Tag Info

New answers tagged


Secure digital cards define a protocol and commands for password protection of read/write access to the part of the stored data. Data access is impossible without presenting a password. A specification snapshot is available at http://blog.ednchina.com/Upload/Blog/2007/10/26/eb26e3c5-586e-43c7-a0a1-ff4920ee7113.pdf


For DDR4: One DRAM manufacturer, Micron, indicated that they are putting rowhammer mitigations into some of their DDR4 DRAM (see this data sheet). Other manufacturers might be doing the same. Note that it is not necessarily true that "DDR4 is OK". There's nothing in the DDR4 standard that makes DDR4 memory safer than DDR3 memory -- the DDR4 standard does ...


Basically most DRAM (dynamic-Random-Access-Memory) modules are vulnerable to rowhammer. If you want to be secure from the possibility of switching bits (after hourlong 'hammering', ofc), all SRAM (static-Random-Access-Memory) modules will do. SRAM is mostly used in Servers, it is more expensive but more stable (and in this case secure) against flipping ...


I am wondering when I put my laptop to hibernation if the encryption keys are wiped from the RAM before the computer is shutdown? No because the because the master decryption keys are kept in DRAM whatever the encryption tool you use. or if I have to wait a few minutes to be quite immune against cold boot attacks? Some authors stated ...


I'm not aware of any security issue of reusing the same tab for different web sites, i.e. I don't think it is better or worse to reuse a tab vs. close and open a new tab. But apart from reusing only a single tab it can be a security issue if you use the same browser application or the same browser profile or even the same operating system for sensitive and ...


As I've already pointed out in my previous comment, this attack has been foreseen and already countered (by most cryptography using applications). The way you do this is, you (the developer) tell the operating system (OS) not to swap out this particular section of the memory. The OS will usually honor that and "make a note" somewhere in the memory manager ...


You are correct about this assumption: an attacker could analyze the swap of a hard disk looking for the passwords. It is for this reason that decently-written password managers make sure that the password is always kept in RAM and never swapped on virtual memory.

Top 50 recent answers are included