181–190 of 195 posts
Earlier quoted context omitted.
Back in the BBS days, there were textfile describing how to wire your beige box to either turn on strong magnets or ignite termite if a case was detected. ... I don’t know of anyone actually implementing this though :)
I would imagine that's thermite and not termite ;) If the latter, the server would probably be okay, and it would take a very long time for the termites to damage the surrounding room enough to be a security deterrent.
Earlier quoted context omitted.
I would imagine that's thermite and not termite ;) If the latter, the server would probably be okay, and it would take a very long time for the termites to damage the surrounding room enough to be a security deterrent.
Nah, it's termite. You're trying to destroy your logs, right?
Earlier quoted context omitted.
Back in the BBS days, there were textfile describing how to wire your beige box to either turn on strong magnets or ignite termite if a case was detected. ... I don’t know of anyone actually implementing this though :)
It's funny when I think back, I was a teen in the 90s and did plenty of questionable stuff online and w/ local BBS scene (Kevin Mitnick was busted in Raleigh and many rumors existed about his presence in the BBS scene, obviously fantasy though!). Nobody I know who got arrested ever managed to destroy anything. When I think about it, we all assumed the cops would storm in when we were in the act of doing something bad…
When I was a teen, I somehow got a modem number at NASA, and I stupidly gave it to a friend. He tried to brute force it, but he got door knocked. He quickly formatted his disks, but it wasn’t even the cops haha!
Earlier quoted context omitted.
Memory encryption technologies such as AMD's Secure Encrypted Memory (SME). Would be your best bet to combat this, along with other anti-evil maid protections. https://en.wikichip.org/wiki/x86/sme#Overview https://www.qubes-os.org/doc/anti-evil-maid/
I think SEV is newer form of this.
It would be interesting to leverage SEM to run a version of qubes where not only are the VMs isolated by the Xen hypervisor but are also separately encrypted using the PSP.
Earlier quoted context omitted.
Memory encryption technologies such as AMD's Secure Encrypted Memory (SME). Would be your best bet to combat this, along with other anti-evil maid protections. https://en.wikichip.org/wiki/x86/sme#Overview https://www.qubes-os.org/doc/anti-evil-maid/
There are also things like TRESOR [1] which keep all encryption keys inside the CPU. I'm not sure what the current state of the art is. There are so many possible evil maid attacks that I think it would be useful to add a pysical layer, just in case. [1] https://en.wikipedia.org/wiki/TRESOR
From going through the discussion I'm getting the impression that the only feasible attack vector provided by USB is by emulating a keyboard like a USB Rubber Ducky. Is this really the case? For instance, if my laptop is locked (with a proper[0][1] lock screen like xscreensaver) and that lock screen is capturing all keyboard input and magic SysRq keys[2] are disabled, too, is there really no way an attacker could use…
> [0] https://www.jwz.org/blog/2015/04/i-told-you-so-again/ Sorry for the digression, but WTF is this guy doing? Looks like he redirects all requests that have HN as the referrer to a picture of a testicle. Copy-pasting the link (i.e., dropping the referrer) seems to work, though.
Earlier quoted context omitted.
This is how you earn tampering with evidence charges, up to 20 years felony.
Surely it has to be actual evidence before you "tamper" with it. If I delete a file on my computer today that would be potentially "evidence" if seized, and the police come knocking tomorrow, I haven't committed a crime by using my personal computer in the past.
Earlier quoted context omitted.
It's funny when I think back, I was a teen in the 90s and did plenty of questionable stuff online and w/ local BBS scene (Kevin Mitnick was busted in Raleigh and many rumors existed about his presence in the BBS scene, obviously fantasy though!). Nobody I know who got arrested ever managed to destroy anything. When I think about it, we all assumed the cops would storm in when we were in the act of doing something bad…
This is how you earn tampering with evidence charges, up to 20 years felony.
Today, you should encrypt everything, and cut power before physical access is obtained. Will that count as "tampering"? I was just turning off my computer. No, I do not remember the key.
Earlier quoted context omitted.
Battery operated mechanical wrist watches last years!
I believe you're thinking of an analog (usually quartz) watch, not a mechanical analog watch which doesn't have a battery. https://en.wikipedia.org/wiki/Mechanical_watch
I know nothing!
Earlier quoted context omitted.
> [0] https://www.jwz.org/blog/2015/04/i-told-you-so-again/ Sorry for the digression, but WTF is this guy doing? Looks like he redirects all requests that have HN as the referrer to a picture of a testicle. Copy-pasting the link (i.e., dropping the referrer) seems to work, though.
That's exactly what he's doing. I can't remember why he hates HN though, but it's been that way for a really long time.