4 ms·
> how rare? This point was kind of just glossed over. It varies widely between memory chips, memory controllers, and a variety of other factors. Not to mentio
by creshal 11y ago
> how rare? This point was kind of just glossed over.
It varies widely between memory chips, memory controllers, and a variety of other factors.
Not to mention, Rowhammer was first disclosed early last year, and many vendors started shipping BIOS updates to prevent Rowhammer on the memory controller level months ago; additionally the problem has been fixed from the start on DDR4 RAM (the bug has been known to memory vendors before, but not been deemed a security problem, so the fix wasn't applied retroactively to DDR3).
So finding actually exploitable devices now is going to be difficult.
- yuhong 11y agoTo be more precise, the feature in DDR4 is called TRR and the one in DDR3 is called pTRR.
- revelation 11y agoWho has ever updated their BIOS? Unless Windows now does this silently.
- creshal 11y agoCorporate IT should hopefully have mechanisms for it in place, because those tend to fix a lot of problems… and security relevant bugs. Edit: And additionally, yes, Windows 10 can ship BIOS updates, assuming the hardware and UEFI supports it.
- TazeTSchnitzel 11y agoApple machines handle firmware updates like any other software update.
- yuhong 11y agoYea, I think they even started bundling them with Mac OS X updates now.