First, they made an attempt to stop Meltdown from generating correct One Time Passwords (OTP). While doing so, they added a new vulnerability - similar to the one that Meltdown used to obtain password for Deep Freeze Standard version 7.x and older.
Second, they added a licensing mechanism that requires each workstation to be activated. While doing so, they created a new local privilege escalation vulnerability.
The problem is in data exchange between driver and the UI component. It's done using DeviceIoControl calls and data are encrypted using changing XOR key. However, the overall communication protocol is badly designed.
So, let's start with the Deep Freeze Standard versions 5.x to 7.x. Communication between UI (frzstate2k.exe) and the driver goes like this:
Obviously, it's easy to extract password from the information provided by driver. That's what Meltdown originally did.
Deep Freeze Enterprise is a different story:
This communication makes sense. But all the information necessary to generate OTP was present in dfserv.exe and other executables. So, Meltdown didn't even have to communicate with the driver.
But in the latest version (v8.31) the information to generate OTP is not present in dfserv.exe or other executables. However, Faronics added a new feature to the driver:
Where have I seen this design before? smile So, I updated Meltdown to obtain information necessary for OTP generation from DeepFreeze driver. Easy as pie.
I get this question a lot lately. People who see Meltdown ask that. IT managers who bought DeepFreeze ask that. And even some reverser friends have asked me that. But I'd rather not say anything and let the facts speak for themselves.
Hello. I have deep freeze 8.20.020.4589, and i had tried your meltdown and it doesnt work. the message is DeviceIoControl reports failure (1), please help me, i need to close deep freeze.
thanks in advance. ( and excuss my english)
Asking others to talk in English is disrespectful, others should not have to accommodate to English speakers, rather, it should be the opposite. Since English is viewed as the "dominant language", it is important to recognize your privilege.
You are a genius thank you very much, you could perform the meltdown for the version of deep freeze 8.30, since when I use your application of my sale an error saying: "This DeepFreeze version is NOT supported"
thanks.
Hey,could a forgetfull fellow get any help with deepfreeze 8.51.220.5387. I manage a school, and we have 30 laptops with deepfreeze, the old it guy took off and we would like to reinstall windows and get ssd-s in them but we dont know the passwords....:( I tried meltdown but it doesent work, i knew it wouldnt but i hoped :) Will you update meltdown to support newer deepfreeze installs or nope. thnx
Hey there,
1) if you have a valid license, it should be possible to get a support from Faronics directly.
2) if you've lost your password and just want to change it, booting from any Linux live CD/USB should be enough. IIRC, deleting persi0.sys removes DeepFreeze settings - but I will not give any guarantees or support for that. Try at your own risk.
3) if you're putting in SSDs and a new system on them, you're looking at a complete reinstall anyway. There is no need to disable DeepFreeze for that.
Thanks for the reply.
1. yes we have a valid license, but it will be an ear sweating phone call with them and i wanted and i hoped for a shorter route.
2. thank you, good to know :)
3. Finally we cloned them with deepfreeze in frozen state without a problem...but still there is the problem with the passwords....
Anyhow thanks for the reply, and the help ;)
Hey, maybe you don't know why I am going to use this tool at first, because my BIOS password lock, and it cannot be reset, then I can't enter the PE, which means I can't install Windows on their own, as to delete the sys files, cannot be started directly, but I think you can plan to add 8.51 support thank you very much! If not, please recommend one that in the case of don't know the password and in the frozen state to remove or uninstall DeepFreeze method or software (I really need it) at the same time I also have their own idea: if I can enter the PE, so you only need to develop a can delete all DeepFreeze installation time is written on the registration list the procedure can achieve the goal of the disabled.
Hi, R/Kao, I've deep freezer V 8.61 installed (don't wanna uninstall) i forgot my password
I've need any tool like meltdown for password recovery. i'll be glad if you can do anything for
my issue. Thanks
No. As I've explained several times, the point of Meltdown was to demonstrate the issues with Faronics product design. Faronics have fixed the biggest issues with their product, and it's more or less OK now.
The events are connected, caused by the same phenomenon: They occurred in regions covered in permafrost, ground that should stay frozen throughout the year but is now thawing because of global warming.
Permafrost covers about 25 percent of all ice-free land in the Northern Hemisphere. For millennia, much of this ground has been a cemented mass of soil, rock and ice, along with bits of organisms preserved from decay in a deep freeze.
This was proven in 2012, when researchers from the Russian Academy of Sciences sprouted three dozen Silene stenophylla, herby white tundra flowers, from 30,000-year-old fruits. The specimens were recovered from ancient squirrel burrows, 125 feet deep in the permafrost of northeast Russia, according to the study published in Proceedings of the National Academy of Sciences. After sprouting in nutrient-rich test tubes, the seedlings had run-of-the-mill plant lives: They grew into fruit-bearing flowers in plastic pots and soil, resuming normal biological activity after being frozen for 300 centuries.
At another Alaskan site, Raven Bluff, bones were so well preserved that Rasic assumed they were a few hundred years old. But results from radiocarbon dating brought a shock: Raven Bluff was inhabited 11,000 years ago. Permafrost sites of this era are key to understanding how Ice Age people migrated from Siberia and settled the Americas.
Last summer, climatologist William Colgan, a researcher for the Geological Survey of Denmark and Greenland, led an expedition of scientists to Camp Century, an abandoned U.S. military base buried in the Greenland Ice Sheet.
But 10 stories beneath the surface are the remains of the facility, which in the 1960s spanned more than 100 football fields and housed as many as 200 soldiers from the U.S. Army. One mission was top secret and code-named Project Iceworm: install ballistic missiles under the ice sheet, within range of Russia.
By 1967, the Army had abandoned the project, leaving behind hazardous wastes including sewage, radioactive coolant and carcinogenic industrial chemicals, as well as diesel fuel. Engineers at the time assumed these toxins would be preserved indefinitely under ice.
But the Greenland Ice Sheet is melting, and faster than once projected. From 2007 to 2011, the ice sheet shrunk by about 290 billion tons per year. Compare that with an average loss of 83 billion tons per year from 1900 to 1983.
Instead, the researchers collected ice cores for analysis and installed weather and ice-monitoring devices, which transmit real-time data back to lab headquarters in Copenhagen. Donning cross-country skis, they also towed ice-penetrating radar across the surface to produce more accurate maps of subterranean debris.
But buildings can lose structural integrity and become unstable even with modest increases in ground temperature, well before all-out melt. In Alaska alone, the destruction of buildings and infrastructure due to permafrost thaw over the next century could cost more than $2 billion, according to a 2017 study.
In his research, Streletskiy does that accounting. Instead of temperatures from the time of construction, he subs in current climate data. The result of a study he authored in 2012: Foundations across Siberian cities can bear up to 46 percent less load in 2010 than in the 1960s, putting them at risk of collapse.
While Arctic urbanites grapple with collapsing buildings, traditional coastal villages face total destruction. Over the past five decades, shorelines throughout the Arctic have receded by an average of 1.5 feet annually. Some spots have lost as much as 70 feet in mere hours during violent storms. These Arctic coasts are disappearing due to the combined effects of permafrost thaw, sea level rise and longer summers when the seas are ice-free. In short, more waves are crashing farther onto softer land.
To the untrained eye, they appear to be meteor impacts: massive, funnel-shaped craters, about 80 feet across and 15 stories deep, that suddenly appear in the Russian tundra. But according to Vladimir Romanovsky, a geophysicist at the University of Alaska who has been monitoring permafrost since the 1970s, nothing like this was described in any scientific or even not-scientific literature.
Supporting this explanation, local reindeer herders reportedly heard loud booms soon before craters were first noticed. At the sites, researchers found explosively high methane concentrations and chunks of earth littering the periphery for thousands of feet. Satellite images from previous years showed the craters were once small hills, bulging from the tundra.
The project is one of many trying to understand the permafrost carbon feedback: The idea that thawing permafrost will allow long-frozen organic matter to be decomposed by soil microbes, which will release greenhouse gases, accelerating global warming.
The feedback was first described in a 2006 Science paper. Yet permafrost carbon has not been included in most climate projections. There are just too many unknowns, including how much carbon is in the permafrost, how easily it could degrade and how quickly it might be released.
b37509886e