Computer memory refers to a physical device that is used to store sequences of instructions (programs) or data (program state information) on a temporary or permanent basis for use in a computer.

learn more… | top users | synonyms

1
vote
0answers
11 views

VSFTPD- memory attacks [closed]

How are memory attacks prevented via the VSFTPD server? The platform I am using is Ubuntu. Please I am not currently having a problem I am just requesting knowledge concerning the subject stated ...
0
votes
0answers
25 views

Buffer overflow lab problem [migrated]

Since our security course doesn't have a lab, i'm trying to solve the Seed project's lab . http://www.cis.syr.edu/~wedu/seed/Labs_12.04/Software/Buffer_Overflow/Buffer_Overflow.pdf But there seems ...
8
votes
1answer
149 views

Is it unwise to use Redis to store PII, private keys, and other secrets?

I'm reviewing a system that is using Redis to store all client secrets, private keys, and other things. The problem is that Redis loads the entire DB into RAM Since SSL's heartbleed, Rowhammer, and ...
1
vote
0answers
42 views

ROP attack on x64, zero bytes trouble

I have found ROP tutorial on x86. Now i try to exploit simple buffer overflow case on x64: int main(int argc, char **argv) { char buf[10]; strcpy(buf, argv[1]); ... } I figured out, ...
12
votes
2answers
590 views

What are the security implications of “Row Hammer” attack?

I just found out about the Row Hammer attack. Based on the description, this sounds extremely dangerous, but I wonder what percentage of devices are actually affected by these. Are there any ways to ...
0
votes
1answer
49 views

Feasibility of creating an in-memory web app (that runs from a CD-rom on a web server) for sharing self-destructing messages

This question is about a hypothetical in-memory web application that is used for exchanging encrypted messages that passively self-destruct in X amount of minutes. Here the messages would be stored ...
5
votes
2answers
389 views

Why are buffer overflows executed in the direction they are?

I'm following The Security Tube’s video here. He overviews buffer overflows, and mentions how memory is executed from highest to lowest in the stack (at least with his implementation I assume). So we ...
1
vote
3answers
105 views

Mitigating the LUKS decryption key residing in RAM for FDE

I've come to find Full Disk Encryption to be a rather unsafe method of securing data as standardized tools are becoming available to just read out the encryption key from RAM, where the system needs ...
11
votes
3answers
3k views

Why is it dangerous when an attacker can control the `n` parameter to `memcpy()`?

I was reading a paper and saw this piece of code has an information leakage vulnerability. It was saying the following code will Leak memory layout information to the attackers Could somebody please ...
8
votes
3answers
231 views

How private is RAM from other users on a VPS?

Can I safely assume that my RAM never can be accessed by another user on e.g. EC2 or Digital Ocean, if we suppose that I trust my provider and we don't consider possible bugs (such as Heartbleed) in ...
2
votes
0answers
52 views

Onboard Memory of USB HID Devices “hackable”?

I own some mice and keyboards for example my logitech G400 mouse and my razer deathstalker keyboard. Both of those devices have as far as i know built in memories to save DPI settings macros so on ...
5
votes
1answer
184 views

Is it more secure to overwrite the value char[] in a String

I am talking about the Java implementation. Is it more secure to use reflection in order to access the internal Field value of type char[] inside a java.lang.String instance and overwrite the ...
0
votes
3answers
141 views

Effect of mail bombing

I have option in my application which send an invitation email to another user. Someday ago, one of my friend told me that, attacker can flood any email using this function. And i have checked that ...
1
vote
1answer
35 views

Battery Backed SRAM (and Digital Forensics)

Is it feasible to create a portable battery powered drive out of RAM that could sustain its data via the charge of a battery? From my understanding it doesn't require much power. Combining this ...
2
votes
2answers
58 views

Simple PBKDF2 vs. scrypt question

scrypt was designed to use more memory. We can use its parameters to specify (approximately) how much memory we want it to require. But both scrypt and PBKDF2 allow us to specify the output data ...
0
votes
1answer
38 views

Is there a solution for runing processes in encrypted mode on runtime?

Is there any solution for securely running encrypted processes on an untrusted machine over the WAN? In public clouding, you can split your processes and send process request over the WAN, but you ...
0
votes
1answer
107 views

Can server administrator dump memory remotely thru Dell iDrac card?

I might at some point to invite another person into my software project. I don't mind sharing the code but the data I use is very sensitive. Once he gets hands on both pieces I wont see him again (if ...
1
vote
0answers
90 views

Are Hyper-V Memory Snapshots secure/encrypted?

When dealing with encryption tools (TrueCrypt, Bitlocker and any successors) the passwords are always somewhere in memory. Therefore when there are memory dumps on a hard disk, for example in the ...
5
votes
1answer
328 views

What does EMET do for Windows 8.1?

I recall seeing, upon release of Windows 8 a while ago that a number of new mitigations and memory protections had been put in place but i'm unsure if these are the same protections offered by EMET. ...
3
votes
3answers
336 views

C++ memset() memory overflow

I am new to C++. Can any C++ expert tell me would this causing buffer overflow? Sample Code: MyObject op; memset(&op, 0, sizeof(MyObject)); On my view it is ok to be this since the limit is ...
1
vote
3answers
73 views

Variable scope and security

This question is directed at the .Net framework, but would hopefully be answered to encompass many languages & frameworks. Let's assume I have a two methods, one which actually decypts data and ...
1
vote
1answer
409 views

how to wipe RAM in Windows 7

How can i wipe RAM completeley before or during the shutdown process of Windows 7? I tried several programs and a script but later i noticed that all those options only claim to free unused RAM ...
1
vote
2answers
90 views

Are there any artifacts for filesystem forensics in memory?

I have a memory dump. I know it is infected by a rootkit which uses its own file system installed at the end of the disk. Can there be any artifacts in dmp file to show this?
4
votes
1answer
81 views

Principles of memory forensics tools

I am currently writing a thesis about digital forensics which includes a chapter about memory forensics. Besides the tools and the methods of acquiring various data with them, I am kind of desperate ...
1
vote
1answer
3k views

Memory dumping Android

I need to evaluate the security of a cryptographic library. In particular I am targeting a part of the library where I believe the private key is exposed for a limited time in the RAM. Any ideas or ...
5
votes
3answers
645 views

Why does printf() vulnerability require 4-bytes of junk data? - “Hacking: The Art of Exploitation”

I've been reading "Hacking: The Art of Exploitation 2nd Ed." and I hit a part that's not explained clearly enough for me. In the section "Writing to an Arbitrary Address" Jon Erickson creates a ...
1
vote
2answers
161 views

Is cryptography possible without volatile memory?

AFAIK, our current disk encryption methods (dm-crypt) preserve the key (as well as decrypted data) in RAM while the computer is running with an implicit assumption that the memory is volatile and key ...
1
vote
1answer
94 views

Storing encryption passphrases in memory in Dalvik?

Given KeePassDroid, I'm considering some of the security implications of accessing KeePass databases on an Android device. In the native applications for Windows, OSX, and Linux, whenever the ...
1
vote
1answer
68 views

Memory Mapped Files and AV

Do you know if AVs scans non-persistent memory mapped file content in a Windows Environment ? (Or have the answers for some of the AV on the market) I would prefer, if possible, some real world ...
4
votes
1answer
286 views

Does Linux kernel use DEP for kernel memory?

Does the Linux kernel use DEP internally for its kernel memory? In other words, does the Linux kernel take care to ensure that, when the kernel is executing (in kernel mode), every executable ...
3
votes
2answers
131 views

Crypto software: overwrite sensitive buffer

Is it common to implement crypto software in such a way that sensitive buffers are overwritten before free'ing memory? For example when they contain a private key or the plaintext message.
1
vote
2answers
147 views

Is wiping memory at code/end good practise?

Sometimes passwords/hash/keys & other private information is stored in variables and hence in memory/RAM during code execution. while some situations (i.e. Linux Kernels see here Is there any ...
0
votes
1answer
256 views

RAM memory data remanence and double boot, risky?

I wonder if my setup can be risky. To give a good starting point for answers I would briefly sketch the situation setup: double boot system GNU/Linux and Microsoft Windows GNU/Linux is on 2 ...
3
votes
1answer
267 views

File Vault 1 password from memory dump

I have a osx 10.9 machine with a File Vault1 encrypted user partition. I would like to remove the encryption, but I don't remember the "master key" which is the only way to remove encryption ...
3
votes
1answer
884 views

Is Enabling DEP (Data Execution Prevention) For All Programs Worth the Risks?

Data Execution Prevention in Windows supposedly is a line of defense against malicious code by "by monitoring your programs to make sure that they use computer memory safely". However, I also know ...
1
vote
0answers
147 views

How secure is a Python Pyro daemon for storing a password?

I am using the Pyro package to create a daemon which will, upon startup, prompt for a password, and then the daemon will store that password as long as it is running. Other scripts will then make a ...
3
votes
3answers
550 views

Protecting against Firewire DMA vulnerabilities in Linux

I know there have been questions on this in the past but they all seem quite outdated, or not that specifically relevant. I need to use a 1394(Firewire) connection, however am concerned with possible ...
1
vote
1answer
49 views

Does having non-ECC SDRAM affect security of the system?

If I don't have SECDED ECC DRAM, is it possible or realistic that a bit could flip around sshd, and grant a lucky lurker access to my system without requiring a valid password?
1
vote
1answer
104 views

Is it safe to do full disc encryption without ECC DRAM?

Our institution requires disc encryption on laptops, but I'm uneasy about using full disc encryption without SECDED ECC DRAM. Is it safe to use full disc encryption on laptops with unreliable memory? ...
1
vote
1answer
311 views

Bounds checking using Intel's MPX

Intel has recently added new instructions to their instruction set to support bounds checking. Intel calls them the Memory Protection Extensions (MPX), and they are described in Chapter 9 of this ...
4
votes
2answers
612 views

Smashing the stack if it grows upwards

As we know that on most of the processor architectures, the stack grows downwards. Hence, memory exploits involving smashing of stack and buffer overflow and their explanation make sense. Just ...
3
votes
2answers
591 views

Does a flatbed scanner remember any of its previous scans?

I'm about to get rid of an older scanner and I want to make sure that no one is able to acquire any sensitive information that was scanned previously with the machine. I assume it does have some kind ...
7
votes
2answers
804 views

How can I detect (or inventory) all DLLs that don't use ASLR?

Based on this IE zero day, I'm interested in listing all DLLs in our systems that have been compiled to not work with ASLR. Ideally, I'd like to analyze a static file and not load it into memory to ...
3
votes
1answer
113 views

Exploiting memory corruption issues using a DLL file

I was listening to a talk on Return Oriented Exploitation from the Black Hat 2010 conference. The speaker mentioned something about using the DLLs to exploit some of the memory corruption issues. I ...
10
votes
1answer
852 views

Why are some DLLs not randomized? What makes it hard to deploy full ASLR for all DLLs?

One of the challenges with deploying ASLR for everything is that, at least on Windows, some DLLs (libraries) are not compiled in a way that's compatible with ASLR. (They're not compiled as ...
0
votes
1answer
1k views

Using Volatility Framework with Linux memory dumps

I am using Volatility Framework 2.2 to anlayze a Linux memory dump. This memory dump was taken from an Ubuntu 12.04 LTS x86_64 machine with the kernel version 3.5.0-23 I have the profile for it and ...
0
votes
1answer
74 views

How much space is needed? [closed]

How much memory is needed if I want to generate a dictionary of all possible combination of length 6 with a-z and 0-9 characters? Is it a good idea to go for cracking password if I know password ...
0
votes
1answer
1k views

Stack buffer overflow confusion

I am trying to dig deeper into the nuts and bolts a stack buffer overflow using the classical NOP-sled technique. Reading some articles and watching videos brought me to a confusion which can be ...
2
votes
2answers
777 views

Linux Memory Protection from buffer overflow

I am practicing Linux buffer overflow exploitation. when trying to exploit a vulnerability in crossfire, everything works well and I get the shellcode placed in the right place, and the program flow ...
0
votes
1answer
692 views

mprotect at kernel level

What would happen if a kernel-level process sets some of its memory pages as PROT_NONE with mprotect and another kernel-level process tries to read one of these protected pages? What is the ...