+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Grayhat • Purple Team • Hybrid Security (https://hackforums.net/forumdisplay.php?fid=449)
+---- Forum: Website Hacking (https://hackforums.net/forumdisplay.php?fid=43)
+---- Thread: This gives me great scare (/showthread.php?tid=3300921)
This gives me great scare - Microrobot - Mar 3, 2013
http://www.geek.com/articles/chips/300-tool-can-decrypt-pgp-truecrypt-files-without-a-password-20121221/
How can we prevent this tool from working?
* - you are a skid - Mar 3, 2013
prevent it by using a decent "encryption tool".
* - MajorFail - Mar 3, 2013
Disable firewire in BIOS and powerdown your system (do not use hibernation) if your not using it. If anyone gets their hands on your PC while it's booted up and the key is still in memory (ie. you mounted the encrypted volume) they can extract the key. Even a few minutes after shuting down your PC the key can still be extracted (see ' cold boot attack').
* - RyanC - Mar 3, 2013
Isn't this like multiple years old?
* - Cody8295 - Mar 3, 2013
They mention in the article that this works by pulling the public key from your RAM. Therefor you should be safe if you restart your computer after using TrueCrypt. That orrr... Find a way to "blank" certain parts of your RAM?
* - MajorFail - Mar 3, 2013
(Mar 3, 2013 05:57 PM)Who? Wrote: Isn't this like multiple years old?
Yes, at least 2008 so it's pretty old news.