On 2025-07-05, whiteman808 wrote: > I ask about if it's possible to gain in some smart way access to data > stored on powered on physical computer while PC is locked (tty or DE) > and I want know about methods of doing it.
If someone with the right forensics tools for the task has physical access to your powered on PC, they will be able to capture your RAM and decrypt everything. https://en.wikipedia.org/wiki/Computer_forensics#Volatile_data If this scenario is in your threat model, consider configuring a "kill switch", e.g. https://github.com/hephaest0s/usbkill Other means could be considered too: https://en.wikipedia.org/wiki/Anti–computer_forensics#Physical
