Collaborate Disseminate
I was surprised to read in the responses to this popular question that it’s considered nigh impossible to secure a computer system if intruders have physical access.
Does this apply to smartphones as well? Let’s suppose I have done the m… Continue reading Does the saying "physical access = game over" apply to smartphones, too?
I have a YubiKey 5c nano attached to my laptop used for 2FA, etc. It works great and is unobtrusive, but I feel like the small form factor encourages leaving it plugged into the laptop all the time, essentially weakening the two-factor nat… Continue reading Is there a way to "lock" a YubiKey after a period of inactivity?
During my commute from an airport located in a country whose government is known for intrusions into the privacy of its citizens and non-citizens, I had my laptop taken from me during a routine security procedure. I usually get to see my e… Continue reading How long does it take to have spyware installed on a laptop?
I always assumed that each lock is unique and can only be opened with the keys it was sold with (or any copies made later from those originals). But the truth seems to be that they just make “a few” variations (10? 100? 1,000? 10,000?), mi… Continue reading When they make physical locks, do they really just make a few variations of the keys and then mix them together and sell? [duplicate]
Let’s say you’re in a public café, or conference, where you trust your device won’t be stolen if you go to the bathroom for 5 minutes, but you don’t trust it might not be tampered with.
What are the potential security risks … Continue reading What are the potential risks of leaving a device in public, but locked? [closed]
I plan to create an air-gapped laptop with a separate bootloader that is on a permanently write-protected SD card that I will carry in my pocket all the time.
I will also remove the wireless card on the motherboard. The onl… Continue reading Can I use silicone to protect the BIOS
Hypothetical Situation:
The company Blue hires the company Red to do a Red Team engagement on Blue. Here, I’ll be discussing only the physical part of the engagement, not social and cyber.
Red successfully infiltrates Blue … Continue reading What can a victim company do when it’s hard to differentiate between a Physical Pentest from a Criminal Physical Penetration
After reading some topics on here about password expiration, and also after reading this comment, a question arose in my mind: if we apply password expiration for the safety of users, should our door locks’ keys also expire?
… Continue reading If password expiration is applied, should door-lock expiration be applied too?
This question already has an answer here:
Roles to play when tailgaiting into a residential building
6 answers
I am an activist in Europe. My identity is publicly known. It sometimes happens that the police searches activists’ homes after we do an action, or during a campaign. The police will confiscate all electronics they find for a… Continue reading If I have to hand in my electronics to the authorities, can my information still be secured? [on hold]