On CBS.com: Enter For Chance to Tour Set of MEDUM
BNET Business Network:
BNET
TechRepublic
ZDNet
Step 5: Extract RAM contents

Step 5: Extract RAM contents
Applebaum's next step is to run a program called "efidump" on his laptop that's linked to the MacBook with Ethernet. (Yes, that is a Donald Knuth T-shirt that he's wearing.)

EFI is the Extensible Firmware Interface originally developed by Intel. It plays a major role in the early stages of a computer's boot procedures.

After telling the efidump program the MacBook's Internet Protocol address, the utility extracted the complete contents of the Mac's RAM to a local file via the Ethernet cable. Applebaum named the 1.25 GB local file "/tmp/declan-macbook".

  • Talkback
  • Most Recent of 17 Talkback(s)
Bit Locker
It seems to me that the problem resides in the TPM. I do not use it. I store my password on a memory stick whereas using TPM stores it in the RAM. If the password is not on the computer to begin with it can't be hacked.... (Read the rest)
Posted by: cobra96ds@... Posted on: 02/25/08 You are currently: a Guest | | Terms of Use
Supercooled memory?  Eriamjh | 02/21/08
Millions at stake in corporate espionage ...  terry flores | 02/21/08
re: back doors  CobraA1 | 02/21/08
Clearing memory at reboot would not work.  ye | 02/22/08
RE: Supercooled memory?  bfilipiak@... | 02/22/08
A few things to note  CobraA1 | 02/21/08
Careful there  georgeou | 02/21/08
hdiutil was simply used to show successful crack  terry flores | 02/21/08
RE: (Images: How to bypass FileVault, BitLocker security)  d1g1tal_ph3r3t | 02/21/08
RE: (Images: How to bypass FileVault, BitLocker security)  riverab0@... | 02/22/08
Addition  riverab0@... | 02/22/08
Cox  CassidyJames | 02/22/08
I would like to see this tried with Firmware locked  duane@... | 02/22/08
Info still unencrypted in RAM...  robert.rohr@... | 02/22/08
Bit Locker  cobra96ds@... | 02/25/08
Encyption Law  benjaminwright75205 | 02/22/08
This is freaky  John Musbach | 02/24/08

What do you think?

advertisement

More ZDNet Photo Galleries

SmartPlanet

Click Here