Yes, we have no hibernate today

Shane Hathaway shane at hathawaymix.org
Thu Jun 24 13:52:42 MDT 2010


On 06/24/2010 12:54 PM, Jessie Morris wrote:
> On 6/24/10 12:48 PM, Charles Curley wrote:
>> Depends on how long you plan to shut down. If you will exhaust the the
>> battery in suspension, then use hibernation. However, hibernation
>> writes a memory image to a swap partition, where bad guys can recover
>> it. Suspension does not, so it leaves one less thing around for the bad
>> guys to recover.
>>
>> http://www.charlescurley.com/blog/archives/2009/12/05/how_to_secure_your_laptop_before_crossing_the_border/index.html
>>
>>
> That is a lie. You can recover encryption keys and other data from
> memory if done right.
> http://www.zdnet.com/blog/security/cryogenically-frozen-ram-bypasses-all-disk-encryption-methods/900

That article is now 2 years old.  Has anything been done about that 
vulnerability?  The attack looks easy and seems to require no special 
hardware.  (Freeze the RAM with a dusting can, pull the RAM, put the RAM 
in your own computer, and use some special OS to read it.)

Shane


More information about the PLUG mailing list