Live data from Hacker News

Google says Rowhammer attacks are gaining range as RAM is getting denser

therecord.media

1–10 of 127 posts

Re: Google says Rowhammer attacks are gaining range as RAM is getting denser

#4

Is there any evidence of Rawhammer being used in a successful attack in the wild?

According to the article, no.

What I want to know is if this works on ECC memory. I'm guessing not, which makes the "vulnerability" even more of a non-issue in mission-critical applications that likely moved to ECC a while ago.

Re: Google says Rowhammer attacks are gaining range as RAM is getting denser

#5

Article title is slightly misleading: by smaller they mean process size, increasing the range of the rowhammer attacks logically due to decreased distance between memory cells even though the physics limited distance is the same.

I'm the author of the article.

With all due respect, but I will have to push back on your categorization as 'slightly misleading' here. Your explanation effectively explains the headline and is also what Google researchers said. How is the headline misleading?

Re: Google says Rowhammer attacks are gaining range as RAM is getting denser

#8

Is there any evidence of Rawhammer being used in a successful attack in the wild?

According to the article, no. What I want to know is if this works on ECC memory. I'm guessing not, which makes the "vulnerability" even more of a non-issue in mission-critical applications that likely moved to ECC a while ago.

Apparently it does but I haven't tested it myself

Re: Google says Rowhammer attacks are gaining range as RAM is getting denser

#10

Is there any evidence of Rawhammer being used in a successful attack in the wild?

According to the article, no. What I want to know is if this works on ECC memory. I'm guessing not, which makes the "vulnerability" even more of a non-issue in mission-critical applications that likely moved to ECC a while ago.

Yes, Rowhammer can bypass ECC. Forgot to include this in the article, mainly because there's so much Rowhammer research.

See here: https://www.vusec.net/projects/eccploit/

Post reply on HN