Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security FullDisclosure
[Top] [All Lists]

RE: [Full-Disclosure] Xfree86 video buffering?

Subject: RE: [Full-Disclosure] Xfree86 video buffering?
Date: Fri, 25 Feb 2005 09:16:03 +0100
So the RAM should be flushed during shutdown ..
(as early in the shutdown procedure as possible, I'd say).
Trying to do this during the boot sequence is useless. You could make a
special 'bootdisk' that would show you the contents of the videoram. This
would also make it available for longer then the current 1 or 5 second
'flash' ...

Just my 2c

Allan


[quote]

I don't think this is at all easily solvable - when the X server starts up,
the card is probably in console mode using the VGA emulation, which is
pretty brain-dead and doesn't touch much of the card memory (when you have
32M or 64M on-card, that 640x480 gets lonely sitting in the corner).  The X
server first has to pop it into the native NVidia/ATI/whatever graphics mode
(remember, it has to do that *before* it can access the video memory - you
can't get there while still in VGA emulation).  Then it can proceed to clear
out the on-card memory.  Unfortunately, if the X server pauses in between
setting the mode and clearing  the memory, you get to see the uninitialized
(and therefor left-over) buffers.  About the best you can do here is fix the
server to try to not do any time-intensive operations between the mode set
and the clear.

There's multiple reasons why it can even survive a power cycle.  In my case,
I've only been powering off for a few seconds (stupid laptop doesn't have a
MNI Reset button, which would be quite helpful when doing kernel-level
hacking), and the voltage levels in the RAM hadn't decayed all the way to
bit lossage.
It's also quite possible that some video cards are made with static ram
rather than dynamic ram, which greatly increases the chances that the bits
will survive even an extended power-off, and/or the power "off" isn't really
all the way "off" - if the machine supports "suspend to RAM", it may be
keeping a very low trickle of power going to keep the memory from going
poof....

[/quote]

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

<Prev in Thread] Current Thread [Next in Thread>