Collaborate Disseminate
I came from Russia recently. The security officer asked me to open my phone. When I handed it over to them, I saw there was a black screen with Russian writing on my phone when the officer was checking it.
How do I make sure… Continue reading Checking for installed background processes in my phone
My question is around best practices and risks regarding labelled employee ID badges and access control systems.
My company is moving into a new office, and it has an access control system with printable RFID keycards. This… Continue reading Access Control Badges — Plain or Printed IDs?
My company’s infosec policy contains a statement to the effect that I am encouraged to bring my laptop home with me to that it never leaves my possession/control.
This doesn’t seem useful, from a security perspective (I ca… Continue reading Why would taking my laptop home be encouraged for security reasons?
Say, I have on my server a page or folder which I want to be secret.
example.com/fdsafdsafdsfdsfdsafdrewrew.html
or
example.com/fdsafdsafdsfdsfdsafdrewrewaa34532543432/admin/index.html
If the secret part of the path is… Continue reading Can secret GET requests be brute forced?
I know that security-oriented products can easily protect their contents from even the most sensitive commercial x-rays, which can see objects at about 0.5µm. But let’s put cost limits aside (or imagine that we have State-level resources),… Continue reading Is there some type of x-ray that can see through HSM or shielded integrated circuit?
Background: I’m a mobile app developer, and I’m using my notebook (a MacBook Air) for writing apps.
For some reasons I have to put my notebook at a location that is not completely secure (i.e. I can’t fully trust those who h… Continue reading About physical access of notebook computer
I think to get a Yubikey and read that Keepass with OTP makes no sense No. Security remains the same + extra cognitive overhead.
I try to store all data local and use seldom cloud based services.
If I have a very bad SecOp … Continue reading Does a two-factor authentication dongle (OTP) which is always inserted in MacBook add a security benefit?
Is it possible to use card access readers for something other than physical access? I’ve been reading about Wiegand and OSDP protocols and it looks like the hardware is all based on that (with some proprietary aspects for the… Continue reading Using Access Readers for software access
This question already has an answer here:
What can a hacker do when he has physical access to a system?
3 answers
Let’s s… Continue reading Possible physical interface attacks on a server [duplicate]
I am taking a Sec Lab class and we’ve been sectioned into teams and tasked with ‘attacking’ the other teams while ‘defending’ against them.
Each team is set up with 4 VMs, and we have a few days to harden them. ALL VMs live… Continue reading What can I do with physical access to a server?