Physical access dominates, every single time.
Physical access dominates, every single time.
In my line of work we use Scale Indicators that are calibrated by Weights & Measures Canada. Once the audit is completed the unit is sealed with a destructible seal and record of inspection is recorded. If that seal is ever tampered with by someone not authorized to do so there are big fines.
So yeah, it would be easy for us to snap those seals and drop custom programs into the indicators all day every day. There's also stupid-obvious methods to prevent tampering.
Hey here’s a YouTube video on it: https://youtu.be/xUJtqvYDnkg
And let’s not even discuss software exploits
The screws securing the sensitive parts of the terminal have holes through them where you thread the seal through several of them. Basically it is impossible to loosen the screws without breaking the seal. The entire device is a metal enclosure so the only way in is through the screws.
Yes, grandparent said tamper-proof instead of tamper-resistant or tamper-evident. So? It's obvious what they meant.