6 ms·
The paper discusses thread models based around denial of service, but a more worrisome possibility is that an attacker might figure out how to wear out a proces
by jimrandomh 11y ago
The paper discusses thread models based around denial of service, but a more worrisome possibility is that an attacker might figure out how to wear out a processor in a way that creates bit-flips which can be exploited to create a more traditional security vulnerability. Does anyone know enough about this to tell whether that might be feasible?
- deleted 11y ago[deleted]
- fabulist 11y agoIf the attacker can run code on your hardware, they probably don't stand to gain anything from (from the standpoint of compromising data integrity) by degrading your hardware to introduce bit flips. It would be simpler to present you data corrupted in the fashion they'd like.
- weinzierl 11y agoI think it's not that clear cut. "run code on your hardware" what does that mean? Running code as root? Certainly. Regular user? Certainly. In some form of sandbox? Hmm. I you accept that running Javascript in a Browser or PDF-Reader is "running code on your hardware" then thousands of people have run code on my hardware. It doesn't usually matter because the sandbox protects me from obvious attacks like accessing the file system. The sandbox won't do nothing to prevent certain instruction patterns or memory access patterns. I don't know if that's really feasible but I see the possibility.
- Rotten194 11y agoPeople said this about Rowhammer too.