Re: [BLUG] Improving the boot time

RAM scans during POST can mitigate cold boot attacks as long as they do a complete read/write test erasing/zeroing the memory. The DRAM is known to retain its memory even after power cycling by a quick reboot. An attacker could typically dump the contents of the DRAM to get to the encryption key used for encrypting the disks. I am just not sure how much a TPM helps here. "Quickboot" options skip memory checks on startup for a faster boot time but leave the system open to such type of attacks.
Most legacy BIOSes and even the "secure" EFI are susceptible to these attacks.
I believe an open solution like coreboot proves to be the best option in the long run.

On Sat, Oct 4, 2008 at 4:32 AM, Scott Blaydes <sblaydes@sbce.org> wrote:

Does the RAM scan actually have anything to do with security, or just PC health?

Thank you,
Scott Blaydes

Steven Black wrote:

It is interesting.

On a personal note, I have all my machines configured in such a manner
so as to slow down the boot. -- As a security precaution I have all
the RAM on all my machines scanned at boot-time. I actively discourage
people from using the "QuickBoot" BIOS options.

Cheers,
Steven Black

On Thu, Oct 02, 2008 at 10:11:14AM -0600, Abhishek Kulkarni wrote:

Just stumbled upon some interesting stuff here http://www.fenrus.org/plumbers_fastboot.ppt

I just clocked the booting time on my notebook (Dell Vostro 1400), it takes
more than 90 seconds!

 -- Abhishek

_______________________________________________
BLUG mailing list
BLUG@linuxfan.com
http://mailman.cs.indiana.edu/mailman/listinfo/blug

------------------------------------------------------------------------

_______________________________________________
BLUG mailing list
BLUG@linuxfan.com
http://mailman.cs.indiana.edu/mailman/listinfo/blug

_______________________________________________
BLUG mailing list
BLUG@linuxfan.com
http://mailman.cs.indiana.edu/mailman/listinfo/blug

[BLUG] next meeting

Hi,

What is the time and locaton of the next meeting?

Thanks,

Paul Proctor

Re: [BLUG] Improving the boot time

Does the RAM scan actually have anything to do with security, or just PC
health?

Thank you,
Scott Blaydes

Steven Black wrote:
> It is interesting.
>
> On a personal note, I have all my machines configured in such a manner
> so as to slow down the boot. -- As a security precaution I have all
> the RAM on all my machines scanned at boot-time. I actively discourage
> people from using the "QuickBoot" BIOS options.
>
> Cheers,
> Steven Black
>
> On Thu, Oct 02, 2008 at 10:11:14AM -0600, Abhishek Kulkarni wrote:
>> Just stumbled upon some interesting stuff here
>> http://www.fenrus.org/plumbers_fastboot.ppt
>>
>> I just clocked the booting time on my notebook (Dell Vostro 1400), it takes
>> more than 90 seconds!
>>
>> -- Abhishek
>>
>
>> _______________________________________________
>> BLUG mailing list
>> BLUG@linuxfan.com
>> http://mailman.cs.indiana.edu/mailman/listinfo/blug
>
>
>
> ------------------------------------------------------------------------
>
> _______________________________________________
> BLUG mailing list
> BLUG@linuxfan.com
> http://mailman.cs.indiana.edu/mailman/listinfo/blug

_______________________________________________
BLUG mailing list
BLUG@linuxfan.com
http://mailman.cs.indiana.edu/mailman/listinfo/blug

Re: [BLUG] Improving the boot time

It is interesting.

On a personal note, I have all my machines configured in such a manner
so as to slow down the boot. -- As a security precaution I have all
the RAM on all my machines scanned at boot-time. I actively discourage
people from using the "QuickBoot" BIOS options.

Cheers,
Steven Black

On Thu, Oct 02, 2008 at 10:11:14AM -0600, Abhishek Kulkarni wrote:
> Just stumbled upon some interesting stuff here
> http://www.fenrus.org/plumbers_fastboot.ppt
>
> I just clocked the booting time on my notebook (Dell Vostro 1400), it takes
> more than 90 seconds!
>
> -- Abhishek
>

> _______________________________________________
> BLUG mailing list
> BLUG@linuxfan.com
> http://mailman.cs.indiana.edu/mailman/listinfo/blug

[BLUG] Root DNS servers

Hi, this is kinda an off question, but has anyone on the list ever had
experience or know someone who has setup internal root nameservers for
custom domains. I don't mean just a nameserver that handles a custom
domain, I mean root nameservers. In other words DNS servers that only
respond with the IP of a nameserver that handles a certain custom
domain. And end user DNS resolvers don't talk directly to the root
nameservers. Thanks.

--
Mark Krenz
Bloomington Linux Users Group
http://www.bloomingtonlinux.org/
_______________________________________________
BLUG mailing list
BLUG@linuxfan.com
http://mailman.cs.indiana.edu/mailman/listinfo/blug

[BLUG] Improving the boot time

Just stumbled upon some interesting stuff here 
http://www.fenrus.org/plumbers_fastboot.ppt

I just clocked the booting time on my notebook (Dell Vostro 1400), it takes more than 90 seconds!

 -- Abhishek

[BLUG] Fwd: Want to contribute and meet with group

Hi Blug-owner,

I am subscribing to the listserv, but I have not been able to figure
out when or where you meet. I heard that you meet twice a month.

I recently migrated to Linux (Ubuntu) and would like to participate in
the Bloomington group. There is still a lot I am learning about (not
all my drivers are up), but I also am working on a Perl program that
generates an SVG graph (x,y, with z binned) based on x,y,z input data.
The output is editable in Inkscape. So maybe the knowledge I am gaining
would allow me to contribute something as well. One thing I'd like to
learn is how/if it is possible to port what I am doing to something
else, or what is the best way to make it available to the community.

Marc

http://www.bio.indiana.edu/~watsonlab/marc.htm
--
Marc Bogonovich phone: (812) 855-7804
Department of Biology FAX: (812) 855-6705
1001 East Third Street email:
mbogonov@indiana.edu
Indiana University
Bloomington, IN 47405

_______________________________________________
BLUG mailing list
BLUG@linuxfan.com
http://mailman.cs.indiana.edu/mailman/listinfo/blug