News for hackers. Stuff that matters.

A comment on A Hacker's Replacement for Gmail. Parent comment

Re:A Hacker's Replacement for Gmail by mike-cardwell on Sunday June 30, 2013 @02:48PM (#5966718)
"ridiculously complex mechanism" ... Not really. Anyone with the ability to stick a USB stick in a USB port and hit a power reset button can pull off this attack:

http://www.mcgrewsecurity.com/tools/msramdmp/

[ Parent | on HN ]
Re:A Hacker's Replacement for Gmail by noinsight on Monday July 01, 2013 @05:31AM (#5969586)
Hmm, that requires USB booting though, if you disable that from the BIOS and password protect it, they can't really use this method. If they pull the battery the machine needs to be turned off and so the RAM will clear.
[ Parent | on HN ]
Re:A Hacker's Replacement for Gmail by etherael on Monday July 01, 2013 @06:02AM (#5969650)
You don't get BIOS access to low cost dedicated servers on OVH, even though they're dedicated, you can't KVM them.

mid to high range ones you can though so that might be a workable solution there.

Also, they can still rip the ram out and nitrogen it.

[ Parent | on HN ]
Re:A Hacker's Replacement for Gmail by etherael on Sunday June 30, 2013 @03:32PM (#5966870)
Interesting stuff. TRESOR might not be overkill after all.
[ Parent | on HN ]