Make your electronics tamper-evident
Tamper‑evident techniques for electronics and physical objects—from glitter nail polish on laptop screws to industrial seals and random “fingerprint” patterns—are explored as a way to detect covert access, especially in “evil maid” scenarios. Commenters compare ad‑hoc methods with formal approaches like physical unclonable functions, diamond‑dust tags, and government standards for security seals, while noting that simple tricks (hair across a door, paper shims) still have practical value. Many emphasize that such measures mainly help journalists, activists, and high‑value targets detect interference, but offer limited protection against well‑resourced state actors or remote software exploits.
Warranty seals and consumer devices
- Users report hidden screws sealed with wax or stickers in appliances and hard drives, likely for warranty/tamper evidence.
- One commenter notes that in the US, “warranty void if removed” stickers can’t legally void the entire warranty; only damage you caused can be excluded.
- Others point out that opening hard drives is inherently destructive: cleanliness, air/helium filling, and hermetic welding mean any opening counts as damage.
- People share past hacks (e.g., heating stickers with a hairdryer to preserve them) as examples of how easy it can be to defeat basic seals.
Random patterns, physical fingerprints, and PUFs
- Several comments connect glitter/nonpareil patterns to broader work on anti-counterfeiting: pills with random sprinkles, banknote fibers, metallic-particle adhesive tags, and nanoscale-diamond “dust” IDs.
- Physical unclonable functions (PUFs) and similar constructs are mentioned as “physical cryptography” analogs.
- Discussion of algorithms to robustly encode and search these random patterns (image fingerprinting, wavelets, fuzzy hashes, neural nets) notes that current image-similarity tools aren’t ideal.
- Skeptics argue that with enough budget, attackers could build “sprinkle printers” or robotic pattern replicators; others counter that precise duplication of many tiny elements is still very hard.
Threat models and who needs tamper evidence
- Use cases raised: investigative journalists, dissidents, cryptographers, security researchers, and services needing strong randomness.
- Stories include hotel room intrusions, targeted state surveillance and spyware, and even alleged pre-delivery hardware keyloggers.
- Some argue most people are more at risk from ordinary thieves than intelligence services; others stress corrupt or abusive police in various countries as realistic adversaries.
- One view: the value of tamper evidence is often detection and attribution (who’s interested in you), not perfect protection.
Techniques, tools, and limitations
- Suggestions range from glitter/epoxy on screws and Framework ports to tamper-evident bags, security tapes, and built-in case-open switches tied to TPMs.
- DoD and other standards treat many label seals as “minimal” security; well-resourced actors can counterfeit even official seals.
- Multiple people emphasize that such techniques require frequent inspection and are inconvenient, and cannot meaningfully stop top-tier nation-state actors—only raise the bar and provide evidence.