Collaborate Disseminate
The question is mainly stated in the title. I was wondering what kind of attacks can be launched on such a setup, where someone has access to a running OS with locked screen (needs password for the user to enter). One possibility I can thi… Continue reading What type of attacks can be carried against an OS with FDE, if we assume OS and FDE are implemented correctly?
I’m familiar with the concept of cold boot attacks on laptop and desktop computers, where the goal is to find hidden encryption keys in the memory. I also think it’s done on certain mobile phones. I also know it’s hard to do, and some prod… Continue reading Cold boot attack on NAS
I have a laptop with the system disk encrypted by Bitlocker. Bitlocker is configured to require a pre-boot pin, and unlocks by TPM. The recovery key is required to unlock and is not available atm. The recovery key should be stored in the T… Continue reading Is a cold-boot-attack on a bitlocker key in TPM still possible, if I use the TPM with a different drive in the meantime?
What is the simplest or most common method to read a value, for example a text, from the RAM of a personal computer?
What access requirements are necessary for this? Is a search in a hex dump always required or are there shorter ways?
After reading some research papers about cold boot attack, I got a big shock and start searching for ways to protect against that kind of vulnerability. I got one solution that is using BitLocker pin access to RAM. But I have still a conce… Continue reading Way to protect from cold boot attack
I want to prevent potential theft of my web application (source code + database) by my local hosting company, that I don’t fully trust for some reason (but have no other choice but to use as they give, by far, the best latency over here).
… Continue reading How to prevent a hosting company from accessing a VM’s encryption keys?
Researcher creates ‘Selfblow’ proof-of-concept attack for exploiting a vulnerability that exists in “every single Tegra device released so far”. Continue reading Bug in NVIDIA’s Tegra Chipset Opens Door to Malicious Code Execution
Are there any non-obvious mitigations for the big DMA-attack revealed last year and demonstrated in this video by F-Secure?
We know that Microsoft has published some material pertaining to DMA-attacks, but, from my reading o… Continue reading Non-obvious Mitigations for This DMA-Attack Demonstrated by F-Secure
I’m trying to interpret this video demonstration by F-Secure of the big cold-boot attack discovered last year.
What is happening at the 50-second mark?
Why does he insert the USB boot-device before doing whatever he does ne… Continue reading Interpreting this F-Secure Video of a DMA-Attack
If I do not understand wrong from this post and Wikipedia page of the BitLocker and TPM, by default, BitLocker uses symmetric cryptography like AES. However, TPM is capable of performing RSA encryption.
Given that, the RSA ke… Continue reading Why does BitLocker not use RSA?