Slashdot Mirror

I'd much rather something like Trevisor, where the key never leaves CPU registers.

Because it is easier to implement it that way instead of changing all the Java infrastructure around it?

This one e.g. is not micro kernel based: http://www4.cs.fau.de/Projects... but it is over a decade old.

Ring.cx is a videochat app that puts user privacy and freedom 1st place. By design, there is no big brother, no middleman, no trust problem. Ring leverages the same architecture as bittorrent (DHT), a decentralized network to connect peers. From there, all communication is encrypted peer-to-peer. Best of all, it's free software, backed up by the Free Software Foundation: https://directory.fsf.org/wiki... More at https://ring.cx/ Check the team's recent talk at FOSDEM: http://ftp.fau.de/fosdem/2017/...

Go and have a look at one then.
First one that came up with search results.

The researchers freezing the phone weren't doing it for anything as trivial as a root exploit; they were doing it to break the filesystem encryption. Freezing the phone (with it switched on) slows down the RAM decay enough so that quickly (~0.5sec) popping out the battery will reboot the system without the RAM erasing. From there, they start the phone up into "fastboot" mode, which is a pre-OS state that allows the device to be attached to a computer and have a custom OS loaded. That OS sniffs the RAM for the keys that had to be stored while the phone was on and decrypted, bippity boppity bacon you have access to the AES-scrambled filesystem. It's a nontrivial exploit and also nothing new, low-temperature data remanence is a known weakness of cryptosystems in general.

http://www1.cs.fau.de/frost

Take your pick:

• jsr-121
• KaffeOS
• JX
• Alta
• JanosVM
• MVM