Windows 7 BitLocker cracked

Forums › Microsoft Windows › Windows 7 BitLocker cracked

birdmanz

4 posts

Wannabe Geek
Inactive user

#52941 7-Dec-2009 20:47

Someone has just found a way to find your Windows 7 BitLocker password:

http://arstechnica.com/microsoft/news/2009/12/first-commercial-tool-cracks-bitlocker.ars

And I thought BitLocker was going to be all that.

nathan

5695 posts

Uber Geek
+1 received by user: 1630
Inactive user

#280171 7-Dec-2009 22:00

calm down - this is not a traditional crack. This "attack" needs physical access to the machine at runtime. However, this is not a classical vulnerability.

Microsoft is aware of it, but at the end of the day security is a journey and not a destination and physical security is a big part of the solution too.

johnr

19282 posts

Uber Geek
+1 received by user: 2526
Inactive user

#280172 7-Dec-2009 22:07

Good god some people over react

Worlds going to end tomorrow people

nzpat

167 posts

Master Geek

#280176 7-Dec-2009 22:22

johnr: Good god some people over react

Worlds going to end tomorrow people

If thats the case can you let me out of my contract.
/s

billgates

4705 posts

Uber Geek
+1 received by user: 671

Trusted

#280195 7-Dec-2009 23:32

patznz:
johnr: Good god some people over react

Worlds going to end tomorrow people

If thats the case can you let me out of my contract.
/s

Sarah Palin for President in 2012. World is going to end that year anyways.

Do whatever you want to do man.

timestyles

424 posts

Ultimate Geek
+1 received by user: 1

#280197 7-Dec-2009 23:36

I can see how this is a problem if you get your laptop stolen while it's in Sleep mode (or running of course). Remember when MIT or whoever discovered that ram unplugged didn't erase its memory in seconds? I can see organisations needing highly secure laptops having memory that self destructs when someone accesses it, ie takes off the memory compartment lid.

PGP help refers to an issue where a memory cell that has been at the same state for some time, develops a static charge. Using a special device, you strip off the plastic covering of a chip and use a charge detector to see what the key that was in memory was. This is when everything is turned off. PGP gets around this by inverting the bits every second, so no static charge develops.

Ragnor

8279 posts

Uber Geek
+1 received by user: 585

Trusted

#280215 8-Dec-2009 00:53

You need a memory dump from a running system where you have admin access for it to work, same "flaw" applies to every full disk encryption because the encryption keys have to be stored in ram.

Mighty Ape

Shop now at Mighty Ape (affiliate link).

OldRepublicJedi

53 posts

Master Geek

#280250 8-Dec-2009 08:27

oh noes *runs*

xpd

Geek of Coastguard
14115 posts

Uber Geek
+1 received by user: 4574

Retired Mod

ID Verified

Trusted

Lifetime subscriber

#280321 8-Dec-2009 10:56

XPD / Gavin

LinkTree

nathan

5695 posts

Uber Geek
+1 received by user: 1630
Inactive user

#280449 8-Dec-2009 17:11

birdmanz: Someone has just found a way to find your Windows 7 BitLocker password:

http://arstechnica.com/microsoft/news/2009/12/first-commercial-tool-cracks-bitlocker.ars

And I thought BitLocker was going to be all that.

Windows Security Blog re BitLocker 'hack' claims http://bit.ly/7trj9Y "a relatively low risk to folks who use BitLocker in the real world"

johnr

19282 posts

Uber Geek
+1 received by user: 2526
Inactive user

#280472 8-Dec-2009 18:46

c71931f:
johnr: Good god some people over react

Worlds going to end tomorrow people

We are all going to dieeeee....

No point in paying this months power bill then

stevenz

2802 posts

Uber Geek
+1 received by user: 125

#280487 8-Dec-2009 20:18

Is this the same bitlocker vulnerability they discovered a couple of months back, or something different?

@KnightNZ