Previous and current versions of Passware's software are also able to bypass Microsoft's BitLocker encryption which is built into some editions of Windows.
Although Passware seems to mainly market its software to government and law enforcement agencies and military organizations, anyone with US $795 can purchase an edition of Passware Kit that includes these features. Interestingly, Passware also lists Apple, Microsoft, Intel, and several other major tech companies among its customers.
For those who might find all this concerning, it is important to note a few important caveats.
First, Passware's software requires physical access to a computer with a working FireWire port; a remote internet attacker cannot use it to break into your Mac or PC.
AppleInsider reports that turning off your computer rather than putting it to sleep - and of course ensuring that automatic login is disabled - will prevent passwords from being stored in RAM and thus prevent them from being recoverable.
Furthermore, Passware Kit does not target Sophos SafeGuard full-disk encryption.
The concept and practice of exploiting machines locally via a FireWire port has been around for several years.
In 2008, Sophos reported about Winlockpwn, a utility that can unlock a live Windows system via FireWire. Security experts have postulated that similar exploits might be possible via Thunderbolt ports, which have become a standard feature on recent Macs and will become available on PCs later this year.
nakedsecurity.sophos.com
Niciun comentariu:
Trimiteți un comentariu