talltower

5 ms·

1.
by talltower 10y ago
We thought long and hard about the type of platform we want to use for this project. While the x86 platform has many shortcomings, it also provides a big ecosystem of OS and SW, as well as support. The fact that we have two subsystems, secu
2.
by talltower 10y ago
Yes, HSMs are very expensive and after talking to a few people in this industry we got the impression, some of the ORWL features are not present in HSMs. Like the ability to Geo-lock the device using the key (mounted in the ceiling). Waling
3.
by talltower 10y ago
We currently have a Spec temperature of triggering a 'freezing event" at just above freezing Temperature 33-35F.
4.
by talltower 10y ago
Thanks for the correction. I was not sure at the time.
5.
by talltower 10y ago
The current Intel chipset we selected does only support RAM up to a max of 8GB. We heard the Qubes users loud and clear and the request for 16GB RAM. We will only be able to offer this in a next revision though.
6.
by talltower 10y ago
We have built a list of hacks that we addressed and how. Please feel free to read up on all of these and more in our Product Description in the section "Potential attacks prevented" : https://www.orwl.org/wiki&#x2F
7.
by talltower 10y ago
I respect your opinion on this. We sought to build hardware that is a significant step up from what is available on the market today in terms of access control and tamper protection. We also open source the BIOS and customize it the most we
8.
by talltower 10y ago
Offline this SSD is protected with "AES 256-bit Encryption". Simple Brute force attempts would need WAY too long to make any sense. Does this answer your question?
9.
by talltower 10y ago
Yes, physical access in most cases is a point of no GOOD return. That is why we emphasize so much on preventing this access. We have detailed the measures we have taken to prevent this here: https://www.orwl.org/wiki/in
10.
by talltower 10y ago
Yes, correct. We think we cover the cold boot vector. Here is a section from the product description. Security mesh physically protects DRAM from both freezing specific components and removal. Breaching the mesh will trigger reactive root
11.
by talltower 10y ago
We are actually talking about this. Thanks for your interest.
12.
by talltower 10y ago
Correction. The temperature monitor is INSIDE the secure shell.
13.
by talltower 10y ago
The SSD encryption key will only be deleted in case of a tamper event, NOT when the unit is moved. Tamper events are: * freezing the unit * drilling the secure enclosure or other wise breaking the traces on it * prying the enclosure off the
14.
by talltower 10y ago
Let me state a section of our product description here, detailing the way we are approaching the "Evil Maids" USB volume boot blocked at BIOS, BIOS access controlled by security key + PIN, Intel TPM is enabled, and we do not ent
15.
by talltower 10y ago
Thanks. We agree with your statement fully. We are raising the threshold of entry to your personal data substantially, but we are still far from perfection. We did a number of steps up in the security ladder. We are also taking steps to min
16.
by talltower 10y ago
ORWL will go in stand-by if the user is further than 10meters away from the device, if moved when away, it will shut down. If the hardware is tampered with, or chilled, the SSD encryption key is deleted within milliseconds. iPhone or any ot
17.
by talltower 10y ago
Our long term plan is to limit ME capabilities using the BIOS configuration. We just released the SOW of the 1st BIOS with Eltan on the WiKi. https://www.orwl.org/wiki/index.php?title=File%3ASowDESIGN-S... We are plan
18.
by talltower 10y ago
This looks like an awesome product to protect sensitive data. Be it in the legal field, lawyers, ...