Questions tagged [physical]

The use of physical measures (such as locks and tamper-proofing) or policies (such as Clean Desk) in order to protect sensitive information from unauthorized access.

Filter by
Sorted by
Tagged with
2
votes
1answer
141 views

Possible physical interface attacks on a server [duplicate]

Let's say you have a server at a data centre, but a hacker manages to find a way in and has access to your server. What are the attack possibilities with all the interfaces available? Are there any ...
-1
votes
1answer
78 views

International communications after nuclear fallout [closed]

Is there a (nuclear fallout) scenario imaginable where international communications are thrown back to the stone age? Meaning: Satellites are EMP'd out of the sky Transoceanic cables are cut ...
34
votes
7answers
6k views

What are the real physical risks of casual social media publishing?

aka "how to scare my family into stopping publishing their life online?" I do not publish personal photos / opinions publicly online as a rule. I never gave hard thoughts about that but I believe ...
7
votes
1answer
344 views

What are good methods of visual security?

What are good methods of visually securing sensitive information that might appear on your screen from the outside world? An example to illustrate my question would be the following: You're sat in ...
-2
votes
2answers
323 views

Creating portable bash terminal & cmd to USB [closed]

Developing my toolkit and I want to have a safe edition of cmd.exe and bash on a usb. Why? These can be tampered with by attackers and I want a version I know is safe from manipulation. Any ...
2
votes
2answers
1k views

Security and Veracrypt [closed]

I have a few questions about Security and Veracrypt and hope you can clarify it for me. I don't want the VeraCrypt hidden volume I created to be damaged. If I mount the hidden volume and transfer ...
156
votes
12answers
33k views

4-dial combination padlock: Is it more secure to zero it out or to blindly spin the dials after locking?

I am partially responsible for some resources protected by a 4-dial combination lock like this one: There are two things that people will usually do after they've locked it: reset all the digits to ...
2
votes
2answers
141 views

What security standards apply to physical security for an infosec office

I'm looking for actual specific standards that apply to physical access control for Information Security office space. Long story short, our building manager wants an open office concept, and in order ...
4
votes
2answers
239 views

Securely storing account credentials/information for critical company services - the bus factor

Question: I'm trying to figure out best practices for storing authentication credentials for critical company services - hosting services, domain registration services, recruiting portals, etc... To ...
0
votes
2answers
176 views

What would 'best practice' look like in protecting critical infrastructure against state actor cyber attack?

I was reading this article from the New York Times, which details the alarming degree to which the IT systems running critical civic infrastructure have allegedly been compromised by Russian cyber ...
5
votes
1answer
202 views

If and why should any personal information be destroyed before putting scrap paper into the recycle container?

Well this question may not be about computers, but it most definitely is about information security, so I'll give it a try... I've been repeatedly told in my life that I should always carefully check ...
-3
votes
1answer
211 views

Why are mailboxes unsecure? [closed]

Why can anyone go up to a mailbox and just take the mail out of it? Some mailboxes, like at townhouses and apartments, have locks, but the mailboxes at single family homes that I have seen do not. Isn’...
1
vote
3answers
2k views

Wired VS Wireless Mouse & Keyboard Security

Wired VS Wireless Mouse & Keyboard Security For someone who is trying to maintain the highest level of security, which option proposes the LEAST amount of security flaws? Wired Keyboard & ...
40
votes
6answers
9k views

How “scrambled” is the data on a RAID5 disk?

My concern is the disposal of a replaced disk from a private RAID5 disk array. I have had to replace a disk from my personal RAID5 disk-array. It had started developing errors, so out it went. But ...
-1
votes
3answers
1k views

Shutdown vs sleep

From a security point of view, is sleep safer than shutdown in laptops? Shutdown only needs to be done after monthly updates, since shutdown "saves" settings, "changes" etc, then reboots. Sleep only ...
4
votes
2answers
1k views

Are DVDs vulnerable to firmware malware (and assorted questions)? [closed]

I have a few questions about DVD drives. Are DVD drives and SATA interfaces vulnerable to issues like BadUSB caused by being able to reprogram firmware of the drive or disk or even spreading to other ...
4
votes
2answers
380 views

How to make a secure communication between UHF reader and UHF RFID Tag?

I found some boom barriers,used for gate system, were integrated with UHF reader + access controller and a UHF stickers (attached in car's windshield) for access control using wiegand protocol. In ...
3
votes
0answers
94 views

Credential leaking while unconscious [closed]

Bear with me here, because this admittedly sounds nutty, but I had a dream last night in which I distinctly recall (accurately) typing the master password for my password manager into a (dream) ...
2
votes
1answer
118 views

Keyboards that do not retain heat to prevent thermal imaging of key presses?

Some of you may be aware of the Flir One Pro that turns your smartphone into a thermal imaging camera. This can easily be used irresponsibly: If we can get you out the room in under 60 seconds (...
3
votes
1answer
719 views

Do dial locks have repeated numbers?

Can dial locks, such as the one below, have repeated numbers in their combination? For example, the combination 10-39-10 has the number 10 repeated twice in it. If so how often is this the case?
1
vote
3answers
342 views

Evidence of any large scale data breaches from lack of physical security?

You see far-fetched Hollywood examples of the most unlikely scenario's resulting in a data breach due to a lack of physical security. An example is in Mr Robot where the protagonist gets into a data ...
1
vote
0answers
44 views

Electronic store security [closed]

Iam not sure if this is the right place to ask this question. I would like to know what security features an electronic store should have besides the general alarm system monitored by a security ...
3
votes
1answer
210 views

Does Android have no protection against malicious public USB ports?

I was reading a bunch of news articles which asked not to charge phone using public USB ports as they could be malicious. According to the web pages, the USB wires carry data and power so they have ...
2
votes
1answer
232 views

Found my iPhone 6 somewhat open (possibly right after airport security), what (if anything) might have been done to it?

I was traveling by air very recently, and once I got home I noticed that the button on my iPhone 6 seemed to be more deeply recessed. After a while I realized that this did not make any sense ...
2
votes
1answer
272 views

What are the physical security features that prevent the cryptographic data on a SIM card being read?

In his excellent answer to "How does a SIM card prevent cloning?", user Lie Ryan explains that SIM cards have their critical data stored in "tamper proof housing", protected by "physical security ...
0
votes
1answer
65 views

Security Chipsec [closed]

Is it right to believe that if the Chipsec scan, Malwarebytes Anti Rootkit scan and Tdsskiller all come clean, your computer OS and hardware are all clean with no malware, rootkit, Rat or anything ...
8
votes
4answers
2k views

Use WiFi tracking to identify burglars

Recently I had the following idea. I live in a rural area where few people pass in front of our house. Burglars like such areas, because the chance of being seen breaking into a house is small. ...
2
votes
3answers
2k views

Has the hard drive been accessed or computer hacked? [closed]

How do I find out if someone who had access to my laptop, accessed the hard drive manually (by taking it out of the laptop and copying or viewing the data)? I know there is the Windows audit ...
4
votes
2answers
2k views

Data Diodes and TCP traffic

Data diodes (one-way networks) are often used to effect a hardware based 'air-gap' for high security sites. How do they deal with protocols, such as TCP, that require replys? I have some inclination ...
3
votes
2answers
171 views

Value of Physical Security Vulnerabilities to an Attacker

A common trope in cyberpunk fiction is the necessity of physical access to a networked machine in order to execute an attack--the brilliant hacker has to hire a team of meatspace criminals (or vice ...
4
votes
2answers
537 views

What is hardware security?

I guess hardware security refers to the security of it's firmware, but the firmware is just software, so why do we call it hardware security? If I am wrong, can anyone explain what is hardware ...
67
votes
5answers
22k views

Why is iPhone's internal storage so hard to crack/decrypt?

I’ve heard about a rule in Information Security, that once a hacker has access to your physical machine, then it’s all over. However, there seems to be a big exception to this rule: iPhones. It was ...
2
votes
2answers
671 views

Any concern for not locking or even closing the rack door inside private cage of DataCenter?

Recently, a customer asks for not closing and not locking his rent rack inside a cage of data center, is there any reason to reject his request due to security reason? Since the rack is inside ...
3
votes
2answers
149 views

Is there a standard recommending physical destruction of a machine?

I had a discussion with a customer who requires the physical destruction of the PC (a standard laptop) which is holding their data. After clarification, they mean the destruction of the entire laptop, ...
1
vote
1answer
424 views

Modern Data diodes for High security

I have read data diodes are often used where high security is needed, like in military or critical infrastructures. However, most are UDP based. Modern diodes do support TCP protocol like SMTP, ...
1
vote
0answers
103 views

Product Verification System [closed]

I'm thinking about a system that will allow my end users to verify their products with the manufacture key/imei number. I'm planning to check that key against my information saved in server and let ...
1
vote
1answer
178 views

How to enter sensitive information securely?

I'm interested in finding out what is the best method to enter sensitive information somewhere given an insecure computer. Granted, I know that if the computer has a keylogger or some other malware ...
51
votes
7answers
11k views

Why does one need a strong password on Unix?

SSH Server: I only allow public key authentication. Malicious Software: If it's running as my user it has access to my data and an internet connection, it's bad enough already. Yes, su access would ...
1
vote
1answer
141 views

Full disk encryption and disk removal

Suppose a full-disk-encrypted computer with hot-swappable hard drives is powered on (i.e. decrypted at boot by a trusted user) but is screen-locked. In such a case, if an attacker with physical ...
0
votes
1answer
61 views

Is a parcel letterbox based on a tracking code secure?

I'm making a parcel letterbox. I'm including a barcode scanner that scans the tracking code of the package. The way of entry is simple: by scanning a barcode that's in a list on a local server (which ...
4
votes
4answers
209 views

Could it be possible to hijack physical finger prints in digital form and use them to gain access to other devices and locations?

With more and more devices accepting finger prints in place of passwords, could it be possible to "keylog" these finger prints on mobile devices, for example, by installing a rogue application and ...
4
votes
1answer
110 views

SSH access during manufacturing

What are security pros and cons if we have to enable SSH access during the manufacturing of the device (i.e. Fire Alarm Control Panel)? It is a manufacturer requirement. SSH access will be disabled ...
0
votes
1answer
119 views

Is it possible to create a false charger that drains a device's power?

Inspired by the idea of the USB Killer, I was wondering if it'd be possible to create a device that, when plugged into a mobile phone/laptop/whatever charging port, drains the charge of said device ...
6
votes
2answers
117 views

How could I be sure that the network cable is safe to use?

There are Cat 5 network cables in the office going from some rooms to some other rooms through the walls and the ceiling. The office belonged to another company in the past, which means that there is ...
20
votes
9answers
6k views

Securing a LAN that has multiple exposed external Cat 6 cable runs?

We're evaluating putting in an IP-based CCTV system for a third-party upcoming project (part of a wider networking project). The CCTV system is cabled as follows: Cat 6 running from each external ...
9
votes
2answers
1k views

How can the Magic SysRq key be dangerous for linux users?

The magic SysRq key is known for linux users to perform some actions when the system freeze , but it considered as dangerous command for users who have a physical access to the system: Some ...
3
votes
3answers
106 views

Are my home keys compromised if I use a key duplication machine?

Given that if someone has physical access to your home keys for enough time to take a picture of them, you've already lost, what stops key duplication machines such as MinuteKey from taking pictures ...
2
votes
0answers
52 views

How hard is it to read MCU ram while running?

I know it's possible (but rather hard as it involves using acid on the chip) to read flash memory from a MCU. However how hard is it to read the ram of an MCU while it is running? Corrollary question ...
2
votes
2answers
402 views

Disk write-protection at the hardware level

A friend told me about a hardware piece which protects the hard drive from saving changes made to it, so that when the computer is rebooted it remains the same as it was the last time. Does such a ...
0
votes
1answer
45 views

How to synchronize a laptop with mobile phone so as to rack the login details of laptop if laptop is not connected to network?

I want to detect where my stolen laptop is. If I synchronize the laptop with mobile phone using bluetooth so that when I login to my system it sends an alert message to my phone. f Now the issue is if ...

1
2
3 4 5
8