Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
Make your voice heard. Take the 2019 Developer Survey now

Questions tagged [memory]

Computer memory refers to a physical device that is used to store sequences of instructions (programs) or data (program state information) on a temporary or permanent basis for use in a computer.

1
vote
0answers
27 views

Is it safe for a service to share memory addresses with remote clients?

Supposing a remote service has the following data structures (using C++ as an example): struct Item { std::string name; struct {} whatever_else; }; std::map <std::string, Item *> ...
0
votes
1answer
24 views

read raw dump with WinDBG

Is it possible to convert a full raw dump memory and open it in WinDBG ? In order to inspect if they are no malwares, filter process who call particular API, dump each process in memory etc...
1
vote
1answer
107 views

Are there any observed Rowhammer attacks in the wild

Due to the latest news regarding Rowhammer and its applicability to ECC DRAM, I was wondering whether there are any Rowhammer attacks spotted in the wild. Given the various approaches to conduct a ...
2
votes
1answer
65 views

Does IOMMU protect against malware insertion through PCI Network card/Sound card DMA?

I've just read about this: https://www.tripwire.com/state-of-security/security-data-protection/backdoors-hardware-attacks-rakshasa-malware/ Asides from the question in the title, I'd also like to add ...
1
vote
2answers
99 views

How can memory problems lead to code execution exploits? [closed]

In reports on security exploits/vulnerabilities on desktop applications, I often read that memory problems lead to the execution of malicious code. For example, the description of Internet Explorer ...
0
votes
0answers
38 views

If you buy a used hard drive or CPU, how to guarantee it doesn't have anything installed or running on it [duplicate]

Say you buy a used hard drive, or a computer (wondering about both cases, something that is just a drive for storage, and something that is an actual running chip). I am not interested in whether or ...
2
votes
1answer
49 views

What should I do to develop a secure note taking app in Android 8.0?

One of the factors I considered was, having all the text encrypted and stored in the device memory. But we cannot avoid having raw unencrypted data on the RAM, when the application runs. Won't ...
3
votes
2answers
137 views

Private key management in memory

I'm a developer who's working on a networking protocol that includes encryption. It doesn't really matter, but just for the sake of context I'll mention that I'm using libsodium crypto library. Now ...
1
vote
0answers
47 views

What does it mean to “run a command in memory”? [closed]

If I open a terminal and use the following commands, are they "run in memory"? $ curl -s http://website.com/file.py | python - & $ command=$(curl -s http://website.com/file.py); $(echo $command |...
2
votes
0answers
141 views

How to extract browser login credentials from memory dump? [closed]

Does anyone know if there is a way to extract passwords for social networks like from a browser memory dump? I tried this tutorial without success. I used dumpit.exe tool to make a full dump of the ...
48
votes
3answers
5k views

What is the benefit of having a cryptographically secure hash algorithm in hashmaps?

I recently read the Rust language documentation and saw this: By default, HashMap uses a cryptographically secure hashing function that can provide resistance to Denial of Service (DoS) attacks. ...
0
votes
0answers
34 views

Which shims are used to patch memory?

Reading about Shims, I came across many suggestions that shims could be used to patch memory (for instance to inject a DLL). Unfortunately, I could not find the exact shims used to perform those ...
0
votes
1answer
76 views

How to securely erase JavaScript parameters after use? [duplicate]

When I pass a password as a parameter to a function, I presume it will end up on a stack or heap. When this function returns I'd expect that my password is still in memory somewhere until it is ...
3
votes
1answer
225 views

If rowhammer only results in capacitor discharge, how can it flip 0 to 1?

In rowhammer, why will changing the voltage on one row cause the other row to open/close? Is it related to induction? How can it change bits from 0 to 1? I understand from 1 to 0 - voltage discharge, ...
0
votes
0answers
13 views

Arpon Memory Leak - Bug or Potential Spoofing?

I have a DigitalOcean droplet where every so often, the arpon daemon will have a huge memory leak. Could that be indicative of an attempted ARP spoofing attack, or just a bug with arpon? Running arpon ...
4
votes
1answer
263 views

How does full memory encryption in newer processes protect against DMA attacks?

Upcoming Intel CPUs have TME, current AMD processors have SME. These are full-memory encryption techniques to protect against physical attacks such as cold boot attacks. Both support encrypting the ...
1
vote
2answers
401 views

How to remove or at least change password from browser memory dump file [duplicate]

I am working with JSP. So when a user submits a form, all the form fields say username and password gets stored in browser memory dump file in clear text. I even tried with JSP hidden fields, but ...
1
vote
0answers
30 views

How does cache partitioning prevent covert/side-channel attacks? [closed]

In a report on an open-source separation kernel (Muen kernel) I was reading, in the future work section, it says that cache coloring can be implemented to prevent covert/side-channel attacks. It is ...
1
vote
1answer
41 views

Incomplete Data In Format String Dump

I've been practicing format-string attacks lately and I thought I knew how it works but after hours of research I did not manage to get the expected results. I made a sample program which has a ...
1
vote
1answer
183 views

Javascript: remove sensitive data from memory

As stated in this article JavaScript values are allocated when things (objects, strings, etc.) are created and "automatically" freed when they are not used anymore. I recently took a heap ...
16
votes
3answers
3k views

Should crash dumps (e.g. from Breakpad, Windows) be encrypted and signed?

As a software developer, should my crash dumps (e.g. from Breakpad, Windows) be encrypted and signed? I provide the ability to export crash dumps so that I can pinpoint the problem when the user ...
2
votes
1answer
201 views

Cloning a system for forensic analysis

How can I clone a system without leaving any footprint? I want to acquire RAM and other physical hard drives so that after cloning all the work can be done in VM without disturbing the target machine. ...
2
votes
0answers
31 views

Access control to allocated buffer [closed]

I have a system which contains a process which allocates memory to other processes from its internal memory buffer , each process that needs memory allocation has to enroll with the allocating process ...
3
votes
1answer
45 views

Volatility.exe suggests two profiles for XP memory dump. Which one should I use?

Volatility suggests two profiles for XP memory dump. Which one should I use for further investigation? I am a beginner for the volatility.
1
vote
0answers
124 views

Decrypt to memory for editing

I am looking for a secure way to edit sensitive text data, using Git and Vim in the process. An ideal solution would be: clone the encrypted git repository into memory; decrypt into memory; do the ...
3
votes
2answers
117 views

Turing-completeness impact on system security

I always find in many papers discussing different kind of system security subject that the authors always trying to highlight the danger of some vulnerabilities by assuming an attacker, by exploiting ...
2
votes
0answers
204 views

Linux memory acquisition issues

I am reaching out for possible assistance regarding memory acquisition of a linux system. As of yet I have been unable to either acquire or inspect the memory dump with known tools. The following ...
3
votes
1answer
59 views

Exploit development - Will different devices with the same OS/Architecture have the same exact process memory (e.g. addresses) for a given binary?

Sometimes, when I develop an exploit that perfectly works on a given machine, it will fail on a different one, despite them having the same OS/Architecture and configurations (like language, which in ...
0
votes
1answer
71 views

Encrypt a file in the server and decrypt it in the client without risking the user accessing it?

How can I send an encrypted file from a server to a client, encrypt and use it in the client without risking the user to access it? I saw an answer where the server saved a file in its memory, and ...
3
votes
1answer
217 views

Is it possible data which was generated with JavaScript in Google Chrome could exist in my Mac'sRAM?

I generated a private key using this website: https://www.stellar.org/account-viewer/#!/ I was supposed to write down the private key but I didn't and I lost it. I have since unplugged the internet ...
4
votes
2answers
299 views

Spectre/Meltdown - Does memory deallocation erase the actual RAM contents?

The other day I've been thinking about Spectre and Meltdown and the ability of one process to access the memory of another. On my Linux system currently I have all JavaScript disabled to eliminate ...
11
votes
1answer
477 views

If I sell my printer, can the last printed pages be recovered? And how can I wipe it?

I have a Brother 5470-DW Printer. I want to sell it but wanted to make sure all the last prints can't be recovered. If I sold my printer could the last pages printed be recovered? How can I wipe all ...
11
votes
1answer
539 views

Why does this cache attack work?

I was recently reading the following paper about doing a cache attack in Javascript: https://arxiv.org/pdf/1502.07373v2.pdf But I was confused by how it could work. In the paper, an 8 MB buffer was ...
1
vote
1answer
259 views

How can a userspace linux process refer to a kernel address?

I would like help understanding a particular aspect of meltdown. My understanding is that the meltdown bug can be used for a userspace linux process to access kernel memory (indirectly, through a ...
8
votes
3answers
1k views

Why is accessing kernel memory a security risk?

A lot of the news regarding the Meltdown vulnerability is emphasizing that it allows programs to read memory that should be off limits to the user. While I understand that this should not happen, few ...
7
votes
0answers
1k views

DMA attacks despite IOMMU isolation

If you're already familiar with PCI behavior and Linux's handling of DMA buffers, skip to the third section for my actual question. Otherwise read on for a small summary of how PCI devices perform ...
1
vote
0answers
318 views

How can I decrypt my iphones nand flash memory if I have the pin but phone won't turn on? [closed]

Is there some sort of device I can plug my nand flash chip into and then input my pin and get my old notes and things back?
4
votes
1answer
700 views

How can you detect kernel exploits?

Is there something that all kernel exploits have in common? Sure, they all exploit the kernel, but I'm more interested in the underlying mechanisms or the result. At the moment my interest goes ...
2
votes
2answers
166 views

How safe is this scenario security wise

In a project I am working on, I needed to write some cron job scripts, which purpose is, to access some external API's, which have information that shouldn't be accessible by the public. The external ...
4
votes
2answers
323 views

Can data be stolen from RAM in use

The limits of my knowledge on the subject (on any subject) may render this a stupid question. Regardless; Could a malicious program theoretically steal data from primary memory (RAM)? Scenario: I ...
0
votes
1answer
71 views

What files yield the most useful information when an attacker leverages a memory vulnerability?

I'm trying to understand what information is left behind after an attacker exploits a vulnerable application leveraging a memory vulnerability (overflows, ROP, etc.). I wanted to know: What are ...
0
votes
2answers
128 views

Use explicit_bzero() to zero entire memory

Functions like bzero(), explicit_bzero() and ZeroMemory are designed to delete sensitive data from RAM (Like keys). Can I use explicit_bzero() to delete entire RAM (e.g. 2 GB RAM)? Is this a feasible ...
22
votes
2answers
1k views

Is there a way to make the browser remove the login-password from it's memory immediately, like Chrome seems to do on accounts.google.com?

I did some testing, and found that a memory dump of Chrome doesn't hold the password of gmail.com/Google after logging in to that site (the login happens on accounts.google.com). (My System is ...
1
vote
1answer
125 views

Erase RAM while device is on [closed]

Is there anyway to get rid of the data in RAM without powering off the system? or better to say how we can reduce the chance of getting meaning full information from the volatile memory while the ...
1
vote
3answers
111 views

Password hashes with large internal state

scrypt was designed to use a lot of memory, and if all that memory wasn't used it would be some orders of magnitude slower to compute. Either way, it counters custom hardware attacks, where there ...
0
votes
3answers
495 views

Storing Username and Password in Application memory (ram)

I've created a user application running on Windows 7 desktops. This application allows users to enter their username and password for another system. My application does this with a simple textbox. ...
0
votes
1answer
79 views

Prevent external processes from changing .NET variable values

I was reading this writeup of how CylancePROTECT can be exploited. It has a Windows service which is implemented using .NET. It seems that for code written in .NET, it is trivial to locate important ...
2
votes
2answers
360 views

What's a secure way to prompt for a password and erase the cached password afterwards in Linux?

So I have multiple hard drives encrypted with the same password and instead of having to enter it multiple times I'd like to have it set up so that after booting I automatically get a password-box ...
1
vote
1answer
76 views

Using ex.: Ubuntu or Windows: Can I see the memory of a process that I am running?

If I don't have Administrator or root privileges on a Desktop machine and I am running a password manager, can I see the memory contents of that password manager, or higher permissions needed? So I ...
1
vote
1answer
530 views

“Smashing The Stack For Fun And Profit” - Remediations

i was reading this famous article: Aleph One - Smashing The Stack For Fun And Profit and i have no idea how stack canaries/NX support/ASLR can avoid an attack like that. I'll try to explain me ...