4 ms·
Technically, this is not specific to Android phones. It's a hardware flaw and also possible on iOS. edit: Correct, I was confusing it with Row Hammer.
by bitmapbrother 10y ago
Technically, this is not specific to Android phones. It's a hardware flaw and also possible on iOS.
edit: Correct, I was confusing it with Row Hammer.
- ommunist 10y agoForgive my ignorance, how this is possible on iOS?
- lnx01 10y agoRowhammer rapidly flips bits in RAM. The bits that are rapidly flipped are chosen for their proximity to the physical transistors which store the UID. By flipping the bit near the transistors storing the UID very quickly, it's possible to induce a bit flips in the UID value itself and gain root access. This is a flaw inherent to DRAM, and it completely OS independent. It's a hardware level exploit.
- pbhjpbhj 10y agoWow, first I've heard of that one - someones a smart cookie to come up with that, props.
- baq 10y agothe comments here say that engineers who were developing first DRAMs knew about this since the very beginning and there are actually qualification tests for the hardware. the problem is that capacities got too large to test effectively.
- ommunist 10y agoThank you for the explanation. But will it not disable automatic updates, and AppStore functionality, since UID will loose its integrity?
- Scaevolus 10y agoI think you're confusing this with the DrK KASLR bypass using TSX that was also on the frontpage recently. This is specifically a Linux bug, and isn't applicable to iOS.
- gst 10y agoYou're mixing that up with rowhammer. The exploit that this article is about is a bug in the Linux kernel.