this post was submitted on 04 Aug 2023
141 points (98.0% liked)
Explain Like I'm Five
14260 readers
178 users here now
Simplifying Complexity, One Answer at a Time!
Rules
- Be respectful and inclusive.
- No harassment, hate speech, or trolling.
- Engage in constructive discussions.
- Share relevant content.
- Follow guidelines and moderators' instructions.
- Use appropriate language and tone.
- Report violations.
- Foster a continuous learning environment.
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Even if it's powered, RAM will lose its data on the order of a tenth of a second. RAM doesn't just require power, it requires that your computer constantly read and rewrite it - so every 64ms your computer has to read every gigabyte of RAM and write it back.
Doesn't the ram do that itself? Otherwise reading/writing all that data would waste tons of time for the CPU.
Yes - it's been the job of the DRAM controller for almost the entire history of computing. But that's still a part of the computer and if it stops working then your RAM will go blank in a fraction of a second
What!
If you ever have the chance to use an old Apple II computer, run a text mode program, wait til the owner is looking in the other direction and turn the power off and back on quickly.
For about a second, before you hear the loud BOOP and the screen clears, you'll see whatever was on the screen just before you powered it off. But a few characters will be corrupted. Try it again, and wait a half a second longer than before. More characters will be corrupted.
For that brief second you're looking at the contents of the video RAM, then the ROM (Apple called what we call BIOS now "ROM") clears the contents and puts up the familiar text banner. The longer the power stays off, the more the contents of those flash cells decay and flip the bits that determine what character shows up in a location on the screen.
The camera hack is really cool - i love stuff like that.
Dynamic RAM tracks bits by using a capacitor for each bit. Caps' charge bleeds out so you have to top it off again every so often. The way you do that is to just write the same data back again. So it reads and writes the same data to itself every refresh. The opposition to this is static RAM which does not use a capacitor and is just a clever arrangement of transistors. No refresh needed. It's not typically used commercially except under special requirements, though as transisters are significantly more expensive. So the refresh strategy is the better choice for consumer hardware. DRAM has been dominant for decades.
srsly... https://en.wikipedia.org/wiki/Memory_refresh
Slightly misleading, the DRAM chips do that themselves so the kernel doesn't have to do that.
Some very early systems did do it at kernel level, but yeah you are correct. Though I'd also consider the dram chips to be part of the computer and DRAM refresh makes up a good part of your phones battery consumption at standby.
If I remember, the decay of information in RAM is slower than that. This is an old memory, but I recall I think someone on TechTV talking about how you could, if fast enough, remove a module from one machine and put it in another, and if done right, potentially get the information off it.
It's possible, and can be done at home. You need to literally freeze the RAM very quickly (typically with CO2) and transfer it to the new system. Then you dump the contents of the stick and hopefully find an encryption key.
From what i've read it's temperature dependent, and at room temp some dram cells might take as long as 10 seconds to decay. The 64mS refresh is a super conservative call because it's really bad when random bits go missing out of memory. The decay is faster at high temperatures, but some dram controllers might actually adjust based on temperature.
Note that when you freeze the RAM a lot, it will hold the data for up to seconds (if I remember correctly). This is used in hacking - you can get the contents of the RAM after the computer has been shutdown.