God dammed Princeton kids! They broke everything!
Cold boot attacks on Encryption Keys
The best fix I could think of would be to wipe the key from memory (overwrite actually) immediately after you’re done using it. Also maybe keep it scrambled, but that wouldn’t be fool proof. Another idea would be to try to put the encryption key where it would be overwritten by the dump program. But you can’t rely on that either, you could easily transfer the ram into another computer where it wouldn’t be the only ram.
This doesn’t make disk encryption useless, its just something to be aware of. As long as you turn off your computer (and now you know to wait a minute for the ram to clear) your data should be ok.If you’re computer is unlocked when it gets stolen, then you’re screwed anyway. This research just found out that the lock closes a little slower then we thought.
It’s also very cool.
“It‚Äôs like Feynman says, physics is like sex ‚Äî it may give practical results, but that‚Äôs not why we do it.” – xkcd
” I see it in your eyes. You have the look of a man who accepts what he sees because he is expecting to wake up.” – Morpheus from The Matrix
Repeated by HunterTV in reference to a leaked RIAA training video made for US prosecutors. Everyone loves a good manipulation of government and society.
“Cowardice asks the question, ‘Is it safe?’ Expediency asks the question, ‘Is it politic?’ Vanity asks the question, ‘Is it popular?’ But, conscience asks the question, ‘Is it right?’ And there comes a time when one must take a position that is neither safe, nor politic, nor popular, but one must take it because one’s conscience tells one that is right.” — Martin Luther King, Jr.
Via Wikileaks who recently lost their domain name because a crooked bank who they exposed took them to court. UPDATE: of course as time goes on there’s more to the story, they may sort of have their domain back. The Cyberpunk review has some good coverage on this stupidness.
And I’ll leave this post off with a source of many good quotes.
“Please note, we have added a consequence for failure. Any contact with the chamber floor will result in an unsatisfactory mark on your official testing record, followed by death. Good luck.”
GlaDOS from Portal of course.