were integrated with UHF reader + access controller and a UHF stickers (attached in car's windshield) for access control using wiegand protocol. In ...
3
votes
0answers
88 views

Credential leaking while unconscious [closed]

Bear with me here, because this admittedly sounds nutty, but I had a dream last night in which I distinctly recall (accurately) typing the master password for my password manager into a (dream) ...
2
votes
1answer
113 views

Keyboards that do not retain heat to prevent thermal imaging of key presses?

Some of you may be aware of the Flir One Pro that turns your smartphone into a thermal imaging camera. This can easily be used irresponsibly: If we can get you out the room in under 60 seconds (...
3
votes
1answer
228 views

Do dial locks have repeated numbers?

Can dial locks, such as the one below, have repeated numbers in their combination? For example, the combination 10-39-10 has the number 10 repeated twice in it. If so how often is this the case?
1
vote
3answers
263 views

Evidence of any large scale data breaches from lack of physical security?

You see far-fetched Hollywood examples of the most unlikely scenario's resulting in a data breach due to a lack of physical security. An example is in Mr Robot where the protagonist gets into a data ...
1
vote
0answers
41 views

Electronic store security [closed]

Iam not sure if this is the right place to ask this question. I would like to know what security features an electronic store should have besides the general alarm system monitored by a security ...
3
votes
1answer
154 views

Does Android have no protection against malicious public USB ports?

I was reading a bunch of news articles which asked not to charge phone using public USB ports as they could be malicious. According to the web pages, the USB wires carry data and power so they have ...
2
votes
1answer
220 views

Found my iPhone 6 somewhat open (possibly right after airport security), what (if anything) might have been done to it?

I was traveling by air very recently, and once I got home I noticed that the button on my iPhone 6 seemed to be more deeply recessed. After a while I realized that this did not make any sense ...
2
votes
1answer
160 views

What are the physical security features that prevent the cryptographic data on a SIM card being read?

In his excellent answer to "How does a SIM card prevent cloning?", user Lie Ryan explains that SIM cards have their critical data stored in "tamper proof housing", protected by "physical security ...
0
votes
1answer
55 views

Security Chipsec [closed]

Is it right to believe that if the Chipsec scan, Malwarebytes Anti Rootkit scan and Tdsskiller all come clean, your computer OS and hardware are all clean with no malware, rootkit, Rat or anything ...
9
votes
5answers
1k views

Use WiFi tracking to identify burglars

Recently I had the following idea. I live in a rural area where few people pass in front of our house. Burglars like such areas, because the chance of being seen breaking into a house is small. ...
2
votes
3answers
999 views

Has the hard drive been accessed or computer hacked? [closed]

How do I find out if someone who had access to my laptop, accessed the hard drive manually (by taking it out of the laptop and copying or viewing the data)? I know there is the Windows audit ...
4
votes
2answers
1k views

Data Diodes and TCP traffic

Data diodes (one-way networks) are often used to effect a hardware based 'air-gap' for high security sites. How do they deal with protocols, such as TCP, that require replys? I have some inclination ...