back
2 comments
Cold boot attack usually refers to reading the DIMMs from the machine they are installed in, by rebooting it. The GP described a slightly different thing: physically removing the RAM modules and dumping their contents with a different host.
It would be cool if computers were designed to shutdown and clear RAM if they detected rapid cooling.

Ideally this monitoring process would continue during hibernation.

I guess there wouldn’t be anything possible if power was completely removed, but at least then an attacker is dealing with only being able to begin cooling after shutdown and cells start being lost.

The system should also balk if restarted within a short period of time, but a rapid temperature reduction. This would help prevent non-removal attacks (Eg: rebooting with a minimal OS to pull whatever one could -> great for MACs).

Generally you pull the ram before you cool it, so this wouldn’t do much.
Paranoid folk crazy glue their RAM, and embed in alumina-filled epoxy (which conducts heat well).
For all the hate the modern macbook design gets, this is one positive of having soldered components.
i was about to poo poo this idea but yeah, for non-removal this would be good