Archive for the 'Physical Security' Category

Cute + Malicious == Deadly

Published on June 28, 2008 in Exploits, Physical Security, Social Engineering, Targeted Attacks and Windows. 0 Comments

In a recent (experimental only) project, I followed one of the multiple guides such as this one on how to make a Lego case for a USB stick. To top it off, I loaded the Hak5 Switchblade packages on the sticks. When used with U3 USB autorun technology, these packages allow automatic theft of various personal data upon insertion of the stick into a Windows computer. Now, doesn’t this just crush the competition (a regular USB stick lost in the parking lot)?

The Mona Lisa

Continue reading ‘Cute + Malicious == Deadly’

RFID security — mark your calendars!

Published on April 3, 2008 in ISIS in the News, Physical Security, Privacy and RFID. 0 Comments

ISIS lab alumni, Mike Aiello, will be on CBS National News @ 6pm on Sunday, April 6th talking about RFID security. Mike runs DIFRWear, a company that makes RFID-blocking apparel.

Countermeasures to Cold Booting Attacks

Published on February 23, 2008 in Crypto, Forensics and Physical Security. 5 Comments

There’s been a bit of a back and forth discussion on one of our mailing lists regarding Ed Felten’s recent cold-booting attacks on software FDE (BitLocker, FileVault, dm-crypt etc.). I thought it might be worthwhile to collect some of the potential software-only modifications that would protect against his attacks.

Continue reading ‘Countermeasures to Cold Booting Attacks’