Secure Says Almost All Computers Are Vulnerable to New Cold Boot Attack

Relying on computer memory's remanence behavior, security researchers figured out a way to extract sensitive data from RAM, such as encryption keys, even after the loss of power.

But security researchers from Finnish cyber-security firm F-Secure discovered that they could disable this feature by modifying firmware settings and steal data from a computer's RAM after a cold reboot.

The attack works against nearly all Macs and Windows PCs and requires several minutes of physical access to a machine left in sleep mode, which maintains enough power to keep data from the most recent active session "alive" in system memory.

"It's not exactly easy to do, but it's not a hard enough issue to find and exploit for us to ignore the probability that some attackers have already figured this out", Olle Segerdahl, one of the F-Secure researchers who developed the attack, said in a statement released this morning (Sept. 13).

Known for its volatility in data retention when out of power, RAM (Random Access Memory) can preserve information for a longer time - even minutes, under low-temperature conditions.

In the meantime, he recommends companies prepare themselves for these attacks.

Ordinary computer users don't need to worry about this attack. But it could be a problem for corporate executives and government officials, whose encrypted computers often contain highly valuable information. "And since this type of threat is primarily relevant in scenarios where devices are stolen or illicitly purchased by attackers, it's the kind of thing an attacker will have plenty of time to execute", said Segerdahl.

David Silva reveals the one club he's always wanted to play for
However, City have also confirmed that things are good off the pitch too, with revenue breaking the £500m mark. For the fourth consecutive season, City reported a profit, this time of £10.4 million.

In the case of BitLocker, if it is configured for pre-boot authentication with a PIN, the attack has only one shot to be successful because the code is mandatory for extracting the encryption keys into the RAM.

"It's the kind of thing that attackers looking for bigger phish, like a bank or large enterprise, will know how to use", he added.

A video posted on YouTube by F-Secure shows a user typing out his encryption passwords in a Word document. After that, the attacker can boot from an external device to read the contents of the system's RAM from before the device went to sleep.

F-Secure's researchers presented their findings at a conference in Sweden on Thursday, and are set to present it again at Microsoft's security conference on September 27.

Encryption keys and other sensitive information can then be stolen from memory and full access gained to the system. One of these protections was that computers would overwrite the contents of the RAM when power was restored after a cold boot. Most modern computers overwrite RAM when they are powered down to prevent unauthorised access to data during a cold boot attack, but the researchers have found a way to disable the process.

As reported by ZDNet, F-Secure's findings say that contemporary security measures are enough to prevent the theft caused by the new flaw. According to Cupertino, Macs fitted with an Apple T2 chip are not at risk, and older machines can be protected by setting a firmware password.

Related News:

  • Flight carrying Kulsoom Nawazs body departs for Pakistan

    Flight carrying Kulsoom Nawazs body departs for Pakistan

    For the sake of uninterrupted traffic flow, special arrangements were also made outside Jattiumra. People continued to arrive at Jati Umra to express grief and offer sympathy to the Sharif family.
    Horrific details emerge in Jabari Bird assault case

    Horrific details emerge in Jabari Bird assault case

    What is Bird's employment status with the Celtics? The Celtics selected Bird with the No. 56 overall pick in the 2017 NBA Draft. Boston Celtics guard Jabari Bird pleaded not guilty on Thursday to charges of domestic assault, strangulation, and kidnapping.

    ISS images show massive Hurricane Florence from 400 km up

    Officials said some 1.7 million people in the Carolinas and Virginia were warned to evacuate, but it's unclear how many did. "Catastrophic effects will be felt outside the center of the storm due to storm surge as high as 9 to 13 feet".
  • Jaguars' Leonard Fournette to miss practice Thursday

    Jaguars' Leonard Fournette to miss practice Thursday

    Jacksonville could be without one of its biggest playmakers for one of its biggest games on the schedule. He reportedly also said that he could've re-entered the game against the Giants, but was being cautious.

    Rashford to fight for his place at Manchester United this season

    We have to remember that Harry, at that age, had hardly played anywhere near the same number of matches for Spurs. Rashford claimed nine goals in 21 appearances in that first half-season but he has since endured fallow periods.
    This will be the name of the 6.1-inch budget iPhone X

    This will be the name of the 6.1-inch budget iPhone X

    As per the report, people familiar with the matter have said, "Apple has considered calling the phone the "iPhone XR". While there have also been rumblings that the devices might be priced at $799 and $999, that seems somewhat unlikely.
  • Hurricane Florence weakens slightly as it moves toward USA  coast: NHC

    Hurricane Florence weakens slightly as it moves toward USA coast: NHC

    Even though the ISS is 400km above the storm, Florence is so huge that astronauts needed a wide-angle lens to capture the storm. The Carolinas will bear the brunt of the storm, but as it moves inland, Virginia, Georgia, and Maryland will also be hit.
    USA  ‘weighing’ China sanctions for treatment of Uighur Muslims

    USA ‘weighing’ China sanctions for treatment of Uighur Muslims

    The Uyghurs were forced to welcome officials into their homes, where they were subjected to "political education". The government has previously blamed anti-China forces for being behind criticism of its policies in Xinjiang.
    Evacuations in United States  ahead of Hurricane Florence

    Evacuations in United States ahead of Hurricane Florence

    A state of emergency has also been declared in Maryland, North Carolina, South Carolina, Virginia and Washington. Florence is being trailed in the Atlantic by two other storms - Hurricane Helene and Tropical Storm Isaac.
  • Marin Mazzie Dead - Broadway Star Dies at 57 | Marin Mazzie, RIP

    Marin Mazzie Dead - Broadway Star Dies at 57 | Marin Mazzie, RIP

    They had planned to unveil a new show, Heart to Heart , in NY this past June, but were forced to cancel due to Mazzie's health. "The divine and courageous Marin Mazzie was #TonyAwards-nominated for PASSION , RAGTIME , and KISS ME, KATE ".
    Elon Musk's SpaceX to announce first tourist to Moon

    Elon Musk's SpaceX to announce first tourist to Moon

    Instead, Musk said, SpaceX would turn its focus to developing the BFR, which he deemed a better option for tourism missions. Humans have not set foot on the Moon since the final Apollo mission in 1972, capping an era of U.S. national pride.

    Beach Town's Main Drag Empty Ahead of Hurricane Florence

    She has no regrets about staying then but enough is enough. "The building's solid and Buddha will protect us". "I'm concerned. In Wilmington, Solange Iliou Thompson closed down her restaurant, Indochine, because all of her employees had left the city.


Most liked

US officials call teen vaping 'epidemic,' weigh flavor ban
Regulators said it was the largest coordinated crackdown in the agency's history. However, there is little consensus about how to regulate the industry.

Hurricane Florence Is Generating 83-Foot Waves in the Atlantic
And the more it hovers just off shore - a distinct possibility - the more potentially deadly storm surge it pushes on-shore. Several schools in the FOX8 viewing area have closings and delays this week ahead of Hurricane Florence.

Spurs without Alli and Lloris for Liverpool clash
Fabinho is full of desire and wants to be involved and I have to tell him "You're not involved this week" and that's not nice. Simon Mignolet is available for the trip to Wembley after a finger injury and will take his place on the bench.

Pep Guardiola reveals plans for Barcelona return at end of career
De Bruyne, once of Chelsea, is considered one of the world's elite midfielders and signed a six-year deal at City in January. I've always been curious about it".

Erdogan appoints himself chairman of Turkey's sovereign wealth fund
The lira has plunged in recent weeks on concerns over domestic policymaking and a crisis in relations with the United States. Erdogan again described interest rates as a " tool of exploitation " but vowed that "we can not be taken advantage of".

Brady appreciates Ramsey leaving him off list of QBs that 'suck'
Ramsey wouldn't really hit his grandmother, would he? "The guy's won a ton of football games and he's very hard to beat". Gronkowski, meanwhile, has done his part to simply ignore Ramsey's chirping, but isn't backing down from the challenge.

Hurricane Florence Rocks Wooden Pier in Nags Head
The Charleston area will see winds near tropical storm strength of 40 miles per hour and somewhere between 3 to 6 inches of rain. Sixteen kilometres away in the city of Wilmington , wind gusts were stirring up frothy white caps into the Cape Fear River.

Landslide injures tourists at famed ‘shipwreck’ beach in Greece
Tourists board a boat at the beach Navagio following a rockfall , on the island of Zakynthos, Greece September 13, 2018. The landslide occurred Thursday on the Navagio Beach , or Shipwreck Beach , on the northwestern coast of the island.

More than 20,000 on NC coast already without power from Florence gusts
People are seen inside a shelter run by Red Cross before Hurricane Florence comes ashore in Grantsboro, N.C., September 13, 2018. Another Wilmington resident said she does not want to leave because she is afraid to see what she would be coming back to.

Eating dairy products linked to lower death rates
A new research challenges the widely held belief that those who consume less full fat are at higher risk of heart disease. That said, people should stick to low-fat dairy, she advised.

Justin Bieber And Hailey Baldwin Are Married
Adding that she can't wait to be Mrs Bieber, "I see no reason to wait", she said of her own decision. That year, Justin had been arrested and got a DUI for street racing a Lamborghini .

Makelele: Sarri can ‘make history’ at Chelsea
Sarri, 59, has since overseen a ideal start to his tenure with the Blues, winning all four Premier League matches so far. Manchester City, Manchester United, and also the smaller teams have good players.

Final Fantasy Is Being Well Represented On Switch
Final Fantasy 15: Pocket Edition is kicking off this string of Final Fantasy releases for the Switch, and it is available now. Additionally, what about all of those Final Fantasy games that appeared on Nintendo hardware?

Hurricane Florence shifts south; Georgia and Carolinas hunker down
The hurricane center said Florence will approach the coast Friday and linger for a while before rolling ashore. More than 1 million people have been ordered to evacuate the coastlines of the Carolinas and Virginia.

Ubisoft Reveals Massive Assassin's Creed
Assassin's Creed: Odyssey will have something for everyone as Ubisoft brings more content to the table. At the time of its release, Assassin's Creed III was considered to be something of a disappointment.