jansson_mark
Markus Jansson
Premium
join:2001-08-05
Finland
3 edits | reply to SUMware
Re: Disk encryption may not be secure enough
If they can get SYSTEM access to my computer when its running, well, ofcourse they can get the encryption keys currently in use. Nothing strange here. If SYSTEM could not get the keys, it could not decrypt anything I have in the system.
LESSON: Dont let anyone to get your box OWN3D while its running with crypto going on. And for havens sake, dont let anything write the encryption keys or passphrases on plaintext on hdd or other media!
OK, I forgot this portion of the news:"describes is how to supercool the RAM chips with a can of compressed air held upside-down. Then the cooled memory can be physically extracted and inserted in another computer owned by the attacker."
THIS is a problem. Serious problem. We are used to believe that RAM is pretty safe, since when power is down, its content is gone. Well, it isnt. If someone can clearly find and point out what memory types are not vulnerable, PLEASE POST IT UP.
--
My computer security & privacy related homepage »www.markusjansson.net
Use HushTools or GnuPG/PGP to encrypt any email before sending it to me to protect our privacy. |
