3 ms·

Regarding the hardware questions, I don't know. FWIW, it's a Dell Inspiron i3531-1200BK. It does have FDE, and requires a password on boot for that.

• Filligree 8y ago
  So, hang on. Do you know the FDE password? If so, just take the disk out and plop it in another machine and-- you're done. If not, then no cold-boot attack can possibly work.
  • AlexCoventry 8y ago
    No, I don't. The laptop was in suspend-mode for long enough that I forgot the password. It's been on a power supply since, to keep it from turning off. I can get it to a screensaver, and that's it, so far.
    • Filligree 8y ago
      That makes everything much harder. You know that, I suppose. You'll have to crack it by using FireWire or a similar method that lets you read/alter memory, or by opening it up and connecting probes directly to main memory. I have no problem telling you that the latter would be harder. I certainly would not be able to do either.
      • Filligree 8y ago
        And to clarify, since you mentioned cold boot attacks earlier -- yes, that could work, but there's also a very good chance that it clears memory during BIOS initialization.
    • jki275 8y ago
      https://github.com/carmaa/inception https://github.com/carmaa/inception This tool could help you, possibly.
      • AlexCoventry 8y ago
        Awesome, thanks.