Hello guest, if you read this it means you are not registered. Click here to register in a few simple steps, you will enjoy all features of our Forum.
Rules have been updated! Here

Thread Rating:
  • 1 Vote(s) - 5 Average
  • 1
  • 2
  • 3
  • 4
  • 5

[-]
Tags
s it ram degradation and

RAM and it's degradation
#1
A RAM after the computer is shutted down start is degradation of what contains, but if you cryogenically freeze the RAM, you will make the degradation process slower nearly arresting it. That work because the copper that is contained inside the RAM will become less conductor if the temperature is enough low. You will what you can do knowing that here an article about a use of the RAM in the forensics field
Code:
https://www.zdnet.com/article/cryogenically-frozen-ram-bypasses-all-disk-encryption-methods/
This article is very interesting because show how disk encryption methods are unsuccessful if the forensic investigator can get the hand on the RAM before the data from the RAM are completely gone, it's a matter of time.
Portables and Repacks Workbench
DON'T SHARE MY LINKS OUTSIDE AiOWARES
PM ME FOR A RE-UPLOAD
[-] The following 5 users say Thank You to Bl4ckCyb3rEnigm4 for this post:
  • Cutletz, MaskedUser, MiniBucked, Mr.X, sterki
Reply
#2
so if a ram module is froze the data it contained right aftfer the shutdown is kept for more time, to be honest i thought that when shutdown the ram would be clean from what was loaded into it oO
thanks for the share @Bl4ckCyb3rEnigm4
[-] The following 1 user says Thank You to sterki for this post:
  • Bl4ckCyb3rEnigm4
Reply
#3
Seems reasonable to me.  I have workstations with will ECC RAM that will sometimes throw ECC parity errors after cold shutdowns but not warm reboots.  Apparently it's because of the difference in the residual "flea" power between the cold shutdowns and the warm reboots.
Reply
#4
(03-02-2021, 02:28 PM)Oye_Vey Wrote: Seems reasonable to me.  I have workstations with will ECC RAM that will sometimes throw ECC parity errors after cold shutdowns but not warm reboots.  Apparently it's because of the difference in the residual "flea" power between the cold shutdowns and the warm reboots.

Can you please elaborate? If ECC RAM throws errors because residual data are not wiped clean at boot, what could happen to Non-ECC RAM?
Reply
#5
It's called a cold boot attack. Classic trick.
Reply
#6
On a similar note, I remember reading an article about a proof-of-concept experiment that turned normal RAM into WiFi cards, to steal data from air-gapped systems. Found the article:
Code:
https://www.zdnet.com/article/academics-turn-ram-into-wifi-cards-to-steal-data-from-air-gapped-systems/
Reply
#7
But isn't Cryogenic freezing cost a lot of money? Makes sense for any high profile cases but what if they are some small-time cases?
Reply


Forum Jump:


Users browsing this thread: 5 Guest(s)