Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options not deleted user 2374

For attacks against, or best practices for physical components of an Information Technology system. It can consist of network equipment, servers, CPUs, hardware security module, smartcards, etc. When using this tag, also include an additional tag for the specific type of hardware.

10 votes
2 answers
10k views

What comprises the AIS-31 standard for TRNGs?

The page for the chipset indicates that the chipset provides a: Low-power True Random Number Generator (TRNG) in hardware, AIS-31 compliant I've been trying to determine what the AIS-31 spec defines …
Naftuli Kay's user avatar
  • 6,843
12 votes
3 answers
9k views

Do cell-phones exist with open source baseband processors?

In a recent question (can't seem to find now), someone asked: Is it possible to track a phone which is off? and received a response of Who's to say that it's really off? Your phone has both …
Naftuli Kay's user avatar
  • 6,843
6 votes
1 answer
620 views

Can malicious code be contained outside the filesystem on a USB drive?

I've personally seen it recommended that every time a user inserts a USB thumb drive into a computer, that the thumb drive be scanned for potential malware and malicious code. However, if all that's …
Naftuli Kay's user avatar
  • 6,843
2 votes
0 answers
151 views

Potential hazards for reusing an X.509 private key for multiple services?

One thing I've been thinking about for a while is using a X.509 private key stored in a hardware security device (think YubiKey et al) on a one-per-machine basis. … private keys), but if they did, would there be any potential hazards in reusing the same private key stored in hardware with a number of services that live on the same box? …
Naftuli Kay's user avatar
  • 6,843
13 votes

Are consumer-grade routers any more or less vulnerable?

Other answers have been given to answer whether routers are secure: your router likely has unpatched vulnerabilities. A recommendation for making things more secure would be to put a real Linux box i …
Naftuli Kay's user avatar
  • 6,843
6 votes
1 answer
2k views

PGP key on smart card: why do I need a "secret key" on disk?

I have a YubiKey NEO on which I have the OpenPGP applet and I have a PGP key installed. I work on 3 different computers and I initialized the card on computer bob. I'm now at computer rob. Someone sen …
Naftuli Kay's user avatar
  • 6,843
1 vote

Disable USB keyboard pluggability on MacBook

If you're concerned about BadUSB and similar attacks, you'll just need to resort to checking all of your ports every time you come back after leaving your computer unattended. Do note, however, that e …
Naftuli Kay's user avatar
  • 6,843