On TechRepublic: Microsoft for adults, Google for kids?
BNET Business Network:
BNET
TechRepublic
ZDNet
Step 5: Extract RAM contents

Step 5: Extract RAM contents
Applebaum's next step is to run a program called "efidump" on his laptop that's linked to the MacBook with Ethernet. (Yes, that is a Donald Knuth T-shirt that he's wearing.)

EFI is the Extensible Firmware Interface originally developed by Intel. It plays a major role in the early stages of a computer's boot procedures.

After telling the efidump program the MacBook's Internet Protocol address, the utility extracted the complete contents of the Mac's RAM to a local file via the Ethernet cable. Applebaum named the 1.25 GB local file "/tmp/declan-macbook".

  • Talkback
  • Most Recent of 17 Talkback(s)
Bit Locker
It seems to me that the problem resides in the TPM. I do not use it. I store my password on a memory stick whereas using TPM stores it in the RAM. If the password is not on the computer to begin with it can't be hacked.... (Read the rest)
Posted by: cobra96ds@... Posted on: 02/25/08 You are currently: Logged In | Log out
Supercooled memory? Eriamjh   | 02/21/08
Millions at stake in corporate espionage ... terry flores   | 02/21/08
re: back doors CobraA1   | 02/21/08
Clearing memory at reboot would not work. ye   | 02/22/08
RE: Supercooled memory? bfilipiak@...   | 02/22/08
A few things to note CobraA1   | 02/21/08
Careful there georgeou   | 02/21/08
hdiutil was simply used to show successful crack terry flores   | 02/21/08
RE: (Images: How to bypass FileVault, BitLocker security) d1g1tal_ph3r3t   | 02/21/08
RE: (Images: How to bypass FileVault, BitLocker security) riverab0@...   | 02/22/08
Addition riverab0@...   | 02/22/08
Cox CassidyJames   | 02/22/08
I would like to see this tried with Firmware locked duane@...   | 02/22/08
Info still unencrypted in RAM... robert.rohr@...   | 02/22/08
Bit Locker cobra96ds@...   | 02/25/08
Encyption Law wagonhitch5@...   | 02/22/08
This is freaky John Musbach   | 02/24/08

What do you think?

advertisement

More ZDNet Photo Galleries

advertisement
Click Here