5 ms·
Just curious: Even after an attacker goes through all the effort of finding out the physical address of the memory location they want to manipulate, how would s
by Asdfbla 9y ago
Just curious: Even after an attacker goes through all the effort of finding out the physical address of the memory location they want to manipulate, how would someone make sure to get an adjacent memory location to even attempt to execute the Rowhammer attack? And even then, the smallest memory units allocated are basically pages within page frames, right? So if your target memory row is within a physical page frame, does the RowHammer attack even work? (Since there's no adjacent row an attacker has access to then.)
- IronBacon 9y agoOn Android there was a rowhammer POC used to gain root. Never looked at the details but it's in my TODO list... ^__^;
- seibelj 9y agoIf it’s something that can be triggered from browser JavaScript, maybe it can be attempted N times per second, and there is a mathematical probability of gaining full privileges within a set amount of attempts.