On 2/22/08, Siegbert Marschall <[EMAIL PROTECTED]> wrote: > Yes DRAM can preserve data for a while, even after shutting down > power. Depending on the type of DRAM it can be milliseconds to > days BUT it will only preserve part of the data, so the chance > of finding "some" passwords in there does exist but has very little > real world implications.
the quickest way of improving security for this particular type of attack, apart from having sensitive data such as keys around only when needed, is ensuring there's no quick way of booting from a different media and ensuring it takes as long as possible to move the RAM (this would be a plus also for the disks) physically. Physical security _is needed_ anyways. Soekris boxes also have soldered RAM. --knitti
