Collaborate Disseminate
The workplace has a physical access key stored in a fire department lockbox (sometimes called a Knox Box), how it’s possible to mitigate the risk that the Knox Box gets picked, or that an unauthorized key may exist?
What cou… Continue reading How to safeguard physical keys stored in a fire dept. lockbox?
I’m looking for actual specific standards that apply to physical access control for Information Security office space. Long story short, our building manager wants an open office concept, and in order to argue this, my boss w… Continue reading What security standards apply to physical security for an infosec office
A card reader was stolen from the boom gates of the building last night. There is another card reader at the roller doors of the garage and then again at every elevator.
I was wondering why would someone specifically go for… Continue reading Why would anyone steal a boom-gate access card scanner?
Well this question may not be about computers, but it most definitely is about information security, so I’ll give it a try…
I’ve been repeatedly told in my life that I should always carefully check each piece of paper for … Continue reading If and why should any personal information be destroyed before putting scrap paper into the recycle container?
So a colleague and I are having an argument about physical access.
We have two devices A and B where A contains a function f(x) whose implementation we want to keep secret. We want to allow users to connect to A from B, inpu… Continue reading Is it possible to protect a key from an attacker with physical access?
The general idea here is the feasibility of adding Windows UAC-like "consent prompts" to a Linux system, designed in such a way that cannot be bypassed in software. Giving consent should only be doable if one is physically at the… Continue reading Authentication using SysRq
College. In a break between classes I left the classroom to go to WC. I forgot to lock my laptop. When I came back I saw my desktop wallpaper changed to a .jpg with an personal message from one of my peers.
Am I now supposed… Continue reading A colleague has accessed my PC; what now?
Two security searchers from ptsecurity.com ( Maxim Goryachy @h0t_max and Mark Ermolov @_markel___ ) have announced on Twitter:
Game over! We (I and @_markel___ ) have obtained fully functional JTAG for Intel CSME via US… Continue reading How to protect/mitigate IntelME (CSME) JTAG attack over USB?
KeePass just introduced the concept of an emergency sheet that can be shared with trusted users. This question might go beyond the scope of this site, but suppose you printed one of these sheets, how would you store it?
I found this IS p… Continue reading Security for KeePass Emergencey Sheet
You see far-fetched Hollywood examples of the most unlikely scenario’s resulting in a data breach due to a lack of physical security. An example is in Mr Robot where the protagonist gets into a data warehouse and plants a ro… Continue reading Evidence of any large scale data breaches from lack of physical security?