3

I generated a private key using this website: https://www.stellar.org/account-viewer/#!/

I was supposed to write down the private key but I didn't and I lost it. I have since unplugged the internet from my Mac and kept Google Chrome open (but the tab is closed) and have not used the Mac any further.

Is it possible the private key I generated on that website could still exist in my computer's RAM??

EDIT: I found it!!! To anyone who comes to this post and finds this, I closed the tab and dumped 4-5 hours later and I still found it. The computer was kept on and Google Chrome was not closed. Do not give up hope!

  • Seems like you'd have to do a coldboot attack on yourself: en.wikipedia.org/wiki/Cold_boot_attack Very unlikely that it works, however, if you did use this device more and did not (immediately) shut it down. – rugk Jan 24 '18 at 21:28
7

Very unlikely. The memory used by that page will have been freed and will almost certainly have been decommitted from the process, which means the OS will have scrubbed it by now.

At best you could try taking a memory dump of the process using Volatility, which can also carve out useful structures and look for sensitive information (probably including certificates and RSA private keys, although I haven't looked into that) but I'd imagine that the data is completely gone by now.

  • I have $3000 worth of money in wallet I can no longer access. I'll try anything. Is Volatility compatible with Mac? – AzzyDude Jan 24 '18 at 17:41
  • 2
    Yes. github.com/volatilityfoundation/volatility But sorry, you're probably screwed on this one. My advice is to not put your earnings into magical internet tokens without considering the potential for data loss. – Polynomial Jan 24 '18 at 17:52
  • Is that not just an analysis tool? I can't see where to actually perform a dump? – AzzyDude Jan 24 '18 at 18:08
  • There are a bunch of ways to do it. LLDB can do it, you could use OS X readmem, and there's some more info here: superuser.com/questions/85853/… – Polynomial Jan 24 '18 at 18:26
  • 2
    I actually found it!!! It's taken me days to search through it, but I actually found it, even though I dumped 4 hours after closing the tab. – AzzyDude Jan 30 '18 at 15:02

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.