Apple FileVault cracked in under an hour by forensics biz

@Gerhard den Hollander

If I remember correctly, I read an article some 3 years back or so on the Register detailing how easy it was to capture in-memory contents of a recently powered down computer. It went something like:

1. Remove memory.

2. Whip out can of compressed air.

3. Turn can of compressed air upside-down.

4. Blast memory with freezing liquid.

5. You have a suprising amount of time (several minutes, if I remember correctly) to hook up the memory and read it's contents.


Back to the forum