Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [physical-access]

The best security measures can be rendered useless if you don't physically protect your systems. An intruder can steal a computer, server, or smartphone, then crack the password at his leisure. (Source: "Physical access". Wikipedia. Citing: Michael Meyers. ISBN 978-0-07-225345-0. McGraw-Hill Education.)

Filter by
Sorted by
Tagged with
0 votes
0 answers
45 views

Storing APFS password in Apple's Keychain for Time Machine

If you are using an encrypted APFS container, for example, to encrypt the Time Machine, whenever the physical disk is plugged in, MacOS asks for a decryption password with an option to store it ("...
Alexander K.'s user avatar
-1 votes
2 answers
207 views

Laptop Repair vs. Evil Maid

Suppose you need a laptop repair, so you bring it to A big box store where you have some sort of coverage (who will have the computer for 2-3 weeks) A small chain of repair shops a small independent ...
SurferTaco's user avatar
1 vote
1 answer
193 views

How to protect a local server if someone has physical access to it?

I've gone through a related question on how to protect data in case of unauthorized physical access to a server, where the consensus seemed to be that preventing data access when someone has physical ...
Lucas's user avatar
  • 111
1 vote
0 answers
118 views

How to safely use dm-crypt as overlayfs uper partition?

Context I'm working to make an embedded devices safe against physical access. (publicly accessible device and can be easily stolen) I already made the following action : secure boot is enabled on cpu,...
Anthony's user avatar
  • 111
0 votes
0 answers
125 views

PCR to prevent TPM2 key unsealing in case of rogue DMA devices connected?

Security threat: physical theft of a laptop and a server that use TPM2 auto unlock FDE with LUKS. In both cases the TPM checks against some PCRs before unsealing the key. The laptop prompts for a TPM ...
Polizi8's user avatar
  • 163
0 votes
0 answers
79 views

Surreptitiously surveil a logged out laptop AD workstation's keyboard with temporary physical access?

I can think of multiple ways to surveil a logged out computer with temporary physical access. The first is installing a hardware keylogger which would enable one to get all the keystrokes from it; ...
Seci Pedia's user avatar
0 votes
0 answers
81 views

Is shim secure if new MOK entried can be added without a password?

I'm trying to understand how shim is considered secure. Shim is a signed bootloader that allows to load any image (at a fixed path in the EFI System Partition) as long as its hash is added to a MOK (...
Juan I Carrano's user avatar
0 votes
0 answers
116 views

Is there a way to find the devices my SSD was plugged in?

I gave my laptop for repair to a technician now I suspect he might have copied my files to another pc by probably plugging in my SSD to other devices. I already tried checking the properties but idk ...
TARUN's user avatar
  • 1
0 votes
1 answer
114 views

How to check if someone used my desktop or any other device

What can I do to check a potential "evil maid attack"?
Kour Koumpinos's user avatar
1 vote
1 answer
254 views

How to protect files in use on a system powered on from physical theft or tampering?

I'm in the process of figuring out an encryption strategy for a personal Linux system. My laptop is almost always on, or in sleep mode, except for longer travels. My main threats are theft of my ...
CryptGuest's user avatar
1 vote
1 answer
107 views

Theoretical unbreakable security for a single compute instance/machine [closed]

UPDATE : i know i modify the post significantly, will try to not do that anymore. Please read from scratch Let's imagine we have a machine that holds customer private keys to various crypto assets, ...
vach's user avatar
  • 111
0 votes
2 answers
164 views

Preventing low-skill physical access by creating fake desktop environment

How can I create a fake desktop environment and file system, that automatically starts as default when booting up, and may be exited out of by doing a specific action? (Like a keystroke) to prevent ...
Anm's user avatar
  • 113
0 votes
2 answers
146 views

Shred, cut, melt, smash, grind, then flush, is it secure disposal of a security access id card?

I had a card like a credit card that I used to use for work. It was an ID card, and it had an access code, a swiper, a barcode, my picture, my name, my rank, my license, the name of the company, and ...
A google worker's user avatar
0 votes
3 answers
432 views

What can an attacker do with physical access to a Linux server?

I have physical access to a Linux computer (Ubuntu 20.04). My colleague asked me what an attacker could do if he had physical access to this computer? I would like to know if, by default (after a ...
Poubelle Dirty's user avatar
0 votes
1 answer
124 views

What type of attacks can be carried against an OS with FDE, if we assume OS and FDE are implemented correctly?

The question is mainly stated in the title. I was wondering what kind of attacks can be launched on such a setup, where someone has access to a running OS with locked screen (needs password for the ...
tur11ng's user avatar
  • 101
1 vote
0 answers
218 views

How hard is it to modify UEFI nvram if the device is off and the UEFI is locked?

This assumes that: Machine is powered off No UEFI backdoors No Reflashing the firmware No clearing the NVRAM (The point is to modify/read a small amount of NVRAM, instead of resetting it) Device ...
A-random-nerd's user avatar
0 votes
1 answer
147 views

How can I properly physically secure my devices from border inspection? [duplicate]

I am travelling soon, and my country has passed tyrannical laws that allow them to demand passcodes to devices, and I believe that they are increasingly beginning to violate privacy rights. I would ...
user280375's user avatar
3 votes
0 answers
223 views

Does Windows 10 read/run/care about USB devices plugged in "Lock Screen" mode?

Whenever I leave my computer for the bathroom or anything inside the living space, I press WinKey + L to enter the "Lock Screen" mode. (If I go outside, I turn it off completely.) Let's say ...
Derrol H.'s user avatar
4 votes
1 answer
4k views

What tools currently allow to retrieve Windows 10/11 password hashes, given admin rights or physical access to unencrypted disks?

I was wondering what Windows/Linux/Live tools allow to retrieve user password hashes of modern 2021 Win10/11 installations. I am not sure if password storage differs in these cases (e.g. different ...
Polizi8's user avatar
  • 163
1 vote
2 answers
375 views

What are the best steps to take to secure a LINUX PC from physical attack? Evil Maid, Boot Sector Malware?

What would be the best security practice to protect a device from physical attack? For instance an Evil Maid or boot sector malware? For this question we are going to go with a UEFI boot debian linux ...
Rideboards's user avatar
0 votes
1 answer
306 views

Encrypted drives and non-interactive use

I would like to protect the data on my backup system, in case it gets (physically) stolen. I would encrypt the hard drives where the data resides. Since the backup system typically acts non-...
user236012's user avatar
0 votes
1 answer
210 views

After EOL, can safety-critical systems be secured when connected to internet-connected components? [Automotive]

NOTE: This was originally asked on the main StackOverflow site, but now moved here because of the security nature of the question. Since internet-connected Infotainment Systems are now connected with ...
James's user avatar
  • 113
3 votes
1 answer
637 views

Does Intel's vPro TME make a locked screen more secure?

This post seems on point but I didn't understand the answer enough to answer this question. Intel's vPro offers "Total Memory Encryption" (TME), which encrypts RAM and system bus data while ...
user847's user avatar
  • 31
0 votes
1 answer
179 views

Prove someone entered and exited a room at specific times without any biometric authentication [closed]

There is a room. There is a lot of incentive for people to enter this room. This room allows you to enter and exit whenever you want, but for each minute you stay in the room, you get a dollar. ...
cdknight's user avatar
  • 103
0 votes
3 answers
865 views

How good/bad are these transparent Linux consumer FDE setup options? (e.g. for auto-unlocking LUKS)

UPDATED Summary: I'm looking at Linux FDE options that are transparent to the user (my parents) in that the user doesn't need to enter 2 passwords. I found/thought of several options and tried to ...
zpangwin's user avatar
  • 331
0 votes
0 answers
125 views

Options for Integrating or developing a physical security solution (physical access control via in-house mobile apps [NFC/Bluetooh])

Our team is looking to either integrate or develop a physical security solution for a rather large campus. Requirements: Ability to either integrate (with reader/electronic lock hardware) from our ...
spencer741's user avatar
1 vote
1 answer
391 views

Security against local attack for remote FDE decryption?

Is there any remote FDE decryption that is resistant to an attacker that has local physical access? Tools like dracut-sshd need to store the private key used for the sshd server on the unencrypted ...
Dannycy's user avatar
  • 21
1 vote
3 answers
511 views

In an enterprise environment, should developers/maintainers be able to look at production logs by accessing the application servers?

I came across this practice, from a big company handling personal customer data, of not allowing developers/maintainers to look straight at the application logs (e.g. good old tail | grep) by ...
Tom's user avatar
  • 113
0 votes
0 answers
150 views

Thoughts on Vaccine Security

Are there any recommendations for the physical security of COVID-19 vaccine? I recently watched this video https://www.youtube.com/watch?v=uoqMA9vAOrQ on covid-19 vaccine distribution. At the 0:40 ...
emory's user avatar
  • 1,600
0 votes
1 answer
306 views

Will using super-glue on the screws of my laptop prevent it from being opened unnoticed?

I know someone can break open the case, but what about opening it without leaving evidence? Are there any seals available for securing your laptop from unauthorized access? And sealing the sides of ...
Linux_user0987's user avatar
0 votes
1 answer
573 views

Does UHF RFID implement any security at all?

Feel free to correct my below logic. As far as I can tell, HF RFID tags (specifically I've tested MiFare Classic 1kb) have a 48-bit encryption key (default to 0xFFFFFFFFFFFF or something) to protect ...
Reece Pounder's user avatar
1 vote
2 answers
506 views

Can a BIOS password along with a HDD password prevent evil maid attacks?

By definition evil maid attacks involve altering a device in an undetectable way. So if I lock the BIOS, set the HDD to boot first and put a HDD password will this prevent it? Access to the computer ...
Linux_user0987's user avatar
1 vote
2 answers
2k views

Is a BIOS password enough to prevent someone from hacking into my laptop if they have physical access?

Would my laptop be secure against physical access if I set up a bios password and full disk encryption ? If not then is there any way to secure your laptop from someone with physical access? How hard ...
Linux_user0987's user avatar
0 votes
1 answer
563 views

Is there any write-once USB stick/pendrive? [closed]

Is there any Write-once USB stick/Pendrive? I need to submit some files to Authorities and I don't want them to modify on whatsoever. Any suggestion?
Thirumal's user avatar
  • 101
2 votes
0 answers
200 views

Does authentication for USB keyboards exist?

I think bluetooth has an authentication measure. As a user, when I get a new bluetooth keyboard, I have to: Go to my computer, search for bluetooth devices Put my keyboard in "pairing mode" My ...
Martin Thoma's user avatar
  • 3,932
57 votes
10 answers
14k views

Does the saying "physical access = game over" apply to smartphones, too?

I was surprised to read in the responses to this popular question that it's considered nigh impossible to secure a computer system if intruders have physical access. Does this apply to smartphones ...
Max's user avatar
  • 715
1 vote
2 answers
680 views

Is there a way to "lock" a YubiKey after a period of inactivity?

I have a YubiKey 5c nano attached to my laptop used for 2FA, etc. It works great and is unobtrusive, but I feel like the small form factor encourages leaving it plugged into the laptop all the time, ...
Josh's user avatar
  • 1,096
0 votes
3 answers
578 views

How long does it take to have spyware installed on a laptop?

During my commute from an airport located in a country whose government is known for intrusions into the privacy of its citizens and non-citizens, I had my laptop taken from me during a routine ...
Razgriz's user avatar
0 votes
0 answers
47 views

When they make physical locks, do they really just make a few variations of the keys and then mix them together and sell? [duplicate]

I always assumed that each lock is unique and can only be opened with the keys it was sold with (or any copies made later from those originals). But the truth seems to be that they just make "a few" ...
Eddye Flores's user avatar
42 votes
9 answers
11k views

What are the potential risks of leaving a device in public, but locked? [closed]

Let's say you're in a public café, or conference, where you trust your device won't be stolen if you go to the bathroom for 5 minutes, but you don't trust it might not be tampered with. What are the ...
Zee's user avatar
  • 531
32 votes
8 answers
6k views

If password expiration is applied, should door-lock expiration be applied too?

After reading some topics on here about password expiration, and also after reading this comment, a question arose in my mind: if we apply password expiration for the safety of users, should our door ...
Xenos's user avatar
  • 1,371
1 vote
1 answer
1k views

What is it called when someone glides through a building's external door behind you? [duplicate]

One form of social engineering is the practice of running up to a building's external door just as an employee is entering. The employee often holds the door open for the intruder, bypassing security ...
Mayor of the Plattenbaus's user avatar
0 votes
0 answers
130 views

How far can a malicious USB device get you on a server?

If the device is plugged in when the user is already logged in, then of course the device can just pretend to be a keyboard, open a terminal, and run a compromising command. (shortcuts for terminals ...
user avatar
94 votes
3 answers
11k views

What is the purpose of the rotating plate in front of the lock?

I am now in Poland and see these everywhere: The plate can rotate freely,when you insert the key, matching the groove, you rotate the key so it is aligned with the lock and then insert the key. What ...
Thomas's user avatar
  • 831
19 votes
3 answers
9k views

Stolen MacBook: should I worry about my data?

Unfortunately, someone stole my laptop (a MacBook) and I did not realize that for 48 hours. Now, this was a work laptop and my company's security team is going to wipe the laptop remotely as soon as ...
Lost's user avatar
  • 405
0 votes
1 answer
114 views

Interpreting this F-Secure Video of a DMA-Attack

I'm trying to interpret this video demonstration by F-Secure of the big cold-boot attack discovered last year. What is happening at the 50-second mark? Why does he insert the USB boot-device before ...
Daniel's user avatar
  • 151
3 votes
1 answer
380 views

Is it Possible to Prevent a Physcial Attack on Server in Remote Data Center?

I've been using Amazon Web Services to run my Java application. However, due to high costs I'm looking into getting a dedicated server from Hetzner, a company based in Germany, which costs about 10-...
S.O.S's user avatar
  • 131
23 votes
5 answers
7k views

Selecting a secure PIN for building access

What are the general criteria for rejecting an insecure PIN to access a building? There has been a lot of discussion about password selection security. Minimum length requirements, mandatory classes ...
Les's user avatar
  • 443
8 votes
6 answers
1k views

I am a political activist, its likely that my computer will be compromised in the future, how can I secure my data?

I have sensitive data to secure. My computer may likely be compromised physically in the future. How can I secure my date from various attacks like Evil Maid attacks and so forth. I have some basic ...
Robby's user avatar
  • 81
1 vote
2 answers
514 views

Device security in IOT

I am working on an IOT device that sends data to the server after authenticating itself to the server. Is there a way to safely store my device's credentials for logging onto the main server and ...
Abhishek Yadav's user avatar