Secure Says Almost All Computers Are Vulnerable to New Cold Boot Attack

Cold boot attack leaves Apple Dell and Lenovo laptops at risk of data theft

Relying on computer memory's remanence behavior, security researchers figured out a way to extract sensitive data from RAM, such as encryption keys, even after the loss of power.

But security researchers from Finnish cyber-security firm F-Secure discovered that they could disable this feature by modifying firmware settings and steal data from a computer's RAM after a cold reboot.

The attack works against nearly all Macs and Windows PCs and requires several minutes of physical access to a machine left in sleep mode, which maintains enough power to keep data from the most recent active session "alive" in system memory.

"It's not exactly easy to do, but it's not a hard enough issue to find and exploit for us to ignore the probability that some attackers have already figured this out", Olle Segerdahl, one of the F-Secure researchers who developed the attack, said in a statement released this morning (Sept. 13).

Known for its volatility in data retention when out of power, RAM (Random Access Memory) can preserve information for a longer time - even minutes, under low-temperature conditions.

In the meantime, he recommends companies prepare themselves for these attacks.

Ordinary computer users don't need to worry about this attack. But it could be a problem for corporate executives and government officials, whose encrypted computers often contain highly valuable information. "And since this type of threat is primarily relevant in scenarios where devices are stolen or illicitly purchased by attackers, it's the kind of thing an attacker will have plenty of time to execute", said Segerdahl.

Jaguars' Leonard Fournette to miss practice Thursday
Jacksonville could be without one of its biggest playmakers for one of its biggest games on the schedule. He reportedly also said that he could've re-entered the game against the Giants, but was being cautious.

In the case of BitLocker, if it is configured for pre-boot authentication with a PIN, the attack has only one shot to be successful because the code is mandatory for extracting the encryption keys into the RAM.

"It's the kind of thing that attackers looking for bigger phish, like a bank or large enterprise, will know how to use", he added.

A video posted on YouTube by F-Secure shows a user typing out his encryption passwords in a Word document. After that, the attacker can boot from an external device to read the contents of the system's RAM from before the device went to sleep.

F-Secure's researchers presented their findings at a conference in Sweden on Thursday, and are set to present it again at Microsoft's security conference on September 27.

Encryption keys and other sensitive information can then be stolen from memory and full access gained to the system. One of these protections was that computers would overwrite the contents of the RAM when power was restored after a cold boot. Most modern computers overwrite RAM when they are powered down to prevent unauthorised access to data during a cold boot attack, but the researchers have found a way to disable the process.

As reported by ZDNet, F-Secure's findings say that contemporary security measures are enough to prevent the theft caused by the new flaw. According to Cupertino, Macs fitted with an Apple T2 chip are not at risk, and older machines can be protected by setting a firmware password.

Related News:

  • Erdogan appoints himself chairman of Turkey's sovereign wealth fund

    Erdogan appoints himself chairman of Turkey's sovereign wealth fund

    The lira has plunged in recent weeks on concerns over domestic policymaking and a crisis in relations with the United States. Erdogan again described interest rates as a " tool of exploitation " but vowed that "we can not be taken advantage of".
    Makelele: Sarri can ‘make history’ at Chelsea

    Makelele: Sarri can ‘make history’ at Chelsea

    Sarri, 59, has since overseen a ideal start to his tenure with the Blues, winning all four Premier League matches so far. Manchester City, Manchester United, and also the smaller teams have good players.
    Australian newspaper insists controversial Serena Williams cartoon is not racist

    Australian newspaper insists controversial Serena Williams cartoon is not racist

    Despite evidence to the contrary, a mob of Twitter users would go after Knight declaring him and his cartoon racist. The cartoon comes a day after Williams was fined $17,000 for three violations she committed at the U.S.
  • Marin Mazzie Dead - Broadway Star Dies at 57 | Marin Mazzie, RIP

    Marin Mazzie Dead - Broadway Star Dies at 57 | Marin Mazzie, RIP

    They had planned to unveil a new show, Heart to Heart , in NY this past June, but were forced to cancel due to Mazzie's health. "The divine and courageous Marin Mazzie was #TonyAwards-nominated for PASSION , RAGTIME , and KISS ME, KATE ".

    Hurricane Florence Is Generating 83-Foot Waves in the Atlantic

    And the more it hovers just off shore - a distinct possibility - the more potentially deadly storm surge it pushes on-shore. Several schools in the FOX8 viewing area have closings and delays this week ahead of Hurricane Florence.
    Landslide injures tourists at famed ‘shipwreck’ beach in Greece

    Landslide injures tourists at famed ‘shipwreck’ beach in Greece

    Tourists board a boat at the beach Navagio following a rockfall , on the island of Zakynthos, Greece September 13, 2018. The landslide occurred Thursday on the Navagio Beach , or Shipwreck Beach , on the northwestern coast of the island.
  • Elon Musk's SpaceX to announce first tourist to Moon

    Elon Musk's SpaceX to announce first tourist to Moon

    Instead, Musk said, SpaceX would turn its focus to developing the BFR, which he deemed a better option for tourism missions. Humans have not set foot on the Moon since the final Apollo mission in 1972, capping an era of U.S. national pride.
    US officials call teen vaping 'epidemic,' weigh flavor ban

    US officials call teen vaping 'epidemic,' weigh flavor ban

    Regulators said it was the largest coordinated crackdown in the agency's history. However, there is little consensus about how to regulate the industry.
    Pep Guardiola reveals plans for Barcelona return at end of career

    Pep Guardiola reveals plans for Barcelona return at end of career

    De Bruyne, once of Chelsea, is considered one of the world's elite midfielders and signed a six-year deal at City in January. I've always been curious about it".
  • More than 20,000 on NC coast already without power from Florence gusts

    People are seen inside a shelter run by Red Cross before Hurricane Florence comes ashore in Grantsboro, N.C., September 13, 2018. Another Wilmington resident said she does not want to leave because she is afraid to see what she would be coming back to.
    Leaked Study Documents Thousands of German Sex-Abuse Cases

    Leaked Study Documents Thousands of German Sex-Abuse Cases

    Pope Francis has launched an investigation into alleged financial irregularities involving the 550-year-old Sistine Chapel Choir. DiNardo's deputy Jose Horacio Gomez and general secretary Brian Bransfield also attended the closed-door meeting.

    Hurricane Florence from space

    Following Hurricane Florence are two more powerful storms crossing the Atlantic, namely Tropical Storm Isaac and Hurricane Helene. Photo station published on its website.


Most liked

Hurricane Florence: Four reasons to fear this storm
It's not all for show, either. "The larger and the slower the storm is, the greater the threat and the impact-and we have that". On Friday, the storm's center will hug the coast of southeast North Carolina, where the most severe effects are expected.

Hurricane Florence lashes United States east coast, triggers flood warnings
Overall, the storm is 400 miles wide. "Against my better judgment, due to emotionalism, I evacuated", said Fisher, 74. Workers are being brought in from the Midwest and Florida to help in the storm's aftermath, it said.

'Incredibly Distasteful': 'Outnumbered' on Trump Casting Doubt on Hurricane Maria Death Toll
Not only because it seemed indifferent to Puerto Rican suffering, but also because it is demonstrably false. And I respect him. "If you are a United States citizen, you should be disgusted by this".

Brady appreciates Ramsey leaving him off list of QBs that 'suck'
Ramsey wouldn't really hit his grandmother, would he? "The guy's won a ton of football games and he's very hard to beat". Gronkowski, meanwhile, has done his part to simply ignore Ramsey's chirping, but isn't backing down from the challenge.

Meghan Markle mocked by half-sister Samantha in latest rant
Royal fans went wild once the photo was posted. "She has an obligation especially to treat our father with kindness". This is the end of your normal life, the end of your privacy - everything'. "This is a happy time for us".

Rashford to fight for his place at Manchester United this season
We have to remember that Harry, at that age, had hardly played anywhere near the same number of matches for Spurs. Rashford claimed nine goals in 21 appearances in that first half-season but he has since endured fallow periods.

ISS images show massive Hurricane Florence from 400 km up
Officials said some 1.7 million people in the Carolinas and Virginia were warned to evacuate, but it's unclear how many did. "Catastrophic effects will be felt outside the center of the storm due to storm surge as high as 9 to 13 feet".

This will be the name of the 6.1-inch budget iPhone X
As per the report, people familiar with the matter have said, "Apple has considered calling the phone the "iPhone XR". While there have also been rumblings that the devices might be priced at $799 and $999, that seems somewhat unlikely.

Too many teens are using Juuls, according to the FDA
And some of the retailers that received warning letters are still advertising and selling these products, he said. The steps announced Wednesday are just the initial elements of these new efforts, Gottlieb said.

USA ‘weighing’ China sanctions for treatment of Uighur Muslims
The Uyghurs were forced to welcome officials into their homes, where they were subjected to "political education". The government has previously blamed anti-China forces for being behind criticism of its policies in Xinjiang.

Final Fantasy Is Being Well Represented On Switch
Final Fantasy 15: Pocket Edition is kicking off this string of Final Fantasy releases for the Switch, and it is available now. Additionally, what about all of those Final Fantasy games that appeared on Nintendo hardware?

Mobile Sprint merger review delayed by FCC
The companies had tried to merge twice in the past, but regulators and internal disagreements prevented it from happening. Sprint and T-Mobile in April announced a deal to form a new company and push development of a super-fast 5G network.

Hurricane Florence shifts south; Georgia and Carolinas hunker down
The hurricane center said Florence will approach the coast Friday and linger for a while before rolling ashore. More than 1 million people have been ordered to evacuate the coastlines of the Carolinas and Virginia.

Ubisoft Reveals Massive Assassin's Creed
Assassin's Creed: Odyssey will have something for everyone as Ubisoft brings more content to the table. At the time of its release, Assassin's Creed III was considered to be something of a disappointment.

Scientists discover new fish species in ocean's terrifying depths
Apart from snailfish, they also found various freaky creatures in the environment such as long-legged isopods or Munnopsids . The creatures can swim backwards and upside down, have long legs like a spider, and paddles to help them swim.