News for hackers. Stuff that matters.

A comment on Malware Could Use SSD Over-Provisioning to Bypass Security Measures.

Re:Malware Could Use SSD Over-Provisioning to Bypass Securit... by wmf on Thursday December 30, 2021 @07:26PM (#29743359)
From the paper:

"Recently, researchers have created a technique to vary the over-provisioning area according to the workload in the data storage system..."

So this is building research on research; it doesn't apply to actual SSDs.

"Micron recently released an SSD with a flex capacity feature that changes the capacity of the storage device according to the workload..."

OK, this attack applies to one SSD model that came out recently.

[ Parent | on HN ]
Re:Malware Could Use SSD Over-Provisioning to Bypass Securit... by Arnavion on Thursday December 30, 2021 @07:58PM (#29743611)
It's not just the Micron. The Micron is only mentioned specifically because it lets you change the OP area size as a feature. Any SSD where the OP area can be resized dynamically for any reason is affected, and the paper says:

>Recently, many storage devices vary the size of the OP area in real time to optimize performance. [...] The OP area can be freely changed by the user or by the firmware manager.

[ Parent | on HN ]