@diretraversal that's correct.

@diretraversal We do not produce products for cold boot attacks. Our software finds FV2 keys in memory and decrypts drives.

@diretraversal If FW port is not available we could do a cold boot attack and extract FV2 encryption keys from RAM image.

@diretraversal I FW port is not available we could do a cold boot attack and extract FV2 encryption keys from RAM image.

@diretraversal Starting from recent Lion update a user (even a guest account) should be logged in order to use FireWire.

@dragosr @myrcurial Previous versions of OS X allowed DMA even for logged off users (locked systems)

@dragosr @myrcurial Starting from recent Lion update - yes, the user should be logged in.

@dragosr The same 40 mins if we are talking about memory analysis.

@hubert3 No, before the first login the encryption keys are not in memory yet, so the decryption is impossible.

@kevinmitnick When talking about crypto, it becomes extremly difficult to get your message heard by the media correctly.

Brute forcing #FileVault in 40 minutes is impossible. #Passware software extracts encryption keys from live memory.

#FileVault is as secure as BitLocker, TrueCrypt and PGP.

The new #Passware decryption solution is not unique to #FileVault. It also works for BitLocker, TrueCrypt and PGP.

#Apple's FileVault 2 isn't anywhere near as secure as the company seems to think, says Passware cnet.co/Aj7uS4

Forensics vendor warns Mac OS X FileVault vulnerable to decryption: Passware, a vendor of forensics tools for re... bit.ly/x2wwa8

Passware Contributes to Mac Forensics by Decrypting FileVault bit.ly/A4SmDz

Passware Kit 11.3 extracts FileVault encryption keys and decrypts hashed passwords with Rainbow Tables: bit.ly/pnl61

Teenagers Sharing Passwords as Show of Affection: nyti.ms/zv1iqp

We wish everyone a safe and very happy new year!

Season's greetings from Passware - we have baked some fortune cookies for you! bit.ly/fc-2012