ECCploit is the first Rowhammer attack to defeat error-correcting code

Re:ECCploit is the first Rowhammer attack to defeat error-co... by ccnafr on Thursday November 22, 2018 @06:03AM (#18509252)

You mean the attack that required you to have malware already on your phone (RAMpage)? Or the one that was mitigated via Chrome years back (Drammer)?

Cause both are impractical. Using a minutes-long RAMpage attack to root an already compromised device is impractical. There are easier ways to do that. And it's easier to update Chrome than the Android OS, for Drammer, so that's been mitigated ages ago. Nobody uses a three-year-old Chrome on Android. Get real ... and spare me the comment about how some users don't update apps, cause they do, Google makes sure to spam users about it daily.

[ Parent | on HN ]

Re:ECCploit is the first Rowhammer attack to defeat error-co... by Tor3 on Thursday November 22, 2018 @06:11AM (#18509282)

To be fair, it's as easy to turn off the daily notices as it is to turn off the automatic updates. And, as updates seem to break various things at least as often as they improve things it's nothing unusual about users turning off one or both of the features.

(Note that I'm not commenting on the attack vector at all, only about the Android update settings)

[ Parent | on HN ]

Re:ECCploit is the first Rowhammer attack to defeat error-co... by xiphias2 on Thursday November 22, 2018 @06:36AM (#18509373)

It's not just easy but I have some friends who dom't update their (low end) phones because they're afraid that the updates will slow the system down.

[ Parent | on HN ]