3 ms·
Xen has had page-table and interrupt vector related security vulnerabilities. But I don't think EC2 would use non-ECC RAM, so I don't think it's vulnerable to t
by ploxiln 10y ago
Xen has had page-table and interrupt vector related security vulnerabilities. But I don't think EC2 would use non-ECC RAM, so I don't think it's vulnerable to this "rowhammer" technique. (I also don't think EC2 would do cross-VM page deduplication, another necessary condition.)
- willvarfar 10y agoPerhaps we need more certainty than just "think"? That AWS don't boast that they are not susceptible to this suggests that perhaps at least some of their setup is?
- Rezo 10y agoThe EC2 FAQ [0] states: "In our experience, ECC memory is necessary for server infrastructure, and all the hardware underlying Amazon EC2 uses ECC memory." While ECC does apparently not completely mitigate Rowhammer, it helps. [0] https://aws.amazon.com/ec2/faqs/ https://aws.amazon.com/ec2/faqs/