Hacker News new | ask | show | jobs
by encrypted_bird 113 days ago
Just out of curiosity, what is a cold boot attack?
1 comments
gruez 113 days ago
https://en.wikipedia.org/wiki/Cold_boot_attack

tl;dr they pull the decryption keys from your computer while it's still running, which of course it is because your mail server has to be up 24/7.

link
wildzzz 113 days ago
Simple solution: put your server inside of a cabinet or enclosure that immediately powers it off if opened with a hidden micro switch. Additionally, write a little udev rule to immediately power off if any new USB device is connected or Ethernet is unplugged.
link
encrypted_bird 112 days ago
So a trip-switch for the server?

How would one access it if one needed to do config changes or, really, anything the server for legitimate purposes?

link
quesera 112 days ago
ssh in and shut down first (and/or just use a properly reliable filesystem).

Mail transfer can tolerate multi-hour interruptions. Imagine the drama if it couldn't!

link
encrypted_bird 111 days ago
If you can ssh in, couldn't they ssh in?
link
encrypted_bird 112 days ago
That is fascinating! Thanks for sharing!
link