Secure Says Almost All Computers Are Vulnerable to New Cold Boot Attack

Relying on computer memory's remanence behavior, security researchers figured out a way to extract sensitive data from RAM, such as encryption keys, even after the loss of power.

But security researchers from Finnish cyber-security firm F-Secure discovered that they could disable this feature by modifying firmware settings and steal data from a computer's RAM after a cold reboot.

The attack works against nearly all Macs and Windows PCs and requires several minutes of physical access to a machine left in sleep mode, which maintains enough power to keep data from the most recent active session "alive" in system memory.

"It's not exactly easy to do, but it's not a hard enough issue to find and exploit for us to ignore the probability that some attackers have already figured this out", Olle Segerdahl, one of the F-Secure researchers who developed the attack, said in a statement released this morning (Sept. 13).

Known for its volatility in data retention when out of power, RAM (Random Access Memory) can preserve information for a longer time - even minutes, under low-temperature conditions.

In the meantime, he recommends companies prepare themselves for these attacks.

Ordinary computer users don't need to worry about this attack. But it could be a problem for corporate executives and government officials, whose encrypted computers often contain highly valuable information. "And since this type of threat is primarily relevant in scenarios where devices are stolen or illicitly purchased by attackers, it's the kind of thing an attacker will have plenty of time to execute", said Segerdahl.

Pep Guardiola reveals plans for Barcelona return at end of career
De Bruyne, once of Chelsea, is considered one of the world's elite midfielders and signed a six-year deal at City in January. I've always been curious about it".

In the case of BitLocker, if it is configured for pre-boot authentication with a PIN, the attack has only one shot to be successful because the code is mandatory for extracting the encryption keys into the RAM.

"It's the kind of thing that attackers looking for bigger phish, like a bank or large enterprise, will know how to use", he added.

A video posted on YouTube by F-Secure shows a user typing out his encryption passwords in a Word document. After that, the attacker can boot from an external device to read the contents of the system's RAM from before the device went to sleep.

F-Secure's researchers presented their findings at a conference in Sweden on Thursday, and are set to present it again at Microsoft's security conference on September 27.

Encryption keys and other sensitive information can then be stolen from memory and full access gained to the system. One of these protections was that computers would overwrite the contents of the RAM when power was restored after a cold boot. Most modern computers overwrite RAM when they are powered down to prevent unauthorised access to data during a cold boot attack, but the researchers have found a way to disable the process.

As reported by ZDNet, F-Secure's findings say that contemporary security measures are enough to prevent the theft caused by the new flaw. According to Cupertino, Macs fitted with an Apple T2 chip are not at risk, and older machines can be protected by setting a firmware password.

Related News:

  • Elon Musk's SpaceX to announce first tourist to Moon

    Elon Musk's SpaceX to announce first tourist to Moon

    Instead, Musk said, SpaceX would turn its focus to developing the BFR, which he deemed a better option for tourism missions. Humans have not set foot on the Moon since the final Apollo mission in 1972, capping an era of U.S. national pride.
    Hurricane Florence weakens slightly as it moves toward USA  coast: NHC

    Hurricane Florence weakens slightly as it moves toward USA coast: NHC

    Even though the ISS is 400km above the storm, Florence is so huge that astronauts needed a wide-angle lens to capture the storm. The Carolinas will bear the brunt of the storm, but as it moves inland, Virginia, Georgia, and Maryland will also be hit.

    Hurricane Florence from space

    Following Hurricane Florence are two more powerful storms crossing the Atlantic, namely Tropical Storm Isaac and Hurricane Helene. Photo station published on its website.
  • Brady appreciates Ramsey leaving him off list of QBs that 'suck'

    Brady appreciates Ramsey leaving him off list of QBs that 'suck'

    Ramsey wouldn't really hit his grandmother, would he? "The guy's won a ton of football games and he's very hard to beat". Gronkowski, meanwhile, has done his part to simply ignore Ramsey's chirping, but isn't backing down from the challenge.

    More than 20,000 on NC coast already without power from Florence gusts

    People are seen inside a shelter run by Red Cross before Hurricane Florence comes ashore in Grantsboro, N.C., September 13, 2018. Another Wilmington resident said she does not want to leave because she is afraid to see what she would be coming back to.
    Ubisoft Reveals Massive Assassin's Creed

    Ubisoft Reveals Massive Assassin's Creed

    Assassin's Creed: Odyssey will have something for everyone as Ubisoft brings more content to the table. At the time of its release, Assassin's Creed III was considered to be something of a disappointment.
  • 'Incredibly Distasteful': 'Outnumbered' on Trump Casting Doubt on Hurricane Maria Death Toll

    'Incredibly Distasteful': 'Outnumbered' on Trump Casting Doubt on Hurricane Maria Death Toll

    Not only because it seemed indifferent to Puerto Rican suffering, but also because it is demonstrably false. And I respect him. "If you are a United States citizen, you should be disgusted by this".
    Justin Bieber And Hailey Baldwin Are Married

    Justin Bieber And Hailey Baldwin Are Married

    Adding that she can't wait to be Mrs Bieber, "I see no reason to wait", she said of her own decision. That year, Justin had been arrested and got a DUI for street racing a Lamborghini .

    Too many teens are using Juuls, according to the FDA

    And some of the retailers that received warning letters are still advertising and selling these products, he said. The steps announced Wednesday are just the initial elements of these new efforts, Gottlieb said.
  • Hurricane Florence Rocks Wooden Pier in Nags Head

    Hurricane Florence Rocks Wooden Pier in Nags Head

    The Charleston area will see winds near tropical storm strength of 40 miles per hour and somewhere between 3 to 6 inches of rain. Sixteen kilometres away in the city of Wilmington , wind gusts were stirring up frothy white caps into the Cape Fear River.
    Horrific details emerge in Jabari Bird assault case

    Horrific details emerge in Jabari Bird assault case

    What is Bird's employment status with the Celtics? The Celtics selected Bird with the No. 56 overall pick in the 2017 NBA Draft. Boston Celtics guard Jabari Bird pleaded not guilty on Thursday to charges of domestic assault, strangulation, and kidnapping.
    Australian newspaper insists controversial Serena Williams cartoon is not racist

    Australian newspaper insists controversial Serena Williams cartoon is not racist

    Despite evidence to the contrary, a mob of Twitter users would go after Knight declaring him and his cartoon racist. The cartoon comes a day after Williams was fined $17,000 for three violations she committed at the U.S.


Most liked

Hurricane Florence: Four reasons to fear this storm
It's not all for show, either. "The larger and the slower the storm is, the greater the threat and the impact-and we have that". On Friday, the storm's center will hug the coast of southeast North Carolina, where the most severe effects are expected.

Marin Mazzie Dead - Broadway Star Dies at 57 | Marin Mazzie, RIP
They had planned to unveil a new show, Heart to Heart , in NY this past June, but were forced to cancel due to Mazzie's health. "The divine and courageous Marin Mazzie was #TonyAwards-nominated for PASSION , RAGTIME , and KISS ME, KATE ".

US officials call teen vaping 'epidemic,' weigh flavor ban
Regulators said it was the largest coordinated crackdown in the agency's history. However, there is little consensus about how to regulate the industry.

Spurs without Alli and Lloris for Liverpool clash
Fabinho is full of desire and wants to be involved and I have to tell him "You're not involved this week" and that's not nice. Simon Mignolet is available for the trip to Wembley after a finger injury and will take his place on the bench.

Erdogan appoints himself chairman of Turkey's sovereign wealth fund
The lira has plunged in recent weeks on concerns over domestic policymaking and a crisis in relations with the United States. Erdogan again described interest rates as a " tool of exploitation " but vowed that "we can not be taken advantage of".

David Silva reveals the one club he's always wanted to play for
However, City have also confirmed that things are good off the pitch too, with revenue breaking the £500m mark. For the fourth consecutive season, City reported a profit, this time of £10.4 million.

Landslide injures tourists at famed ‘shipwreck’ beach in Greece
Tourists board a boat at the beach Navagio following a rockfall , on the island of Zakynthos, Greece September 13, 2018. The landslide occurred Thursday on the Navagio Beach , or Shipwreck Beach , on the northwestern coast of the island.

Flight carrying Kulsoom Nawazs body departs for Pakistan
For the sake of uninterrupted traffic flow, special arrangements were also made outside Jattiumra. People continued to arrive at Jati Umra to express grief and offer sympathy to the Sharif family.

Meghan Markle mocked by half-sister Samantha in latest rant
Royal fans went wild once the photo was posted. "She has an obligation especially to treat our father with kindness". This is the end of your normal life, the end of your privacy - everything'. "This is a happy time for us".

Eating dairy products linked to lower death rates
A new research challenges the widely held belief that those who consume less full fat are at higher risk of heart disease. That said, people should stick to low-fat dairy, she advised.

Leaked Study Documents Thousands of German Sex-Abuse Cases
Pope Francis has launched an investigation into alleged financial irregularities involving the 550-year-old Sistine Chapel Choir. DiNardo's deputy Jose Horacio Gomez and general secretary Brian Bransfield also attended the closed-door meeting.

Evacuations in United States ahead of Hurricane Florence
A state of emergency has also been declared in Maryland, North Carolina, South Carolina, Virginia and Washington. Florence is being trailed in the Atlantic by two other storms - Hurricane Helene and Tropical Storm Isaac.

Makelele: Sarri can ‘make history’ at Chelsea
Sarri, 59, has since overseen a ideal start to his tenure with the Blues, winning all four Premier League matches so far. Manchester City, Manchester United, and also the smaller teams have good players.

Facebook's Rosetta AI is perusing your images
As great as the technology is, Facebook is seeking something better: the ability to pull text from images and understand the text. It scans all the images with the help of a technique that differs from those employed by traditional text recognition software.

Final Fantasy Is Being Well Represented On Switch
Final Fantasy 15: Pocket Edition is kicking off this string of Final Fantasy releases for the Switch, and it is available now. Additionally, what about all of those Final Fantasy games that appeared on Nintendo hardware?