[simias]

There are so many easier way to compromise the computers of 99% of the population that this particular flaw, while interesting, doesn't really appear all that critical to me. How many people (or even companies) bother to encrypt their hard drives these days? Not many in my experience. And for those who do how hard will it be to phish the credentials using basic social engineering?

If you're carrying nuclear codes then yeah, you should be worried about these attacks. If you're security officer for a small company then you probably have a long list of things to worry about before you have to consider cold boot vulnerabilities.

Furthermore if you're worried about an attacker having physical access to your computer what about simply installing a keylogger or a device that broadcasts your display for instance? That seems massively easier and faster to pull off than the attacks described here.

[pjc50]

> If you're security officer for a small company then you probably have a long list of things to worry about before you have to consider cold boot vulnerabilities.

Do you have laptops? Do you keep any personal data on them? Are you subject to GDPR? Then you do need to worry at least somewhat: https://www.databreachtoday.com/data-breach-another-stolen-l...

[jarfil]

These attacks can be made into a pendrive you just need to plug in. On laptops that's easier than hiding some extra hardware.