3 ms·

HotPlug Field Kit https://www.cru-inc.com/products/wiebetech/hotplug_field_kit_product/ https://www.cru-inc.com/products/wiebetech/hotplug_field_kit... "With t

by miles 6y ago

HotPlug Field Kit https://www.cru-inc.com/products/wiebetech/hotplug_field_kit_product/ https://www.cru-inc.com/products/wiebetech/hotplug_field_kit... "With the CRU WiebeTech HotPlug you can transport a computer without shutting it down. "The HotPlug allows hot seizure and removal of computers from the field to anywhere else. The HotPlug's patented technology keeps power flowing to the computer while transferring the computer's power input from one A/C source (such as a wall outlet or power strip) to another (a portable UPS) and back again. "We created this product for our Government/Forensic customers, but it has IT uses as well. Need to move a server without powering it down? The HotPlug can do it. "It's great for digital forensic investigators and techs who can't risk losing access to data on a running computer. With many computers now employing full-disk encryption, shutting them down poses the risk of having to crack a password after moving the computer to a lab for analysis, which can greatly increase the time and expense of an investigation. When combined with a WiebeTech Mouse Jiggler, you also won't have to worry about the computer entering password-protected screensaver or sleep modes."

Scoundreller 6y ago
Time to geo-fence the servers with an external GPS antenna (often useful for time-sync). Or maybe FM signal strength locks?
- askvictor 6y ago
  Wouldn't an accelerometer be a bit easier? Guess it can't hurt to have multiple defenses.
  - Asooka 6y ago
    If the police are seizing your PC (presumably following an investigation and a warrant) and you have put an accelerometer to shut it down (or unmount an encrypted volume) when moved in order to deny them access to the encrypted data, would this not count as tampering with evidence? If I were to do this, I would try and find a secondhand server that already has similar protection built in, so if anyone asks I could say "I did not even know it came with this feature".
    - AtheistOfFail 6y ago
      You can always claim it was designed to keep it from the hardware being stolen with sensitivive data.
    - finnthehuman 6y ago
      FIPS 140-2 is often used in the private sector as a source of security process inspiration even when there are no legal or contractual requirements to follow it. Having a good security architecture is not obstruction of justice. Doubly so if the data is still accessible to you after the failsafe is tripped. All you've done is prevent their ability to access the data before informing you of the existence of the warrant, using access mechanisms that - to you - are indistinguishable from an unauthorized access attempts. > "I did not even know it came with this feature". A documented threat model and security policy that justifies physical tamper protection and pulls inspiration from FIPS is a much smarter legal strategy than perjury. Consult a lawyer.

by miles 6y ago

Scoundreller 6y ago

Time to geo-fence the servers with an external GPS antenna (often useful for time-sync). Or maybe FM signal strength locks?

askvictor 6y ago
Wouldn't an accelerometer be a bit easier? Guess it can't hurt to have multiple defenses.
- Asooka 6y ago
  If the police are seizing your PC (presumably following an investigation and a warrant) and you have put an accelerometer to shut it down (or unmount an encrypted volume) when moved in order to deny them access to the encrypted data, would this not count as tampering with evidence? If I were to do this, I would try and find a secondhand server that already has similar protection built in, so if anyone asks I could say "I did not even know it came with this feature".
  - AtheistOfFail 6y ago
    You can always claim it was designed to keep it from the hardware being stolen with sensitivive data.
  - finnthehuman 6y ago
    FIPS 140-2 is often used in the private sector as a source of security process inspiration even when there are no legal or contractual requirements to follow it. Having a good security architecture is not obstruction of justice. Doubly so if the data is still accessible to you after the failsafe is tripped. All you've done is prevent their ability to access the data before informing you of the existence of the warrant, using access mechanisms that - to you - are indistinguishable from an unauthorized access attempts. > "I did not even know it came with this feature". A documented threat model and security policy that justifies physical tamper protection and pulls inspiration from FIPS is a much smarter legal strategy than perjury. Consult a lawyer.