Collaborate Disseminate
If the device is plugged in when the user is already logged in, then of course the device can just pretend to be a keyboard, open a terminal, and run a compromising command. (shortcuts for terminals may vary, but are usually … Continue reading How far can a malicious USB device get you on a server?
I am now in Poland and see these everywhere:
The plate can rotate freely,when you insert the key, matching the groove, you rotate the key so it is aligned with the lock and then insert the key.
What is the purpose of this… Continue reading What is the purpose of the rotating plate in front of the lock?
Unfortunately, someone stole my laptop (a MacBook) and I did not realize that for 48 hours. Now, this was a work laptop and my company’s security team is going to wipe the laptop remotely as soon as it connects to the interne… Continue reading Stolen MacBook: should I worry about my data?
As a student, we are playing in a summer project to “secure” access to a door (those typical ones with a metal keyboard) used by non-technical people.
Constraint: the metal keyboard must be the main mechanism
Requirement 1… Continue reading An "easy" 4 to 6 digits code, beyond of PINs and CODEcards [on hold]
I’m trying to interpret this video demonstration by F-Secure of the big cold-boot attack discovered last year.
What is happening at the 50-second mark?
Why does he insert the USB boot-device before doing whatever he does ne… Continue reading Interpreting this F-Secure Video of a DMA-Attack
Suppose I have a phone with broken screen secured by several digit (for example 4 digit) password and fingerprint check.
So I cannot backup my data and make factory reset before transfer it to repair shop.
What can be done… Continue reading How particularly insecure to give unlimited physical access to Android device?
I’ve been using Amazon Web Services to run my Java application. However, due to high costs I’m looking into getting a dedicated server from Hetzner, a company based in Germany, which costs about 10-20x less than AWS.
Howeve… Continue reading Is it Possible to Prevent a Physcial Attack on Server in Remote Data Center?
What are the general criteria for rejecting an insecure PIN to access a building?
There has been a lot of discussion about password selection security. Minimum length requirements, mandatory classes of characters, etc. I hav… Continue reading Selecting a secure PIN for building access
I have sensitive data to secure. My computer may likely be compromised physically in the future. How can I secure my date from various attacks like Evil Maid attacks and so forth. I have some basic knowledge of encryption and… Continue reading I am a political activist, its likely that my computer will be compromised in the future, how can I secure my data?
In this case the victims may think they are using a generic USB cable, but the PC will recognize the cable as a Human Interface Device, much like it would a mouse or keyboard, giving the attacker just enough permissions to wr… Continue reading How to mitigate the new malicious USB cable USBHarpoon (NOT BadUSB) threat in an enterprise?