Sage advice from Jesper: don’t worry about clearing the page file (I love his list of things to be worried about). The setting to clear the page file at shutdown has always seemed like security theater to me, so I’m glad to see him point it out.
Sage advice from Jesper: don’t worry about clearing the page file (I love his list of things to be worried about). The setting to clear the page file at shutdown has always seemed like security theater to me, so I’m glad to see him point it out.
Filed under General Stuff, Musings
I agree with Jesper in principle about the page file (though I wonder how much data makes it to the page file, if for example you have a very large database, spreadsheet or document.)
Certainly it would be next to impossible to disseminate user/password information if you managed to get the page file. I spend much of my system deployment time going through checklists of security items that at one time were an obscure attack vector and now is “obsolete”, but the items remain on the checklist anyway.
Good advice.
Clearing the pagefile on shutdown may have a place in a highly secure environment. But it really only makes sense as part of a comprehensive security policy. The pagefile is locked for exclusive access while Windows is running so no application can access it. It could only be directly accessed from an alternate operating system, such as a DOS boot disk. Finding something of value in hundreds of MB of raw data would be quite time consuming. There are other ways to gain access to sensitive data and most require less effort.
Larry Miller
Microsoft MCSA