Usbkill – anti-forensic tool to halt computer when new USB device is connected

Post by stjohnswarts » Fri, Aug 07, 2020, 12:37 AM UTC

_kbh_ wrote: post #19

captainmuon wrote: post #6

Interesting project, I'm sure this is useful for people at risk. Somewhat related, I'm wondering about the physical security of computers. There is an attack where they open your PC, take out the ram, and freeze it immediately so the bits don't decay and they can extract your encryption keys. All BIOSes have an option for cassis intrusion detection, but I've never seen a case that has the necessary cable. Has anybody…

Memory encryption technologies such as AMD's Secure Encrypted Memory (SME). Would be your best bet to combat this, along with other anti-evil maid protections. https://en.wikichip.org/wiki/x86/sme#Overview https://www.qubes-os.org/doc/anti-evil-maid/

Post by rasz » Fri, Aug 07, 2020, 1:20 AM UTC

alfiedotwtf wrote: post #76

captainmuon wrote: post #6

Interesting project, I'm sure this is useful for people at risk. Somewhat related, I'm wondering about the physical security of computers. There is an attack where they open your PC, take out the ram, and freeze it immediately so the bits don't decay and they can extract your encryption keys. All BIOSes have an option for cassis intrusion detection, but I've never seen a case that has the necessary cable. Has anybody…

Back in the BBS days, there were textfile describing how to wire your beige box to either turn on strong magnets or ignite termite if a case was detected. ... I don’t know of anyone actually implementing this though :)

Post by busterarm » Fri, Aug 07, 2020, 3:08 AM UTC

kllrnohj wrote: post #164

busterarm wrote: post #139

Earlier quoted context omitted.

Which is why if you want to defend against the easy versions of these and make people have to do work, only plug your desktop PCs into standalone outputs not on a surge protector. Yes, it won't defend against cord cutting. Edit: A more interesting defense I think would be to modify a surge protector for this specifically to defeat HotPlug. Only put your computer on a specific outlet and wire it so that if any other o…

Plugging into the wall doesn't defend against hotplug nor make it meaningfully more difficult: https://youtu.be/erq4TO_a3z8?t=236

Post by vinay427 » Fri, Aug 07, 2020, 5:12 AM UTC

refurb wrote: post #166

vinay427 wrote: post #95

Earlier quoted context omitted.

Hmm, this is actually rather nifty, although one issue I see is it will only last a few days at most. I don't know how long people who confiscate laptops normally need to run mouse jigglers.

Battery operated mechanical wrist watches last years!

Post by Nextgrid » Fri, Aug 07, 2020, 8:43 AM UTC

destory-everyth wrote: post #109

macNchz wrote: post #83

Earlier quoted context omitted.

I have a Lenovo M93P Tiny which came with a chassis intrusion switch installed. It seems you can have it block startup/require a password when the case is opened and notify some central admin. I don’t know what happens if you open the case while it’s running, though. I’m not sure if it’s something they offer on current models, or to individuals at all (I bought it used from a corporate IT asset liquidator so it was l…

Work at a big bank , we won’t procure laptops without this and yes we will know when you have opened it and you won’t be able to boot it , I think something happens with bitlocker also but not sure.