Computer memory refers to a physical device that is used to store sequences of instructions (programs) or data (program state information) on a temporary or permanent basis for use in a computer.

learn more… | top users | synonyms

3
votes
1answer
61 views

Can I Prevent Internet Explorer from Storing Login Requests in Memory?

Using Internet Explorer 11 I have been able to login to HTTPS web applications by providing a username and password and then subsequently logout. Whilst the browser process is running I can then dump ...
0
votes
0answers
21 views

Memory Forensics dumping the memory contents of a running PID [closed]

There was an old security tool called PMdump that could dump memory contents of a running PID without disturbing those contents, which is useful for analyzing suspicious processes. However this tools ...
0
votes
0answers
31 views

What are the differences between paging and segmentation in terms of security?

How do the two techniques differ when it comes to keeping data in memory safe? Which one is safer if one can ask that question. What is meant when it is said that segmentation provides separate ...
2
votes
1answer
109 views

Is it possible for a virus to be redistributed through RAM?

I have a new, formatted, and up-to-date laptop. It's clean of any infections and I'm sure of it. The only change I've made is that I added a new 4G DDR3 RAM stick from my old laptop, and my new one ...
3
votes
2answers
113 views

RAM Encryption. Is it possible? [duplicate]

Without adding any additional hardware, is RAM encryption possible? If so are there any known and currently used implementations for Linux or Windows systems? And if this is something that is possible ...
8
votes
1answer
128 views

How long would a computer have to be off to be resistant to a cold boot attack?

I understand that the longer a computer is off, the more resistant it is to a cold boot attack. I also understand that an AES key can be reconstructed from a redundant round key schedule even after a ...
4
votes
1answer
78 views

Create memory dump from the windows commandline

I was following this blog post to dump the memory of a windows host. Sadly this method does not work on Windows Server 2012 because the memory drivers that come with mdd aren't signed and this is ...
3
votes
0answers
35 views

Address of environment variable different for each directory

I'm writing a return-to-libc attack for a school project. My script retrieves the system(), exit() and shell addresses as follows (it's a sh script that calls some c programs): Create the environment ...
49
votes
4answers
6k views

Old OS memory space protection - was it really that bad?

In his book Security Engineering, Anderson really focuses on how in the 90s and early 2000s programs would need to access memory that wasn't their own, and programmers programmed with the assumption ...
3
votes
4answers
119 views

Simple tools for searching process memory for MSSQL connection strings

I'm working with a piece of software that handles all permissions in a Windows client binary on the user's computer. The software connects to a backend database using the sa account. The sa password ...
7
votes
0answers
210 views

iPhone 5/6 RAM security

I'm interested in how the RAM can be exploited in iPhone 5+, iOS 8+. I've previously discussed general iPhone encryption and from the response it reads: There are many exploits over the years ...
2
votes
1answer
131 views

How do programs like keepass protect their data even when it's loaded into RAM?

After noticing the feature in Keeppass having the option to "Enable in memory protection" I began wondering, how can memory be encrypted and still be useful? Without going into homomorphic ...
5
votes
3answers
160 views

How to mitigate heartbleed like attacks prior to zero day

Whenever sensitive data such as a password is used on a server it resides in memory for a short time. Given that security flaws like heartbleed exist which have the ability to 'bleed' memory for their ...
4
votes
1answer
115 views

Convert raw memory dump into a format recognized by volatility

I dumped the RAM of a Windows 7 pc using LiveKd which basicly worked. The memory was dumped but then the convert of the binary dump into "summary format" failed. When I then tried to read the file ...
2
votes
2answers
81 views

Prevent Plain-Text Passwords Output by a Script From Being Accessible in the Future

Let's say I have a Bash script that generates a password, creates a new user with that password, and then tells me what the password is: # Generate a password and set it to $PASSWORD PASSWORD=$(tr ...
1
vote
1answer
83 views

Volatility Plugins Directory Using Windows

I'm trying to use a plugin (not built-in) with volatility 2.4 but am having trouble with the syntax. I know that at least for the native python (vol.py) the plugins option must be specified directly ...
2
votes
1answer
81 views

Selling used ram [DDr3 SODIMM]. Need to erase?

Does DDr3 SODIMM memory hold information after being removed? I would like to sell the memory I just removed from my computer, however I wasn't sure if I had to wipe/erase it first some how. Please ...
3
votes
1answer
70 views

Defeating ROP attacks in x86

Most defense techniques against ROP revolves around randomization, such as ASLR. If I mark all regions of memory, other than the code segment, non-executable, will this defeat ROP?
9
votes
1answer
128 views

Are there any architectures currently out there that use hardware-enforced process isolation? What would it take to add that to x86?

First-time asker/commenter, long-time reader. As someone who's currently doing a lot of thinking & writing about measures that might foundationally improve computer security (ie., involving not ...
47
votes
6answers
8k views

Can RAM retain data after removal?

Is it possible for RAM to retain any data after power is removed? I don't mean within a few minutes such as cold boot Attacks but rather 24 hours plus. Working with classified systems the policy ...
2
votes
0answers
24 views

How to disable typed arrays in firefox as rowhammer mitigation

I am concerned about the potential attack surface exposed by JavaScript typed arrays as a means of performing rowhammer attacks. Is it possible to disable (via official means or otherwise) typed ...
6
votes
1answer
275 views

Are encryption keys wiped from RAM before hibernate, or how to do it (Luks and Truecrypt)

Using Linux, I have system and swap/hibernation partitions encrypted with LUKS, and data partitions encrypted with Truecrypt, and I am wondering when I put my laptop to hibernation if the encryption ...
5
votes
1answer
123 views

Is it safe to reuse a tab in a browser for different websites?

A friend of mine recently asserted that it is unsafe to reuse the same tab in a browser for different websites. In other words, if the user: Visits a sensitive website (for example logs in his bank ...
10
votes
2answers
249 views

How to know whether a RAM module is vulnerable to rowhammer before buying?

I'd like to know (or at least perform some reasonable guess) if a RAM is vulnerable to rowhammer attack. I haven't found any list of vulnerable or secure RAM modules. I've seen some general rules ...
7
votes
2answers
149 views

Do password managers leak information with swap memory?

The post How to find passwords in memory (password managers) concluded, that passwords are visible in plaintext if you login to a website. Password managers tend to store the passwords encrypted in ...
6
votes
0answers
187 views

Do I need to use the cipher command with a newer SSD to erase files?

I've used Eraser in the past, and recently became aware of the cipher command in Windows 8. Specifically, with the /w flag: /w removes data from portions of the volume it can access and have not ...
2
votes
1answer
259 views

Dump linux password in clear text

Is it possible to dump a Linux password in clear text format? In Windows it is possible to do so using "Windows Credential Editor".
1
vote
1answer
162 views

How does Memory Corruption apply to Android?

I have researched several DoS attacks within Android e.g.: CVE-2015-1474 CVE-2013-5933 CVE-2013-4710 CVE-2012-6301 etc. And although I found DoS attacks within Android difficult to understand at ...
0
votes
2answers
114 views

How hard would it be to scramble crypto keys in memory on command?

I'm looking for a way locate a set of keys in memory on command. Use case would be cold boot attack prevention: a trigger on rack open, scramble the keys in memory followed by shutdown in full disk ...
2
votes
3answers
224 views

What is risk of having memcache in public interface?

To what extent a hacker can potentially cause harm to a server? Can you please give few examples? Recently, there was a data breach in my website and I found out this interface was public-facing and ...
3
votes
0answers
126 views

Was TRESOR integrated in the Linux kernel?

If a computer is switched off, the data can stay in RAM memory for a while; decaying over about 5 minutes. This can be made longer by cooling the chips: ...
0
votes
1answer
263 views

Moving /tmp to an encrypted tmpfs

BLUF: I'm using an SSD on my system, so my primary reason to use tmpfs to increase the life of my drive by moving high read/write files to volatile memory. But from a security point of view, I'd also ...
0
votes
1answer
45 views

Security of applications on .net platform

On .net we use SecureString class to keep our applications variables in memory, safely. Microsoft says: Represents text that should be kept confidential. The text is encrypted for privacy when ...
5
votes
2answers
127 views

Possible way to extract sudo password from running system via the clipboard

I use to copy and paste my sudo password from a KeePass file so I guess the plain text user password will be saved in RAM at some point when I use it, for example, to accept an update. Is that right? ...
1
vote
0answers
45 views

VSFTPD- memory attacks [closed]

How are memory attacks prevented via the VSFTPD server? The platform I am using is Ubuntu. Please I am not currently having a problem I am just requesting knowledge concerning the subject stated ...
6
votes
1answer
265 views

Is it unwise to use Redis to store PII, private keys, and other secrets?

I'm reviewing a system that is using Redis to store all client secrets, private keys, and other things. The problem is that Redis loads the entire DB into RAM Since SSL's heartbleed, Rowhammer, and ...
2
votes
0answers
107 views

ROP attack on x64, zero bytes trouble

I have found ROP tutorial on x86. Now i try to exploit simple buffer overflow case on x64: int main(int argc, char **argv) { char buf[10]; strcpy(buf, argv[1]); ... } I figured out, ...
12
votes
2answers
1k views

What are the security implications of “Row Hammer” attack?

I just found out about the Row Hammer attack. Based on the description, this sounds extremely dangerous, but I wonder what percentage of devices are actually affected by these. Are there any ways to ...
0
votes
1answer
65 views

Feasibility of creating an in-memory web app (that runs from a CD-rom on a web server) for sharing self-destructing messages

This question is about a hypothetical in-memory web application that is used for exchanging encrypted messages that passively self-destruct in X amount of minutes. Here the messages would be stored ...
9
votes
2answers
614 views

Why are buffer overflows executed in the direction they are?

I'm following The Security Tube’s video here. He overviews buffer overflows, and mentions how memory is executed from highest to lowest in the stack (at least with his implementation I assume). So we ...
1
vote
3answers
350 views

Mitigating the LUKS decryption key residing in RAM for FDE

I've come to find Full Disk Encryption to be a rather unsafe method of securing data as standardized tools are becoming available to just read out the encryption key from RAM, where the system needs ...
11
votes
3answers
3k views

Why is it dangerous when an attacker can control the `n` parameter to `memcpy()`?

I was reading a paper and saw this piece of code has an information leakage vulnerability. It was saying the following code will Leak memory layout information to the attackers Could somebody please ...
8
votes
3answers
419 views

How private is RAM from other users on a VPS?

Can I safely assume that my RAM never can be accessed by another user on e.g. EC2 or Digital Ocean, if we suppose that I trust my provider and we don't consider possible bugs (such as Heartbleed) in ...
3
votes
0answers
141 views

Onboard Memory of USB HID Devices “hackable”?

I own some mice and keyboards for example my logitech G400 mouse and my razer deathstalker keyboard. Both of those devices have as far as i know built in memories to save DPI settings macros so on ...
5
votes
1answer
436 views

Is it more secure to overwrite the value char[] in a String

I am talking about the Java implementation. Is it more secure to use reflection in order to access the internal Field value of type char[] inside a java.lang.String instance and overwrite the ...
0
votes
3answers
175 views

Effect of mail bombing

I have option in my application which send an invitation email to another user. Someday ago, one of my friend told me that, attacker can flood any email using this function. And i have checked that ...
1
vote
1answer
58 views

Battery Backed SRAM (and Digital Forensics)

Is it feasible to create a portable battery powered drive out of RAM that could sustain its data via the charge of a battery? From my understanding it doesn't require much power. Combining this ...
2
votes
2answers
94 views

Simple PBKDF2 vs. scrypt question

scrypt was designed to use more memory. We can use its parameters to specify (approximately) how much memory we want it to require. But both scrypt and PBKDF2 allow us to specify the output data ...
0
votes
1answer
51 views

Is there a solution for runing processes in encrypted mode on runtime?

Is there any solution for securely running encrypted processes on an untrusted machine over the WAN? In public clouding, you can split your processes and send process request over the WAN, but you ...
0
votes
2answers
283 views

Can server administrator dump memory remotely thru Dell iDrac card?

I might at some point to invite another person into my software project. I don't mind sharing the code but the data I use is very sensitive. Once he gets hands on both pieces I wont see him again (if ...