181–190 of 339 posts
Earlier quoted context omitted.
> There are devices that can exfiltrate information from what I understand almost every operating system through USB. If that is true, then it is a vulnerability. You should file bug reports.
How will you prevent a USB device to present itself as both a keyboard and mass storage and then type commands that copy data?
Earlier quoted context omitted.
Unfortunately, iOS-provided location resolution for use in shortcuts makes it worthless for in-home use. Unless you live in a mansion though I guess.
You are assuming the signal is strong enough to be read at a distance. I just used the RSSI, and going away a few meters was enough. Moreover, since that was just a nicety in case I forgot to lock my computer during a corridor conversation, I could get away with a longer timeout. A more sophisticated implementation could be done if you can write software on the device. A PineTime would be perfect for this. I am not s…
Earlier quoted context omitted.
How will you prevent a USB device to present itself as both a keyboard and mass storage and then type commands that copy data?
An OS doesn't even need to implement USB support. Of course it can offer access controls to enable the USB devices.
My point is that given how universal USB as long as a device can do both input and output it's going to be very hard to stop some exfiltration from being possible.
Do you really think a bug report should be filed on all OS's for allowing USB drives and keyboards to be plugged on a running system?
Earlier quoted context omitted.
Exactly. You need something not for when your laptop is removed from you , but when you are removed from your laptop. Also, if you are being targeted this hard you need to have something for when you are left in front of your laptop and a gun is put to your head. Or the attackers threaten the welfare of your family.
> You need something not for when your laptop is removed from you, but when you are removed from your laptop. Yeah, this wouldn't have saved the admin of Alphabay, a now defunct darknet market. The FBI staged a car crash outside his house so when he'd come out to see what was going on they could arrest him and likely get to his laptop while it was unlocked. Then again, he really shouldn't have left his computer unloc…
Surely there were a bunch of other options to consider before "let's stage a car crash"?
Windows: Sorry, Dave, we can't shut your system down right now, you have 3 apps keeping it from shutting down and we have 37 updates to Edge Browser to install... Have a nice day.
Earlier quoted context omitted.
The only problem is this is sort of obvious from a forensics perspective. Person is using truecrypt, they boot it up for you, and the partition is only half the size it should be.
Your parent seems to point out that's not how it works: you've got access to the ful partition either way, meaning you can accidentally overwrite the other partition.
Earlier quoted context omitted.
There are any number of ways to do this, but one is a LUKS encrypted file system and "self destruct" is wiping out the LUKS header and halting. Only the backup of the LUKS header (not with you at the time!) will restore the data.
Yeah, I have that on my servers in case somebody tries to hack them. There is a secret to logging to my machines and if you miss it the machine self destructs in a reversible way. Can't give more information but it is pretty easy to boot it again. One thing of note here, don't put LUKS header on any kind of flash (like SSD) or SMR HDD.
Reversibility is not a feature of destruction, lexically-speaking. A better description might be "locked".
More importantly in this case: if you are able to reverse it, you can be compelled to reverse it. This is no different than having a secret passphrase.
There are mentions in this thread about false positives, risk of data loss, others. This made me think of Star Trek's use of a self destruct phrase. Obviously their method is too slow, but you could have a "duress" phrase and a "all clear" phrase. User-Defined Phrase: "Please dont kill me", activates "duress" mode. - A daemon listens in the background for a phrase of your choice. When detected, your laptop makes a so…
We do have a "LUKS Header Shredder" trigger (which we call self-destruct as it renders all the data on the FDE disk useless), but we (intentionally) don't include it by default and raise the barrier of entry because of the risk of data loss.
We'll be publishing a more detailed write-up on the LUKS Header Shredder in 2 weeks. You can subscribe for updates on our website (buskill.in) or the campaign directly (crowdsupply.com)