3 ms·

How is this different exactly from Throwhammer?

• nanis 8y ago
  > Throwhammer works by registering a large amount of memory space called a buffer on the network card of the targeted device. [1] > Nethammer is the first truly remote Rowhammer attack, without a single attacker-controlled line of code on the targeted system. Systems that use uncached memory or flush instructions while handling network requests, e.g., for interaction with the network device, can be attacked using Nethammer. Other systems can still be attacked if they are protected with quality-of-service techniques like Intel CAT. We demonstrate that the frequency of the cache misses is in all three cases high enough to induce bit flips. [2] [1]: https://arstechnica.com/information-technology/2018/05/attackers-trigger-rowhammer-bit-flips-by-sending-network-packets-over-a-lan/ https://arstechnica.com/information-technology/2018/05/attac... [2]: https://arxiv.org/pdf/1805.04956.pdf https://arxiv.org/pdf/1805.04956.pdf
• cjcampbell 8y ago
  Looks like this doesn’t depend on direct memory access. Judging from the devices, it’ll also work at lower speeds, whereas throwhammer requires multi-gbps.
• rasz 8y ago
  Throwhammer: > 9.375 million packets per second Nethammer: > 1 024 000 packets per second over a 500 Mbit/s connection ......Hence, we conclude that in theory... Both currently at best lead to server crash, and are highly impractical.
  • nyolfen 8y ago
    it seems eminently plausible to me to carry out an attack from a device on the same network, cohosted at the same facility, etc