Re: [gentoo-user] Can RAM render useless the encryption of the / and swap partitions?

2007-10-15 Thread Liviu Andronic
On 10/9/07, Alex Schuster [EMAIL PROTECTED] wrote: according to the speaker, most of the RAM may even survives for as long as 30 seconds after powering off! At least on a ThinkPad T30 notebook (stated [..] Another thing is Firewire, or hot-pluggable PCI cards (and everything else which

Re: [gentoo-user] Can RAM render useless the encryption of the / and swap partitions?

2007-10-08 Thread Alex Schuster
Liviu Andronic writes: So, my eternal question, is it realistic for the lost RAM data to be recovered? That is, after system shutdown, does the data still physically reside on the RAM and can someone with a decent technology and know-how recover it? In other words, is this a serious breach in

Re: [gentoo-user] Can RAM render useless the encryption of the / and swap partitions?

2007-10-06 Thread Daniel Pielmeier
Liviu Andronic schrieb: On 10/5/07, Daniel Pielmeier [EMAIL PROTECTED] wrote: There is an option in baselayout's rc file to erase the swap at shutdown. Take a look at /etc/conf.d/rc under RC_SWAP_ERASE. As far as I understand, this is far from secure. You want at least some degree of

Re: [gentoo-user] Can RAM render useless the encryption of the / and swap partitions?

2007-10-05 Thread Hans-Werner Hilse
Hi, On Thu, 4 Oct 2007 20:33:40 +0200 Liviu Andronic [EMAIL PROTECTED] wrote: On 10/4/07, Alan McKinnon [EMAIL PROTECTED] wrote: On Thursday 04 October 2007, Hans-Werner Hilse wrote: However, it makes sense to clean up memory after having critical data in it -- e.g. a reboot doesn't

Re: [gentoo-user] Can RAM render useless the encryption of the / and swap partitions?

2007-10-05 Thread Randy Barlow
Hans-Werner Hilse wrote: The thing is: You never can guarantee security, that's absolutely impossible (well, of course you can, but you would automatically be wrong). Well, you can put your machine in a closet and never turn it on, ever :) Then physical theft is the only possibility, but

Re: [gentoo-user] Can RAM render useless the encryption of the / and swap partitions?

2007-10-05 Thread Liviu Andronic
On 10/5/07, Hans-Werner Hilse [EMAIL PROTECTED] wrote: So, my eternal question, is it realistic for the lost RAM data to be recovered? That is, after system shutdown, does the data still physically reside on the RAM and can someone with a decent technology and know-how recover it? In other

Re: [gentoo-user] Can RAM render useless the encryption of the / and swap partitions?

2007-10-05 Thread Daniel Pielmeier
Volker Armin Hemmann schrieb: In practice, after power is cut, everything in ram is lost. But not the stuff in swap I don't know if this was mentioned already but it is probably useful. There is an option in baselayout's rc file to erase the swap at shutdown. Take a look at

Re: [gentoo-user] Can RAM render useless the encryption of the / and swap partitions?

2007-10-05 Thread Liviu Andronic
Hello, On 10/5/07, Daniel Pielmeier [EMAIL PROTECTED] wrote: There is an option in baselayout's rc file to erase the swap at shutdown. Take a look at /etc/conf.d/rc under RC_SWAP_ERASE. As far as I understand, this is far from secure. You want at least some degree of security, you need

[gentoo-user] Can RAM render useless the encryption of the / and swap partitions?

2007-10-04 Thread Liviu Andronic
Hello security gurus, this one's for you: After shutdown, is it possible to recover the data stored on the Random Access Memory? Be it an ancient mounted ramdisk, a tmpfs mount point or normal data kept in memory by programs. In many ressources on the net (the Gentoo Wiki and Forums, other

Re: [gentoo-user] Can RAM render useless the encryption of the / and swap partitions?

2007-10-04 Thread Alan McKinnon
On Thursday 04 October 2007, Liviu Andronic wrote: And later on: Now one problem is left. Even with normal RAM a well funded organisation can get the contents after the system is powered off. With the modern SDRAM it's even worse, where the data stays on the RAM permanently until new data is

Re: [gentoo-user] Can RAM render useless the encryption of the / and swap partitions?

2007-10-04 Thread Hans-Werner Hilse
Hi, On Thu, 4 Oct 2007 15:47:53 +0200 Alan McKinnon [EMAIL PROTECTED] wrote: On Thursday 04 October 2007, Liviu Andronic wrote: And later on: Now one problem is left. Even with normal RAM a well funded organisation can get the contents after the system is powered off. With the modern

Re: [gentoo-user] Can RAM render useless the encryption of the / and swap partitions?

2007-10-04 Thread Volker Armin Hemmann
On Donnerstag, 4. Oktober 2007, Hans-Werner Hilse wrote: Hi, On Thu, 4 Oct 2007 15:47:53 +0200 Alan McKinnon [EMAIL PROTECTED] wrote: On Thursday 04 October 2007, Liviu Andronic wrote: And later on: Now one problem is left. Even with normal RAM a well funded organisation can get the

Re: [gentoo-user] Can RAM render useless the encryption of the / and swap partitions?

2007-10-04 Thread Liviu Andronic
On 10/4/07, Volker Armin Hemmann [EMAIL PROTECTED] wrote: in practice, the ram has to refreshed every few cycles (on reason why it is slow) because it is loosing its load so fast. In practice, after power is cut, everything in ram is lost. But not the stuff in swap Considering that swap

Re: [gentoo-user] Can RAM render useless the encryption of the / and swap partitions?

2007-10-04 Thread Alan McKinnon
On Thursday 04 October 2007, Hans-Werner Hilse wrote: Hi, On Thu, 4 Oct 2007 15:47:53 +0200 Alan McKinnon [EMAIL PROTECTED] wrote: On Thursday 04 October 2007, Liviu Andronic wrote: And later on: Now one problem is left. Even with normal RAM a well funded organisation can get the

Re: [gentoo-user] Can RAM render useless the encryption of the / and swap partitions?

2007-10-04 Thread Volker Armin Hemmann
On Donnerstag, 4. Oktober 2007, Liviu Andronic wrote: On 10/4/07, Volker Armin Hemmann [EMAIL PROTECTED] wrote: in practice, the ram has to refreshed every few cycles (on reason why it is slow) because it is loosing its load so fast. In practice, after power is cut, everything in ram is

Re: [gentoo-user] Can RAM render useless the encryption of the / and swap partitions?

2007-10-04 Thread Liviu Andronic
On 10/4/07, Volker Armin Hemmann [EMAIL PROTECTED] wrote: Considering that swap is encrypted, is it realistic for this lost RAM data to be recovered? Again, take the case of a well funded organization. that depends on the encryption. Some algorithms are easy to break. Some are not, some

Re: [gentoo-user] Can RAM render useless the encryption of the / and swap partitions?

2007-10-04 Thread Liviu Andronic
On 10/4/07, Alan McKinnon [EMAIL PROTECTED] wrote: On Thursday 04 October 2007, Hans-Werner Hilse wrote: [..] However, it makes sense to clean up memory after having critical data in it -- e.g. a reboot doesn't necessarily clean up RAM. [..] Yes, this is very true BUT On 10/4/07,

Re: [gentoo-user] Can RAM render useless the encryption of the / and swap partitions?

2007-10-04 Thread Randy Barlow
Hans-Werner Hilse wrote: In theory, for the one transistor and one cap case, you have a loaded cap that will take forever losing its load, won't it? But in practice, I think, that's not realistic. It's actually not theory vs. practice. Even in theory, it's not just a cap, it's a cap and a

Re: [gentoo-user] Can RAM render useless the encryption of the / and swap partitions?

2007-10-04 Thread Mick
On Thursday 04 October 2007, Volker Armin Hemmann wrote: On Donnerstag, 4. Oktober 2007, Liviu Andronic wrote: On 10/4/07, Volker Armin Hemmann [EMAIL PROTECTED] wrote: in practice, the ram has to refreshed every few cycles (on reason why it is slow) because it is loosing its load so