4 ms·
What is the advantage of this vs. some sort of "go-between" module which mirrors all RAM traffic to an external device?
by colanderman 3y ago
What is the advantage of this vs. some sort of "go-between" module which mirrors all RAM traffic to an external device?
- frabert 3y agoYou probably can't do that without screwing up the signal integrity
- colanderman 3y agoOnly if it's passive -- I would expect an active (buffered) solution to work fine.
- ianburrell 3y agoBecause when you pull the RAM chip to add the module, it loses its data and the system crashes. This attack is for people who just got access to a running system. I have heard about this for FBI who have running system that they can’t turn off cause then it would be encrypted. Their targets are unlikely to allow law enforcement to add monitoring to their computers. And if they had prior access, compromising the software or other hardware would be better.
- colanderman 3y agoAh the article was talking a lot about keys in the bootloader, so I was assuming this was intended to be used after a fresh boot.