Slashdot Mirror


Intrusion Detection For Your PC Case

Anonymous Coward writes "Ryan du Bois, from genbukan security (aka red0x), has created a chassis intrusion detection system for your computer box: the actual physical case. He also wrote a paper describing three separate implementations of this CIDS system: Contacts, Pressure switchs, and a PLA (programmable microchip). Included in his paper are complete designs for the first two and a promise for the last to come soon. Definitely worth a read. The paper is available in many formats including OpenOffice 1.0, HTML , TEXT and a Tarball of them all. You can also obtain the signatures as well as his Automated Security Tools Project, of which this is a member."

212 comments

  1. Nothing New by thelizman · · Score: 2, Informative

    Dell Optiplexes could not be opened without tripping an internal warning that would flash on screen at reboot. You had to reset the bios based warning using a password to turn it off. Packard Bell and Compaq also did this years ago (I had a Compaq 286sx with an internal detection system which used a mercury switch)

    Oh yeah, FIRST POST BIATCH.

    1. Re:Nothing New by rector · · Score: 1

      Many HP Vectra boxes have the same feature

    2. Re:Nothing New by _ph1ux_ · · Score: 0, Offtopic

      if your mom is so calous as to leave a woman unconsious on the side of the road - she must be a real bitch. which prolly means that you were not raised to be a nice person. I wouldn't brag about that act that your mom pulled off... thats fucking lame. and I am by no means a pacifist - I just dont like anyone who has no respect for life and well being of others.

    3. Re:Nothing New by julesh · · Score: 1

      I have an Optiplex GX/1. I can't switch off the warning message. Any ideas? :-(

  2. This is new? by UnifiedTechs · · Score: 1, Redundant

    I remember a plug for an intrusion detection system on my old 486's.

    1. Re:This is new? by Jucius+Maximus · · Score: 3, Interesting
      I agree. Old news indeed.

      I remember reading about systems in old issues of PC Magazine or such where, if the case was opened incorrectly, something inside would explode and cover everything inside with paint, thus making the computer parts un-sellable on the reller's market. The crook would leave your box behind and you could still get at your HDD to recover your data.

    2. Re:This is new? by ComaVN · · Score: 1

      The crook would leave your box behind and you could still get at your HDD to recover your data.
      Except that no-one is going to open your box on-site. Sorry, this kind of protection makes no sense.

      --
      Be wary of any facts that confirm your opinion.
    3. Re:This is new? by Jucius+Maximus · · Score: 1
      "Except that no-one is going to open your box on-site. Sorry, this kind of protection makes no sense."

      The thing would also deploy paint when the box was moved without being properly pacified. The one think I don't know is how the crook would know that a paintbomb had gone off inside the box.

      Maybe you are right and the product does not make sense.

    4. Re:This is new? by Weh · · Score: 1
      Except that no-one is going to open your box on-site


      Not true, at my university there burglars have taken components like RAM from pcs. One thing about burglars is that they don't like to lug around heavy stuff, they go for the most value/weight ratio.
    5. Re:This is new? by brandorf · · Score: 1

      My ASUS A7V has a spot for such a device to attach as well, so even fairly modern motherboards have it.

      --


      Bork Bork Bork!!
    6. Re:This is new? by Steve+Franklin · · Score: 1

      Except maybe the Minions of John from the FBI.

      Or is that now the FBCILT? The Federal Bureau of Central Intelligence or Lack Thereof under the Department of Fatherland...er...Homeland Security. Flashback to Dr. Strangelove trying to keep his arm from doing a nazi salute on its own.

      Wouldn't it make more sense to secret a webcam somewhere so you could watch the Nefarious Doers of Evil? I think they go under the soon to be announced Department of Murky Logic. Come to think of it, we need a good contest to see who can come up with the next nonconstitutional cabinet level "department." Winners get a one week expense paid trip to Washington DC. Runners up get two weeks.... ;o)

      --
      Hic iacet Arthurus, rex quondam rexque futurus.
    7. Re:This is new? by UnifiedTechs · · Score: 1

      I love how I make the comment first yet I get labled redundant!

  3. This is news? by No-op · · Score: 5, Insightful

    Pretty much all standard business desktops have intrusion detection devices, as well as bios hooks to inform higher level software apps that it has been tripped. Most server cases have this as well- a whole slew of my compaq racks here have them, and they tie into our management system. Mind you, they lock as well, so I'm not as worried- they have solenoids! *THUNK*

    I can't imagine someone cobbling together something that has existed forever is news...

    --
    EOM
    1. Re:This is news? by FreeQ · · Score: 1

      Is it just me or this is a complicated device to replace the old pieces of tape trick ?

    2. Re:This is news? by Anonymous Coward · · Score: 0

      I managed to open my compaq deskpro 4000 after I have locked it and foolish enough to play with the multiplier jumpers. You can get access to the solenoid by taking off the power supply. Mind you it is alot easier if you have a security bit with your screw driver set.

      Ultimate intrusion device - bottle of chlorine/hydrogen mixture (or any light sensitive explosive chemical mixture)... ;)

    3. Re:This is news? by Kintanon · · Score: 2

      All of Dell's desktop machines come with a version of this as well, if the case gets opened it will display a warning to that effect every time you boot the system, unless you disable the message.

      Kintanon

      --
      Check out JoshJitsu.info for Brazilian Ji
    4. Re:This is news? by Lord+Omlette · · Score: 2

      A-Bombs have existed for quite some time, but if someone cobbled together a DIY nuke, it would sure be news.

      Allah Bomb President!

      *ahem*

      Yeah, DIY is always cool, especially if you're the first to do it. If Mr. I-don't-want-anyone playing-inside-my-PC's-case isn't cool, could someone show me someone else (a geek, not an assraping corporation) who beat him to the punch, plz?

      --
      [o]_O
    5. Re:This is news? by colmore · · Score: 2

      yeah but you can replace the tape and still swipe your boss' graphics card and RAM

      --
      In Capitalist America, bank robs you!
    6. Re:This is news? by uberdave · · Score: 1

      Careful with that. Most motherboards, many hard drives, lan cards, etc have LEDs on them that are only visible from inside the case. You wouldn't want your box to go boom because you started to download "The Two Towers", would you?

    7. Re:This is news? by Cramer · · Score: 3, Interesting

      Thing is, he's not first to do it. Hundreds of people have done what he's done. Only none of them are wasting sourceforge space for their pre-school tinkering. I'm sorry, but that's all this is: a five year old discovering the door switch on the cloths dryer.

      If you want to see real CIDS, go talk to people who make and use military encryption devices. (shake some of them too hard and they electrically self-destruct -- they erase their tiny little brain.)

    8. Re:This is news? by jav1231 · · Score: 1

      Uh...how about a standard transmitter with a N/C switch, magnetic contact attached, receiver attached to a zone on your home security system. Voila! >

    9. Re:This is news? by GlassUser · · Score: 2
      (shake some of them too hard and they electrically self-destruct -- they erase their tiny little brain.)

      The device, or the people that use them?
    10. Re:This is news? by Shimbo · · Score: 2, Funny
      A-Bombs have existed for quite some time, but if someone cobbled together a DIY nuke, it would sure be news.


      I wouldn't recommend using one as a way to tamperproof your PC though. The radiation causes parity errors.

    11. Re:This is news? by rector · · Score: 1

      Some other would keep the data incorrupt even if you hit them with a sledge hummer.

    12. Re:This is news? by BlowCat · · Score: 3, Funny
      If you want to see real CIDS, go talk to people who make and use military encryption devices. (shake some of them too hard and they electrically self-destruct -- they erase their tiny little brain.)
      And some devices erase the tiny little brain of the intruder as well.
  4. Compaq has had this... by peterdaly · · Score: 4, Interesting

    Compaq has had something like this for years. Not only that, they have an internal case lock which can be activated/deactivated remotely, or in the password protected bios.

    A special tool from compaq is required to defeat the lock...or a drill. But anyway, it can keep track of when the case is opened I believe.

    I have seen, but never used the feature, so I don't know the specifics.

    -Pete

  5. But.... by dsconrad · · Score: 1

    Why? This seems like a bit of overkill as compared to, eg, a lock.

    1. Re:But.... by morgajel · · Score: 2

      what's worse, think about it- how many of us actually have our cases CLOSED?
      locks don't help when you got the side off and a fan pointing in on the processor.

      --
      Looking for Book Reviews? Check out Literary Escapism.
    2. Re:But.... by zangdesign · · Score: 2

      I don't think the intrusion detection system is aimed at your market level. This is not even an average /.'rs level.

      This is one of them corporate IT bigwig thingys where the extra expense of an ID system is only a small part of the cost of the overall system itself.

      --
      To celebrate the occasion of my 1000th post, I will post no more forever on Slashdot. Goodbye.
    3. Re:But.... by colmore · · Score: 2

      heh, take the parent's sig as a response to yours.

      there was no need for you to reply to that guy.

      --
      In Capitalist America, bank robs you!
    4. Re:But.... by zangdesign · · Score: 2

      Nah, but when you get right down to it - what's the point of replying to anything on /.?

      Somedays, you just gotta point out that someone's being an idiot. It may be blindingly obvious, but hey, we're all bozos on this bus.

      --
      To celebrate the occasion of my 1000th post, I will post no more forever on Slashdot. Goodbye.
  6. Interesting, but... by InnereNacht · · Score: 1

    People have been able to do similar things for years. Theres other companies out there right now (dell for instance) that have a warning that pops up saying that the case was removed. Theres also other cases you can buy that have the ability to do the same.

    If you wanted to it wouldn't be incredibly difficult to wire up a contact to the inside of your PC case. Using that dry contact you could either trigger an alarm (audible or visual) or just write out a timestamp to a log.

    Just imagine... Someone cracks open your PC and a 175Db alarm sounds. Seems like a good idea to me! :)

    1. Re:Interesting, but... by lokki · · Score: 1

      Someone cracks open your PC and a 175Db alarm sounds

      Or just hook the PS to the case body...with a transformer to boost that 12V line up a tad...

      Of course, you'd then fry the shit out of everything IN the case, but you'd know if it was opened!

      --
      I won't dance in a club like this...All the girls are slags, and the beer tastes just like piss! -The Specials
    2. Re:Interesting, but... by InnereNacht · · Score: 1

      Two words: Plastic Fasteners!

  7. Too much time on hands by zyglow · · Score: 1

    Either this individual has too much time, or has been asleep for the past few years.

    Since when has anyone actually needed a security system on their case?

    --
    http://www.forum-addicts.com
    1. Re:Too much time on hands by Anonymous Coward · · Score: 0

      The employee's at my work steal everything.

    2. Re:Too much time on hands by Anonymous Coward · · Score: 0

      I worked at Dell for a while (biggest cube farm you've ever seen) and everyone could see who was getting upgraded. People were always stealing/swapping each others sound cards/memory/video. Of course it was the little lock you could attach, not the warning, that kept techno penis-envy from corrupting most people.

    3. Re:Too much time on hands by Jucius+Maximus · · Score: 2
      "Since when has anyone actually needed a security system on their case?"

      Some years ago I was working as a tech in a university as a co-op student. I learned that there were semi-common problems for people to break open the blank 5.25" panels on the front of the cases and reach in and grab the RAM and CPU. And this was on boxes that where physically secured onto the desks.

      This is one reason why security on system cases is necessary.

    4. Re:Too much time on hands by Anonymous Coward · · Score: 0

      Feel like getting an extra 128MB of RAM? How about another component? I lock all of my computers. Another thing is that you can remove the hard drive and make it a slave on another computer that you have root on. You don't need to hack it if there is no security.

    5. Re:Too much time on hands by Anonymous Coward · · Score: 0

      You're right. In other news apparently it's a good idea to use jpgs on your website!

    6. Re:Too much time on hands by uberdave · · Score: 1

      The intrusion detection systems I've seen will not detect this type of intrusion. They only detect when the case is opened. This is a job for rat traps and razor blades &ltEvil grin&gt.

    7. Re:Too much time on hands by rector · · Score: 1

      In such cases you need more a still safe as a box rather that an intruder detector.

    8. Re:Too much time on hands by Jucius+Maximus · · Score: 1
      "In such cases you need more a still safe as a box rather that an intruder detector."

      The solution they came up to for this was to install a metal grate behind the empty 5.25" bays so that you couldn't get your hand in there. I'm not sure what they would have done should they have needed to install another 5.25" device.

  8. Cant read the article by Anonymous Coward · · Score: 0

    it;s already slashdoted

  9. Who Cares. It's been done. by Anonymous Coward · · Score: 0

    Who cares? Dell's have had this for years.

  10. Dude, Dell already did it by Anonymous Coward · · Score: 0

    My Dell PC here at work has had that for 3 years.

  11. Every managed PC sold by a big name company has it by qurob · · Score: 1


    Compaq, Dell, IBM...they all tell you when someone's opened the case, removed memory, added hard drives, etc etc....

    C'mon!

  12. What a bunch of Rubes!... Goldberg, that is by L.+VeGas · · Score: 4, Insightful

    All you need is tamper-evident tape.

    1. Re:What a bunch of Rubes!... Goldberg, that is by qurob · · Score: 1


      Does this tape interface to you computer?

      Alerting the sys admin that the user in accounting has been opening their PC?

      I remember when I worked at Best Buy, people would come in, with their WARRANTY VOID tape broken on their Packard Bells, and there's no way we could prove they opened their machine up and fucked it up....

    2. Re:What a bunch of Rubes!... Goldberg, that is by L.+VeGas · · Score: 2

      Does this tape interface to you computer? Alerting the sys admin that the user in accounting has been opening their PC?

      robotic tape does

    3. Re:What a bunch of Rubes!... Goldberg, that is by Anonymous Coward · · Score: 0

      Well, by law, you can't void a warranty like that. You have to cause the problem to occur and the burden of proof lies in the manufacturer.

    4. Re:What a bunch of Rubes!... Goldberg, that is by tomknight · · Score: 1
      Does this tape interface to you computer?
      Alerting the sys admin that the user in accounting has been opening their PC?

      Try the new improved Tape Worm® - it'll warn you about the intrusion and kindly pass on the warning that there's a dodgy guy around to all your friends. Then it'll pass on the same warning to all their friends! Now that's service!

      Tom.

      --
      Oh arse
    5. Re:What a bunch of Rubes!... Goldberg, that is by The+Dobber · · Score: 1

      And when was the last time you ran into someone from accounting that was actually bright enough to open thier case?

      These are the people who need to call the Help Desk because the printers out of paper, or can't check that the power strip is on.

  13. Moderation by twoflower · · Score: 3, Insightful

    I have moderation points, but it won't let me moderate the story itself as "pointless" or "redundant"

    It's really too bad when the people running the site know less than the people reading it.

    Twoflower

    --


    --
    Twoflower
    1. Re:Moderation by garcia · · Score: 2

      everyone keeps saying that this is a REAL site for REAL journalism.

      Since when did journalists know more about a topic than the majority of readers? ;-)

    2. Re:Moderation by cheese_wallet · · Score: 1

      "everyone keeps saying that this is a REAL site for REAL journalism."

      I've never heard/read anyone make that claim. Usually it is quite the opposite.

    3. Re:Moderation by Lord+Omlette · · Score: 1, Flamebait

      Slashdot: News for Nerds

      Below that, they should have a little disclaimer: Please leave all pretentious wanking at the door. You can pick it up when you leave. Thank you.

      Most of us Karma Whores (I use the power of .NET to Karma Whore for me, I'm cool!) at least take the time and care and love to post the URL to the previous Slashdot story that's identical to the one we're complaining about. Since you included no url, you have no valid reason for the story to be redundant. Since you gave no reasons for the story to be pointless, I'm guessing you have none.

      Your mods would have been metamodded out of existence.

      Jackass.

      --
      [o]_O
    4. Re:Moderation by colmore · · Score: 2

      his point is this story has been redundant for years. offices had these things in the 80s.

      --
      In Capitalist America, bank robs you!
    5. Re:Moderation by Graspee_Leemoor · · Score: 2

      I doubt if /. ever did a story on the 8086 coming out, but that doesn't stop a story on it being WAY OLD NEWS.

      If you're Lord Omlette then I think the eggs should have been allowed to live! ;) heh heh, I'm a bitch.

      graspee

    6. Re:Moderation by pongo000 · · Score: 2

      The reason why so much redundant/pointless/dated/superfluous BS in the way of stories is posted here is that the /. editors long ago abandoned the practice of reading the submitted links and checking for duplicate submissions. Instead, they rely on regurgitating the same motifs, over and over, ad nauseum. Like this case mods story. I won't waste my time posting the redundant links. Anybody with a heartbeat and a /. ID under 500000 knows how used-up this topic is.

    7. Re:Moderation by Anonymous Coward · · Score: 0

      That even slashdot's editors are too jaded by this place to read the articles on it speaks volumes.

      It's even funnier that people have stopped bothering to post links to the first (or second or third) time a story ran.

    8. Re:Moderation by rector · · Score: 1

      Then they should adopt the moderation system where the submitted stories are also moderated by the readers like on drop.org

  14. It's so nice having four different formats.. by sgtsanity · · Score: 1

    ..because it gives us four different ways to slashdot them!

  15. what I learned from the movies by Marco_polo · · Score: 4, Funny

    is that we need lasers set up in an inefficient pattern surrounding the box itself.

    --
    I am the lord of the pun. Dance Knave!
    1. Re:what I learned from the movies by L.+VeGas · · Score: 2

      It doesn't work. People will just dangle from the ceiling, use an aerosol spray can to see the lasers, then put a mirror between them, then use a skinny robotic arm with a periscope to access the computer.

      Happens to me all the time. pesky spies

    2. Re:what I learned from the movies by aclarke · · Score: 1

      You don't have to use aerosol sprays to see the laser beams because they're VISIBLE!! Geez, don't you watch movies AT ALL?! ;-)

      (note to those of you who don't get sarcasm - yes I know you can't see laser beams. But you can in the movies. That's my point. So you don't have to respond to say that you can't see laser beams. Thank you.)

    3. Re:what I learned from the movies by scott1853 · · Score: 1

      Damn, how'd you get ThinkGeek's useless laser product schedule for next month?

    4. Re:what I learned from the movies by Anonymous Coward · · Score: 0
      So you don't have to respond to say that you can't see laser beams. Thank you.

      I think I'll make that evaluation for myself, jerkoff.

    5. Re:what I learned from the movies by Pius+II. · · Score: 1

      Actually, thinkgeek claims you can. They have this ultra-cool ultra-expensive green laser pointer with a lot more intensity than your mere low-power red laser beam.

      http://www.thinkgeek.com/stuff/gadgets/5a47.shtm l

    6. Re:what I learned from the movies by aclarke · · Score: 1

      OK but would YOU create your security system out of ultra-cool ultra-expensive visible green lasers?

      No, you'd use the visible red ones, because that's what Hollywood uses for their security.

      why am i even typing

  16. More important things to worry about by fatwreckfan · · Score: 3, Insightful

    As interesting as this is, I'd be more worried about someone actually stealing the machine than opening it up for components. Even in a office environment, who is going to check each machine to make sure the employee using it didn't crack it open to swipe some RAM?

    Why not just use a chain to the desk which locks the case shut? Then you're safe in both cases.

    1. Re:More important things to worry about by penguinboy · · Score: 2

      With decent remote management software, there's no need to go visit computers individually. It should be easy to configure it to alert someone if something suspicious happens to a machine (cover removed, installed RAM amount decreases, etc.).

    2. Re:More important things to worry about by malarkey · · Score: 0
      who is going to check each machine to make sure the employee using it didn't crack it open to swipe some RAM?

      Just install Windows XP. Everytime someone opens the case, the machine will have to be re-registered with Microsoft, because of the major change to the system.

  17. Already Done by slakdrgn · · Score: 1
    Its been done for a while by HP expecially in the Vectra Line of pcs.. I have a few Kayak's and Vectra's, using their DMI/WMI Clients they detect the intrusion detection and even will report it to a central server like HP Toptools. If I'm not mistaken it will even report changes in system states (stuff removed/added) etc.. it stores it in the bios area I think, or atleast in flash.. it'll keep it even after the bios battery has been removed or reset.. (and ofcourse with no power).. I think even some asus boards support this.. anyone know of support outside of HP/Compaq?


    ~slak

  18. Classified Processing by delphin42 · · Score: 5, Interesting

    I used to work for a defense contractor where many of our computers were used to process classified information. Besides controlling access to the room in which the computers were located, stickers were placed over all the access points to the internals of the machine. The stickers were signed and dated by the security officer when they were placed and if one was broken, the computer had to be carefullly inspected before it would be returned to operation. Needless to say, employees were enouraged to report wear on stickers before they were completely broken, to avoid having to throughly inspect the innards of the device for bugs.

    --
    -- Adam
  19. My bios supports it.. by Planetes · · Score: 1

    My bios has support for case intrusion but I've never tried to implement it. I'm using a MSI KT333 (ARU version) motherboard with AMI bios.

    --
    Planetes
    "One World, One Web, One Program" - Microsoft Promo Ad
    "Ein Volk, Ein Reich, Ein Fuhrer" - Adolf Hitl
  20. 1 acronym: EMP by Anonymous Coward · · Score: 0

    a small Electromagnetic pulse would disable the whole setup.

    And yes, it could likely be rigged not to damage the computer itself.

  21. Something more low-tech... by Silverhammer · · Score: 3, Interesting

    Howsabout a good old fashioned thieves knot?

    1. Re:Something more low-tech... by grytpype · · Score: 2

      Brilliant. But how many computer thieves know how to tie a proper square knot?

      --

      - Have a picture

    2. Re:Something more low-tech... by Anonymous Coward · · Score: 0

      I do not think that would work. (Score:1 Funny)

  22. How is this secure? by Hollins · · Score: 2

    I'm a little slow here, but what is to keep an intelligent intruder from resetting the software that tells you an intrusion took place?

    I'd feel better will tamper-evident tape, but maybe I don't understand this system.

    1. Re:How is this secure? by Jucius+Maximus · · Score: 1
      "I'm a little slow here, but what is to keep an intelligent intruder from resetting the software that tells you an intrusion took place?"

      If the intruder is smart enough to know how to do this, they will go after big corporate targets with expensive boxen, and not your personal machine.

    2. Re:How is this secure? by Prior+Restraint · · Score: 1
      "I'm a little slow here, but what is to keep an intelligent intruder from resetting the software that tells you an intrusion took place?"

      If the intruder is smart enough to know how to do this, they will go after big corporate targets with expensive boxen, and not your personal machine.

      Try telling that to Scarfo.

  23. i'm thinking... by T.Monk · · Score: 1

    that i'll notice my house/business/server room broken into first.. Ok, let's assume that it doesn't matter at home... Let's say your business has legitimate security concerns for servers... The computer room should be secured with cameras, magnetic locks, security, etc.. is there a need to take this down to the individual computer level? If someone is sophisticated enough to break into the server room, they probably have the resources to get around the alarm on the case...

    1. Re:i'm thinking... by colmore · · Score: 2

      It makes a lot of sense when you consider that most of computer theft is perpetrated by employees of the company.

      Slashdot requires you to wait 20 seconds between hitting 'reply' and submitting a comment.

      It's been 19 seconds since you hit 'reply'!

      --
      In Capitalist America, bank robs you!
    2. Re:i'm thinking... by Graspee_Leemoor · · Score: 1

      I agree, and the other use, on workstations, to stop people stealing RAM etc. is a waste of time, since anyone's going to wait until there's no-one watching anyway. You get there later because the "alarm" for case intrusion went off and go like "Yup, some fucker stole the RAM".

      graspee

    3. Re:i'm thinking... by synshyne · · Score: 1

      I agree, but you have to figure why you need the extra security... if at a company for a server room or such,yes i can see the point in having cameras, a detection alarm and more than one lock on the door..possibly a security coded lock where only a select few know the code. And for seperate computers within the computer should all have some sort of software that allows the company to "checkup" on employees..employees are the main ones to blame for stealing from a company because they know their way around not because they are sophisticated enough...of course employees that try to break into a server room for any reason might be the "movie watching" type and think that they can get past laser detection with smoke and mirrors, break the camera(s) in that room and around it, or something dumb that will backfire in thier face. In your home however I'm hoping such drastic measures arent needed, but thats not saying it wouldnt be nessacary, depends on how much you trust people in your house using your things or how well you lock up your house when your not there. Then again it depends on how much you want to spend on the amount of security and how much you'd feel is needed.

      --
      -Alicia
  24. Nothing new by dfenstrate · · Score: 2

    I've worked with a number of PC's that have chassis intrusion detection. Admittedly, it's a simple switch connected to a register that can only be reset in passworded BIOS.

    This guy is writing like it's news or something. I read the brief file, and it looks like he just figured out what I first saw years ago.

    And also, the classic phrase:
    if you don't have physical security, you have no security at all.

    --
    Alcohol, Tobacco and Firearms should be the name of a store, not a government agency.
  25. Two reasons this doesn't deserve coverage by Anonymous Coward · · Score: 0
    1. This has been around for years
    2. Not many people need it anyway
  26. 'hackers' chastity belt by paradesign · · Score: 3, Funny

    this seems kinda funny. First 'hacker' makes case mods so you can see al of his frilly internals. then he puts on a system so you cannot touch or have access to them. this is strangely reminiscent of the lingerie / chastity belt scenerio, see... no touch. see... no touch.

    --
    I want 2D games back.
    1. Re:'hackers' chastity belt by juliao · · Score: 3, Funny
      Back in the sixties, rumor has it that men tended to view their motobikes as something of a sexual nature, perhaps equating it with a woman.

      They cared for it, they made it beautiful, they rode it, they rode it, they rode it...

      This comment on chastity belts brings back to light the much debated issue of the hacker's liaison with his computer. He cares for it, makes it beautiful (case mods), sometimes prefers it naked (no case), install the latest software (XP) and then it crashes and he gets screwed, screwed, screwed...

      I guess if they had porn on bikes we'd never had gotten this far.

  27. Air pressure by BorgDrone · · Score: 1

    What I would like to contruct some time (don't know how difficult it is tho) is a intrusion detection system that works on air pressure. after turning on the system air is pumped into the case (which is air-tight) randomly to increase the air pressure to a random value (should only be known to the hardware in the box and not readable by the computer or whatever). now, measure the pressure inside with a sensitive air pressure sensor. when the case is penetrated in any way the sensor would register the change in pressure and send the intrusion signal.
    since the pressure inside is unknown it would be nearly impossible (depending on the sensitivity of the pressure sensor) to put the case in a pressured box with exactly the same pressure.

    any reasons why this is an impossible or crazy thing to do ??

    1. Re:Air pressure by Planetes · · Score: 1

      > any reasons why this is an impossible or crazy thing to do ??

      Umm.. well short of a water cooling solution you're going to have serious cooling issues trying this..

      --
      Planetes
      "One World, One Web, One Program" - Microsoft Promo Ad
      "Ein Volk, Ein Reich, Ein Fuhrer" - Adolf Hitl
    2. Re:Air pressure by Anonymous Coward · · Score: 0

      Because it is impossible to have a true air tight computer case. Even baloons leak air. But the main drawback is that a change in pressure causes a change in temperature. Boyle's law and all.

    3. Re:Air pressure by guido_sst · · Score: 1

      You would somehow have to track pressure changes from opening a CD-ROM, the flow fluctuations from a 3 pin smart fan, etc, etc. Sounds interesting, but incredibly impractical.

    4. Re:Air pressure by Anonymous Coward · · Score: 0

      umm.. maybe I'm crazy. but why would someone first turn on a system to steal something out of it? As far as desktop systems go, I make it good habit to turn off the system before performing system critical hardware changes..

    5. Re:Air pressure by MaxVlast · · Score: 2

      Turn it around, and you have the actual problem: Machine heats up, pressure increases. Compile the kernel, hear a siren?

      My idea would be light sensors in the machine. Open the case, flood it with light, hear a siren (send a signal.)

      --
      There should be a moratorium on the use of the apostrophe.
      Max V.
      NeXTMail/MIME Mail welcome
    6. Re:Air pressure by colmore · · Score: 2

      an air tight case wouldn't have very good ventilation, would it?

      --
      In Capitalist America, bank robs you!
    7. Re:Air pressure by Graspee_Leemoor · · Score: 5, Funny

      "Sounds interesting, but incredibly impractical."

      Ah! You have issued the rallying cry of the /. case-modder...

      "It sounds interesting yet totally impractical! To arms, my brothers! Let us mod this case!"

      graspee

    8. Re:Air pressure by blibbleblobble · · Score: 1

      Yeah, light sensors would work well in a typical geek's machine. "Error: we've detected a 40-watt neon tube in the case, and sunlight shining through the window. Somebody's obviously trying to grab the PC!"

      I've used a cable-and-superglued-mountings set to protect my PC for 2 years now, and I only just found out how trivial it was to open the padlock with a lock-pick set (about 20 seconds for a beginner)

      Next project will almost certainly be a pager, perhaps transmitting it's code to a 'hidden' telephone-connected box somewhere else in the room...

      Prevention, detection, response... did I mention the broadsword?

  28. News from an AC by Shade41 · · Score: 1

    I guess you can't expect much better in news from an AC. Maybe posting news should be restricted to users that are logged in. Has anyone seen useful articles from an AC before? Just curious.

    1. Re:News from an AC by Jucius+Maximus · · Score: 3, Informative
      "I guess you can't expect much better in news from an AC. Maybe posting news should be restricted to users that are logged in. Has anyone seen useful articles from an AC before? Just curious."

      I suggest you search through the archives of "Ask Slashdot." You'll find many interesting stories where it is clear that if the poster's identity was given away, they would be in trouble with their boss/clients.

      Technology Sectors that are Hot or Heating Up Now?

      Is it Wrong to Accept an Employment Counter-Offer?

      Technology for Undercover Journalists?

      Convincing Management of Network Security Issues?

      Headhunting Laws?

      And more ...

  29. i wonder how long... by caveat · · Score: 1

    ...before the *AA pushes to have all new PCs sold with some setup like this, so we can't screw around with the internals and get around their precious digital "rights" management hardware...

    --

    Facts do not cease to exist because they are ignored. - Aldous Huxley
    1. Re:i wonder how long... by RIAA+Lawyer · · Score: 0

      We are already planning on doing this, please see my post below:
      http://slashdot.org/comments.pl?sid=34393&cid=3722 390

      Thank you for your cooperation in this matter.

  30. My IDS... by Bonker · · Score: 5, Funny

    Gracie, the gray tabby cat sleeps atop my PC case. If her bed is disturbed... and I do mean in any way... she cries for days on end. She can't be consoled. I have no choice but to hunt down the man what tried to jack my HDD and present his head to the cat like she does when she brings me mice.

    --
    The next Slashdot story will be ready soon, but subscribers can beat the rush and slashdot the links early!
    1. Re:My IDS... by Anonymous Coward · · Score: 0

      WOW! Don't anyone mess with this guy's pussy!!!

      what.

  31. prevention? by !splut · · Score: 2

    Well, I could wrap a case in duct tape and *detect* an intrusion by checking if anyone had cut back the tape... or rig it with C4 and listen for loud exploding noises. But I would think that intrusion *prevention* or good chassis access control would be a more useful technology. Or case mod, as it were.

    -ks

    --
    The angel in the oatmeal.
  32. simple enough by Jacer · · Score: 1

    i use an indescrete piece of scotch tape, if the seal is broken, it's been tampered with!

    --
    --fetch daddy's blue fright wig, i must be handsome when i release my rage
  33. Medeco locks / tamper evident cases by fw3 · · Score: 2
    Hmm nice idea, tho I generally prefer lock-down cases where gaining physical access requires either the key, or breaking something.

    IBM used to (and I imagine still does) build thier rs/6000 cases this way. The thing that always pleased me most was the use of a Medeco biaxial lock & key. Medeco's are effectively not pickable, in contrast to virtually all other pin-tumbler locks.

    I don't know what other vendors use this or similar methods for the cases. the usual 3-4 pin lock incorporated in all the other cases I've seen (including some pretty expensive ones from Compaq / HP) were trivial to open. Even the use of mushroom pins is not going to be proof against a reasonably skilled intruder.

    --
    Linux is Linux, if One need clarify their dist: <Dist>/GNU Linux
    bsds are of course just BSD
    1. Re:Medeco locks / tamper evident cases by JUSTONEMORELATTE · · Score: 1

      I too remember those Medeco jobbers in the IBM cases. I pulled the core (and matching keys!) from a PS/2 286 box that was on its way to the dumpster a while back. They had a medeco core in a plastic barrel, with a plastic lock arm inside. Pick-proof yes (even the three-tumbler version) but hardly secure.

    2. Re:Medeco locks / tamper evident cases by Patrick+Cable+II · · Score: 1

      On IBM's desktop computers though, the protection isnt as strong.

      I introduced the lock on that IBM Desktop Computer 300GL to my craftsman drill. Needless to say, the battle proved to be futile for the lock. About 5 minutes later, i was able to turn the lock with a paperclip.

  34. Nothing New... by TweeKinDaBahx · · Score: 1

    Dell computers and other computers have been doing this for some time in an attempt to disallow the 'ultimate' rootkit: a screwdriver and basic knowledge of PC Building.

  35. Great intrusion detection by wowbagger · · Score: 5, Funny

    Leave a fake grenade, with the pin pulled and the spoon held down by the outside of the case in the computer.

    Identify intrusion by the stain on the floor.

    For bonus points, replace the fake grenade with a real one.

    1. Re:Great intrusion detection by Anonymous Coward · · Score: 0

      For bonus points, replace the fake grenade with a real one.

      Identify intrusion by the tiny bits of computer and intruder embedded in the walls.

  36. Dell had it by racerx509 · · Score: 1

    Dell or would that be phoenix has had this for a while. Basically its a small sensor over the chasis and cover. When set in the bios, it will detect if the cover was removed and tell you upon bootup. Some models even featured an audible alarm.

    --
    13 year old white supremacists are shitty web designers.
  37. Umm mine did this years ago by nurb432 · · Score: 1

    This is pretty old stuff.. Nice idea for retrofiting an clone case.. but still whats the big deal, pretty old news..

    --
    ---- Booth was a patriot ----
  38. power off by jpc · · Score: 1

    Doesnt rreally work if you turn the power off before opening the case. Of course you may have another alarm for this, but it doesnt help you know whether the case was opened.

    1. Re:power off by Unkle · · Score: 1

      Actually, a system like this could work with the (main) power off. It simply can use the battery on the motherboard, though I don't know if this particular system does.
      My company makes products that are required to have secure cabinets, even able to detect tampering with the power off. It is done in a similar way to this, though we have a separate board that we use for security (that was developed ~10 years ago)
      I think the point of this guys paper was more for the enthusiast that sees their new MB has security features and wants to use them, for whatever reason. Still don't think this is extremely newsworthy, but this could find a good home on a modding site.

      --
      Against stupidity, the gods themselves contend in vain.
  39. Ala James Bond in Dr. No by Publicus · · Score: 2

    Take a single hair, wet it in your mouth, and place it across the crack between the removable side panel and the rest of the case. Anyone trying to break in will not see a single hair - or think anything of it if they do - and you'll know whether someone has cracked it open.

    And it costs nothing.

    --

    My Karma was at 49, then they switched to words. All that work for nothing!

  40. G4 Towers by krugdm · · Score: 3, Informative

    I like the system that Apple has put into their G4 Towers. There's a spring-loaded clip with a hole in it that pulls out of the back of the case. You can slip a cable/padlock/whatever through this which prevents the clip from springing back into the case.

    When the clip is out, the EZ-flip-down-door on the side of the case is locked, preventing unnoticable intrusion.

  41. Fiber trip by macdaddy · · Score: 2

    The best option I saw was a fiber optic strand pulled through the case and the desk it was installed in. When the case was removed (or possibly tampered with) the fiber was broken. You could rig it with an alarm or a watch dog. Beware though, the cheap version using plastic optics rather than a good length of 62.5m MMF or 10m SMF. The plastic fiber gave many false positives. The ends wouldn't fit right so jiggling the case caused the LED light to be disrupted. If you're protecting nice Sparcs or SGIs, this is the answer for you. Don't skip on this though. You get what you pay for.

  42. Two Words by JohnHegarty · · Score: 1

    Two words ... BIG LOCK...

    if its not removed they can't get the case open
    ...

    its a lot cheaper and simplar then this system...

  43. Useless, useless, useless by marxmarv · · Score: 5, Insightful
    This "design" is completely obvious to anyone the least bit skilled in the state of the art, and frankly doesn't add much information at all. There's ZERO reason you would need a PLA for this project when 7400 series TTL has many available multi-input OR gate functions. What's worst, none of this works anyway because all you need to do is unplug the PC or otherwise disrupt the power to the gate or PLA to break into it (the normal state is, after all, active low).

    So what we have here is some fourteen year old with his own "security" organization, a metric buttload of super glue and an utter lack of clue who writes a frankly useless article so that he can pretend he's important whilst slinging around big acronyms like "PLA" and "VHDL" when the tools they represent are useless to the task at hand. In other words, a snake-oil salesman.

    -jhp, smacking down dim-bulbs everywhere

    --
    /. -- the Free Republic of technology.
    1. Re:Useless, useless, useless by FatSean · · Score: 1

      Right on the money. How'd this waste of bits sneak through? Doesn't he know that all the VC has dried up?

      --
      Blar.
    2. Re:Useless, useless, useless by morcheeba · · Score: 2

      You don't even need logic gates -- if you've got two or more (100's of) switches, you can put them in parallel (Normally open contact switches) or series (Normally closed) and any one of them will trigger the alarm.

      The only reason to add logic would be to latch an intrusion during power-off. But, I suspect that the motherboard already does that (could be wrong-that's the obvious question he should have answered).

    3. Re:Useless, useless, useless by Anonymous Coward · · Score: 0

      Well, why are you whining about it here instead of writing to the author, slackass?
      ---
      Read your own sig.

    4. Re:Useless, useless, useless by swillden · · Score: 2

      Well, why are you whining about it here instead of writing to the author, slackass?

      Because it's very likely that the author, like most snake oil vendors, is not smart enough to understand how stupid he is?

      It's pointless to tell those kinds of idiots anything, but there is value in warning others who might be taken in.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
  44. old school thinking required. by Anonymous Coward · · Score: 0

    mouse traps. And none of your rodent-friendly ones, neither. Attach metal prongy bit to a large voltage capacitor for good measure.

  45. Still doesn't beat... by Anonymous Coward · · Score: 0

    ...a tinfoil hat for protection against Unseen Threats.

  46. Security Through Alternativity by RAMMS+EIN · · Score: 1

    When the world was shook up by the news about security holes in laptops, I was happy I ran Apache.

    Now that the world is shook up by the news of hackers breaking into PC towers and desktops, I'm happy I have a laptop.

    Now let's hope my manufacturer fixes any holes in my laptop as quickly as the Apache people came up with their patch...

    --
    Please correct me if I got my facts wrong.
  47. Big deal by Anonymous Coward · · Score: 0

    Mercury switch, blasting cap and a power source, big fucking deal! What a genius! Like most of you
    Slashdot readers.

  48. I promise I didn't open that box! by 1000101 · · Score: 0, Offtopic
    "Promises, Promises" - Naked Eyes

    It's the 80's baby! Yeah!

  49. This is news?!? by mrdogi · · Score: 1

    I'm trying to figure out why this is news. I mean, find a contact switch and throw it on the connector. Why does this take 3 different formats of 'documentation' to say that?

    I figured there would be something more interesting, like creating a whole subsystem that could figure out what more than just "case open". I figured there'd be something like using the serial port to talk to this system, and perhaps using the mb connection to let it know that there was an event to look into. HOW disappointing!

  50. I find this feature annoying... by shakamojo · · Score: 0

    My Dell at the office has this, and everytime I open it I get that blasted error until I go into the BIOS and turn it off... I finally just disabled the damn thing. I also question the usefulness of this feature, I mean once someone has broken into your box isn't the damage done?

  51. why is this news? by Anonymous Coward · · Score: 0

    I'd like to quote a line from Jay and Silent Bob:

    "Here's the pulse, and here's your finger, shoved way up your ass."

  52. Nothing new here! by NanoGator · · Score: 2

    Nope, I'm going to sound like I'm so smart that nothing seems new to me. Ah, somebody wrote up a description of how to make your own detection system. Wait a minute, alarms using pressure switches have been done before!! Geez, can't they work spooky interaction into it or something?

    Damn. This must be a slow news day if I can't be entertained by a a description of what is involved. No siree, I wouldn't want to learn anything. If Compaq and Dell can build stuff into their systems that sounds the same, then it isn't worth me knowing about. Hmm my computer doesn't have one of these. I guess I never thought about that when I built my own computer. Pity, I don't have an intrusion detection system.

    Oh I know, I don't need one! My friends all shout 'First Post!'.

    --
    "Derp de derp."
    1. Re:Nothing new here! by FatSean · · Score: 1

      Pay a few bucks more for a case and you'll get a nice wire to plug into the "CI" block on the motherboard.

      Did you know I've built my own car?

      --
      Blar.
    2. Re:Nothing new here! by Anonymous Coward · · Score: 0

      Stop worrying about the "typical" posts and read some of the "decent" ones. "Decent" meaning _useful_ alternatives to a cheap device, and the posts that comment on the ease with which this type of "security" device can be bypassed.

    3. Re:Nothing new here! by NanoGator · · Score: 2

      It's not like a did a search for (+1, Arrogance) and wrote a parody of it.

      --
      "Derp de derp."
  53. common. by BenTheDewpendent · · Score: 1

    seen it on dells for years
    and more recently motherboards comming with jumpers/connectors for such intrustion dection switches on the case.

    not really much news hear.

    maybe if he did something cool with his like make it shock the hell out of who ever was attempting to access the case with out authorization.

  54. what's it good for? by e40 · · Score: 2

    OK, your case is comprimised. So what? What are they going to do, remove your hard drive while the power is on? Attach remote listening devices inside your case, so they can listen to your disks spinning?

    If a thief breaks into your computer room they're going to hit the power switch. Then, if they don't carry away the entire computer, they'll open it up and remove what they want. AFTER the CIDS has been power disabled.

  55. You need a PLD for that? by alienw · · Score: 0, Flamebait

    Is that guy a moron or what? Why the fuck would you use an FPGA / PLD for that? Just hook a few normally closed switches up in series. That's what happens when a moron takes a digital electronics class. Soon, some "genius" will think up of a way to make a microprocessor-controlled power switch for their goddamn case.
    Wow, I never knew slashdot editors were THAT stupid.

  56. This kind of sucks... by crawdaddy · · Score: 1

    For those overclockers that don't close their cases out of fear of overheating!

  57. I can design something better in my sleep... by Anonymous Coward · · Score: 0

    From the article: Write some VHDL code that will take a series of active low imputs and output a logic 0 if all is well and a logic 1 if the case is open. This is simple in concept, but may be hard in practice, especially to make is scalable. But given time, any electrical engineer with a chip programmer should be able to do this. Why bother with that? just use an OR gate! Here's one from fairchild semiconductor: http://www.fairchildsemi.com/pf/10/100201.html OR if you want to get fancy and avoid the problems he has with outside grounding to get around the security, simply run a pulse gen (good old 555 timer) through the contacts, and compare the output from the 555 with the output from the alarms. Now instead of grounding the leads to break in, you'll have to keep them connected somehow. And what about light? Why hasn't he included something that goes off if a light goes into the box? Just position a photosensitive resistor so that it can't "see" the light from the fan or wahtever otehr holes you have in your case, and if it changes value too much then someone is breaking into your case! What's more, such a resistor could look exactly like all the other resistors on the mother board, so you would never be able to isolate it. Also i would recommend adding either a light sensor or a pressure contact on the bottom (or both), which would go off when the machine was picked up for movement. By the way, notice that his "pressure sensors" are actually identical in function to the contact sensors. Real pressure sensors would notice things like someone pushing on the sides of the case. Finally to add some way of checking if someone is fooling around in the system - add something that registers the level of dust and writes it to some flash memory periodically - a low intensity diode shining towards a reciever will do. Just put it someplace where a lot of dust accumulates. If someone comes in, they will surely upset the dust that exists in every computer. If the level changes by too much, then have the alarm go off. Notice that I'm just an electrical engineer student right now, so there are most likely better ways of checking for intrusion, and some of mine may be too sensitive / subjective to be workable.

  58. So Basically... by Ribald · · Score: 3, Insightful
    ...some 15 year old kid noticed the CI connector on his motherboard, his chassis didn't have a microswitch to connect it to, so he superglued one on. Then he comes up with an idea to make it sound complicated, throws in some acronyms (for devices/protocols that would make it _very_ much more complicated than needs be), invents his own security company, and offers to license some code to run it for a small fee. Brilliant.

    If you can't tell from all the other posts, this has been implemented for a great number of years on nearly all business-grade desktops, usually accompanied by a provision for a physical lock.

    If this kid actually gets someone to buy into this and pay him to license his "software", I've gotta give him at least a little respect. At least he's not the one paying for it.

    --Ribald

    1. Re:So Basically... by Peyna · · Score: 2

      Chassis Intrusion detection isn't all it's cracked up to be anyway. Unless you hook it up to some sort of paging device, so that the moment the box is opened you are notified, the person is going to have what they need/want by the time you find out that they were ever in there. Kinda reminds me of the stupid bios messages on boot on the machines here at work "Warning: Case was previously opened" or something.

      --
      What?
  59. Don't worry, Microsoft already takes care of this. by Anonymous Coward · · Score: 1, Funny

    Don't worry about it if you have Windows XP.

    1) If someone breaks in and doesn't change anything inside, you don't care.

    2) If someone DOES break in and change anything in the hardware configuration, Windows XP will think it is no longer running on the same computer and stop working until you contact Microsoft for a new activation key.

  60. "Electric Fence" solution by tunabomber · · Score: 1

    I'm not going to care about case security until somebody comes up with a badass-looking bug-zapper inspired case mod.

    "Geeks!" she exclaimed, "...all they ever think about is hex!"

    --

    pi = 3.141592653589793helpimtrappedinauniversefactory71 ...
  61. The REAL reason for intrusion detection... by MrMadnutz · · Score: 1

    Hook these intrusion systems up to a noxious/poison gas canister in your server room, a la my car stereo. Now THAT''s security.

  62. This gets filed under "security"? by juliao · · Score: 2
    Howcome this gets filed under "security"? It should be under "hardware", or "funny, laugh already".

    People keep abusing my profession, next time I tell them I'm a security expert they're going to ask me if I can please go and close the door...

  63. Dear Slashdot, wot's a microswitch? by Anonymous Coward · · Score: 1, Funny

    I have never seen a microswitch. Perhaps one of you could send me a photo of one.

    Actually, whenever I need a microswitch (home-made XYZ plotters, etc), I open up a case at work and pinch the 'CIDS' device. Very handy!

    1. Re:Dear Slashdot, wot's a microswitch? by uberdave · · Score: 1

      A "microswitch" is when you replace one PC for another. (ie, when you need a new limit switch for your 'bot, and the CIDS switches are gone from your PC, you perform a "microswitch" with someone in another cubicle.

  64. It's heartening to see ... by TilJ · · Score: 2

    ... that OpenOffice 1.0 has been used as a file format for widespread distribution in two recent stories (including this one). It may not be widespread among the wider herd, but it's easy to tell someone they can read the report with a *legal* free download.

    Though I'd still prefer that LaTeX was the standard document distribution format, but then I'm a die-hard ;-)

    --
    "The purpose of argument is to change the nature of truth." -- Bene Gesserit Precept
    1. Re:It's heartening to see ... by Rob+Kaper · · Score: 1

      Is there a small OpenOffice Reader available for download? The entire suite might be a free and legal download, as long as it is as huge as it is now, I probably can't convince a lot of people.

  65. Umm.... by retro128 · · Score: 1

    If it's theft of components he's worried about, it just _might_ be easier for a thief to take the box.

    WTF is the point of this? Where's the debate? Where's the cool factor? Many, many cases have intrusion detection switches built in already, and certainly the only place they would really be useful is in a large network, where an administrator would want to know if someone besides him has been cracking the cases. Perhaps Slashdot has implemented a randomizer to select submissions?

    --
    -R
  66. Tamper resistant? by einhverfr · · Score: 2

    Yes, but I wonder how tamper resistant they are--

    We are talking about the case here-- an IDS is in a physically compromised environment-- how easy would it be for a knowledgable and determined attacker to reset, disable, or otherwise circumvent?

    --

    LedgerSMB: Open source Accounting/ERP
  67. PLA ? by thechuckbenz · · Score: 1

    The term PLA itself is archaic at best, is there a worm hole for email somewhere ?

  68. Mod up! by Anonymous Coward · · Score: 0

    Nothing funnier than laughing at how "superior" everyone in this forum seems to be. Real intelligence should have a humbling effect. Instead, what we have is a whole lot of pretentious, pontificating jackasses who can't WAIT to prove someone wrong. Hell, most of the loudest complainers were probably secretly excited that they'd have an excuse to act superior.

    (Posted as AC b/c I really don't feel like posting at -1, thank you very much)

    1. Re:Mod up! by Anonymous Coward · · Score: 0

      I agree. There's too much "my beard is longer than than the slashdot editors'. Nothing excites or impresses me, as I've seen it all before!"

  69. It gets better by Nyarly · · Score: 3, Interesting
    From the article:
    "I could not find any DMI applications for linux, so I have no way of testing it to see if it worked..."
    So, beyond the dubious importance of this "design" - which begins with setting up copper contacts on the case and moving on to pressure switches - he can't give us any results because he doesn't have a utility to check the register.

    That's classic.

    Two bits says this made it to the front page because he mentions he's running linux on his "CIDS."

    --
    IP is just rude.
    Is there any torture so subl
    1. Re:It gets better by red0x · · Score: 1

      I didn't see you build the damn thing. :)

      I did it for fun, not for a serious application. man, you people...

      --
      --red0x
    2. Re:It gets better by Anonymous Coward · · Score: 0

      Hahaha. Welcome to slag... er... slashdot. No tiny thing goes unoverblown, unslagged, unFUDded or unaplogized for. /NOTHING/!

    3. Re:It gets better by Nyarly · · Score: 1
      Man, who's touchy? Not red0x.

      Granted, you didn't ask for /.'s attention, but you did publish in every format but LaTex your description of an engineering feat on par with, oh, say a box propped up with a stick with a string attached for trapping rabbits, only to conclude "oh, and I can't tell that it works."

      Honestly, it seems like it must have taken more time to doccument your thing than to build it.

      So, on the one hand, that's your good natured fellow-if-anonymous geek ribbing for tooting a very tiny horn so loudly. OTOH, props if you write your own damn utility to check that toy project works.

      --
      IP is just rude.
      Is there any torture so subl
  70. Tape? by arktkbear · · Score: 1

    Intrusion detection for a PC case? If all you wanted to do was detect intruders, why not try tape? Just tape the box shut, and if the tape is missing, someone got in. You can also tape all the components so you can tell which ones were tampered with. You know, like the warranty seal from computer manufacturers. Why can't we keep it simple?

  71. Look ma, I can use a PLA... by jdreed1024 · · Score: 1

    ... even when there's no need for it.
    He said himself, the event is registered when a pin is grounded. Is there a reason why one can't use SPST switches (wired in series or parallel, depending on the switch type) for this? Who is this wanker, and why should we care? Personally, I find it hard to take any "security consultant" seriously if he uses l33t speak in his username. Basically what we have is a 14 year old editor being impressed by a 14 year old with a soldering iron.

    I'm really curious to find out what the criteria is for accepting and rejecting articles. Perhaps the Slashdot editors would do well to include why an article was rejected (ie: duplicate, boring, can't be verified, etc). I think many people would be interested to see that.

    Then again, this will get modded down before anyone has a chance to read it, I'm sure.

    --
    There is no sig, there is only Zuul.
  72. My security Schema by WellHungYungWun · · Score: 1

    A Sticker that says protected by Smith and Wesson Securities. How dare ye dishonor my by touching my machina. Die you damned dirty ape!

    --
    "On a long enough timeline, the survival rate for everyone drops to zero."
  73. Case Intrusion Detection by Vantigo · · Score: 1

    Wait a minute. Couldn't you get the same effect with, say, a rubber band, or a piece of tape?

    ---

    --

    Remember the tooth!
  74. Why is this even here? by jridley · · Score: 2

    Geez, I built a security system for my room with a relay, a buzzer, a battery and a couple of hunks of bare wire when I was 10 years old. I should write it up, maybe I can get on /.

  75. Why not just buy by harborpirate · · Score: 2, Interesting

    A case with a lock on it? - You'll have to crack into it without a metal cutting saw.. and thats gonna be noisy and take some time. (Not to mention leave a mark.) Note also that most manufacturers sell cases with BIOS level intrusion detection built in if you want it.

    I applaud the efforts of junior MacGyvers, but if you really want to be secure, there are obviously better solutions.

    Speaking of computer security, that reminds me of the time when the CS department at the University I went to got a bunch of brand new lab machines. They all had intrusion detection, which we CS dept. admins thought was pretty cool. We told the campuswide IT guys that we needed them secured in place. They dragged their feet on it. A month later, the CS department threw a Lan party in the same building (though not in the same room) and some enterprising students used it to cover the theft of 4 of the new lab machines. Security wire and cameras were in the room within a week. As far as I know the stolen computers were never recovered. We took small solace in the knowledge that the computer beeps at them and displays a brief annoyance message now before booting the OS. That is, as long as they opened the case and didn't flash the BIOS.

    --
    // harborpirate
    // Slashbots off the starboard bow!
  76. That seems discriminatory by Anonymous Coward · · Score: 0

    Why are you prejudiced against people from Atlantic City?

  77. Bond by isorox · · Score: 2

    Anyone seen any bond movie where he sticks a hair over the door to see if was later opened? I guess not. Dibs on patent!

    1. Re:Bond by VistaBoy · · Score: 1

      I believe you are referring to Dr. No, when the evil guy was having people search his room and try to poison him/have tarantulas in his bed/have people come in at night and shoot him.

  78. It's a good way to protect your data by rector · · Score: 1

    If someone needs only your data, he doesn't have to steal anything. Just to have your hard drive for ten minutes in the hands would be enough. But such an intruder will be painted with the blast himsef, which marks him very clearly. So, even if nothing is going to be physically stolen, this is anyway a good way to protect your data.

  79. Another option by RadioTV · · Score: 4, Interesting

    I work at a large public university and I admin an unmonitored lab. This is what we came up with.

    We used a home security alarm system modified to connect to the computers. We mounted a switch inside the case that would open when the case was opened. We put the correct resistor in series with the switch (home security alarms don't just measure continuity, the also measure resistance) and connected it to a RJ45 jack on a blank slot cover. We mounted a plate to the monitors either by replacing a screw with a security screw kit (you can't remove the screw without removing the cable run through it) or using industrial super glue. Loop the security alarm cable through the monitor plate and the lock hole on the back of most computers, connect it the RJ45 jack and arm the alarm. If someone disconnects the cable or opens the case, a 125db alarm sounds in the room and an automatic call is placed to the campus police.

    --
    I have great faith in fools - self confidence my friends call it. - Edgar Allan Poe
    1. Re:Another option by szquirrel · · Score: 1

      If someone disconnects the cable or opens the case, a 125db alarm sounds in the room and an automatic call is placed to the campus police.

      Jesus Christ... I hope you also call an ambulance to stop their ears from bleeding...

      --
      Never approach a vast undertaking with a half-vast plan.
    2. Re:Another option by jskarzin · · Score: 1

      55 more and it would stop their heart ;). Ruthless, but you gotta love campus admins :).

      --
      I like karma. Feed me.
    3. Re:Another option by RadioTV · · Score: 1

      The horn for the alarm is above the drop ceiling so it does get muted quite a bit, but it will pretty much clear the room.

      --
      I have great faith in fools - self confidence my friends call it. - Edgar Allan Poe
  80. A story is to inspire discussin, not just news by rector · · Score: 1

    I think the whole point of posting a story is not actually providing news but inpiring discussion. And this story seem to have pretty scceded.

  81. scotch tape by Anonymous Coward · · Score: 0

    i have an case intusion detection, a piece of scotch tape. EAsy to install, cheap and vastly abundant, 'specially 'roud x-mas time.

  82. TYPICAL ACADEMIC RECYCLING OLD IDEAS AS INNOVATION by Anonymous Coward · · Score: 0

    how in the fuck did this get posted? not only is this old news but it is basic. this is standard on HP Vectras and lots of other average PC's. when was the last time a slashdot editor ordered a new PC?!

    bloody typical. an academic recycles an old idea and passes it off as a new innovation. a clueless slashdot editor buys into this crap and thinks it's news.

    LAME!

  83. locking seals by sparkamatic · · Score: 2, Informative

    The company I work for makes seals mostly used in the tractor trailer business for securing trailer doors similar to hotel bar fridge seals. They are numbered and are a use once and throw away item. I find they work really good at securing PC cases.

  84. Re:Don't worry, Microsoft already takes care of th by Anonymous Coward · · Score: 0

    >2) If someone DOES break in and change anything
    >in the hardware configuration, Windows XP will
    >think it is no longer running on the same
    >computer and stop working until you contact
    >Microsoft for a new activation key.

    Except in a business environment, where this type of device is more likely to be encountered.

    There, they'll be running XP Pro Corporate, which doesn't require reactivating every time you change a NIC.

    I swear, MS flamebaiters and trollers could at least educate themselves about what they seem to hate so passionately...

  85. Read BIOS? by Anonymous Coward · · Score: 0

    I'm building systems people install into their network. The systems are running linux and contain an intrustion detection switch. All the switch does if it's tripped is give a message during bootup. My question is there a way to read the BIOS after bootup and then I can compare the two(not tripped/ tripped). I can figure somethings out, just wondering if someone has done some of this to help me out abit.
    Thanks
    Russ
    russ_barber@yahoo.com

  86. Actually (A few corrections) by red0x · · Score: 1

    This project was only meant as a "case-mod" type security system, nothing serious as of yet. The device with my ASUS p3c-E motherboard runs while the computer is off too, with power from a clock battery or the like. So it will still work, even if you disconenct the power supply (kinda like how you don't have to reset the time when you unplug and move your computer to a LAN party or another room or something).
    The PLA and VHDL idea was just for fun. If, say, you wanted to add a keypad or some crazy shit like that, you could. Yes, you can do this with 7400 series chips, that would be the easiest way; but why do it that way when you can put in a buzzer, a keypad, or anything you like with a PLA. Not only that, but if you only have one chip, and the pinout doesn't change, it makes for easier upgrades of the whole sytem. Sure, use 7400 series chips, if that's what you want. This paper was only meant as a fun idea for people to read over, nothing too serious.
    No its not for sale, so no, I'm not a snakeoil salesman.
    And by the way, I'm 18, not 14.

    --
    --red0x
  87. Pulsemagnet,.. by WickedLogic · · Score: 1

    it's easy to tell when someone unauthorized opens your case, the puslse magnet went off and nothing electronical within 8 feet works.
    grin.

    1. Re:Pulsemagnet,.. by red0x · · Score: 1

      i love you... i think that was the first good reply to this i've seen.. ;)

      --red0x

      --
      --red0x
  88. Already aware and protected. by Syrcam · · Score: 1, Informative

    I have chassis intrusion on my system, a Dell Optiplex gx400. It's a mechanism consisting of nothing but a jumper connection on the mobo and a push-style switch mounted on the chassis. WHen the cover is closed the switch is pushed in (and said jumper is registered by the BIOS as being "closed"). If you open the cover the switch pops up and the jumper circuit is opened. This change of jumper state is detected by the BIOS, and the BIOS modifies the chassis intrusion detected bit to "1". When you turn the system back on it greets you with an "Alert! Cover was previously removed" screen. The only way to reset the alert is to go into the CMOS setup and change the "chasis intrusion detection" option from "DETECTED" to "ENABLED".

    However, this type of chassis intrusion is not 100% fail-safe (email me if you know of any that is 100% fail-safe.... :] ). First off it's no good if the BIOS setup has not been password-protected, as any individual can go into the BIOS setup and reset the warning. There's also this workaround for the chassis intrusion switch that I figured out... cut the wire running from the chassis switch to the jumper connector in the mobo, and connect the two wires on the cable. Then sealing it with tape and tucking it away on the chassis railing. I did this hack on another Optiplex I owned and it worked. It never detected my chassis intrusions, so I could easily go in and out of my box without the pestering screen... I could also work with the machine being on and having the cover off (before I did the lil hack, it would automatically shut off if I opened - anyone know why this happened?).

    Well I made my post, my contribution (even if it's painfully redundant)...

  89. Re:175 dB? Do you have any idea how loud is it? by red_gnom · · Score: 1
    Decibel scale is logarithmic.


    Quiet home 25-35
    Background in private office 35-40 dB.
    Human voice at 1 m 55-60 dB.
    Average radio or TV 70-90 dB.
    Unmuffled truck, police whistle 80-100 dB.
    Rock band or very loud orchestra 100-120 dB.
    Jet takeoff, artillery fire, riveting 120+ dB.


    175 dB is 100 000 times louder than 125 dB.

  90. Re:175 dB? Do you have any idea how loud is it? by red_gnom · · Score: 1
    To be more accurate, I must add to my previous statement, that

    actually the sound pressure will be 100 000 greater, but because human hearing is not linear, and responds logarithmically to sound, it would not be perceived that loud.

  91. That's a different unit by fw3 · · Score: 1
    All of the ps/2 models I was familiar with had round-barrel keys, providing medium security)
    They had a medeco core in a plastic barrel, with a plastic lock arm inside.Pick-proof yes (even the three-tumbler version) but hardly secure.

    That's definitely a different unit. The rs/6k deskside units rear-panel used a medeco turning a roughly 2" square steel plate which engaged the case and covered:

    A 2 foot long screw lead to the front of the case, and locked the front-panel cover. The front panel control keyswitch prevented booting when in 'secure' position.

    Basically yes you can always get inside but on these machines you're not gonna do it without breaking the case first.

    The desktop rs/6k machines of more recent vintage use lower cost locks, dunno about the larger machines.

    --
    Linux is Linux, if One need clarify their dist: <Dist>/GNU Linux
    bsds are of course just BSD
  92. Try a Wobbler by stretch_jc · · Score: 1

    An old machine I bought from a local school district had a device in it called a 'Wobbler' which had a light sensor, a motion sensor, and a little piezo electric speaker which could be heard (loudly) from well down the hall. If you open the case or try to move it you set it off, and it's battery life was 48hrs of alarm.... I'd give up on stealing a pc before i carried that little thing around.

  93. delusions of grandeur by nomadic · · Score: 2

    Who'd want to break into your case anyway?

    1. Re:delusions of grandeur by red0x · · Score: 1

      to have fun is my only motivation. who cares if people want to break in or not. have you ever had fun before? you should try... :) look it up on google, or maybe here in /.

      lol

      --
      --red0x
  94. DID YOU THINK THIS WAS A NEW OR NOVEL IDEA? by Anonymous Coward · · Score: 0

    or were you just really bored?

    is slashdot the only organization who thinks your paper is news worthy?

    just curious.

    1. Re:DID YOU THINK THIS WAS A NEW OR NOVEL IDEA? by red0x · · Score: 1

      Not really, I was just bored. I really dont care what any of you think, I just wanted to have some fun. lol

      geesh, people take things so personally...

      --red0x

      --
      --red0x
    2. Re:DID YOU THINK THIS WAS A NEW OR NOVEL IDEA? by Anonymous Coward · · Score: 0

      did you laugh out loud to my comments or your own? just curious.

      no one took this personally, we were just amazed that slashdot considered this news worthy. that's all.

      nothing against you personally, it's all directed toward the clueless slashdot editor who posted this.

  95. Arrogant Trolls Like You by thelizman · · Score: 1

    1. It never happenned.
    2. If it did, you should still levy the concept of "innocent until proven guilty" into your judgements.
    3. My mother is a bitch to those that deserve it. She is a tremendously generous person to those who need it.
    4. It is the height of ignorance to make the number of assumptions you did
    5. If you have nothing to contribute to the topic, then keep you filth ridden shithole shut.
    6. Keep your judgemental attitude in check, lest I be motivated to find you, show up at your door, beat your ass, and leave you in the gutter for making smashmouth statements about my mother regarding an incident that never occurred.

    Now, perhaps we can engage in a conversation about the fat whore who pushed you out. Oooh, not nice when people talk about your mother is it?

    1. Re:Arrogant Trolls Like You by _ph1ux_ · · Score: 2

      1. ha.
      2. you sure got all riled up huh?
      3. you are pretty judgemental yourself.
      4. how am I to know whether or not the incident was true and you were really bragging about it through your sig.
      5. regardless of whether that lady was your mother or not - she is one calous bitch, regardless of the circumstances. and its sad that we have such shitty people in this world.
      6. you'd lose the fight.
      8. I am not a troll.
      9. have a nice day! :)

    2. Re:Arrogant Trolls Like You by The+Dobber · · Score: 1

      So you post false information and then get all indignant over other peoples responses? What a tool. And I bet I could pound the crap out of you. So there, plthhhhhhhhh, na-na-na

  96. Compaq has it too by h0bbel · · Score: 1

    How inventive!! :) I kinda like Compaq's (The New HP! :) way of doing this. They have a push-button thingy in the case that triggers if the cover goes off. Combine this with the Compaq SNMP/DMI agents and they send a trap to Insight Manager tellig you that the case was opened. It also reports if any memory chips where removed, or changed, including serialnr. on the chip. Most Deskpro models also have an magnetic lock device, that lets you lock the case from inside, using Insight manager, remotely. Nice. :)

    --
    h0bbel
  97. Re:175 dB? Do you have any idea how loud is it? by The+Dobber · · Score: 1

    Just have it play a little Britney, same difference.

  98. Secure cases by zoftie · · Score: 1

    I heard making computer cases out of granit blocks makes them more secure too. ;-)

  99. 5 seconds after story, so no +mod, but.. LOWTECH! by SaberTaylor · · Score: 1

    Lowtech solution:

    Adhere a piece of tape that the opening of the case will pull off. The black helicopter pilot will notice the tape when he puts your box back together and replace it.

    But you knew that so you blocked adhesive on part of the tape (maybe by just putting a piece of paper on it). Then you put a tiny bit of fluff against that adhesive free part of the tape. The fluff falls down and is lost. OH NO THE FLUFF IS GONE! ALERT! :o)

    --
    If you need text styles to communicate then you don't have a message.