FileVault 2 decrypted in about 40 minutes

[cerote]

On the day I finally decide to encrypt my drive with FileVault this news gets released.

http://reviews.cnet.com/8301-13727_7-57369983-263/filevault-2-easily-decrypted-warns-passware/

Claims to crack the passcode in around 40 minutes.

 

[gnasher729]

On the day I finally decide to encrypt my drive with FileVault this news gets released.

http://reviews.cnet.com/8301-13727_7-57369983-263/filevault-2-easily-decrypted-warns-passware/

Claims to crack the passcode in around 40 minutes.

If they have full access to the computer, while you are using it. They are attaching hardware to the computer and analyzing the computer's memory while it is accessing FileVault using the keys that the user entered. They can't do a thing if they steal a turned-off computer. You need to read those claims more carefully.

 

[cerote]

I claimed nothing but it can be cracked. I never said the conditions in which it needed to be in order to crack it.

 

[AndyMoore]

Quote from Passware's PDF, my emphasis added -

Having designed the latest features of Passware Kit Forensic for computer forensics, Passware alerts
home users of the vulnerabilities of Mac encryption solutions and advises users to shut down their
computers especially when working with confidential data. Sumin notes, “Live memory analysis opens up great possibilities to password recovery and decryption. Every user should be aware that even full disk
encryption is insecure while the data rests in computer memory.”

 

[gnasher729]

I claimed nothing but it can be cracked. I never said the conditions in which it needed to be in order to crack it.

It can be cracked even easier if you write the password on a sticky note on the screen. So the conditions for cracking are quite important, and not mentioning them gives the wrong impression.

 

[cerote]

I'm not writing a news article I was just bringing this forward. And it's not I'm linking a personal site talking about it the link is known tech site.

So it was midnight here and I was about to head out of work so I didn't want to make a massive write up.

Link is fully there to read up on it.

 

[flynz4]

I use FV2 on all of my computers... both desktop and laptop. We own 3 iMacs and 3 MBA's (soon to be 4 & 4)

For the desktop computers... I feel very safe. If someone breaks into my house and steals my iMac... I doubt they will sit around running in-memory analysis while the house alarm is blazing away and calling the authorities. If it is a smash and grab... then there is no memory resident data anymore. I simply go to the apple store, buy a new iMac... restore from backup (TC or cloud)... and I am back in business in a few hours.

The MBA's are a different story. Whenever I leave my MBA alone (example... in a hotel room)... I always shut down. The MBA boots so quickly it is only a minor inconvenience. Once again... I don't really care of my computer get's stolen as long as my data is secure.

I think this article is a good reminder that full disk encryption does have weak spots, but they are minor if you take good care in data protection.

I feel that by far, my weakest link is my IOS devices (iPad & iPhone). I do have them set up with complex pass codes... and they will self erase if the code is mis-entered 10 times... but I am still worried about their ability to hacked. I am hoping that Apple puts additional emphasis on device security going forward.

/Jim

 

[cerote]

Most common theives are in it for the hardware anyway not whats on the drive. So in all cases for a desktop thieves will unplug the computer anyway and this block this.

 

[KnightWRX]

40 minutes and expensive hardware ? If anything goes, I can crack your filevault 2 encryption in less than 2 minutes using only a water basin and a baseball bat.

 

[malman89]

I would wager it's insanely common that people don't shut down completely. Most people just put it to sleep overnight and rarely fully shutdown. They might restart when installing an update or something, but that's all.

Also, it's expensive software, not hardware.