Skip to content
0:00 / 0:00

#tamperevident#defcon#physicalsecurity

DEFCON 19: Introduction to Tamper Evident Devices

Christiaan008

73K subscribers • 19 videos on Hallway

YouTube
  • Recommended by 1 person: 1 on Hacker News.
  • Presented by datagram

Beginner. No background in the topic needed.

351K views15 years ago1 recommendation

SecurityExploits and vulnerabilities

Datagram introduces tamper-evident devices, explaining how they are designed and demonstrating how they can be bypassed.

datagram Lockwiki.com Tamper evident technologies are quickly becoming an interesting topic for hackers around the world. DEF CON 18 (2010) held the first ever "Tamper Evident" contest, where contestants were given a box sealed with a variety of tamper evident devices, many of which purport to be "tamper proof." All of these devices were defeated, even by those with little experience and a limited toolkit. Like the computer world, many of these devices are overmarketed and it is difficult for the average person to compare different tamper evident technologies. This talk covers the design and uses of tamper evident devices used in the commercial and government sectors. We'll dig into the nitty gritty of how many of these devices work, the methods by which they can be defeated, and live demonstrations of defeats against common tamper evident devices. Be advised: this talk is for only the stealthiest of ninjas; pirates need not apply. For more information visit: bit.ly/defcon19_information To download the video visit: bit.ly/defcon19_videos Playlist Defcon 19: bit.ly/defcon19_playlist

Why it's here

1 person recommends this

What people say. Recommended for its fascinating look into physical security and the vulnerabilities of tamper-evident seals.

sllabreson Hacker News • Recommends

On “TSA Master Keys”

unfortunately several of these professional seals are only a bit more obscure, but not much harder to open than a zip tie. Introduction to Tamper Evident Devices from datagram at defcon 19 link to this video is interesting to watch

capablewebon Hacker News • Mentions

On “Detecting unauthorized physical access with beans, lentils and colored rice (2021)”

…F CON 18 (2010) held the first ever "Tamper Evident" contest, where contestants were given a box sealed with a variety of tamper evident devices, many of which purport to be "tamper proof." All of these devices were defeated, even by those with little experience and a limited toolkit. Like the computer world, many of these devices are overmarketed link to this video…

OmarAssadion Hacker News • Mentions

On “How to mitigate the Hetzner/Linode XMPP.ru MitM interception incident”

Assuming this was done at the government's request, I assume Hetzner is more than willing to comply with a court order mandating they allow them to monitor and physically size a machine. And outside of nation-state requests, even ignoring the fact that someone could probably pay-off an employee, I think ease would depend a lot on the datacenter and target; judging by the awesome and hilarious story behind the Fremont Cabal accidentally becoming an internet exchange by essentially having some dude barely secretly slipping unauthorized cables into the raceways 1, I figure there are a lot of places where if your target is simply renting a couple rack units or single rack rather than an entire…