192

Windows 11 BitLocker Bypassed to Extract Encryption Keys (gbhackers.com)

submitted 2 days ago by kid@sh.itjust.works to c/cybersecurity@sh.itjust.works

24 comments fedilink hide all child comments

An attacker with physical access can abruptly restart the device and dump RAM, as analysis of this memory may reveal FVEK keys from recently running Windows instances, compromising data encryption.

The effectiveness of this attack is, however, limited because the data stored in RAM degrades rapidly after the power is cut off.

you are viewing a single comment's thread
view the rest of the comments

[-] Fijxu@programming.dev 4 points 2 days ago

Is LUKS2 resistant against Cold Boot attacks?

[-] Cornelius_Wangenheim@lemmy.world 5 points 2 days ago* (last edited 2 days ago)

Any encryption system that uses the CPU to decrypt will need the key in memory, so yes it can be attacked in a similar manner.

this post was submitted on 06 Jan 2025

192 points (99.5% liked)

Cybersecurity

5916 readers

166 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Be respectful. Everyone should feel welcome here.
No bigotry - including racism, sexism, ableism, homophobia, transphobia, or xenophobia.
No Ads / Spamming.
No pornography.

Community Rules

Idk, keep it semi-professional?
Nothing illegal. We're all ethical here.
Rules will be added/redefined as necessary.

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 2 years ago

MODERATORS

kid@sh.itjust.works

Lanky_Pomegranate530@midwest.social