[ourladyofdata]

RAM Freeze Countermeasures

Even if your computer is turned off and the drive is encrypted (with
strong encryption), the RAM can still be cooled to a low enough temperature
that cached data can be retrieved.

This is a proof of concept for educational purposes only and is not endorsing
criminal activity.

A possible hardware workaround is to discharge a capacitor, but that's
destructive, here is a more elegant solution.

Hidden Content

You must register or login to view this content.

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.

[Shenron]

First, RAM freeze is a bug, RAM cooling is an cold boot attack.

Furthermore, the command you are using has nothing to do with your use case. 
I would add that no software is capable of protecting against this, as it is based on hardware behaviour.


Modern RAM (DDR3 and DDR4) needs to be cooled down to more than -30 degrees Celsius in order to retain any information for more than a couple of seconds. As long as you have DDR3 or DDR4 memory, and you are able to shut down your system several seconds before "they" get their hands on it, then you are completely safe. 

Cold boot attacks are a risk if either you have old memory type (like DDR/DDR2), your computer is taken from you while it is still on, and your adversary has ample time to prepare and freeze the memory sticks while the system is still running.


The two countermeasures I see are:
- Remove RAM stick since modern CPU has enough cache to run a small OS in it.
- Relocating in-memory-stored private data constantly and wiping out a memory used for a previous storage, but it will not save you, it will only make it harder to extract)

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.

[distort5656]

yeah its called tails os it run all on ram

This forum account is currently banned. Ban Length: Permanent (N/A Remaining)
Ban Reason: Contact Administration.