Comment 11 for bug 139057

Revision history for this message
Luke (lukekuhn) wrote :

Question: Does unsetting the PASS variable actually reset the bits in ram to zero-or do they stay set to the values the variable stored there until power is removed?

If unsetting the variable doesn't reset RAM bits to zero, I would suggest forcing them to an alternate value or to zero by resetting PASS to zer or a random number before unsetting it at the ehnd of the script.

For most applications it should be fine, I'm just wondering if an "expert" or NSA-grade attacker exploit this in some way in a power-on capture or online attack. I had a machine stolen by enemies who stormed my house-thankfully encrypted and shut off, so I think in these terms.