News for hackers. Stuff that matters.

A comment on Bitcoin stolen while laptop was in Apple store. Parent comment

Re:Bitcoin stolen while laptop was in Apple store by d0 on Thursday February 13, 2014 @02:44PM (#7233748)
There is an issue with user switching and firewire/DMA that allows remote access as well as cold boot attacks but these are out of reach of most people.
[ Parent | on HN ]
Re:Bitcoin stolen while laptop was in Apple store by acdha on Thursday February 13, 2014 @04:11PM (#7234381)
firewire / thunderbolt DMA access was fixed many years ago: if you enabled a firmware password, those buses have DMA disabled.
[ Parent | on HN ]
Re:Bitcoin stolen while laptop was in Apple store by toomuchtodo on Thursday February 13, 2014 @05:29PM (#7234981)
Are you saying that if I have a firmware password on my MBA that my internal SSD is inaccessible via Thunderbolt externally (until I've entered my password)?
[ Parent | on HN ]
Re:Bitcoin stolen while laptop was in Apple store by aroch on Thursday February 13, 2014 @05:43PM (#7235123)
No, but your TB device wouldn't have read access to physical memory (where keys would be)
[ Parent | on HN ]
Re:Bitcoin stolen while laptop was in Apple store by acdha on Thursday February 13, 2014 @07:22PM (#7235801)
No - but it means that a device can't read your FileVault keys out of memory so all they can read is the encrypted volume.
[ Parent | on HN ]