2022 Developer Survey is open! Take survey.

Questions tagged [physical]

The use of physical measures (such as locks and tamper-proofing) or policies (such as Clean Desk) in order to protect sensitive information from unauthorized access.

Filter by
Sorted by
Tagged with
1 vote
0 answers
42 views

Detecting BIOS changes on PC

I've seen this question: Is it possible to determine if the BIOS has been modified between two points in time? On my Linux PC, I've made a script that checks the MD5 hash of the boot partition to ...
user avatar
  • 11
0 votes
0 answers
52 views

Allow the use of camera phones in the manufacturing facilities; but then how do I maintain the security of the premises

What are the best practices to be followed to maintain security in the manufacturing site where camera phones are allowed? I'm working on one of the largest manufacturing facility where few of the R&...
user avatar
0 votes
0 answers
38 views

Windows 10 Cybersecurity on Stand-Alone Computer

I have been asked to investigate what capabilities exist within Windows 10 where the environment for this system is isolated. I believe it would not be able to benefit from an enterprise security ...
user avatar
  • 255
0 votes
1 answer
95 views

Has there ever been a case of dangerous industrial malware, which would destroy motherboards and similar PC components and how to protect [duplicate]

I heard many years ago from word of mouth that this kind of malware exists, which could for example blow up capacitors in your PC. Has such malware or something even remotely similar ever existed? ...
user avatar
0 votes
0 answers
75 views

Remotely disable a laptop's ability to power on or charge?

If I loan out laptops to my employees to work remotely, such as Dr's, Nurses and other healthcare workers that generate sensitive information on patients, how can I remotely disable the laptop's ...
user avatar
  • 109
0 votes
1 answer
149 views

After EOL, can safety-critical systems be secured when connected to internet-connected components? [Automotive]

NOTE: This was originally asked on the main StackOverflow site, but now moved here because of the security nature of the question. Since internet-connected Infotainment Systems are now connected with ...
user avatar
  • 113
0 votes
0 answers
191 views

Feasibility of CPU Backdoors

Recently I was thinking of the feasibility of hardware backdoors in the CPU introduced by manufacturers at the behest of three letter agencies. I can think of two potential backdoors that seem ...
user avatar
0 votes
1 answer
108 views

How to prevent copying of digtal (handwritten) signatures? [duplicate]

Assuming that you are not given any other choice than to implement digital handwritten signatures. That is, a signature pad (or even a computer mouse) is used to generate a digital signature which is ...
user avatar
6 votes
1 answer
264 views

In a physical pen test, is there a way to figure out FOV of a tinted dome camera?

With bullet cameras, this is easy. You look which way they are pointing and then either guess their FOV, or even look them up based on how the model they appear to be. Most dome cameras are behind ...
user avatar
  • 1,150
0 votes
0 answers
131 views

Is there a fullproof way to safely erase SSD data, without physically destroying it?

During my search for an answer to this question I found that TRIM may not be reliable(https://blog.elcomsoft.com/2019/01/life-after-trim-using-factory-access-mode-for-imaging-ssd-drives/)as well as ...
user avatar
0 votes
1 answer
136 views

Prove someone entered and exited a room at specific times without any biometric authentication [closed]

There is a room. There is a lot of incentive for people to enter this room. This room allows you to enter and exit whenever you want, but for each minute you stay in the room, you get a dollar. ...
user avatar
  • 103
0 votes
1 answer
115 views

Block file and data transfer out of a device

I was reading a documentation that suggests blocking the computer from transferring files to an external device, such as a HD, Camera or Pen Drive, allowing only reading. Is this type of protection ...
user avatar
  • 123
0 votes
0 answers
87 views

Options for Integrating or developing a physical security solution (physical access control via in-house mobile apps [NFC/Bluetooh])

Our team is looking to either integrate or develop a physical security solution for a rather large campus. Requirements: Ability to either integrate (with reader/electronic lock hardware) from our ...
user avatar
1 vote
1 answer
146 views

Use of SoftHSM2 in commercial products

I came across SoftHSM2 from OpenDNSSec(BSD license) which is a drop-in replacement for HSM except that SoftHSM2 only lacks physical security. Also, being the fact that PKCS#11 is the standard ...
user avatar
0 votes
0 answers
117 views

Thoughts on Vaccine Security

Are there any recommendations for the physical security of COVID-19 vaccine? I recently watched this video https://www.youtube.com/watch?v=uoqMA9vAOrQ on covid-19 vaccine distribution. At the 0:40 ...
user avatar
  • 1,560
0 votes
0 answers
170 views

Is there a better method that this for storing a physical password? [duplicate]

This may be a little unnecessary, but taking into consideration: There are many ways to hack a computer There are many ways to hack a network There is always a possibility of an undetected malware on ...
user avatar
4 votes
0 answers
166 views

Can the glue of glitter-hot-glue sticks be used to provide evidence of electronics-hardware tampering?

I've been researching low-cost, yet strong, tamper-evident mechanisms, and purchased some low-cost glitter-hot-glue sticks as part of this research. The Amazon page advertising the sticks, seems to ...
user avatar
-1 votes
2 answers
127 views

Election security is considered one of the most difficult problems in computer security [closed]

Not just electronic voting, but in election security general. I think it part is because there are many components to it, and it has many components that could be compromised. What are some of the top ...
user avatar
  • 7
-1 votes
1 answer
173 views

Why do people, even programmers and geeks, seem to almost feel the urge to "give hackers a fair chance" at stealing their data? [closed]

I once heard that the author of the early NES emulator "Nesticle", clearly a very intelligent person, baffingly used some kind of exploitable "Samba" or "SMB" server ...
user avatar
  • 1
7 votes
5 answers
811 views

How to share passwords *only* after death?

I am looking for a modern, password manager-based way to share my passwords with certain parties (partner, executor of my will) within a week or so of my death, but no sooner. The scenario I wish to ...
user avatar
  • 179
0 votes
1 answer
259 views

Is there any write-once USB stick/pendrive? [closed]

Is there any Write-once USB stick/Pendrive? I need to submit some files to Authorities and I don't want them to modify on whatsoever. Any suggestion?
user avatar
  • 101
62 votes
15 answers
16k views

Emergency method to erase all data off a machine within seconds

Imagine you are carrying highly sensitive information with you, maybe on a mission in a war zone. You get in an ambush and quickly need to erase all the files before they fall in the wrong hands. This ...
user avatar
0 votes
0 answers
88 views

Security standard that requires network cables to be visible for inspection

I recently worked for a customer that showed me that all their network cables are visible. Indeed, cables were never drawn inside walls, conduits or trunks. Instead, they were "hung" on poles close to ...
user avatar
0 votes
1 answer
119 views

Remote monitoring of key strokes — is an RF retro reflector required?

Is it possible to remotely monitor key strokes on a laptop or is an RF retro reflector required? If so, where would be the most likely location such a device would be placed?
user avatar
  • 1
6 votes
2 answers
260 views

Why did I never see those "spy signal jammers" for sale?

I recently watched a 1980s computer television programme about the problems of spying. Basically, they showed how anyone could buy relatively cheap and common hardware and then be able to sit outside ...
user avatar
0 votes
1 answer
264 views

Can the photos/videos I deleted a year ago can still be on my iPhone or on the Internet?

I have been getting paranoid lately and decided to ask for your insight on this issue. A year ago, I took photos of some personal information (cc, passport, etc), and deleted them a month later, along ...
user avatar
15 votes
8 answers
2k views

Document security - how to find who's leaked a confidential document?

I am legally obliged to distribute a document (probably by email, probably saved as MS word, or a PDF) to several hundred recipients. The recipients are legally obliged to keep it confidential. ...
user avatar
-4 votes
1 answer
188 views

How can any intelligent person believe that PGP, HTTPS or anything else we have today is secure, given history and logic? [closed]

It truly feels like we are living in an "afterworld", long past the era when smart, intelligent, real men and women worked on things that really did matter. I'm talking about Enigma, Lorenz, Collossus,...
user avatar
3 votes
1 answer
664 views

"Digital" signatures on real life objects

Although this question may be out of scope, I'm wondering if there's a reliable way to apply a "digital signature" to real life objects in order to prove your ownership of them to a degree. As an ...
user avatar
1 vote
1 answer
393 views

Can I safely sell a used keyboard without risk of new owner recovering previous inputs?

As far as of my knowledge goes, keyboard don't store keystrokes in their memory by default (excluding those bundled with keyloggers). The thing that comes to my mind though is that some keyboards do ...
user avatar
  • 45
1 vote
1 answer
184 views

Physical mechanical examples of "M-of-N" locks?

Arbitrary "M-of-N" secret-sharing protocols are a well-studied topic in cryptography, and are apparently so useful that Bitcoin Script devoted a whole opcode to them. In this blog post, I ...
user avatar
0 votes
0 answers
22 views

When they make physical locks, do they really just make a few variations of the keys and then mix them together and sell? [duplicate]

I always assumed that each lock is unique and can only be opened with the keys it was sold with (or any copies made later from those originals). But the truth seems to be that they just make "a few" ...
user avatar
0 votes
2 answers
152 views

Recreating the Half Coins of Jin-Qua [closed]

In the Asian Saga series by James Clavell, the Struan family gave away the half-coins of Jin-qua: in exchange for a desperately needed loan, the pirate Dirk Struan received 4 halves of 4 coins. The ...
user avatar
2 votes
1 answer
128 views

Strategies to protect SANs in branch offices in risky places

A company has several remote branch offices located in relatively dangerous places, such as Iraq, and I'm looking into strategies to secure the SAN in the event of theft or looting. The data is ...
user avatar
2 votes
2 answers
714 views

What is the physical security (Evil Maid) threat model of a modern hardened laptop?

Why I believe this question is not a duplicate: There are multiple questions dealing with the exploitation of a locked computer on this site, but most of the answers are focused on exploiting a non-...
user avatar
  • 31
0 votes
1 answer
134 views

Household attack vectors and mitigations [closed]

Hopefully this question won't come across too closely to a which product is best as that is not my intention. I am moving into a larger property and I would like to setup some home security now i'm ...
user avatar
-2 votes
1 answer
114 views

Do large companies keep a detailed "company log" book/database? [closed]

In my life, I have spent a lot of time thinking and wondering about many things related to larger businesses, even though I have no direct connection to that world. By "larger", I mean "not just a ...
user avatar
2 votes
1 answer
238 views

What do I do if I catch someone doing a physical pentest? [duplicate]

This question was primarily inspired by this (related) question, but is about the other side of the equation. I'm a security engineer at Medium Sized Company, Inc. We recently hired John for a ...
user avatar
  • 362
-2 votes
1 answer
115 views

Can employees' personal properties be part of the scope? [closed]

Let's assume the customer (target) wants to have a full physical pentest done. (I'm a student and have 0 exp in actual Pentesting and Red Teaming Properties of topic: Cars (in the car park) ...
user avatar
34 votes
1 answer
5k views

How to deal with third parties in physical pentests?

From my previous question, I've seen that a "Permission to Attack" slip is crucial in ANY Penetration Test. However, that question and its answers and comments have only discusses interactions between ...
user avatar
132 votes
2 answers
23k views

What to do if caught in a physical pentest?

I've seen a lot of people talk about how to pentest and how NOT to get caught during engagements but have a hard time finding "How to behave when caught during a Red Team engagement". Red Teams are ...
user avatar
3 votes
1 answer
207 views

When a closed-source company hires somebody to audit their code, is the auditor forced to do it in the company's office?

Let's say that ACME, Inc. is making closed-source software. It's closed for a reason (they don't want it leaving their building other than in compiled form). Now, they are hiring some company/person ...
user avatar
42 votes
3 answers
7k views

Why are my plastic credit card and activation code sent separately?

Capital One recently sent my plastic credit card by post mail and its activation code by a separate post mail. What security problem does this mitigate? If a rogue element has access to my mail box ...
user avatar
  • 559
0 votes
1 answer
146 views

External hard drive

It's possible the external hard drives have been compromised in the company I work for. It would be a huge waste of money to replace them all without detection and if the current ones are compromised, ...
user avatar
  • 1
0 votes
3 answers
2k views

Is it safe to throw away debit card receipts in the bin?

In relation to this question about credit card receipts, is it safe to just throw away receipts where I have used a debit card? In addition, would it be any more worth while burning/shredding ...
user avatar
  • 193
96 votes
3 answers
10k views

What is the purpose of the rotating plate in front of the lock?

I am now in Poland and see these everywhere: The plate can rotate freely,when you insert the key, matching the groove, you rotate the key so it is aligned with the lock and then insert the key. What ...
user avatar
  • 831
0 votes
1 answer
1k views

Requiring hardware key at boot-up on normal laptop

I am sure that a question like this already exists and has probably been answered. I just couldn't find any results (probably due to my inability to word my question correctly). We use laptops at ...
user avatar
  • 1
1 vote
1 answer
272 views

Is it Possible to Prevent a Physcial Attack on Server in Remote Data Center?

I've been using Amazon Web Services to run my Java application. However, due to high costs I'm looking into getting a dedicated server from Hetzner, a company based in Germany, which costs about 10-...
user avatar
  • 111
1 vote
2 answers
236 views

Mobile phone is picking up 13 bluetooth devices and not sure what they are?

I have a particular problem with a potential security breach. I bought a new device today that connects to my phone via Bluetooth. Nothing strange about that. Surprisingly when I turned Bluetooth on ...
user avatar
  • 1,103
1 vote
0 answers
235 views

An advanced adversary is targeting you - now what? - so what? [closed]

Consider the following: An advanced adversary is targeting you. He has the ability to watch most if not all of your network connections and the ones in the neighbourhood. He is sitting on numerous ...
user avatar

1
2 3 4 5
8