Tag Info

New answers tagged

0

Most of the Android applications are written in Java. As long as you don't use native code, it's not possible to cause buffer overflow or memory corruptions. In android it's possible to use native code and compile them using Android NDK [1]. Applicqtions like Firefox and Chrome are using native codes. Many opensource libraries can be compiled for android ...


2

I'd recommend reading the original paper on the Cold Boot attack. Section 6 explains "Identifying keys in memory." They wrote an app called "keyfind" that you might be able to search for.


3

It highly depends on what software you're using to manage the keys. For example, the proprietary crypto library we use here splits the key over several memory locations, flips them big-endian / little-endian, etc and only reassembles them when they're needed. Any good crypto / key management tool will have its own bag of similar obfuscation tricks. This will ...


0

To what extent a hacker can potentially cause harm to a server? Can you please give few examples? A few examples are XSS and data ex-filtration. For more information on the XSS scripting exploit, please review: http://niiconsulting.com/checkmate/2013/05/memcache-exploit/ For more information on the data ex-filtration, please review: ...


0

First thing that comes to mind is Script injection (for Cross-site scripting(XSS) or phishing purposes) Secondly all 'private' cached data is readable to the world. (this could mean e-mails / passwords / keys / etc... were / are accessible for anyone who wants them.)


4

If you consider that attackers may recover the RAM contents (a cold boot attack) then you have to take into account that attackers may recover the RAM contents. Your /tmp filesystem is used by application as a temporary repository for some data elements, but the same applications read it back -- into RAM. That is, the RAM-based filesystem is unlikely to ...


2

SecureString doesn't protect you if you already have malware running with high privilege. It's not possible to do so, for SecureString or anything else. You can't protect your software from this kind of attack; if you can't trust your copy of mscorlib or anything else running in your process, you've already lost. What SecureString does is ensure that if a ...


2

Tests with LiME on CentOS. First, KeePassX was set to generate simple searchable passwords, regenerated each time because searches place passwords in memory. All these were safe (no reveal, and unless indicated I performed the step before starting a LiME dump): Generate password within KeePassX, don't finish saving. Regenerate password, save password and ...


5

Yes. In fact this is a common feature of keyloggers. They will often take screen captures every X seconds, monitor the clipboard, and log key strokes. These features pretty much defeat your strategy of typing rather than copy/paste. However you mention you're using keepass. So you may be protected. Take a look at this information from their FAQ Because ...



Top 50 recent answers are included