1. Forum
  2. DeveloperNet
  3. SECURITY

  • TrueCrypt, firefire memdu

    From art@DIGDIST/FATCATS to All on Thu May 26 09:52:00 2011
    Hi all,

    My friend recently wrote quite an interesting article on how they went about solving a PlaidCTF challenge. They were given a memory dump taken from a firewire port, and needed to reverse engineer data out of TrueCrypt without knowing the password.

    The article can be read here: http://mweissbacher.com/blog/2011/05/17/plaidctf-writeup-fun-with-firewire/

    Anyone else ha fun with firewire?

    I use TrueCrypt for my encrypted filesystem. It allows deniability so I have always thought it was great--now I'm worried.

    Kind regards,
    ________________ _______
    \_____ __ \ ___\
    \ __ \ <_ \ @ fatcats[dot]poorcoding[dot]com
    \_______\___\___\___\ ------------------------------------
    f a t c a t s b b s

    ---
    þ Synchronet þ fatcats bbs - http://fatcats.poorcoding.com
  • From Nightfox@DIGDIST to art on Thu May 26 07:43:00 2011
    Re: TrueCrypt, firefire memdumps, and PlaidCTF
    By: art to All on Thu May 26 2011 09:52:27

    The article can be read here: http://mweissbacher.com/blog/2011/05/17/plaidctf-writeup-fun-with-firewire/

    I'll have to take a look at that. :)

    You mentioned you didn't get my initial post here.. Hopefully your BBS will get this one.

    Nightfox

    ---
    þ Synchronet þ Digital Distortion: digitaldistortionbbs.com
  • From art@DIGDIST/FATCATS to Nightfox on Thu May 26 16:27:00 2011
    Re: TrueCrypt, firefire memdumps, and PlaidCTF
    By: Nightfox to art on Thu May 26 2011 07:43:14

    Hi Nightfox,

    You mentioned you didn't get my initial post here.. Hopefully your BBS will get this one.

    ... Seeing it loud and clear here in fatcatsland.... inexplicable, but at least it's working.

    Regs,
    ________________ _______
    \_____ __ \ ___\
    \ __ \ <_ \ @ fatcats[dot]poorcoding[dot]com
    \_______\___\___\___\ ------------------------------------
    f a t c a t s b b s

    ---
    þ Synchronet þ fatcats bbs - http://fatcats.poorcoding.com
  • From Nightfox@DIGDIST to art on Thu May 26 22:38:00 2011
    Re: TrueCrypt, firefire memdumps, and PlaidCTF
    By: art to Nightfox on Thu May 26 2011 16:27:17

    You mentioned you didn't get my initial post here.. Hopefully your BBS w get this one.

    ... Seeing it loud and clear here in fatcatsland.... inexplicable, but at le it's working.

    Good to know it's working now. :)

    ---
    þ Synchronet þ Digital Distortion: digitaldistortionbbs.com
  • From art@DIGDIST/BATTLEST/FREEWAY to All on Thu May 26 09:52:00 2011
    Hi all,

    My friend recently wrote quite an interesting article on how they went about solving a PlaidCTF challenge. They were given a memory dump taken from a firewire port, and needed to reverse engineer data out of TrueCrypt without knowing the password.

    The article can be read here: http://mweissbacher.com/blog/2011/05/17/plaidctf-writeup-fun-with-firewire/

    Anyone else ha fun with firewire?

    I use TrueCrypt for my encrypted filesystem. It allows deniability so I have always thought it was great--now I'm worried.

    Kind regards,
    ________________ _______
    \_____ __ \ ___\
    \ __ \ <_ \ @ fatcats[dot]poorcoding[dot]com
    \_______\___\___\___\ ------------------------------------
    f a t c a t s b b s

    ---
    þ Synchronet þ fatcats bbs - http://fatcats.poorcoding.com
  • From Nightfox@DIGDIST/BATTLEST/FREEWAY to art on Thu May 26 07:43:00 2011
    Re: TrueCrypt, firefire memdumps, and PlaidCTF
    By: art to All on Thu May 26 2011 09:52:27

    The article can be read here: http://mweissbacher.com/blog/2011/05/17/plaidctf-writeup-fun-with-firewire/

    I'll have to take a look at that. :)

    You mentioned you didn't get my initial post here.. Hopefully your BBS will get this one.

    Nightfox

    ---
    þ Synchronet þ Digital Distortion: digitaldistortionbbs.com
  • From art@DIGDIST/BATTLEST/FREEWAY to Nightfox on Thu May 26 16:27:00 2011
    Re: TrueCrypt, firefire memdumps, and PlaidCTF
    By: Nightfox to art on Thu May 26 2011 07:43:14

    Hi Nightfox,

    You mentioned you didn't get my initial post here.. Hopefully your BBS will get this one.

    ... Seeing it loud and clear here in fatcatsland.... inexplicable, but at least it's working.

    Regs,
    ________________ _______
    \_____ __ \ ___\
    \ __ \ <_ \ @ fatcats[dot]poorcoding[dot]com
    \_______\___\___\___\ ------------------------------------
    f a t c a t s b b s

    ---
    þ Synchronet þ fatcats bbs - http://fatcats.poorcoding.com
  • From Nightfox@DIGDIST/BATTLEST/FREEWAY to art on Thu May 26 22:38:00 2011
    Re: TrueCrypt, firefire memdumps, and PlaidCTF
    By: art to Nightfox on Thu May 26 2011 16:27:17

    You mentioned you didn't get my initial post here.. Hopefully your BBS w get this one.

    ... Seeing it loud and clear here in fatcatsland.... inexplicable, but at le it's working.

    Good to know it's working now. :)

    ---
    þ Synchronet þ Digital Distortion: digitaldistortionbbs.com