JoachimSchipperJun 2011Recommends
Indeed, the encryption keys can be recovered from memory fairly easily. [link] is very readable; ▶ this video is a well-made 5-minute introduction by the authors.
in “Instapaper Server Update” · View on HN
Lest We Remember: Cold Boot Attacks on Encryption Keys
Lest We Remember: Cold Boot Attacks on Encryption Keys on HackerTube: recommended by 1 Hacker News commenter across 1 month, 2011–2020.
pucitp
Open on YouTubedemo · intro · evergreen
A short Princeton CITP video describing cold boot attacks, where encryption keys remain in DRAM after power loss and can be recovered. It covers the attack against disk encryption such as BitLocker, FileVault and TrueCrypt.
Why Hacker News recommends it
It is linked as the original short demonstration that keys can be pulled from RAM after shutdown.
- people recommended it
- 1
- separate months
- 1
- strong recommendations
- 0
- discussed on HN
- 2011–2020
“is a well-made 5-minute introduction by the authors.”
What HN commenters said
4 Hacker News comments link this video. Each one links back to its thread.
BugeJan 2020Cites it
You're right, I think an attack could be possible on some computers if the agents act very quickly. I don't think 30 minutes would be possible though, judging from what is said and shown in the original cold boot video: ▶ this video
in “BusKill: A kill cord for your laptop” · View on HN
wongarsuJan 2020Cites it
For getting encryption keys from RAM after shutdown there's this video mentioned by another commentor: ▶ this video For using reflections, there's this paper implementing reading screen content from various things like reading glasses, a can of coke or even the user's eye (including a discussion of limitations): [link] Right now I can't find something on reading keyboard vibrations with lasers, but here's one doing it acoustically and one doing it via acclerometer of a phone on the table: [link] [link]
in “BusKill: A kill cord for your laptop” · View on HN
pjinNov 2011Cites it
2. "with the cryogenic RAM freezing technique, presumably" - errr, no. With the "sit down at the computer and turn off the encryption/copy the data to an external drive technique", I think you'll find. Obvious bullsh*t to anyone technical but sounds 'cool' to your average 14yr old who reads these sort of sites. Errr, actually yes. You may be interested in [1] and [2]. [1] [link] [2] ▶ this video
in “Full disk encryption is too good?” · View on HN
Topics & tags
Security & hackingCryptographyComputer architecture & CPUscold boot attackdisk encryptiondram remanencememory forensicsprinceton