5 ms·
You can freeze the computer, remove the DIMMs, and then pop them into a different machine to read them: https://electronics.stackexchange.com/questions/32189/fr
by koolba 6y ago
You can freeze the computer, remove the DIMMs, and then pop them into a different machine to read them: https://electronics.stackexchange.com/questions/32189/freezing-dram-for-forensics-coldboot https://electronics.stackexchange.com/questions/32189/freezi...
- Drip33 6y agoI thought that wasn't possible since DDR3 or 4?
- ATsch 6y agoSmaller capacitors will keep their charge less long, which makes this more difficult, but I understand that there are no fundamental mitigations.
- Avamander 6y agoThere's (T)SME.
- jleahy 6y agoThe fundamental mitigation is full memory encryption using a randomly generated key that changes each time the CPU boots. That exists for some CPUs.
- ATsch 6y agoWell, that's not part of the ddr3 or ddr4 spec :)
- Spivak 6y agoWhere do you store the key?
- danielheath 6y agoCPU registers - much harder to pull off and reattach elsewhere.