News for hackers. Stuff that matters.

A comment on Quiet.js – Transmit and receive data in the browser at 44.1kHz. Parent comment

Re:Quiet.js – Transmit and receive data in the browser at 44... by GhettoMaestro on Friday November 01, 2019 @01:38PM (#21421575)
Friends of mine who work in high-security finance have told me about some fairly exotic things. Desoldering USB ports. Epoxying cable connectors into their sockets (to prevent easy removal - without chance of significant cable/device damage leading to investigation of issue).

I can only imagine the stuff that goes on at places like the NSA and CIA where the stakes are extremely high.

[ Parent | on HN ]
Re:Quiet.js – Transmit and receive data in the browser at 44... by copperx on Sunday November 03, 2019 @10:13PM (#21438720)
Isn't it easier to store all the computers in a secure room and then just have cable runs to the peripherals?

This gets rid of most physical tampering attempts. The only one left is that the employee could cut the cord of the mouse and jerry-rig a small USB port. You could get around this by forcing the use of PS/2 connectors.

[ Parent | on HN ]
Re:Quiet.js – Transmit and receive data in the browser at 44... by jdsully on Monday November 04, 2019 @08:08PM (#21448615)
And then people would ex-filtrate data by toggling the numlock light programmatically.
[ Parent | on HN ]
Re:Quiet.js – Transmit and receive data in the browser at 44... by jandrese on Friday November 01, 2019 @02:14PM (#21422018)
Imagine being the guy who has to fix those computers when they break and finding only solutions like "just plug in this USB stick and boot from it to run this fix utility..." or the everpresent assumption that the machine is connected to the Internet 24/7.
[ Parent | on HN ]
Re:Quiet.js – Transmit and receive data in the browser at 44... by odorousrex on Friday November 01, 2019 @02:27PM (#21422180)
You don't fix them.

You bring in an entirely new machine, and the old one is securely destroyed.

[ Parent | on HN ]
Re:Quiet.js – Transmit and receive data in the browser at 44... by jandrese on Friday November 01, 2019 @04:31PM (#21423388)
Oh yeah, like getting a new machine through purchasing and certified for the SCIF is a walk in the park...
[ Parent | on HN ]
Re:Quiet.js – Transmit and receive data in the browser at 44... by nine_k on Friday November 01, 2019 @09:20PM (#21425262)
You have a stock of prepared, vetted replacement machines.

You can replenish it slowly after you have just handed over a replacement.

[ Parent | on HN ]
Re:Quiet.js – Transmit and receive data in the browser at 44... by wcip on Friday November 01, 2019 @09:10PM (#21425231)
Surely they'd use something like this: https://en.m.wikipedia.org/wiki/Preboot_Execution_Environmen...
[ Parent | on HN ]