7 ms·
Isn't it difficult to actually analyze the RAM content for any sensitive data? There is so much noise in it
by udev4096 2y ago
Isn't it difficult to actually analyze the RAM content for any sensitive data? There is so much noise in it
- foota 2y agoI don't think it'd be too hard to find something like private RSA keys in memory, for example.
- viraptor 2y agoA bit hard, but not crazy. You have to potentially deal with not knowing the mappings, but even random blocks will have obvious marks like Json fragments with "password=", crypto keys with common PEM/DER headers, high entropy 8/16/32-byte data, etc.
- _hyn3 2y agoFor fun, sometime, try this: sudo strings /dev/sda | more # press q to quit You'll immediately see plain text of various things on your hard drive, complete HTML, etc. Eye opening.
- g-b-r 2y agoNo it isn't? I recovered data of mine from ram many times