iViZ Announces New Class of PC Vulnerability

Aug 26 2008, 2:00pm CDT | by Shane McGlaun

According to iViZ, encrypting a hard drive is no longer enough protection. The firm says that it discovered a new class of vulnerability at Defcon 16 security conference that allows hackers to steal boot passwords and bypass the security of pre-boot authentication software.

The vulnerability allows hackers to bypass encryption software. iViz says that it has already briefed vendors like Microsoft, Intel, and HP on the vulnerability.

"Surprisingly, this vulnerability has been existing for 25 years," says Jonathan Brossard, iViZ lead security researcher and discoverer of this vulnerability. "Programmers unaware of this security hole have coded boot password feature in such a way that user entered text do not get flushed from memory properly leading to inadvertent leakage and theft. Even hard-drive encryption does not help in this case," adds Mr. Brossard. This vulnerability affects Microsoft Bitlocker on the latest TPM (but not Vista SP1), Truecrypt, Intel/HP BIOS and several others.

Via IvIz

where to buy

Buy from Amazon

What Others Say about This

The Dyer's Hand / ASH Smyth interviews Geoff Dyer

ASH Smyth interviews Geoff Dyer February 2012 The genre-defying British writer Geoff Dyer on how watching Tarkovsky’s Stalker on repeat turned into his most successful book . Photograph courtesy of Matt Stuart Geoff Dyer has always been rather keen on Am ...
Full article at: Guernica More like this 1 hour ago

“ZENONIA 4” RPG for Android Phones Now Available for Download

Following the trend in the mobile gaming industry, GAMEVIL is launching yet another freemium game, ZENONIA 4. Although the game is free for download, players who want to advance in the game much easier are required to purchase money, zen and other stuff. ...
Full article at: Softpedia More like this 2 hours ago

Catching Up With Logan Tuley-Tillman

As you probably know, Peoria (IL) Manual OT Logan Tuley-Tillman visited Michigan last weekend, bringing his mom along with him for the trip. I checked in with Logan today to get his impressions from the visit and talk about his recruitment, so here's a q ...
Full article at: mgoblog - Michigan football, hockey, basketball More like this 2 hours ago

Don't miss ...

Shane McGlaun
Leading our review center, Shane knows technology inside out. His extensive experience in testing computer hardware and consumer electronics enable him to effectively qualify new products and trends. If you want us review your product, please contact Shane.
Shane can be contacted directly at shane@i4u.com.