Collaborate Disseminate
Following people into a large RFID protected residential building is ridiculously easy, as not everyone knows everyone else. Just the other day I was let in with a rifle (an airgun, but how could have they known).
But standi… Continue reading Roles to play when tailgaiting into a residential building
I have an off-the-shelf PC with a database on it (CouchDB). The database contains sensitive data. I’m taking this machine to a community with poor/zero data connectivity, where the database will accessible through their LAN. … Continue reading Recommendations for tamper resistance without reasonable access security
Firmware updates won’t address the problem, so admins need to take other action. Continue reading Samsung, Crucial’s Flawed Storage Drive Encryption Leaves Data Exposed
I live in a high rise where we are issued small FOB devices that give access to the building lobby and limit which floors we can access with the elevator. This is a fairly common setup in my city.
Those devices are fragile,… Continue reading physical premise security: what are the risk of having a physical access FOB cloned?
My family member has reason to believe that someone entered their house last night although they cannot be certain because they only have circumstantial evidence: In the morning they found a light left on and a door leading t… Continue reading How to check for security breach after a potential physical home intrusion
I am on a project which is illegal in my nation but is not illegal anywhere in the world. In order not to get a 100yr sentence I should be prepared for seizures and forensics.
I am running a server with ESXi 6.7 hypervisor and has three C… Continue reading Server protection measures from authorities
What would be the best practices for securing a single-purpose Windows laptop against a determined foreign intelligence agency from tampering with data on the machine? The machine would be used several times per year by two individuals wh… Continue reading Securing a Laptop from a Foreign Intelligence Agency
I’m working in a pretty sensitive environment and I’d like to know if my config is secure.
I got a MSI Laptop. The BIOS is locked out with a password, and is asking it at each boot. I know this can easily be bypassed but.. P… Continue reading Is my laptop secured and how to secure it more?
Currently I’m designing a payment app.
It has the standard security controls such as HTTPS communication, certificate pinning, no cache, login with 2FA (OTP), 2FA for payment operation.. but I’m not sure how to protect the us… Continue reading Protecting payment mobile app against mobile theft
My question is simple. I work in a company of 10 employees where none of our computers have passwords to login into our Windows systems. The thing is my boss doesn’t want passwords because he thinks that we have nothing to hide and also be… Continue reading What is the real danger of not putting a login password in Windows in a small company except that of allowing anyone to go physicaly on your computer?