Snippets

[footpad]

Via schneier: hard disk encryption can be defeated by chilling RAM chips.

Commentary from the Institute of Physics: the stated motives for shooting down the satellite were implausible, and it's not a decent test for shooting down an ICBM. It's impressive progress in missile defence, but it's not yet time for anyone to crow about it.

Comments

[crashworks]

This attack can be foiled by simply maintaining physical security on the computer for a period of ten minutes after shutting it down.

For example, expose an attacker attempting to gain unauthorized physical access to the risk of serious injury.

[footpad]

All well and good if you employ trigger-happy mercenaries at your remote data centre. (Actually, remembering some of the people who worked out at both my previous jobs...)

[crashworks]

Good point, but at the same time, I would expect physical security to be among the services provided by a remote data centre, much as I expect it to be provided to my safe deposit box by a bank.

I will leave speculation on exactly how many armed employees guard our data centre as an exercise for the reader.

[footpad]

Just one, but trained in some very special simulation environments. :)

On the other hand, the chap who comes to take your computer is typically waving a warrant, and the stakes have to be pretty high before it's worth waving guns back at him. Physical security won't help your average bent accountant or bonsai-kitten-hentai merchant.

[crashworks]

It's definitely more than one. This is Washington State after all.

The scenario that concerns me the most is things like laptops being stolen or data centres broken into. I'm not particularly concerned about things that make it harder to break democratically instituted laws.

If someone were to show up with a warrant, I would give them what they want; I avoid such trouble by the simple expedient of not committing crimes.