Cold boot disk encryption attack is shockingly effective
Written by admin on Thursday, February 21st, 2008 in Gadgets and Devices.
![]()
Posted Feb 21st 2008 6:18PM by Nilay PatelFiled under: Desktops, Laptops, Storage It’s an old adage that no security measure is worth anything if an attacker has physical access to the machine, but things like heavy-duty disk encryption are supposed to at least slow things down. Sadly, that may not actually be the case, as a group of Princeton researchers has just published a paper detailing an exploit that requires little more than a spray duster and a screwdriver. Since the encryption key for systems like BitLocker and FileVault lives in RAM, all an attacker has to do to get it is cool the RAM modules with the air duster held upside down, yank the DIMM, and insert it into another machine, where it can then be read to access the key. (Read the full post about ‘Cold boot disk encryption attack is shockingly effective’…)


