{"guid":"import-0ec6cf83fd3d4ca115","title":"Advanced memory forensics: The Cold Boot Attacks","subtitle":"Recovering keys and other secrets after power off","slug":"25c3-2922-en-advanced_memory_forensics_the_cold_boot_attacks","link":"http://events.ccc.de/congress/2008/Fahrplan/events/2922.en.html","description":"Contrary to popular assumption, DRAMs used in most modern computers retain their contents for seconds to minutes after power is lost, even at operating temperatures and even if removed from a motherboard. Although DRAMs become less reliable when they are not refreshed, they are not immediately erased, and their contents persist sufficiently for malicious (or forensic) acquisition of usable full-system memory images.\n","original_language":"eng","persons":["Jacob Appelbaum"],"tags":["25c3"," Hacking"],"view_count":384,"promoted":false,"date":"2008-12-27T01:00:00.000+01:00","release_date":"2008-12-30T01:00:00.000+01:00","updated_at":"2026-03-13T15:45:08.596+01:00","length":3516,"duration":3516,"thumb_url":"https://static.media.ccc.de/media/congress/2008/25c3-2922-en-advanced_memory_forensics_the_cold_boot_attacks.jpg","poster_url":"https://static.media.ccc.de/media/congress/2008/25c3-2922-en-advanced_memory_forensics_the_cold_boot_attacks_preview.jpg","timeline_url":"https://static.media.ccc.de/media/congress/2008/import-0ec6cf83fd3d4ca115-timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/congress/2008/import-0ec6cf83fd3d4ca115-thumbnails.vtt","frontend_link":"https://media.ccc.de/v/25c3-2922-en-advanced_memory_forensics_the_cold_boot_attacks","url":"https://api.media.ccc.de/public/events/import-0ec6cf83fd3d4ca115","conference_title":"25C3: nothing to hide","conference_url":"https://api.media.ccc.de/public/conferences/25c3","related":[{"event_id":99,"event_guid":"import-38b13899aa39910195","weight":1},{"event_id":707,"event_guid":"import-656b0b8a34f30c8add","weight":1},{"event_id":771,"event_guid":"import-4d16517d50ae0e0c3b","weight":1},{"event_id":787,"event_guid":"import-af83df1b1cdc8049c6","weight":1},{"event_id":796,"event_guid":"import-802e39aaed267dfb47","weight":1},{"event_id":797,"event_guid":"import-99180de8618aece534","weight":1},{"event_id":977,"event_guid":"import-7066236907169c00ee","weight":3},{"event_id":1057,"event_guid":"import-d93f6f776ff5e0bf3d","weight":2},{"event_id":1139,"event_guid":"import-81fb5c39090d6797a6","weight":1},{"event_id":1224,"event_guid":"import-8b83be574c5fcc8ac9","weight":1},{"event_id":1247,"event_guid":"import-91e5b00343840237ef","weight":1},{"event_id":1262,"event_guid":"import-29c8513b5ebcac13d0","weight":1},{"event_id":1267,"event_guid":"import-ab5825f2382abe8af8","weight":1},{"event_id":1271,"event_guid":"import-f8b849a9e3b83d4724","weight":1},{"event_id":1274,"event_guid":"import-b24e96b14b74162533","weight":1},{"event_id":1277,"event_guid":"import-46ee25357ca568906f","weight":1},{"event_id":1278,"event_guid":"import-c061c38bfc1a4656a5","weight":1},{"event_id":1286,"event_guid":"import-f6c40cb6e8f7feb70c","weight":1},{"event_id":1287,"event_guid":"import-555a982abc9d8b293e","weight":1},{"event_id":1290,"event_guid":"import-7fdd19a6d7f3fa79ff","weight":1},{"event_id":1294,"event_guid":"import-e1bb0bdd72e1b3b9c2","weight":1},{"event_id":1295,"event_guid":"import-e764d19e33d6433269","weight":1},{"event_id":1299,"event_guid":"import-5fa5d5ff35316aaa6c","weight":1},{"event_id":1303,"event_guid":"import-8a69e7b1ee3f8cc625","weight":1},{"event_id":1308,"event_guid":"import-ec9465f980d4610552","weight":1},{"event_id":1310,"event_guid":"import-459d6b860d035d66e1","weight":1},{"event_id":1313,"event_guid":"import-ab7c839b128736450c","weight":1},{"event_id":1315,"event_guid":"import-317788719156ce0058","weight":1},{"event_id":1319,"event_guid":"import-8397d9a280bad60e5c","weight":1},{"event_id":1323,"event_guid":"import-5e89fe5c21c6e4d891","weight":1},{"event_id":1325,"event_guid":"import-57c2428d76aa862a32","weight":1},{"event_id":1331,"event_guid":"import-b6d9b9d565c00a5acb","weight":2},{"event_id":1334,"event_guid":"import-999159d42d326f39e3","weight":1},{"event_id":1335,"event_guid":"import-d1037d2e423d87a070","weight":1},{"event_id":1339,"event_guid":"import-1750405b344a79e865","weight":1},{"event_id":1347,"event_guid":"import-a7dc5a6ad09460f44a","weight":1},{"event_id":1350,"event_guid":"import-bbaef39cd440f712fd","weight":1},{"event_id":1372,"event_guid":"import-79c42ca7a3a36179d3","weight":1},{"event_id":1373,"event_guid":"import-613c31891add515c96","weight":1},{"event_id":1389,"event_guid":"import-5e05e9fcc28e3e5161","weight":1},{"event_id":1422,"event_guid":"import-d7f37b1162046a6dc0","weight":1},{"event_id":1429,"event_guid":"import-491788383a692aaae6","weight":1},{"event_id":1433,"event_guid":"import-0d85220ad4a9ae8992","weight":1},{"event_id":1436,"event_guid":"import-b6cba2c62c6ac212a4","weight":1},{"event_id":1438,"event_guid":"import-c4d094a86d6fdad7df","weight":1},{"event_id":1451,"event_guid":"import-383c676610cff2f149","weight":1},{"event_id":1454,"event_guid":"import-3299afbb3645f5d6ee","weight":1},{"event_id":1455,"event_guid":"import-524e41ae54d3230bb9","weight":1},{"event_id":1456,"event_guid":"import-ffedc66f28f81c9a2e","weight":1},{"event_id":1460,"event_guid":"import-973ed884893c6dffcd","weight":1},{"event_id":1461,"event_guid":"import-4703df2362d43a594d","weight":1},{"event_id":1469,"event_guid":"import-7cc5774ada31a7936e","weight":1},{"event_id":1474,"event_guid":"import-00d4d9403ecf738d65","weight":1},{"event_id":1476,"event_guid":"import-18ff532f1aae2ba415","weight":1},{"event_id":1477,"event_guid":"import-633bd84860f65db047","weight":2},{"event_id":1487,"event_guid":"import-31618b1a3c02facb8d","weight":1},{"event_id":1493,"event_guid":"import-e0153826abfc289658","weight":2},{"event_id":1501,"event_guid":"import-ff92b8bbffb2bdb1ac","weight":1},{"event_id":1503,"event_guid":"import-019cfe6488a1c1abe9","weight":2},{"event_id":1509,"event_guid":"import-31d801b8dfc62fa380","weight":1},{"event_id":1510,"event_guid":"import-5c41c1053cc25fb4b8","weight":1},{"event_id":1512,"event_guid":"import-79dd14a9f3d562f20e","weight":1},{"event_id":1516,"event_guid":"import-7a231e34c3be021873","weight":1},{"event_id":1518,"event_guid":"import-9730c46adda6b5864e","weight":1},{"event_id":1519,"event_guid":"import-7c24eae3ff97e72737","weight":2},{"event_id":1567,"event_guid":"import-6e1975ef73fbf52e06","weight":2},{"event_id":1678,"event_guid":"import-499496e1f8d0dc96ab","weight":1},{"event_id":1682,"event_guid":"import-424b431b28ea3a4a99","weight":2},{"event_id":1710,"event_guid":"import-23969f74f61375b2c6","weight":2},{"event_id":1799,"event_guid":"Lv-uOMbLZH1T17ZxxJ-TEQ","weight":4},{"event_id":1828,"event_guid":"kkMSS4JoEJtzbF9jc2JJ4A","weight":1},{"event_id":2900,"event_guid":"47da549d-fd5b-4210-a8e5-bbb057844c0d","weight":1},{"event_id":2923,"event_guid":"ba780105-8cc1-4e6e-8552-5e3bc150b9ff","weight":1},{"event_id":3298,"event_guid":"5bdec219-9b25-5e91-9a04-156e36081ab5","weight":1},{"event_id":3554,"event_guid":"84e9ccad-5efe-49ac-b117-b382ae6fac1f","weight":2},{"event_id":3609,"event_guid":"1efa803c-d280-49f0-bd17-8ec8f28e054f","weight":1},{"event_id":3640,"event_guid":"700a07e7-a9c4-437b-a4c5-4491b23a9b4a","weight":1},{"event_id":3658,"event_guid":"10b11771-c76f-44d5-9b65-9ebca428d8ff","weight":1},{"event_id":3769,"event_guid":"5e96082f-cea6-41b5-9545-b2bc0b16c377","weight":1},{"event_id":3853,"event_guid":"efeeaebc-3f29-11e7-9ba7-2f214305c877","weight":1},{"event_id":3954,"event_guid":"6033c592-f777-4e83-84ee-94cef2e89338","weight":1},{"event_id":4528,"event_guid":"4322f0f5-6e6b-5341-b0e0-3f69cadf6040","weight":1},{"event_id":4778,"event_guid":"34fb21bd-34f5-40cc-b081-7fc427c452b6","weight":1},{"event_id":4808,"event_guid":"acab4111-aba7-44f7-b56e-ef805dcacd00","weight":1},{"event_id":4870,"event_guid":"2cb8f405-10be-40f5-ae95-579f024a0c84","weight":1}],"recordings":[{"size":450,"length":3516,"mime_type":"audio/ogg","language":"eng","filename":"25c3-2922-en-advanced_memory_forensics_the_cold_boot_attacks.ogg","state":"downloaded","folder":"audio_only","high_quality":true,"width":720,"height":576,"updated_at":"2014-05-10T15:26:46.934+02:00","recording_url":"https://cdn.media.ccc.de/congress/2008/audio_only/25c3-2922-en-advanced_memory_forensics_the_cold_boot_attacks.ogg","url":"https://api.media.ccc.de/public/recordings/2341","event_url":"https://api.media.ccc.de/public/events/import-0ec6cf83fd3d4ca115","conference_url":"https://api.media.ccc.de/public/conferences/25c3"},{"size":450,"length":3516,"mime_type":"video/webm","language":"eng","filename":"25c3-2922-en-advanced_memory_forensics_the_cold_boot_attacks.webm","state":"downloaded","folder":"webm","high_quality":true,"width":720,"height":576,"updated_at":"2016-01-27T11:03:34.078+01:00","recording_url":"https://cdn.media.ccc.de/congress/2008/webm/25c3-2922-en-advanced_memory_forensics_the_cold_boot_attacks.webm","url":"https://api.media.ccc.de/public/recordings/2339","event_url":"https://api.media.ccc.de/public/events/import-0ec6cf83fd3d4ca115","conference_url":"https://api.media.ccc.de/public/conferences/25c3"},{"size":450,"length":3516,"mime_type":"video/mp4","language":"eng","filename":"25c3-2922-en-advanced_memory_forensics_the_cold_boot_attacks.mp4","state":"downloaded","folder":"video_h264_720x576","high_quality":true,"width":720,"height":576,"updated_at":"2016-01-27T11:03:34.052+01:00","recording_url":"https://cdn.media.ccc.de/congress/2008/video_h264_720x576/25c3-2922-en-advanced_memory_forensics_the_cold_boot_attacks.mp4","url":"https://api.media.ccc.de/public/recordings/2340","event_url":"https://api.media.ccc.de/public/events/import-0ec6cf83fd3d4ca115","conference_url":"https://api.media.ccc.de/public/conferences/25c3"}]}