Questions tagged [rowhammer]

9 questions
17
votes
1 answer

How to know whether a RAM module is vulnerable to rowhammer before buying?

I'd like to know (or at least perform some reasonable guess) if a RAM is vulnerable to rowhammer attack. I haven't found any list of vulnerable or secure RAM modules. I've seen some general rules (DDR4 is OK, ECC is some mitigation factor), but I…
v6ak
  • 609
  • 5
  • 12
14
votes
2 answers

How to detect Rowhammer vulnerability?

Related to How to know whether a RAM module is vulnerable to rowhammer before buying?, how can I check whether my already installed memory modules are susceptible to this attack, without having to use any Windows/Mac-only tools? There's a PoC module…
l0b0
  • 2,981
  • 20
  • 29
11
votes
1 answer

Which memory modules are known to be vulnerable to or secure against Rowhammer/Flip Feng Shui?

Many memory modules from different manufacturers have been tested for vulnerability to the Rowhammer exploit. However, some researchers have anonymised their results, possibly for responsible disclosure reasons. Are there any reputable sources…
l0b0
  • 2,981
  • 20
  • 29
8
votes
1 answer

How can I protect my home/office computer against row hammer?

Row hammer seems to affect ECC memory less, but ECC is still not immune. I have heard of software mitigations like ANVIL, but that doesn't seem to be 100% row-hammer-proof either. What software or hardware can reliably protect me against row-hammer…
Cerberus
  • 182
  • 6
7
votes
1 answer

How to disable typed arrays in firefox as rowhammer mitigation

I am concerned about the potential attack surface exposed by JavaScript typed arrays as a means of performing rowhammer attacks. Is it possible to disable (via official means or otherwise) typed arrays in firefox?
Croad Langshan
  • 213
  • 1
  • 4
6
votes
1 answer

Are there any observed Rowhammer attacks in the wild

Due to the latest news regarding Rowhammer and its applicability to ECC DRAM, I was wondering whether there are any Rowhammer attacks spotted in the wild. Given the various approaches to conduct a Rowhammer attack (on X86, ARM, via JavaScript or…
user1192748
  • 273
  • 1
  • 8
6
votes
1 answer

Is rowhammer comparable to faults caused by radiation?

As far as I know, both rowhammer and radiation based fault injection, can cause arbitrary bit flips in the memory. Are there any differences in matters of possible outcomes of both "attacks" on common hardware? EDIT: In order to specify my…
Stefan Braun
  • 796
  • 5
  • 10
4
votes
0 answers

What kind of attacks can hardware level memory encryption protect from?

Both AMD and Intel have introduced memory encryption at the hardware level. AMD calls this Secure Memory Encryption (SME), with the Intel version being Total Memory Encryption (TME). What kind of attacks can this technology protect from, and what…
Steve Sether
  • 21,480
  • 8
  • 50
  • 76
4
votes
1 answer

If rowhammer only results in capacitor discharge, how can it flip 0 to 1?

In rowhammer, why will changing the voltage on one row cause the other row to open/close? Is it related to induction? How can it change bits from 0 to 1? I understand from 1 to 0 - voltage discharge, but how can it cause cells to charge? EDIT: This…
789
  • 143
  • 5