asteroza + retrieval + firewire   3

pr-120201.pdf (application/pdf Object)
Surprise, surprise. Somebody uses the DMA capabilities of Firewire to extract priviledged info from memory. Shame on Apple for not keeping the encryption keys in low memory that is difficult or impossible to access from Firewire.
mac  OSX  FileVault  disk  encryption  key  extraction  password  retrieval  Passware  forensic  software  firewire  1394  live  memory  analysis  Delicious 
february 2012 by asteroza

Copy this bookmark:



description:


tags: