Collaborate Disseminate
I’m thinking about a system that will allow my end users to verify their products with the manufacture key/imei number.
I’m planning to check that key against my information saved in server and let the user know if his prod… Continue reading Product Verification System [on hold]
SSH Server: I only allow public-key authentication.
Malicious Software: If it’s running as my user it has access to my data and an internet connection, it’s bad enough already. Yes, su access would make it worse, but the issue here is no… Continue reading Why does one need a strong password on Unix?
SSH Server: I only allow public key authentication.
Malicious Software: If it’s running as my user it has access to my data and an internet connection, it’s bad enough already. Yes, su access would make it worse, but the iss… Continue reading Why does one need a strong password on Unix?
Suppose a full-disk-encrypted computer with hot-swappable hard drives is powered on (i.e. decrypted at boot by a trusted user) but is screen-locked.
In such a case, if an attacker with physical access were to remove and walk… Continue reading Full disk encryption and disk removal
With more and more devices accepting finger prints in place of passwords, could it be possible to “keylog” these finger prints on mobile devices, for example, by installing a rogue application and then reproducing that finger… Continue reading Could it be possible to hijack physical finger prints in digital form and use them to gain access to other devices and locations?
What are security pros and cons if we have to enable SSH access during the manufacturing of the device (i.e. Fire Alarm Control Panel)? It is a manufacturer requirement.
SSH access will be disabled before shipping the produc… Continue reading SSH access during manufacturing
Inspired by the idea of the USB Killer, I was wondering if it’d be possible to create a device that, when plugged into a mobile phone/laptop/whatever charging port, drains the charge of said device rather than charging it.
I… Continue reading Is it possible to create a false charger that drains a device’s power?
There are Cat 5 network cables in the office going from some rooms to some other rooms through the walls and the ceiling.
The office belonged to another company in the past, which means that there is no guarantee that nobody… Continue reading How could I be sure that the network cable is safe to use?
The magic SysRq key is known for linux user’s to perform some actions when the system freeze , but it considered as dangerous command for users who have a physical access to the system:
Some people view this key as givi… Continue reading How can the Magic SysRq key be dangerous for linux user’s?
The magic SysRq key is known for linux user’s to perform some actions when the system freeze , but it considered as dangerous command for users who have a physical access to the system:
Some people view this key as givi… Continue reading How can the Magic SysRq key be dangerous for linux user’s?