News for hackers. Stuff that matters.
Re:Google says Rowhammer attacks are gaining range as RAM is... by hypertele-Xii on Friday May 28, 2021 @02:52PM (#27319142)
ECC is vulnerable to Rowhammer.
Re:Google says Rowhammer attacks are gaining range as RAM is... by notriddle on Friday May 28, 2021 @03:00PM (#27319210)
I saw this article linked later. https://www.vusec.net/projects/eccploit/

It's interesting! It seems fixable, based on information later on in the article ("Can I get DDR3 DIMMs that are Rowhammer-free?"), and ECC only seems to be part of a solution, and not a complete solution.

But you're still right, and I was still wrong: ECC alone isn't good enough.

Re:Google says Rowhammer attacks are gaining range as RAM is... by josh2600 on Friday May 28, 2021 @03:19PM (#27319415)
I mean the punchline is: if you heat something up enough then you can get electrons to wiggle. At some level of cell wall thickness, the cost/time/annoyance of triggering a rowhammer exceeds the value of the attack, and other methods become cheaper or more practical.

Ultimately, nothing that an attacker has physical access to can be completely secured, we can only raise the cost in terms of time and money to attempt to breach the system. Even a system with tamper-destructive enclosures have seen attacks (it's just more expensive and difficult than other attacks).

In short, the more annoying/expensive you can make it to attack your system, the smaller the set of attackers becomes.

Re:Google says Rowhammer attacks are gaining range as RAM is... by tooltower on Friday May 28, 2021 @08:03PM (#27321945)
We are not talking about physical attacks. Neither are we talking about attacks based purely on heating up the DRAM chips. The topic here is a remote attacker who can target specific words or bits to be flipped.
Re:Google says Rowhammer attacks are gaining range as RAM is... by josh2600 on Saturday May 29, 2021 @06:13PM (#27328644)
When bits are flipped in a row hammer attack, what is happening to the dram? Most people would argue the energetic potential is increasing causing a failure of the boundary between cells...
Re:Google says Rowhammer attacks are gaining range as RAM is... by nullc on Friday May 28, 2021 @03:00PM (#27319216)
Much less so.
Re:Google says Rowhammer attacks are gaining range as RAM is... by dahfizz on Saturday May 29, 2021 @10:28AM (#27325461)
Row hammer is already super impractical. ECC does make the exploit harder.
Re:Google says Rowhammer attacks are gaining range as RAM is... by nwah1 on Friday May 28, 2021 @03:00PM (#27319209)
Equally vulnerable?
Re:Google says Rowhammer attacks are gaining range as RAM is... by r00fus on Friday May 28, 2021 @03:13PM (#27319346)
The same way that masks don't prevent COVID.
Re:Google says Rowhammer attacks are gaining range as RAM is... by th0ma5 on Friday May 28, 2021 @04:05PM (#27319839)
Right in statistically mostly it does / they do.
Re:Google says Rowhammer attacks are gaining range as RAM is... by kortilla on Friday May 28, 2021 @06:29PM (#27321273)
No, statistically it’s almost useless to prevent yourself from getting COVID. It’s mainly about reducing your ability to spread it.

That’s why people get mad when you don’t wear a mask even if you “don’t care about getting covid”.

Re:Google says Rowhammer attacks are gaining range as RAM is... by th0ma5 on Friday May 28, 2021 @06:32PM (#27321300)
Yes that was a prominent theory at one time and helped a lot of the public adopt masks but it is actually both https://www.npr.org/sections/health-shots/2020/11/11/9339038...