4 ms·
I think the scary part is this one: > “DDR4 systems with ECC will likely be more exploitable, after reverse-engineering the ECC functions,” researchers Razavi
by buran77 5y ago
I think the scary part is this one:
> “DDR4 systems with ECC will likely be more exploitable, after reverse-engineering the ECC functions,” researchers Razavi and Jattke said.
- staticassertion 5y agoWhere are you reading this quote? I'm seeing essentially the opposite in the linked post. > ECC cannot provide complete protection against Rowhammer but makes exploitation harder. edit: I looked at some linked papers and I see similar quotes, though not that one. edit2: https://arstechnica.com/gadgets/2021/11/ddr4-memory-is-even-more-susceptible-to-rowhammer-attacks-than-anyone-thought/ https://arstechnica.com/gadgets/2021/11/ddr4-memory-is-even-... > “DDR4 systems with ECC will likely be more exploitable, after reverse-engineering the ECC functions,” researchers Razavi and Jattke said. OK, so not more exploitable relative to not-ecc RAM, just relative to ecc ram pre-RE.
- cjsplat 5y agoI believe that is saying understanding ECC function details makes it easier to exploit EEC devices, not that it will be easier than exploiting non-ECC devices. The ECC code word is bigger so it is a larger target, but you have to flip multiple bits to cause pain. If you have 2 bit detect, you need to flip three bits to get something that corrects to a different value.