News for hackers. Stuff that matters.
Re:Nethammer: Inducing Rowhammer Faults Through Network Requ... by ccnafr on Tuesday May 15, 2018 @11:27AM (#17074654)
How is this different exactly from Throwhammer?
Re:Nethammer: Inducing Rowhammer Faults Through Network Requ... by nanis on Tuesday May 15, 2018 @11:42AM (#17074797)
> Throwhammer works by registering a large amount of memory space called a buffer on the network card of the targeted device. [1]

> Nethammer is the first truly remote Rowhammer attack, without a single attacker-controlled line of code on the targeted system. Systems that use uncached memory or flush instructions while handling network requests, e.g., for interaction with the network device, can be attacked using Nethammer. Other systems can still be attacked if they are protected with quality-of-service techniques like Intel CAT. We demonstrate that the frequency of the cache misses is in all three cases high enough to induce bit flips. [2]

[1]: https://arstechnica.com/information-technology/2018/05/attac...

[2]: https://arxiv.org/pdf/1805.04956.pdf

Re:Nethammer: Inducing Rowhammer Faults Through Network Requ... by rasz on Tuesday May 15, 2018 @11:54AM (#17074891)
Throwhammer: > 9.375 million packets per second

Nethammer: > 1 024 000 packets per second over a 500 Mbit/s connection ......Hence, we conclude that in theory...

Both currently at best lead to server crash, and are highly impractical.

Re:Nethammer: Inducing Rowhammer Faults Through Network Requ... by nyolfen on Tuesday May 15, 2018 @02:49PM (#17076576)
it seems eminently plausible to me to carry out an attack from a device on the same network, cohosted at the same facility, etc
Re:Nethammer: Inducing Rowhammer Faults Through Network Requ... by cjcampbell on Tuesday May 15, 2018 @11:44AM (#17074830)
Looks like this doesn’t depend on direct memory access. Judging from the devices, it’ll also work at lower speeds, whereas throwhammer requires multi-gbps.