COLD BOOT

Researchers release 'COLD BOOT' attack utilities, A way around disk encryption

The security researcher who demonstrated the 'cold boot' attack has released the source code for the hack. The attack, first demonstrated in February, uses a set of utilities to lift crypto keys from memory even after a reboot.

A boon for hackers and computer forensics experts alike, the approach created a means to circumvent disk encryption simply by powering off a target machine which has been left hibernating or screen-locked, and quickly re-booting it to an external hard drive loaded with customised software. The attack worked because DRAM chips used by modern computers retain data for seconds or even minutes after being powered down, contrary to popular opinion. Cooling the chips wasn't absolutely necessary but aided the process in some cases.

Once the data is recovered utilities are needed to make sense of the information and perform functions such as correcting errors caused by bit decay.

The approach was pioneered by researchers from the Electronic Frontier Foundation, Princeton University and Wind River. One of the researchers involved in the celebrated hack, Jacob Appelbaum, released source code for the utilities used for it at the Hackers on Planet Earth (HOPE) conference in New York last weekend. It's hoped the release of the utilities will spur the development of countermeasures as well as raising awareness about the risks posed by the original attack.

Apple launched its iPhone

Apple's hugely anticipated iPhone is finally a reality. As expected, it makes calls and supports a digital-music player that syncs with iTunes. The thin design is dominated by a vivid touch screen that showcases videos and photos beautifully. You'll also note a lack of buttons and controls as all menu navigation and data entry from typing messages to dialing phone numbers is done on the touch screen. Other features include quad-band world phone support, a 2-megapixel camera, Wi-Fi, stereo Bluetooth, a speakerphone, e-mail and a Safari Web browser. Memory caps out at 8MB and there's no 3G support or wireless downloads, but the iPhone will garner interest simply because it exists. It's available June 29, exclusively from AT n T, for $499 or $599 depending on the memory size.

Despite some important missing features, a slow data network, and call quality that doesn't always deliver, the Apple iPhone sets a new benchmark for an integrated cell phone and MP3 player. Remember, the iPhone functions as an iPod as well as a phone.

Specs: GSM 850/900/1800/1900 (Quadband), Up to 480 min, With digital camera/digital player, 2.4 in x 0.7 in x 4.5 in, 4.8 oz