Computer memory refers to a physical device that is used to store sequences of instructions (programs) or data (program state information) on a temporary or permanent basis for use in a computer.

learn more… | top users | synonyms

2
votes
3answers
68 views

Is it safe to include memory addresses in a program’s output?

I’m writing a program. The input is a complex data structure in memory. The output is an HTML report that contains: (1) a representation of the structure; (2) textual annotations that refer to objects ...
7
votes
1answer
81 views

Methods of cold boot attacks in the wild

As far as I know, there are two methods for performing cold boot attacks: Reboot the system into an alternate operating system or BIOS with a minimal memory footprint which automatically exports ...
9
votes
2answers
306 views

Do I need to use the cipher command with a newer SSD to erase files?

I've used Eraser in the past, and recently became aware of the cipher command in Windows 8. Specifically, with the /w flag: /w removes data from portions of the volume it can access and have not ...
2
votes
0answers
48 views

How can I protect my home/office computer against row hammer?

Row hammer seems to affect ECC memory less, but ECC is still not immune. I have heard of software mitigations like ANVIL, but that doesn't seem to be 100% row-hammer-proof either. What software or ...
-1
votes
3answers
51 views

What is the future of exploitations? [closed]

With the advent of "Safe" languages like Rust, the prevalence of Software Correctness, and improved type checking in existing systems, memory based exploits are very hard if not possible at all, to ...
5
votes
1answer
174 views

Was TRESOR integrated in the Linux kernel?

If a computer is switched off, the data can stay in RAM memory for a while; decaying over about 5 minutes. This can be made longer by cooling the chips: ...
2
votes
1answer
61 views

How do self-contained executable program exploits work, when considering virtual memory?

My understanding of virtual memory is that the operating system allows each process to have access to the entire pool of memory, and creates this illusion by paging. As a consequence, a program can ...
9
votes
1answer
1k views

iPhone 5/6 RAM security

I'm interested in how the RAM can be exploited in iPhone 5+, iOS 8+. I've previously discussed general iPhone encryption and from the response it reads: There are many exploits over the years ...
1
vote
2answers
85 views

encrypting data while in memory

What is the best way to protect sensitive text input and store it in memory until form submission is complete and then clear it out shortly thereafter? I'm looking to protect sensitive information ...
-1
votes
1answer
70 views

Tool for reading application data before it's encrypted [closed]

For a test, I have a simple client-server Python socket-based application with a self-signed certificate. The code is copied from here. Although I don't see the traffic as TLS in Wireshark (why?), ...
5
votes
3answers
212 views

Can someone read a iOS class variable from outside the app?

a class variable like this: @property (strong, nonatomic) NSString *privateValue; Can someone read the value of that variable while it´s in memory? I can´t find anything about this on the apple ...
1
vote
2answers
317 views

RAM memory data remanence and double boot, risky?

I wonder if my setup can be risky. To give a good starting point for answers I would briefly sketch the situation setup: double boot system GNU/Linux and Microsoft Windows GNU/Linux is on 2 ...
-1
votes
1answer
30 views

Are they attacks to steal database records from memory in cloud?

Imagine a hosted database in public cloud. Since the database records are encrypted only on disk (data-at-rest). Are they are any attacks that steal the database records from the memory (when queries ...
8
votes
1answer
421 views

Is exposing website performance data a security risk?

I am currently adding a subsite to some websites that allows me to monitor performance data live as the server software perceives it. The data is mostly stuff like amount of memory used, memory ...
0
votes
0answers
37 views

Is there value in turning off computer to erase memory? [duplicate]

I still use TrueCrypt, but I was thinking about using VeraCrypt. I noticed on the Wikipedia page for VeraCrypt that the key is stored in the memory. Because of this, I have a general question. To ...
2
votes
2answers
51 views

iphone, Electron Microscope can see the ROM cell states

Just one bit gets toggled when the passcode is correct. Why not just toggle that one charged/discharged cell? Determine that bit through experimentation with an electron microscope.
3
votes
1answer
85 views

Can I Prevent Internet Explorer from Storing Login Requests in Memory?

Using Internet Explorer 11 I have been able to login to HTTPS web applications by providing a username and password and then subsequently logout. Whilst the browser process is running I can then dump ...
48
votes
6answers
9k views

Can RAM retain data after removal?

Is it possible for RAM to retain any data after power is removed? I don't mean within a few minutes such as cold boot Attacks but rather 24 hours plus. Working with classified systems the policy ...
2
votes
1answer
126 views

Is it possible for a virus to be redistributed through RAM?

I have a new, formatted, and up-to-date laptop. It's clean of any infections and I'm sure of it. The only change I've made is that I added a new 4G DDR3 RAM stick from my old laptop, and my new one ...
0
votes
0answers
34 views

What are the differences between paging and segmentation in terms of security?

How do the two techniques differ when it comes to keeping data in memory safe? Which one is safer if one can ask that question. What is meant when it is said that segmentation provides separate ...
4
votes
2answers
8k views

How to make / dump contents of memory for forensics analysis?

I work as a Information Security analyst and was recently tasked to look into Incident response + computer forensics related topics. For starters, I am experimenting on my PC which is running Windows ...
7
votes
1answer
714 views

What does EMET do for Windows 8.1?

I recall seeing, upon release of Windows 8 a while ago that a number of new mitigations and memory protections had been put in place but i'm unsure if these are the same protections offered by EMET. ...
3
votes
2answers
134 views

RAM Encryption. Is it possible? [duplicate]

Without adding any additional hardware, is RAM encryption possible? If so are there any known and currently used implementations for Linux or Windows systems? And if this is something that is possible ...
5
votes
3answers
166 views

How to mitigate heartbleed like attacks prior to zero day

Whenever sensitive data such as a password is used on a server it resides in memory for a short time. Given that security flaws like heartbleed exist which have the ability to 'bleed' memory for their ...
8
votes
1answer
147 views

How long would a computer have to be off to be resistant to a cold boot attack?

I understand that the longer a computer is off, the more resistant it is to a cold boot attack. I also understand that an AES key can be reconstructed from a redundant round key schedule even after a ...
21
votes
5answers
4k views

environment variable accessibility in Linux

Perhaps this is a trivial question, but how accessible are environment variables in Linux between different users? e.g. if Alice executes export FAVORITE_FOOD=`cat /home/alice/fav_food.txt` Can ...
4
votes
1answer
116 views

Create memory dump from the windows commandline

I was following this blog post to dump the memory of a windows host. Sadly this method does not work on Windows Server 2012 because the memory drivers that come with mdd aren't signed and this is ...
0
votes
1answer
1k views

mprotect at kernel level

What would happen if a kernel-level process sets some of its memory pages as PROT_NONE with mprotect and another kernel-level process tries to read one of these protected pages? What is the ...
8
votes
3answers
9k views

Memory dumping Android

I need to evaluate the security of a cryptographic library. In particular I am targeting a part of the library where I believe the private key is exposed for a limited time in the RAM. Any ideas or ...
4
votes
1answer
275 views

Convert raw memory dump into a format recognized by volatility

I dumped the RAM of a Windows 7 pc using LiveKd which basicly worked. The memory was dumped but then the convert of the binary dump into "summary format" failed. When I then tried to read the file ...
3
votes
1answer
119 views

Memory Mapped Files and AV

Do you know if AVs scans non-persistent memory mapped file content in a Windows Environment ? (Or have the answers for some of the AV on the market) I would prefer, if possible, some real world ...
3
votes
0answers
41 views

Address of environment variable different for each directory

I'm writing a return-to-libc attack for a school project. My script retrieves the system(), exit() and shell addresses as follows (it's a sh script that calls some c programs): Create the environment ...
3
votes
4answers
188 views

Simple tools for searching process memory for MSSQL connection strings

I'm working with a piece of software that handles all permissions in a Windows client binary on the user's computer. The software connects to a backend database using the sa account. The sa password ...
49
votes
4answers
7k views

Old OS memory space protection - was it really that bad?

In his book Security Engineering, Anderson really focuses on how in the 90s and early 2000s programs would need to access memory that wasn't their own, and programmers programmed with the assumption ...
2
votes
1answer
150 views

How do programs like keepass protect their data even when it's loaded into RAM?

After noticing the feature in Keeppass having the option to "Enable in memory protection" I began wondering, how can memory be encrypted and still be useful? Without going into homomorphic ...
1
vote
1answer
234 views

Volatility Plugins Directory Using Windows

I'm trying to use a plugin (not built-in) with volatility 2.4 but am having trouble with the syntax. I know that at least for the native python (vol.py) the plugins option must be specified directly ...
2
votes
2answers
99 views

Prevent Plain-Text Passwords Output by a Script From Being Accessible in the Future

Let's say I have a Bash script that generates a password, creates a new user with that password, and then tells me what the password is: # Generate a password and set it to $PASSWORD PASSWORD=$(tr ...
6
votes
1answer
397 views

Are encryption keys wiped from RAM before hibernate, or how to do it (Luks and Truecrypt)

Using Linux, I have system and swap/hibernation partitions encrypted with LUKS, and data partitions encrypted with Truecrypt, and I am wondering when I put my laptop to hibernation if the encryption ...
2
votes
3answers
327 views

What is risk of having memcache in public interface?

To what extent a hacker can potentially cause harm to a server? Can you please give few examples? Recently, there was a data breach in my website and I found out this interface was public-facing and ...
2
votes
1answer
93 views

Selling used ram [DDr3 SODIMM]. Need to erase?

Does DDr3 SODIMM memory hold information after being removed? I would like to sell the memory I just removed from my computer, however I wasn't sure if I had to wipe/erase it first some how. Please ...
3
votes
1answer
83 views

Defeating ROP attacks in x86

Most defense techniques against ROP revolves around randomization, such as ASLR. If I mark all regions of memory, other than the code segment, non-executable, will this defeat ROP?
10
votes
1answer
143 views

Are there any architectures currently out there that use hardware-enforced process isolation? What would it take to add that to x86?

First-time asker/commenter, long-time reader. As someone who's currently doing a lot of thinking & writing about measures that might foundationally improve computer security (ie., involving not ...
2
votes
0answers
32 views

How to disable typed arrays in firefox as rowhammer mitigation

I am concerned about the potential attack surface exposed by JavaScript typed arrays as a means of performing rowhammer attacks. Is it possible to disable (via official means or otherwise) typed ...
5
votes
2answers
4k views

Protect access to an SD card

How can I protect access to an SD card, so that only authorized users can read or modify the content of the SD card. Currently everybody who has physical access to the SD card can read or modify ...
10
votes
2answers
328 views

How to know whether a RAM module is vulnerable to rowhammer before buying?

I'd like to know (or at least perform some reasonable guess) if a RAM is vulnerable to rowhammer attack. I haven't found any list of vulnerable or secure RAM modules. I've seen some general rules ...
6
votes
2answers
4k views

Safely disable firewire/thunderbolt, patching up DMA exposure

I understand that Firewire 400/800 and Thunderbolt have DMA enabled, and a malicious hardware device can easily read and manipulate system memory at will. If I disable the software drivers for these ...
7
votes
2answers
160 views

Do password managers leak information with swap memory?

The post How to find passwords in memory (password managers) concluded, that passwords are visible in plaintext if you login to a website. Password managers tend to store the passwords encrypted in ...
5
votes
1answer
131 views

Is it safe to reuse a tab in a browser for different websites?

A friend of mine recently asserted that it is unsafe to reuse the same tab in a browser for different websites. In other words, if the user: Visits a sensitive website (for example logs in his bank ...
11
votes
3answers
3k views

Why is it dangerous when an attacker can control the `n` parameter to `memcpy()`?

I was reading a paper and saw this piece of code has an information leakage vulnerability. It was saying the following code will Leak memory layout information to the attackers Could somebody please ...
5
votes
1answer
605 views

Does Linux kernel use DEP for kernel memory?

Does the Linux kernel use DEP internally for its kernel memory? In other words, does the Linux kernel take care to ensure that, when the kernel is executing (in kernel mode), every executable ...