News for hackers. Stuff that matters.
Re:Rowhammer-test – Test DRAM for bit flips caused by the ro... by faragon on Sunday January 22, 2017 @11:12AM (#13455750)
That's scary. So all DDR3, an probably most DDR4 memories are affected by that. Anyone knows if ECC is protection enough?
Re:Rowhammer-test – Test DRAM for bit flips caused by the ro... by masklinn on Sunday January 22, 2017 @12:25PM (#13456055)
It is not, at least for DDR3: "How Rowhammer Could Be Used to Exploit Weaknesses in Computer Hardware"[0] tested ECC and rowhammered it.

ECC can only reliably detect single and double-bit errors (in 64bit spans, and it can only correct single-bit errors), anything beyond that and detection is up to chance. ECC is a mitigation factor, but ultimately not a protection.

[0] http://www.thirdio.com/rowhammer.pdf

Re:Rowhammer-test – Test DRAM for bit flips caused by the ro... by blockoperation on Sunday January 22, 2017 @12:41PM (#13456145)
ECC could also help to raise the alarm when you're under attack – the chances of flipping enough bits to evade ECC (and have them be the right bits to pull off your exploit) without getting a few detectable flips in the process must be quite slim.
Re:Rowhammer-test – Test DRAM for bit flips caused by the ro... by msbarnett on Sunday January 22, 2017 @05:29PM (#13458007)
> ECC could also help to raise the alarm when you're under attack – the chances of flipping enough bits to evade ECC (and have them be the right bits to pull off your exploit) without getting a few detectable flips in the process must be quite slim.

I'd strongly suggest reading the linked paper. The upshot is: no, the chances are actually quite good that ECC won't save you by raising the alarm, because of the poor job most vendors do of surfacing ECC errors.

Re:Rowhammer-test – Test DRAM for bit flips caused by the ro... by yuhong on Sunday January 22, 2017 @08:17PM (#13458897)
If you read the paper, you will notice that Micron is the worst here.
Re:Rowhammer-test – Test DRAM for bit flips caused by the ro... by rasz_pl on Sunday January 22, 2017 @03:32PM (#13457248)
the only proper (other than radically redesigning geometry and topology of whole ram chip, probably losing capacity in the process) protection (known in the industry since middle nineties ...) is access counter per row inside the ram module or memory controller. But that would cost additional $0.1 per chip!!!1 :/