Comments on: Defeating Disk Encryption

By: jj

jj — Tue, 05 Aug 2008 05:55:54 +0000

I dont think its possible to do this on Drivecrypt before it loads into operating system anyway.

By: Rarst

Rarst — Sun, 20 Jul 2008 14:06:41 +0000

So don’t leave notebook turned on and unattended. Actually this was very good idea even before these possible attacks. :)

By: Vivek

Vivek — Sun, 20 Jul 2008 12:44:36 +0000

wow … that was clever !!! :)

Probably the next step in encryption would be mapping RAM’s capacitors and deliberately storing the key at different locations and different RAM modules (most of us have dual channel RAMs now, isnt it). Is that even possible??

Also, adding redundancy to confuse the hacker should be useful too!!

By: Software to defeat Disk Encryption released

Software to defeat Disk Encryption released — Sun, 20 Jul 2008 11:41:27 +0000

[...] taking a snapshot of the system memory and analysing that memory for data and keys. I covered the Defeating Disk Encryption story here at Ghacks in [...]

By: Martin

Martin — Mon, 25 Feb 2008 17:13:16 +0000

Hehe you are right of course, but it’s better than nothing :)

By: Wiegmann

Wiegmann — Mon, 25 Feb 2008 16:27:17 +0000

“If you never thought about using a BIOS password and disabling booting from USB devices and CD / DVD before you should start thinking about it right now. That is if you use disk encryption.”

<-That doesn’t really help you, if you put the RAM into another computer, like in the video mentionend! The BIOS settings aren’t stored in RAM :-)

By: Jawwad

Jawwad — Mon, 25 Feb 2008 15:21:34 +0000

I wonder if they can defeat the TrueCrypt 5.0 encryption using this technique?