View Single Post
  #12 (permalink)  
Old 02-27-2008, 09:28 PM
shimp
Guest
 
Posts: n/a
Default Re: Should Linux wipe memory more often for better security?

>
> |> How easy would it be to have some addressable memory, even if slower,
> |> implemented via the PCI bus? A plug in PCI card with some genuine SRAM
> |> that loses data the instant the power is lost could be used. Even better
> |> would be to have such a card with crypto hardware in it, so the key never
> |> needs to be read back in to DRAM once stored in the card when the system
> |> boots up and the key is provided by the human user.
> |
> |
> | Hmm that gives me an idea. I bet someone right now today could create a
> | little battery powered piggyback board that sits between your
> | motherboard and your RAM modules. It could detect powerdown and do the wipe.
>
> Or maybe a PCI card with DMA?
>
> It could also have a header to attach intrusion detectors and do a system
> reset at the same time.
>


That would be nice if you could just buy a PCI card and plug it in. But
Im afraid it would have to power the northbridge at least, and maybe the
processor as well. I dunno. I'm not a motherboard engineer. ;D

Hmmm we have ECC RAM, so im sure the industry could create some secure
RAM if there was demand. Short all bits on poweroff.

p.s. The incognito livecd, which has been around for awhile, does do a
memory wipe at shutdown. So kudos to them.

Reply With Quote