[clug-talk] Sciam article on computer security

[Gustin Johnson]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

ILYA Khlopotov wrote:
> Hi
> 
> Another issue is so called "cold boot atack"
> http://www.engadget.com/2008/02/21/cold-boot-disk-encryption-attack-is-shockingly-effective/
> http://www.youtube.com/watch?v=Y_70UC0tPUU
> It can be used even against encrypted disks.
> 
This makes for a cool video, but it is not as practical in the field as
you might expect.  Besides there are easier ways to get the info.  If
you have a firewire port no disassembly is required (firewire is a bus,
and so you can directly dump a RAM image into another machine.

IIRC, truecrypt helps protect against the cold boot attack.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkoB9nwACgkQwRXgH3rKGfOkNQCdFtGLPpVpgfd2QVKqLyj4fhUD
YEgAoKSMFkWZppMguGSIfHWdBJiUbgfA
=TOZe
-----END PGP SIGNATURE-----