Questions tagged [tampering]

Tampering refers to the unauthorized access or modification of a good or device. Use this tag for question regarding the process of tampering, the protection against tampering, or the detection thereof.

Filter by
Sorted by
Tagged with
0
votes
0answers
90 views

Why doesn't the PIN become part of the encryption key in bitlocker with TPM?

TPM is a fantastic addition to motherboards. But I have read here some bitlocker papers and they tell me that if you choose TPM + PIN protection, then the PIN does not become part of the key, it is ...
22
votes
8answers
6k views

Protect API from being tampered?

I'm building an API with websocket that serializes data through JSON. The App itself is a chat application. I came up with the following structure to send my data: {date: '2020-05-31', time: '14:28:...
3
votes
2answers
78 views

How could malware disable third party security software?

I'm asking this question with the assumption that anything the user can do, so can malware. I'm using a third party firewall on my system to control which programs are able to access the internet. ...
1
vote
1answer
76 views

Does the WP(Write Protect) pin of a USB flash memory controller prevent tampering with its firmware?

Does WP(Write Protect) pin of a USB flash memory controller prevent tampering with its firmware? I want to have an USB stick that I can make it read-only and insert it in any untrusted PC without ...
0
votes
1answer
78 views

Does TLS (Transport Layer Security) protect against deliberate tampering or accidental corruption?

If someone tampers with data being transmitted over HTTPS using TLS, would that result in a corrupted decrypted message or would it result in the error being detected such as through a cryptographic ...
1
vote
0answers
88 views

Is multiplying hashes a valid way to ensure two sets of data are identical (but in arbitrary order)

Let's say "User A" has a set of data like below. Each entry has been hashed (sha256) to ensure integrity within a single entry. You can't modify data of a single entry without also modifying the ...
0
votes
0answers
42 views

Hyperledger Fabric - How can we catch the peer who try to tamper data?

I ran the Test Network example from Hyperledger Fabric Sample and I update the config to use CouchDB. My goal it's to find a way to catch the peer who try to tamper data. I tampered CAR4 from the ...
0
votes
0answers
44 views

Are there any standards or guidelines tamper-evident devices can adhere to?

Tamper-Evident devices and measures are devices which in some way indicate that an event not intended by the developer or manufacturer has occurred. Examples of tamper-evident devices are stickers ...
2
votes
1answer
76 views

Tamper Protected VS. Tamper Proof for write-protected memories

I read in the answer here by Marcus that ROM is Tamper-proof. What is the difference between tamper-proof, tamper protected and tamper-resistant? Now, there are some re-writable memory (eg. eNVM) ...
0
votes
1answer
90 views

How to know whether a textfile has been edited or tampered with on the local system?

Related to "How to know whether a textfile has been edited or tampered with?", I wonder if it's possible to detect file tampering on the local system? Typical threat model: the old "Hack" computer ...
2
votes
1answer
201 views

Is the security seal on samsung phones proof that the phone has not been tampered with?

Samsung phones come with a security seal that says you should not buy the phone if it is broken. Is this proof that no one has tampered with the phone? Is there some way to take off the seal and ...
1
vote
1answer
71 views

Protection against tampering

Recently, I have downloaded a game from Steam. I wondered whether it was somehow possible to alter the data of the game and replace it with malware without the computer it was sent to noticing. ...
1
vote
2answers
215 views

How to protect external hard drive from tampering?

I am looking to buy an external 1TB hard drive to store sensitive information on. External hard drives aren't (physically) small, and it may have to be left unattended at times. What can I do to ...
0
votes
1answer
175 views

Semantic URL Attack Mitigation

I want to know what is the best approach for preventing URL Jumping / URL Tampering Attacks Example updateprofile.php?uid=1 I can change to updateprofile.php?uid=2 I can update the second user'...
2
votes
5answers
924 views

Prove log files weren't tampered with?

Say I have some Apache logs that show brute force attempts on a login page. I've singled out the IP, and found out who the culprit was. How can I show to a third party that I didn't makeup the entries ...
3
votes
1answer
454 views

Injected malicious code in temporary files

It just came to my mind that few years ago many iOS applications where infected by XcodeGhost (notably WeChat). This made me think about few possible scenarios: Malicious code injected in object ...
2
votes
1answer
172 views

Are there ways in determining if devices such as router have been tampered with?

In working with a number of non-profit organizations, devices such as routers that may have been used by other businesses are often acquired. Equally, devices are often inherited through other ...
3
votes
1answer
462 views

Sessions implemented through cookies over HTTPS

I have a question about sessions implemented through cookies. I have just started to learn about security and I apologise if this question comes across as something elementary. Let's say I'm using ...
0
votes
1answer
71 views

How to determine when iPhone photograph was taken?

If I have a suspicion that someone changed the date on their iPhone, took photos with that back-dated date and time, can I prove this? Or is this something that you just can't track?
2
votes
1answer
707 views

How should I verify a backup has not been tampered with?

I have a NAS with some files that total up to 2TB in size. I suspect I could shrink this because there are possibly duplicate files. I plan on making a second backup by sending what I have to Google ...
5
votes
0answers
237 views

Security of TPM 1.2 for providing tamper-evidence against firmware modification

I would like to use a TPM for providing tamper-evidence to my workstation, using SRTM (Static Root-of-Trust for Measurement). Currently, I plan to have the TPM seal a one-time value which only I know, ...
40
votes
7answers
21k views

Can we tamper-proof a game that's sold along with the Windows machine it runs on?

We want to protect a game that is basically sold with the computer containing it. The security is done this way: The HDD is encrypted using hardware TPM 1.2, which holds a unique key to decrypt the ...
1
vote
0answers
36 views

Log tampering - edit notifications [closed]

Hello Guys I am looking for a solution that can record the log tamper event and notify(email/sms) what the change made in the log file and it should be limit to specific paragraph instead of listing ...
2
votes
1answer
697 views

Question about HTTPS & Client side tampering

Could someone explain something to me please: I am intercepting requests on my local proxy to a HTTPS server. The POST body has data such as "ID=4001" in plain text when I intercept it. Firstly, is ...
1
vote
1answer
391 views

Android tamper resistance: BuildConfig.DEBUG spoofing?

Our team is trying to secure a native Android mobile app. Amongst other things we are using Dexguard for some checks such as tamper, root and emulator detection. Long story short: some of these checks ...
9
votes
1answer
10k views

How can I check whether Notepad++ is using a version of the SciLexer.dll library that was modified by the CIA?

I've just read the release notes of Notepad++ 7.3.3 and I've discovered that in the recent Wikileaks revelations about the CIA hacking tools there's something affecting Notepad++. The program itself ...
2
votes
2answers
2k views

Sqlmap: bypass website security filtering SQL reserved words

I'm using sqlmap to get a website's DB and found out that the site is time-based boolean vulnerable; but the target is showing SQL errors, which made me think that it would be an injection error. I ...
1
vote
1answer
166 views

What recommended precautions should one take when using internet provided by a Landlord?

I am curious about what necessary steps/precautions one should take when dealing with a situation in which you have to use an internet connection provided by a landlord. I assume you would at least ...
1
vote
1answer
1k views

Runtime checksum of Mach-O differs from executable checksum

In our iOS application we are trying to make an anti-tamper check. What we would like to apply is a common procedure used in anti-tapering techniques. We are trying to get the __text section of a Mach-...
1
vote
1answer
1k views

Post Data tamper detection [closed]

I have been studying a bit on security on how to make my mobile rest server secure. I am looking at one mobile application that uses plain HTTP. I have Charles proxy breakpoint enabled and edit the ...
0
votes
0answers
90 views

Altering assembly without affecting digital signature

I have discovered a software crack where the license check assembly (.NET) has been altered but the digital signature and the strong name are both still perfectly intact. Strong naming is easy to ...
2
votes
2answers
3k views

How to protect against request intercepting and parameter-tampering? [duplicate]

My problem is that I made an app and I am making PHP Requests. I just realized that you can sniff everything on Android with "Packet Capture". How can I make my app more secure? I thought about ...
20
votes
4answers
17k views

Verifying android application integrity from server side

I have android applications (Mobile banking) that connect to my server and do online transactions (via Internet/USSD/SMS), I want to make sure those clients are not tampered with and are the original ...
38
votes
8answers
6k views

How to know whether a textfile has been edited or tampered with?

Is it possible to know whether a textfile, e.g. in XML format, has been edited or tampered with over time? The context to my question follows: I am a scientist in industry using a technology called ...
37
votes
5answers
4k views

Risk of tampering when hardware shipment is delayed

I am currently receiving an order of computer parts in the mail including an SSD. Tracking showed that the package arrived in my town on day X, and was originally scheduled for delivery on day X as ...
6
votes
2answers
1k views

Can a faked iPhone SMS log be detected

SMS messages received by an iPhone is stored unencrypted in an SQLite database, which may be extracted by backing up the phone. You can manipulate (tamper with, e.g: replace the text of a message ...
1
vote
1answer
719 views

How to configure WebScarab to intercept only POST requests?

I'm trying to make WebScarab intercept only POST requests. On the Intercept tab below Methods I've selected only POST, but it still intercepts all GET and POST requests, so it's quite hard to tamper ...
1
vote
1answer
1k views

Prevent Data Tampering

I have developed a login page using php and i have an firefox addon named "Tamper Data 11.0.1.1-signed" . I entered the username and password and started tampering of that data using that addon. I am ...
-4
votes
1answer
483 views

How does Paypal validate the transaction amount?

How does Paypal validate the transaction amount if the buyer changed the purchase amount using http parameter tampering attack?
1
vote
2answers
1k views

Laptop tampering and boot loader

I try to find out how far I can secure my laptop from physical access and tampering attempts. Setup: ThinkPad with Linux installation What I have done so far: disk encryption using cryptsetup for ...
1
vote
1answer
2k views

How do I prevent tampering with form submission data, and changing the details for any account?

Although this is something that only employees can use, I'd like to prevent the tampering anyway. I don't like insecure code, and this is hideously insecure. Here's an example link: <a href="#' + ...
0
votes
2answers
2k views

Burp suite - trying all parameters such as numbers|numbers

A website I'm looking at for my colleagues has a parameter which is number|number Where the likely values will be 1-99|1-999 (e.g. 14|234) How do I configure burp to try all possible values? (Would ...
0
votes
1answer
847 views

How I do get the correct the Tamper parameters from an internal web login [closed]

I am doing pentesting for a web application, but I do not know if am using the Tamper Data add on on mozilla correctly. Could anyone explain how to get the following parameters, and where do I need ...
4
votes
3answers
2k views

Tamper proof hardware - not resistant

Can you make a TPM (or any piece of hardware) Completely tamper-proof? The “regular” tamper resistant hardware has various physical attacks http://www.milinda-perera.com/pdf/EKKLP12a.pdf I have been ...
2
votes
2answers
12k views

What is actually the purpose of encrypting the values in a cookie?

I was researching on internet security. When I reached at section Cookies, I happened to read that the values inside a cookie are generally stored only after encrypting them. But an encryption can be ...
2
votes
3answers
129 views

is there a way to indirectly uncharge rapidly a coin cell to defeat an anti tampering mechanism?

An anti tampering mechanism of a device relay on detect tampering mechanism when the device is powered down using the energy provided internally by a coin cell. Is there a way to uncharge rapidly a ...
-2
votes
4answers
198 views

Trying to secure a code

I am trying to make hard to a code to be modified. Security is my concern. Ok, I know what you guys will say about piracy, bla bla bla. Lets refrain from that discussion. I am trying to collect ...
1
vote
3answers
634 views

Detect message tampering without shared key and without certificate authority

Is it possible to detect if a message has been tampered with, without using MAC (i.e. shared key) and without using a "trusted" third party (i.e. certificate authority)? I'm pretty sure it's not, but ...
0
votes
2answers
379 views

PC showed evidence of a phone being attached for no obvious reason. Theories on why? [closed]

Connecting via remote desktop to a Windows 7 machine today showed the last couple of seconds of a windows device installing and the "Your device is ready" popup for a Sony Xperia T. Going to printers/...