news.volyx.in

Detecting unauthorized physical access with beans, lentils and colored rice (2021) (dys2p.com)

642 points by layer8 · 1538 days ago · 162 comments on HN

Article summary

The article discusses methods for detecting unauthorized physical access to devices or objects, including the use of glitter nail polish, tamper-evident labels, and embedding objects in a substance like colored rice or lentils. The goal is to create a mosaic that is difficult to reproduce and changes when manipulated, allowing for detection of tampering. The article also explores the limitations and potential vulnerabilities of these methods. Various substances and techniques are tested for their effectiveness in creating a tamper-evident seal.

Main themes

  • Tamper-evident methods
  • Physical security
  • Shipping and logistics
  • Substance testing
  • Vacuum-sealing
  • Cascading bags
  • Chemical reactions
  • Decoy shipping routes

What commenters say

  • Vacuum-sealing a bag of small grain-like objects can create a surprisingly solid and tamper-evident seal, but its effectiveness in shipping is uncertain.
  • Disturbing the contents of every shipment could be a strategy to increase the cost for potential attackers, but it may also increase costs for the defender.
  • Using a combination of methods, such as vacuum-sealing and cascading bags, may be more effective in preventing tampering than relying on a single method.
  • The success of tamper-evident methods depends on various factors, including the type of substance used, the shipping conditions, and the determination of the attacker.
  • Some commenters suggest that using CO2 and freezing the contents could provide an additional layer of security, but this method may also cause damage to the equipment.
  • Others propose using chemical reactions or specialized materials to create a tamper-evident seal, but these methods may have their own limitations and vulnerabilities.
  • The discussion highlights the importance of considering the potential consequences and limitations of tamper-evident methods in real-world scenarios.
  • The use of decoys and multiple shipping routes may be necessary to prevent tampering and ensure the security of sensitive equipment.