22 ms·
While I haven't worked on LUKS, if you put aside using several millions of dollars in raw compute, the options are in order of likelihood: - recovering the key
by motohagiography 4y ago
While I haven't worked on LUKS, if you put aside using several millions of dollars in raw compute, the options are in order of likelihood:
- recovering the key from a deleted file, ram, or other caches.
- obtained key or bytes thereof by prior surveillance. (so many ways)
- a forensics company could be sitting on a LUKS zero-day the way certain companies sit on Signal and iPhone vulns and use them on behalf of state actors.
- exploited a deprecated version themselves with an implementation error.
- prisoner had a short key because he used it so often
- brute force using generated wordlists from surveillance and data transcripts.
- trained a GPT model on all the books, music and online forum posts the prisoner had ever bought and used and produced a weighted wordlist. (I just made that one up.)
- Happen to have "millions of dollars in gpu time" because they already had racks of seized mining rigs from other investigations so the main cost was electricity.
Being an anarchist or secret police in France just seems like participation in their national traditions of riot sports, intrigue, and feats of mysterious intellectual prowess. There are so many unanswered questions in the story, I will wait for the Wes Anderson adaptation before thinking about it again.
- wood_spirit 4y agoAlso, I would expect the government can crack passwords more cheaply than hiring normal commercial cloud compute. Everything from negotiating good prices, to having their own or reserved cloud so the cost is having the ability to do it more than actually doing each crack, to asking an ally for help. Would be kinda shocking if they pay the sticker price for this stuff.
- ipython 4y agoYou’re right. They probably pay a premium on the sticker price, after you include all of the necessary professional services and us gov only personnel with security clearances.
- chaxor 4y ago... you definitely don't need "GPT" to make a word list... C'mon guys.
- Gordonjcp 4y agoYou missed out "handed over key to the authorities and now wants to walk the situation back a bit and pretend he didn't"