BeerCheeze
Rated XXX
|
 Posted: Fri, 22 Feb 2008 10:37:53 Post Subject: |
 |
|
| acruxksa wrote: | I found the fact that they were recovering data from ram fully 10minutes after powering the system off and removing the module to be quite interesting. I knew on some level that ram retained information for a small amount of time, but I always thought it was milliseconds, not minutes and seconds. Or worse 10 minutes with cooling.
This hack would be ideal for computers (laptops that are in sleep mode).
Cheezy, does your method also include bios boot passwords? |
I new it stayed in memory, however I didn't know it was that long.
No, this method doesn't get around BIOS boot passwords. However if the password is on the BIOS and not on the HDD then it still can be easily bypassed by opening the system and changing a jumper.
However, while it's maybe detectable if you have physical access and an hour or so (depends on size of the HDD) you can make a bit-by-bit copy of the HDD and then use many tools to look at the data on the HDD.
I think the key to the hack these people demonstrated is that you need to shut down your laptop when either it's not going to be in your site, or when traveling with it. This way you give enough time for the memory to discharge. |
|
