4 ms·
That's my question as well. I'm not a security expert, but this doesn't seem all that concerning for anything other then the highest security applications. It s
by ARandumGuy 5y ago
That's my question as well. I'm not a security expert, but this doesn't seem all that concerning for anything other then the highest security applications. It seems to me that executing this attack not only requires running code on the target machine (which admittedly isn't that big of a hurdle), but requires basically complete knowledge of memory allocation at the time of the attack, something that is fairly opaque and ever changing on most hardware.
Is there something I'm missing here? What are the realistic attacks that this vulnerability allows?
- myself248 5y agoThere's no reason the code couldn't just blindly try every attack until it finds one that succeeds. If there's a malicious app that runs a lot (lookin' at you, random firefox tab that eats 99% of my CPU for minutes at a time and then goes idle again), it has all the time in the world.
- pfortuny 5y agoSee my reply above: in-memory data analysis…
- joebob42 5y agoIt might be hard to do a targeted attack. On the other hand, flipping random bits is likely to just start crashing stuff and / or producing incorrect results pretty reliably.
- guerrilla 5y agoSee my reply, sibling to yours.
- acuozzo 5y ago> What are the realistic attacks that this vulnerability allows? https://github.com/IAIK/rowhammerjs https://github.com/IAIK/rowhammerjs