<div dir="ltr">Thanks, Jim. I pretty much figured that the keep alive time would be pretty short for SDRAM. But you know how anal the government-types can be sometimes [always?]. The facts don't matter so much as the DOCUMENTATION of the facts. Isn't that why the govt. uses RHEL instead of CENTOS? I.e., if you did all the same hardening procedures to a CENTOS box that you did to a RHEL box they would be equally secure, but the CENTOS box would not be CERTIFIED, correct?<div>
<br></div><div>Would it be possible for a bot/virus/trojan to be loaded into BIOS that could then grab info when the system is up and running? If it is possible, they will be concerned about that and it will need to be addressed in the LoV letter.</div>
</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Jan 29, 2014 at 1:57 PM, Jim Lynch <span dir="ltr"><<a href="mailto:ale_nospam@fayettedigital.com" target="_blank">ale_nospam@fayettedigital.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000"><div><div class="h5">
<div>On 01/29/2014 01:13 PM, Greg Clifton
wrote:<br>
</div>
<blockquote type="cite">
<div dir="ltr">Maybe this is Off Topic, but it is computer
related. So here is the deal, I have a RFQ to quote on some
computers to go into a classified application and the customer
wants a Letter of Volatility. Now, obviously, the mass storage
will be removable, but they are concerned about any memory in
the system. I take this to include both volatile SDRAM (DDR3)
and any non-volatile memory such as the CMOS for the BIOS (is it
possible that some bot could be lurking there that could grab
data and send it out when the computer is turned on?).<br>
<div><br>
</div>
<div>My question is basically, how long does DDR3 maintain any
recoverable data once the power is turned off. I would assume
that power should be totally removed (as in unplugged from the
wall) so that there is not even 5V standby power, no?</div>
<div><br>
</div>
<div>Comments and especially links to solid information would be
appreciated.</div>
<div><br>
</div>
<div>Thanks in advance,</div>
<div>Greg Clifton</div>
</div>
<br>
<fieldset></fieldset>
<br>
</blockquote></div></div>
Dynamic memory is volatile. I suspect the data remains for a period
of time measured in milliseconds. Not nearly enough time to unplug
and get it to another system. Unless of course you buy non-volatile
DDR memory. <br>
<br>
One reference:
<a href="http://en.wikipedia.org/wiki/Dynamic_random-access_memory" target="_blank">http://en.wikipedia.org/wiki/Dynamic_random-access_memory</a>
</div>
<br>_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
<br></blockquote></div><br></div>