Collaborate Disseminate
Data diodes (one-way networks) are often used to effect a hardware based ‘air-gap’ for high security sites. How do they deal with protocols, such as TCP, that require replys?
I have some inclination that data diodes installe… Continue reading Data Diodes and TCP traffic
I would like to know the impact of location of PUFs in ICs. Can we say that the chances of attacking PUFs become less when those primitives become non-traceable in the ICs? What are the negative implications of having a hidde… Continue reading Impact of Location of Physically Unclonable Function (PUF) primitives in Integrated Circuits (ICs)
A common trope in cyberpunk fiction is the necessity of physical access to a networked machine in order to execute an attack–the brilliant hacker has to hire a team of meatspace criminals (or vice versa), and the whole team … Continue reading Value of Physical Security Vulnerabilities to an Attacker
I guess hardware security refers to the security of it’s firmware, but the firmware is just software, so why do we call it hardware security?
If I am wrong, can anyone explain what is hardware security? If there is no code, … Continue reading What is hardware security?
I’ve heard about a rule in Information Security, that once a hacker has access to your physical machine, then it’s all over. However, there seems to be a big exception to this rule: iPhones.
It was all over the news a while back that the CIA (or the FBI or something) could not access information from a terrorist’s phone for their counter-terrorism ops. They had to ask Apple to create them an unlocking program that could unlock the phone for them.
My question is, why are iPhones so hard to hack?
Continue reading Why is iPhone’s internal storage so hard to crack/decrypt?
What frequencies at what time durations are most harmful to human hearing?
Which frequencies travel farthest in a still room?
Are there frequencies that tend to be harmful to pre-school age children?
Continue reading What frequencies are harmful to human hearing [on hold]
Recently, a customer asks for not closing and not locking his rent rack inside a cage of data center, is there any reason to reject his request due to security reason?
Since the rack is inside private cage and in data cente… Continue reading Any concern for not locking or even closing the rack door inside private cage of DataCenter?
I had a discussion with a customer who requires the physical destruction of the PC (a standard laptop) which is holding their data. After clarification, they mean the destruction of the entire laptop, not the disk only (the d… Continue reading Is there a standard recommending physical destruction of a machine?
More and more companies are issuing Smart-Cards and readers for their employees as a form of security, not only to gain access into buildings but to access their profiles on computer networks.
In my observation, many cards o… Continue reading RFID and Chip attacks
I have read data diodes are often used where high security is needed, like in military or critical infrastructures. However, most are UDP based. Modern diodes do support TCP protocol like SMTP, syslogs. However, I have not se… Continue reading Modern Data diodes for High security