An attacker with physical access can abruptly restart the device and dump RAM, as analysis of this memory may reveal FVEK keys from recently running Windows instances, compromising data encryption.

The effectiveness of this attack is, however, limited because the data stored in RAM degrades rapidly after the power is cut off.

  • stoy
    link
    fedilink
    English
    arrow-up
    75
    ·
    2 days ago

    Bitlocker is designed to aid against phyiscal attacks, so physical access is a given.

    • sus@programming.dev
      link
      fedilink
      English
      arrow-up
      11
      arrow-down
      1
      ·
      edit-2
      2 days ago

      the best you can ever do is make physical attacks more inconvenient, and it succeeds at that.

      Here’s another “critical vulnerability”: the attacker can insert a physical device to intercept all keystrokes, and steal the key whenever the user enters it. A hidden camera can also accomplish this