Datagram introduces tamper-evident devices, explaining how they are designed and demonstrating how they can be bypassed.
datagram Lockwiki.com
Tamper evident technologies are quickly becoming an interesting topic for hackers around the world. DEF CON 18 (2010) held the first ever "Tamper Evident" contest, where contestants were given a box sealed with a variety of tamper evident devices, many of which purport to be "tamper proof." All of these devices were defeated, even by those with little experience and a limited toolkit. Like the computer world, many of these devices are overmarketed and it is difficult for the average person to compare different tamper evident technologies.
This talk covers the design and uses of tamper evident devices used in the commercial and government sectors. We'll dig into the nitty gritty of how many of these devices work, the methods by which they can be defeated, and live demonstrations of defeats against common tamper evident devices. Be advised: this talk is for only the stealthiest of ninjas; pirates need not apply.
For more information visit: bit.ly/defcon19_information
To download the video visit: bit.ly/defcon19_videos
Playlist Defcon 19: bit.ly/defcon19_playlist
Why it's here
1 person recommends this
What people say. Recommended for its fascinating look into physical security and the vulnerabilities of tamper-evident seals.
s
sllabreson Hacker News • Recommends
On “TSA Master Keys”
unfortunately several of these professional seals are only a bit more obscure, but not much harder to open than a zip tie. Introduction to Tamper Evident Devices from datagram at defcon 19 link to this video is interesting to watch
On “Detecting unauthorized physical access with beans, lentils and colored rice (2021)”
…F CON 18 (2010) held the first ever "Tamper Evident" contest, where contestants were given a box sealed with a variety of tamper evident devices, many of which purport to be "tamper proof." All of these devices were defeated, even by those with little experience and a limited toolkit. Like the computer world, many of these devices are overmarketed link to this video…
On “How to mitigate the Hetzner/Linode XMPP.ru MitM interception incident”
Assuming this was done at the government's request, I assume Hetzner is more than willing to comply with a court order mandating they allow them to monitor and physically size a machine. And outside of nation-state requests, even ignoring the fact that someone could probably pay-off an employee, I think ease would depend a lot on the datacenter and target; judging by the awesome and hilarious story behind the Fremont Cabal accidentally becoming an internet exchange by essentially having some dude barely secretly slipping unauthorized cables into the raceways 1, I figure there are a lot of places where if your target is simply renting a couple rack units or single rack rather than an entire…