Timeline for Recover the prior contents of RAM from a turned-off PC?
Current License: CC BY-SA 3.0
9 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| S Apr 23, 2015 at 18:38 | history | edited | Ali Ahmad | CC BY-SA 3.0 |
added 4 characters in body
|
| Apr 23, 2015 at 18:26 | review | Suggested edits | |||
| S Apr 23, 2015 at 18:38 | |||||
| Jan 13, 2012 at 17:53 | comment | added | BlueRaja - Danny Pflughoeft | For those who think this is only theoretical: They were able to use this technique to create a bootable USB device which could determine someone's Truecrypt hard-drive encryption key automatically, just by plugging it in and restarting the computer. They were also able to recover the memory-contents 30 minutes+ later by freezing the ram (using a simple bottle of canned-air) and removing it. Using liquid nitrogen increased this time to hours. | |
| Jan 13, 2012 at 16:42 | comment | added | StrangeWill | IIRC: There is a video floating around of a demo of this, freezing the RAM when you power off the PC allows it to retain data longer, they pull it, pop it in, and analyze it and get most of the memory off of it. | |
| Jan 13, 2012 at 13:27 | vote | accept | wisdom | ||
| Jan 13, 2012 at 13:09 | comment | added | Rory Alsop♦ | Added extra info. As you will see from the linked article, the machine is cold booted and then you can retrieve info. | |
| Jan 13, 2012 at 13:09 | history | edited | Rory Alsop♦ | CC BY-SA 3.0 |
links
|
| Jan 13, 2012 at 13:04 | comment | added | wisdom | but even if the pc is turned off ?!!!. So, you mean the period while pc is turning off ?? | |
| Jan 13, 2012 at 13:00 | history | answered | Rory Alsop♦ | CC BY-SA 3.0 |