Posts: 2,588
Threads: 281
Thanks Received: 2,074 in 1,652 posts
Thanks Given: 768
Joined: Jul 2019
A RAM after the computer is shutted down start is degradation of what contains, but if you cryogenically freeze the RAM, you will make the degradation process slower nearly arresting it. That work because the copper that is contained inside the RAM will become less conductor if the temperature is enough low. You will what you can do knowing that here an article about a use of the RAM in the forensics field
Code:
https://www.zdnet.com/article/cryogenically-frozen-ram-bypasses-all-disk-encryption-methods/
This article is very interesting because show how disk encryption methods are unsuccessful if the forensic investigator can get the hand on the RAM before the data from the RAM are completely gone, it's a matter of time.
Posts: 10
Threads: 0
Thanks Received: 3 in 3 posts
Thanks Given: 9
Joined: Feb 2021
so if a ram module is froze the data it contained right aftfer the shutdown is kept for more time, to be honest i thought that when shutdown the ram would be clean from what was loaded into it oO
thanks for the share @
Bl4ckCyb3rEnigm4
Posts: 21
Threads: 0
Thanks Received: 3 in 3 posts
Thanks Given: 21
Joined: Dec 2019
Seems reasonable to me. I have workstations with will ECC RAM that will sometimes throw ECC parity errors after cold shutdowns but not warm reboots. Apparently it's because of the difference in the residual "flea" power between the cold shutdowns and the warm reboots.
•
Posts: 25
Threads: 0
Thanks Received: 16 in 13 posts
Thanks Given: 9
Joined: Jun 2020
(03-02-2021, 02:28 PM)Oye_Vey Wrote: Seems reasonable to me. I have workstations with will ECC RAM that will sometimes throw ECC parity errors after cold shutdowns but not warm reboots. Apparently it's because of the difference in the residual "flea" power between the cold shutdowns and the warm reboots.
Can you please elaborate? If ECC RAM throws errors because residual data are not wiped clean at boot, what could happen to Non-ECC RAM?
•
Posts: 2
Threads: 0
Thanks Received: 0 in 0 posts
Thanks Given: 1
Joined: May 2021
It's called a cold boot attack. Classic trick.
•
Posts: 47
Threads: 4
Thanks Received: 31 in 17 posts
Thanks Given: 42
Joined: Aug 2020
On a similar note, I remember reading an article about a proof-of-concept experiment that turned normal RAM into WiFi cards, to steal data from air-gapped systems. Found the article:
Code:
https://www.zdnet.com/article/academics-turn-ram-into-wifi-cards-to-steal-data-from-air-gapped-systems/
•
Posts: 28
Threads: 5
Thanks Received: 8 in 6 posts
Thanks Given: 6
Joined: Jan 2021
But isn't Cryogenic freezing cost a lot of money? Makes sense for any high profile cases but what if they are some small-time cases?
•