Russian company creates utility to decryt encrypted drives.

Computer Help and Discussions The Lounge
1

-> http://thenextweb.co...s-in-real-time/

Reportedly capable of finding Bitlocker/TrueCrypt/PGP keys via RAM dumps/hibernation files/other & without modifying original content (stealth).

Does this mean that there really is no privacy anymore?

2

The makers of such crypting software would probably need to implement other ways of not leaving any data behind that could be gathered. My thoughts are for them to use the RAM only for sensitive data, and then wipe it clean when done - of course leaving hard disks out of the loop so nothing is stored.

3

A bit of a 'scare tactics' article really. It's not new info.

If you read the posts under the article you will understand better that your info is safe if you don't use certain procedures (eg hibernation)

For those worrying just read this

4

If you read the posts under the article you will understand better that your info is safe if you don't use certain procedures (eg hibernation)

I believe it also uses memory dumps. I forget. How do you disable mem dumps in say, 7?

5

hyberfil.sys contains a full dump of the memory so I guess you would disable hibernation if that is what you want to do.

6

I'd love to see a utility that zeros out hiberfil.sys and pagefile.sys.

I know there is a registry switch that will clear pagefile.sys on shutdown. And you can disable and then delete hiberfil.sys, and subsequently wipe the area in which it resided with a 1-pass overwrite.

But a 1-click clear-these-files on shutdown would be nice.

7

i always shut off both the page and hibernation files. not for security, mostly because I have 12Gb ram and never shut my computer off or into hibernation

8

i always shut off both the page and hibernation files. not for security, mostly because I have 12Gb ram and never shut my computer off or into hibernation

Yeah, but then I would probably bluescreen if I ran out of RAM while surfing with a few thousand tabs, & or programs open...