Hacker News Reader

Comment by mschuster91 | Hacker News Reader

There's only one solution to prevent this, if you're operating a server that might be of federal interest (which might even be running an open proxy or TOR relay):

1) Rent an entire rack with a 19" rackmount UPS, as well as locks connected to the server to signal if the rack has been opened, and motion sensors, as well as a compass

2) If either the power from outside goes down, or the lock/cage alarm triggers, or the motion sensor/compass detects motion, wipe the RAM section that contains the HDD encryption keys and power down the machine.

Why a compass? Because in case the cops try to move the entire rack carefully (to not trigger a motion sensor with false-alarm filtering), and they rotate the rack, the compass will detect it.

View on HN

Figure out which part of the rack points north, stick a really strong magnet there.

Also, spoof the GPS signal to avoid your next attack, wrap you in a faraday cage and broadcast an identical set of WiFi/Cellular signals.

My point isn't that any of this is more or less practical, simply that any protection you can dream up can be defeated if they know about it and are expecting it.

Also, your password was 'lovesexsecretgod' and you left SSH open :)

> Also, your password was 'lovesexsecretgod' and you left SSH open :)

Is this sarcasm or did you actually get this from the above poster?

I think it's a reference to the movie Hackers.

> Figure out which part of the rack points north, stick a really strong magnet there.

Such a strong magnet can be detected, too, e.g. with four 3-axis compasses.

> Also, spoof the GPS signal to avoid your next attack, wrap you in a faraday cage and broadcast an identical set of WiFi/Cellular signals.

Nice idea, but in case you're using a cellular uplink, as soon as the faraday cage is in place, your trigger fires. Also, spoofing GPS signals requires expensive equipment and IIRC also cooperation of the Feds.

> My point isn't that any of this is more or less practical, simply that any protection you can dream up can be defeated if they know about it and are expecting it.

Which is why you don't publish every detail of how your farm is protected ;)

And stick the security mesh to the entire enclosure's inner surface for good measure: http://www.central-midori.com.sg/products/security-foil

You can also avoid the UPS requirement by using an internal battery that just wipes the RAM (10KV discharge? Thermite charge? C4?) when case integrity is compromized or when a thermometer/barometer/accelerometer/gyro threshold is exceeded.

Reply on news.ycombinator.com