3 ms·

How is the attacker powering down the device while retaining the contents of its RAM?

• Gracana 4y ago
  Data fades slowly from DRAM, especially if you freeze it first.
• l33t233372 4y ago
  Perhaps by using a can of compressed air[0]. [0] https://www.usenix.org/legacy/event/sec08/tech/full_papers/halderman/halderman.pdf https://www.usenix.org/legacy/event/sec08/tech/full_papers/h...
• soulofmischief 4y ago
  If your PC is connected to a power strip, it's my understanding that law enforcement can attach a live male-to-male power cable to the power strip and then remove the power strip from the wall while still powering the computer. That, and yeah freezing ram.
  • ghostpepper 4y ago
    So technically that's removing power, not "powering it down". I guess you'd then warm-boot with your own kernel and hope that the contents of RAM are mostly untouched?