Secure Says Almost All Computers Are Vulnerable to New Cold Boot Attack

Secure Says Almost All Computers Are Vulnerable to New Cold Boot Attack

Relying on computer memory's remanence behavior, security researchers figured out a way to extract sensitive data from RAM, such as encryption keys, even after the loss of power.

But security researchers from Finnish cyber-security firm F-Secure discovered that they could disable this feature by modifying firmware settings and steal data from a computer's RAM after a cold reboot.

The attack works against nearly all Macs and Windows PCs and requires several minutes of physical access to a machine left in sleep mode, which maintains enough power to keep data from the most recent active session "alive" in system memory.

"It's not exactly easy to do, but it's not a hard enough issue to find and exploit for us to ignore the probability that some attackers have already figured this out", Olle Segerdahl, one of the F-Secure researchers who developed the attack, said in a statement released this morning (Sept. 13).

Known for its volatility in data retention when out of power, RAM (Random Access Memory) can preserve information for a longer time - even minutes, under low-temperature conditions.

In the meantime, he recommends companies prepare themselves for these attacks.

Ordinary computer users don't need to worry about this attack. But it could be a problem for corporate executives and government officials, whose encrypted computers often contain highly valuable information. "And since this type of threat is primarily relevant in scenarios where devices are stolen or illicitly purchased by attackers, it's the kind of thing an attacker will have plenty of time to execute", said Segerdahl.

Marin Mazzie Dead - Broadway Star Dies at 57 | Marin Mazzie, RIP
They had planned to unveil a new show, Heart to Heart , in NY this past June, but were forced to cancel due to Mazzie's health. "The divine and courageous Marin Mazzie was #TonyAwards-nominated for PASSION , RAGTIME , and KISS ME, KATE ".

In the case of BitLocker, if it is configured for pre-boot authentication with a PIN, the attack has only one shot to be successful because the code is mandatory for extracting the encryption keys into the RAM.

"It's the kind of thing that attackers looking for bigger phish, like a bank or large enterprise, will know how to use", he added.

A video posted on YouTube by F-Secure shows a user typing out his encryption passwords in a Word document. After that, the attacker can boot from an external device to read the contents of the system's RAM from before the device went to sleep.

F-Secure's researchers presented their findings at a conference in Sweden on Thursday, and are set to present it again at Microsoft's security conference on September 27.

Encryption keys and other sensitive information can then be stolen from memory and full access gained to the system. One of these protections was that computers would overwrite the contents of the RAM when power was restored after a cold boot. Most modern computers overwrite RAM when they are powered down to prevent unauthorised access to data during a cold boot attack, but the researchers have found a way to disable the process.

As reported by ZDNet, F-Secure's findings say that contemporary security measures are enough to prevent the theft caused by the new flaw. According to Cupertino, Macs fitted with an Apple T2 chip are not at risk, and older machines can be protected by setting a firmware password.

Related News:

  • ISS images show massive Hurricane Florence from 400 km up

    Officials said some 1.7 million people in the Carolinas and Virginia were warned to evacuate, but it's unclear how many did. "Catastrophic effects will be felt outside the center of the storm due to storm surge as high as 9 to 13 feet".

    Beach Town's Main Drag Empty Ahead of Hurricane Florence

    She has no regrets about staying then but enough is enough. "The building's solid and Buddha will protect us". "I'm concerned. In Wilmington, Solange Iliou Thompson closed down her restaurant, Indochine, because all of her employees had left the city.
    Mobile Sprint merger review delayed by FCC

    Mobile Sprint merger review delayed by FCC

    The companies had tried to merge twice in the past, but regulators and internal disagreements prevented it from happening. Sprint and T-Mobile in April announced a deal to form a new company and push development of a super-fast 5G network.
  • Pep Guardiola reveals plans for Barcelona return at end of career

    Pep Guardiola reveals plans for Barcelona return at end of career

    De Bruyne, once of Chelsea, is considered one of the world's elite midfielders and signed a six-year deal at City in January. I've always been curious about it".
    Horrific details emerge in Jabari Bird assault case

    Horrific details emerge in Jabari Bird assault case

    What is Bird's employment status with the Celtics? The Celtics selected Bird with the No. 56 overall pick in the 2017 NBA Draft. Boston Celtics guard Jabari Bird pleaded not guilty on Thursday to charges of domestic assault, strangulation, and kidnapping.
    Australian newspaper insists controversial Serena Williams cartoon is not racist

    Australian newspaper insists controversial Serena Williams cartoon is not racist

    Despite evidence to the contrary, a mob of Twitter users would go after Knight declaring him and his cartoon racist. The cartoon comes a day after Williams was fined $17,000 for three violations she committed at the U.S.
  • Elon Musk's SpaceX to announce first tourist to Moon

    Elon Musk's SpaceX to announce first tourist to Moon

    Instead, Musk said, SpaceX would turn its focus to developing the BFR, which he deemed a better option for tourism missions. Humans have not set foot on the Moon since the final Apollo mission in 1972, capping an era of U.S. national pride.
    Jaguars' Leonard Fournette to miss practice Thursday

    Jaguars' Leonard Fournette to miss practice Thursday

    Jacksonville could be without one of its biggest playmakers for one of its biggest games on the schedule. He reportedly also said that he could've re-entered the game against the Giants, but was being cautious.
    Hurricane Florence Rocks Wooden Pier in Nags Head

    Hurricane Florence Rocks Wooden Pier in Nags Head

    The Charleston area will see winds near tropical storm strength of 40 miles per hour and somewhere between 3 to 6 inches of rain. Sixteen kilometres away in the city of Wilmington , wind gusts were stirring up frothy white caps into the Cape Fear River.
  • Hurricane Florence: Four reasons to fear this storm

    Hurricane Florence: Four reasons to fear this storm

    It's not all for show, either. "The larger and the slower the storm is, the greater the threat and the impact-and we have that". On Friday, the storm's center will hug the coast of southeast North Carolina, where the most severe effects are expected.
    Hurricane Florence lashes United States  east coast, triggers flood warnings

    Hurricane Florence lashes United States east coast, triggers flood warnings

    Overall, the storm is 400 miles wide. "Against my better judgment, due to emotionalism, I evacuated", said Fisher, 74. Workers are being brought in from the Midwest and Florida to help in the storm's aftermath, it said.
    Brady appreciates Ramsey leaving him off list of QBs that 'suck'

    Brady appreciates Ramsey leaving him off list of QBs that 'suck'

    Ramsey wouldn't really hit his grandmother, would he? "The guy's won a ton of football games and he's very hard to beat". Gronkowski, meanwhile, has done his part to simply ignore Ramsey's chirping, but isn't backing down from the challenge.


Most liked

Hurricane Florence Is Generating 83-Foot Waves in the Atlantic
And the more it hovers just off shore - a distinct possibility - the more potentially deadly storm surge it pushes on-shore. Several schools in the FOX8 viewing area have closings and delays this week ahead of Hurricane Florence.

'Incredibly Distasteful': 'Outnumbered' on Trump Casting Doubt on Hurricane Maria Death Toll
Not only because it seemed indifferent to Puerto Rican suffering, but also because it is demonstrably false. And I respect him. "If you are a United States citizen, you should be disgusted by this".

David Silva reveals the one club he's always wanted to play for
However, City have also confirmed that things are good off the pitch too, with revenue breaking the £500m mark. For the fourth consecutive season, City reported a profit, this time of £10.4 million.

Landslide injures tourists at famed ‘shipwreck’ beach in Greece
Tourists board a boat at the beach Navagio following a rockfall , on the island of Zakynthos, Greece September 13, 2018. The landslide occurred Thursday on the Navagio Beach , or Shipwreck Beach , on the northwestern coast of the island.

Flight carrying Kulsoom Nawazs body departs for Pakistan
For the sake of uninterrupted traffic flow, special arrangements were also made outside Jattiumra. People continued to arrive at Jati Umra to express grief and offer sympathy to the Sharif family.

More than 20,000 on NC coast already without power from Florence gusts
People are seen inside a shelter run by Red Cross before Hurricane Florence comes ashore in Grantsboro, N.C., September 13, 2018. Another Wilmington resident said she does not want to leave because she is afraid to see what she would be coming back to.

Eating dairy products linked to lower death rates
A new research challenges the widely held belief that those who consume less full fat are at higher risk of heart disease. That said, people should stick to low-fat dairy, she advised.

Rashford to fight for his place at Manchester United this season
We have to remember that Harry, at that age, had hardly played anywhere near the same number of matches for Spurs. Rashford claimed nine goals in 21 appearances in that first half-season but he has since endured fallow periods.

Justin Bieber And Hailey Baldwin Are Married
Adding that she can't wait to be Mrs Bieber, "I see no reason to wait", she said of her own decision. That year, Justin had been arrested and got a DUI for street racing a Lamborghini .

Leaked Study Documents Thousands of German Sex-Abuse Cases
Pope Francis has launched an investigation into alleged financial irregularities involving the 550-year-old Sistine Chapel Choir. DiNardo's deputy Jose Horacio Gomez and general secretary Brian Bransfield also attended the closed-door meeting.

Hurricane Florence from space
Following Hurricane Florence are two more powerful storms crossing the Atlantic, namely Tropical Storm Isaac and Hurricane Helene. Photo station published on its website.

Too many teens are using Juuls, according to the FDA
And some of the retailers that received warning letters are still advertising and selling these products, he said. The steps announced Wednesday are just the initial elements of these new efforts, Gottlieb said.

USA ‘weighing’ China sanctions for treatment of Uighur Muslims
The Uyghurs were forced to welcome officials into their homes, where they were subjected to "political education". The government has previously blamed anti-China forces for being behind criticism of its policies in Xinjiang.

Hurricane Florence shifts south; Georgia and Carolinas hunker down
The hurricane center said Florence will approach the coast Friday and linger for a while before rolling ashore. More than 1 million people have been ordered to evacuate the coastlines of the Carolinas and Virginia.

Ubisoft Reveals Massive Assassin's Creed
Assassin's Creed: Odyssey will have something for everyone as Ubisoft brings more content to the table. At the time of its release, Assassin's Creed III was considered to be something of a disappointment.