2 ms·
The trick with defeating cold boot attacks (aka freezing the RAM) is easily mitigated by a system administrator that forces the system to hibernate instead of s
by bloblaw 14y ago
The trick with defeating cold boot attacks (aka freezing the RAM) is easily mitigated by a system administrator that forces the system to hibernate instead of sleep (aka write volatile memory to disk).
It can also be mitigated by requiring not just the TPM chip, but also a PIN, PASSCODE, or a PASSCODE that is cycled ever 60 seconds or so (on something like an RSA fob).
This presumes the system has a TPM chip, or a similar mechanism that can provide an original point for a trusted boot.
- Xylakant 14y agoThe trick is also easily defeated by turning the machine off instead of letting it sleep. Certainly. You could as well just go and make the case locked and hard to break, possibly coupled with an alarm. I was just pointing out that "encrypted disk" does not mean "100% secure".