3 ms·
What's a threat model where RAM intercept wouldn't be an issue?
by candiddevmike 2y ago
What's a threat model where RAM intercept wouldn't be an issue?
- udev4096 2y agoIsn't it difficult to actually analyze the RAM content for any sensitive data? There is so much noise in it
- foota 2y agoI don't think it'd be too hard to find something like private RSA keys in memory, for example.
- viraptor 2y agoA bit hard, but not crazy. You have to potentially deal with not knowing the mappings, but even random blocks will have obvious marks like Json fragments with "password=", crypto keys with common PEM/DER headers, high entropy 8/16/32-byte data, etc.
- _hyn3 2y agoFor fun, sometime, try this: sudo strings /dev/sda | more # press q to quit You'll immediately see plain text of various things on your hard drive, complete HTML, etc. Eye opening.
- g-b-r 2y agoNo it isn't? I recovered data of mine from ram many times
- foota 2y agoI think this depends on the adversaries you're concerned about. It's unlikely that breaking into a DC and dumping memory is going to be worth it without a very high expected payout. For one, you'd need very high technical expertise.