BitUnlocker unveiled.

**Erbmaster** · February 22nd, 2008

This massive security hole should have the security conscious on their toes, and fast!

Word arrives from The Electronic Frontier Foundation that a crack team of researchers - including the Foundation's own Seth Schoen - have discovered a gaping security flaw in everyday disk encryption technologies, including Microsoft's BitLocker as well as TrueCrypt, dm-crypt, and Apple's FileVault....
...If a machine is screen-locked or left in sleep or hibernation mode, Schoen and his cohorts proclaim, an attacker can circumvent disk encryption simply by powering the machine down and quickly re-booting to an external hard drive.

This security hole is largely dependant on the DRAM you use.
As data is retained for up to a minute after powerdown in some circumstances, the retained keys are easy pickings following a cold-boot.

BitUnlocker in action

Source :- The Register

**Dark Atheist** · February 22nd, 2008

you posting stories so you can access the employees section again

**Erbmaster** · February 22nd, 2008

Originally Posted by Carpo

you posting stories so you can access the employees section again

Far from it

...been there done that. Still have the T-Shirt somewhere

(although it's now faded and reads 'XP-erience or NTFS.org' or something like that)

I did feel this needs exposure however. It's a pretty big story, and well....I didn't see it posted on the main page.

If you don't like people posting stories in the 'News Submission' forum I figure it's a flawed concept from idea to production, yet strangely the section still exists. So as such I'll use it

Think of it as me making your job easier today, oh, and with that in mind; you're welcome

**Electronic Punk** · February 22nd, 2008

Having been messing with Bitlocker for enterprise deployment recently, I know we are safe as the PC has had it's sleep mode disabled.

But I guess thre is that period where the machine will be locked before hibernating.

**Dark Atheist** · February 22nd, 2008

im too busy atm to post stories, moving everything over to 64bit, and i have given you credit on the front page

**Erbmaster** · February 22nd, 2008

I was amazed to see DRAM hold data for 10 mins lying on a table when cooled tho

Maybe we'll see gangs of hit 'n' run DRAM thieves with cans of compressed air!

Originally Posted by Carpo

im too busy atm to post stories, moving everything over to 64bit, and i have given you credit on the front page

Was only pulling yer leg, hence all my emoticon spammage

Thanks for posting it tho /fluffle

February 22nd, 2008	Top \| #1
Erbmaster OSNN Veteran Addict Joined: March 2003 Location: Middle Of Nowhere - UK Posts: 1,195 Reputation: 270 Power: 126	BitUnlocker unveiled. This massive security hole should have the security conscious on their toes, and fast! Word arrives from The Electronic Frontier Foundation that a crack team of researchers - including the Foundation's own Seth Schoen - have discovered a gaping security flaw in everyday disk encryption technologies, including Microsoft's BitLocker as well as TrueCrypt, dm-crypt, and Apple's FileVault.... ...If a machine is screen-locked or left in sleep or hibernation mode, Schoen and his cohorts proclaim, an attacker can circumvent disk encryption simply by powering the machine down and quickly re-booting to an external hard drive. This security hole is largely dependant on the DRAM you use. As data is retained for up to a minute after powerdown in some circumstances, the retained keys are easy pickings following a cold-boot. BitUnlocker in action Source :- The Register The Cake Is A Lie? - Well There'd Better Be Cookies!

February 22nd, 2008	Top \| #2
Dark Atheist OSNN Veteran Addict Joined: April 2003 Location: In The Void Posts: 6,373 Blog Entries: 9 Reputation: 1877 Power: 193	Re: BitUnlocker unveiled. you posting stories so you can access the employees section again

February 22nd, 2008	Top \| #3
Erbmaster OSNN Veteran Addict Joined: March 2003 Location: Middle Of Nowhere - UK Posts: 1,195 Reputation: 270 Power: 126	Re: BitUnlocker unveiled. Originally Posted by Carpo you posting stories so you can access the employees section again Far from it ...been there done that. Still have the T-Shirt somewhere (although it's now faded and reads 'XP-erience or NTFS.org' or something like that) I did feel this needs exposure however. It's a pretty big story, and well....I didn't see it posted on the main page. If you don't like people posting stories in the 'News Submission' forum I figure it's a flawed concept from idea to production, yet strangely the section still exists. So as such I'll use it Think of it as me making your job easier today, oh, and with that in mind; you're welcome The Cake Is A Lie? - Well There'd Better Be Cookies!

February 22nd, 2008	Top \| #4
Electronic Punk The Last High Joined: December 2001 Location: London Posts: 18,510 Blog Entries: 51 Reputation: 3652 Power: 349	Re: BitUnlocker unveiled. Having been messing with Bitlocker for enterprise deployment recently, I know we are safe as the PC has had it's sleep mode disabled. But I guess thre is that period where the machine will be locked before hibernating.

February 22nd, 2008	Top \| #5
Dark Atheist OSNN Veteran Addict Joined: April 2003 Location: In The Void Posts: 6,373 Blog Entries: 9 Reputation: 1877 Power: 193	Re: BitUnlocker unveiled. im too busy atm to post stories, moving everything over to 64bit, and i have given you credit on the front page

Latest News Posts

Latest Forum Posts

Latest Member Blogs

February 22nd, 2008	Top \| #6
Erbmaster OSNN Veteran Addict Joined: March 2003 Location: Middle Of Nowhere - UK Posts: 1,195 Reputation: 270 Power: 126	Re: BitUnlocker unveiled. I was amazed to see DRAM hold data for 10 mins lying on a table when cooled tho Maybe we'll see gangs of hit 'n' run DRAM thieves with cans of compressed air! Originally Posted by Carpo im too busy atm to post stories, moving everything over to 64bit, and i have given you credit on the front page Was only pulling yer leg, hence all my emoticon spammage Thanks for posting it tho /fluffle The Cake Is A Lie? - Well There'd Better Be Cookies!

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
File-sharing 'darknet' unveiled	lancer	Green Room	3	August 18th, 2006 8:12am
BTX Unveiled over at ...	Tuffgong4	General Hardware	1	September 16th, 2004 11:31am
New Star Wars Film Title Unveiled	Hsn	Entertainment & Sports	12	July 29th, 2004 2:12am
PSP Handheld Unveiled!	Teddy	General Hardware	14	May 16th, 2004 8:47pm