3 ms·
So it relies on taking a memory dump, this doesn't sound like anything new, for example you can do similar things with https://citp.princeton.edu/research/memor
by deutronium 14y ago
So it relies on taking a memory dump, this doesn't sound like anything new, for example you can do similar things with https://citp.princeton.edu/research/memory/code/ https://citp.princeton.edu/research/memory/code/ which is open source.
And you can perform the firewire attack using http://www.breaknenter.org/projects/inception/ http://www.breaknenter.org/projects/inception/
Additionally memory can also be dumped via PCI
e.g. http://www.grandideastudio.com/portfolio/tribble/ http://www.grandideastudio.com/portfolio/tribble/
If you're concerned about such attacks you could use an external device which lets you enter a password using its own keyboard, meaning the key is stored in volatile memory on the external device - not accessible via a memory dumping tool. And then don't leave the device plugged into the computer when you're not around.
And bruteforce attacks have been around for a while using GPUs for instance Passware's forensic program.