What the cold boot is, is getting the cache of the volatile memory. The previous thinking was once the computer was shut down the data stored in the memory was wiped immediately. Well, that's not always the case as the memory runs on power and that it slowly leaks off and then is gone forever.
What are your thoughts on this. If there is enough collaboration do you think it would be done?
There was an article, some time ago about dumping information from the RAM. (Quite some time ago.)
One of them that I found interesting, was freezing the computer down to -271C or something like that, immediately, and thereby somehow preserving the contents, of what was in the ram at the time. (Transportation issue.)
Stealing what's in the (hot) RAM at run-time is of course easier, if the contents aren't encrypted somehow. (I say somehow because everything can work in theory, but in theory a lot cannot work as well
)
Anyway, I haven't really played with this, but of course I've heard about it
The problem with stealing data from RAM, where the power slowly degrades, is a possible corruption of the data or total loss (of data), when there isn't a sufficient amount of power. This depends on the amount of time used of course.
If it's a transportation issue, steal the contents while the ram is HOT as I already mentioned or hibernate the system xD Either virtually or physically. These are just ideas, and some of it may not work in real life, but I have a great imagination
GCIH - GIAC Certified Incident Handler : Passed my GCIH
