data remanence

[Michael Holstein]

> Flash is writable, so can be tampered. The critical secret (the
> server's key) is in the ro part. So what good is it?

There are a variety of hardware devices that attempt to address this .. 
IBM's secure crypto cards (PCI) come to mind -- these are used in a 
variety of ATMs for example, and store the key in volatile memory, 
protected against side-channel and physical attack.

> Really, guys. If it is protection against governments you want, you
> are barking up the wrong tree. Too difficult.

It's fun to try though, and since I'm not doing anything illegal with 
TOR, I'm only trying to help save other people's bacon.

While you'll never make anything *impossible*, you can make it so bloody 
difficult and expensive that you'll can tire your advisory.

Remember, the price of freedom is eternal vigilance (Jefferson).

/mike.