News for hackers. Stuff that matters.

A comment on Moved a server from one building to another with zero downtime. Parent comment

Re:Moved a server from one building to another with zero dow... by Asooka on Wednesday August 05, 2020 @07:42PM (#24066812)
If the police are seizing your PC (presumably following an investigation and a warrant) and you have put an accelerometer to shut it down (or unmount an encrypted volume) when moved in order to deny them access to the encrypted data, would this not count as tampering with evidence?

If I were to do this, I would try and find a secondhand server that already has similar protection built in, so if anyone asks I could say "I did not even know it came with this feature".

[ Parent | on HN ]
Re:Moved a server from one building to another with zero dow... by AtheistOfFail on Wednesday August 05, 2020 @08:17PM (#24066996)
You can always claim it was designed to keep it from the hardware being stolen with sensitivive data.
[ Parent | on HN ]
Re:Moved a server from one building to another with zero dow... by finnthehuman on Saturday August 08, 2020 @02:18PM (#24093836)
FIPS 140-2 is often used in the private sector as a source of security process inspiration even when there are no legal or contractual requirements to follow it.

Having a good security architecture is not obstruction of justice. Doubly so if the data is still accessible to you after the failsafe is tripped. All you've done is prevent their ability to access the data before informing you of the existence of the warrant, using access mechanisms that - to you - are indistinguishable from an unauthorized access attempts.

> "I did not even know it came with this feature".

A documented threat model and security policy that justifies physical tamper protection and pulls inspiration from FIPS is a much smarter legal strategy than perjury. Consult a lawyer.

[ Parent | on HN ]