Cold Boot Attack Put to the Test at CanSecWest

[darkenlight22]

Wow you mean you can hack my computer when it's in your hands using something that has to be hard lined so scared. Script kiddies would make fun of you for being so lame really people must be clueless about computers. There are a million way easier ways oh and actually opening it up that was classic what next hackers can damage your computer using a hammer or even with their fist eeew mystical. Norton is on the Mal ware list people wake up see who is really taking your info,spying and more.

[Pulleasy]

press 8 rapidly! xD

[yaaay55]

sure they could bake a fucking cake out of my hdd if they got it,

but would it taste so good after it has ran trough my microwave?

I didn't think so..

[DeynatheTaggerung]

@from212 Wow. Someone's on his period.

[pd3331]

Linux is so cool

[eatyoursouls]

hmmm interesting stuff

[SuperMctank]

I PRESS AND HOLD THIS... herp DA DERP ....u pressand hold what u fucking egg head dick shiner

[matZero]

"a rly small version of linux" TELL ME THE FAAA WHAT THE NAME IS GODDAMNIT including the decoding tool otherwise i cant rly use this information :S

[kokopelli314]

@matZero probably DSM, (Damn Small Linux) Good backup OS in a pinch.

[matZero]

@kokopelli314

yeah but i can count a bunch of "rly small versions" from cent to knoppix to others... i mean... they wont just use a random OS aren't they

[GMELECTRONICS365]

best way is take the bat of and on . les than a sec to do it if you click it in and out

[RioGiovanni]

I have that laptop :)

[presentlyunknown]

@Tardis1217- It was originally called a cold boot because they froze the RAM modules to prevent data loss. It has been refined to a warm boot technique though...

[mikitymike]

I have to go take a memory dump...

[J3N3I]

What device can be seen at 00:22?

[Tardis1217]

this should be called a warm boot attack. A cold boot is when you turn on the system after it's been dormant for a while. Like say, when you shut down your computer for the night and turn it on in the morning. A warm boot is when you restart the system. Technically, they did power down the computer fully and then turn it on, but still, this should be called a warm boot attack because they want there to be very little time between the power off and reboot.

[ubuntututorials]

@Tardis1217 Maybe it's a cold boot attack because if you cool the memory it improves your chances?

[GMELECTRONICS365]

@ubuntututorials cool boot because they chilled the memory so the data slowed down thus having more time.

[Blinkwing]

try it with my mac - muhhahahahahhahah epic FAIL

[1434swfsef]

mac is effected!

[Blinkwing]

@1434swfsef idk what those noob hackers do XD

[0341593]

@1434swfsef *affected

;)

[GypsyLifeForMe]

@Blinkwing Mac uses ram and binary codes also.

[Blinkwing]

@GypsyLifeForMe do you think im stupid? but those reasons don't make it the same / the EFI has a safe mode to delete the ram at "turnoff"

[GNaranjoN]

try to do that with my mac hahaha!!! FAIL

[takeshihonke]

It's funny because no where in that did I hear it say that it was only on PC's that this works. Seeing as the concept is to read residual energy from the memory before it can wipe itself, and since Mac's have the capability to run boot partitions of drives besides the one installed, I don't see any issue in making this work on a Mac. Fuckin mac fanboys.

[inricheetos]

I think it's because you'd have to cut through a lot of aluminum

[inricheetos]

I think you don't have to open it. Ignore what I said.

[maw88ify]

I have tons of Linux CD's and USB apps like that... Plus if that doesn't work you can bi-pass the the password all together, and just boot for a Live CD this will keep the computer from quick booting.

Plus there is a Linux tool for Dumping and changing passwords... I love Linux it has so many fun thing...

Plus Linux has a great OS like Linux with Compiz Fusion

[seva404]

@maw88ify What does compiz Fusion have anything to do with the OS. It a "GUI" effect.

[maw88ify]

@seva404

Yes , but you could say the say about Mac OS Spaces, Expose, and it's dock if you take away the cool effects what do you have BSD ? That's why Mac users say it's all about.

I could say

Mac has > Front Row

Linux has > Elisa Media Center

But that just an example of program they run, no one says look at how cool my Kernel is do they ?

Linux , and BSD are most free. PC-BSD, Linux Mint, Ubuntu, MKLinux, that's cost of the OS, not the OS... So check out the Linux Kernel . It's cool... :D

[d3f4c3d]

i love how this corporate dumbnubs playing big guys with coldbootattack trying to push they marketing ideas LMAO

little they know most of pc's that have ECC ram or quick boot enabled in bios will completely make such attack useless

[nimsh01]

Dam thats smart, after u get the data u just hex-view (using any hex-editor) somewhere you have the time.

[Scania4life]

i have a high perfomance computer and i got a safe mode when i turn off the computer the power shuts down and you cant start it without pressing all the keyys

[SirDamned]

alot of Motherboards and their default bios, have a default failsafe password...

that fail safe is simply pressing enter at the password screen.

So Extra measures have to be taken when using one of these motherboards.

[MJGrindboy]

I like the iPod one. Great if you get caught.

[S0c0J0e]

ipod - james bond edition... reserve yours today

[joewatts]

ipod brick

[Ikimono]

uh...iPod = USB drive...so why is this such a hard concept...just put the same exact program into the iPod. it's the same thing. big whoop.

[djtj1216]

agreed....lol

[ZeroCorpse]

All these hacks at the CanSecWest seem to rely on having uninterrupted access to a person's computer IN PERSON, for about 10 minutes, and they seem to depend on the computer not having any sort of Admin password installed.

So basically, they're all ways to hack stupid people.

[Galameth]

Unfortunately, that "stupid people" bracket is way too adverse. Have you not realized that almost 97% of the pc population do not have pre-bios or pre-boot passwords? They aren't after the handful of people who are savvy enough to do that, they are after people that actually have worthwhile accounts/info to take.

[DarkBioCloud]

you seem to think putting a password on your bios will protect from this exploit ure pretty naive my friend. You can have your hard drive encrypted with the best encryption money can buy and a 256bit password on ure bios and still be taken by the exploit if u leave your computer unattended for a amount time. The problem lies with unsecured hardware the only way this can be beat is if the installed os automaticly flips everything in memory to zero when the power is turned off.

[dustyOn3]

Hehe! :-)

That's nice...

[Exestenz]

thanks guys, oh no don't stop. Just make the criminals software for them.

[Galameth]

The only security there is, is awareness. The more people that know how it's done the faster the problem gets fixed. Yes, it'll be a problem for a while, but I would rather a million people knew and were working on it, sharing their ideas, vs one or two people keeping it a secret so that everyone is blindsided.

[timg455]

So how long after being shut off before the memory stick's content is useless?

[SPANGO0]

upto 1min the data is usable but if the chip is cooled it could be upto 10mins

[Galameth]

They have held data on cooled chips up to an hour after

[522647]

wow im scared now

[gaycure]

@522647, stop looking at CP in .onion network

the attackers external drive needs to boot!

without using the cold spray method, ya can slow them down..

* log into bios

* deactivate all boot drive seeks, expect your OS drive.

* admin password bios selection and exit.

this adds another job to their list

depending where bios batt is (needs removal and pins shorted to scrub password) it could add few minutes before they find ugly pamerla anderson and brad pitt stash?

[noyuotube]

assuming they took your laptop somewhere secure like their van in the parking lot, they have all the time in the world to open up your laptop and take the ram out, chill it, then slap it in a machine that does not have these protections on there.

I hope you feel like coating your components in epoxy.