SoylentNews is people
SoylentNews
from the for-those-who-ask-for-javascript dept.
A very interesting attack was unveiled in Friday, 24 June by Daniel Gruss, Clémentine Maurice, Stefan Mangard. Maybe the Rowhammer is the next Hearthbleed, or worse?
As DRAM has been scaling to increase in density, the cells are less isolated from each other. Recent studies have found that repeated accesses to DRAM rows can cause random bit flips in an adjacent row, resulting in the so called Rowhammer bug. This bug has already been exploited to gain root privileges and to evade a sandbox, showing the severity of faulting single bits for security. However, these exploits are written in native code and use special instructions to flush data from the cache.
In this paper we present Rowhammer.js, a JavaScript-based implementation of the Rowhammer attack. Our attack uses an eviction strategy found by a generic algorithm that improves the eviction rate compared to existing eviction strategies from 95.2% to 99.99%. Rowhammer.js is the first remote software-induced hardware-fault attack. In contrast to other fault attacks it does not require physical access to the machine, or the execution of native code or access to special instructions. As JavaScript-based fault attacks can be performed on millions of users stealthily and simultaneously, we propose countermeasures that can be implemented immediately.
http://arxiv.org/abs/1507.06955
Full report can be found here (PDF)
(Score: 2, Insightful) by Anonymous Coward on Wednesday July 29 2015, @01:48AM
Perhaps you're the asshole for complaining about a word choice.
(Score: -1, Troll) by Anonymous Coward on Wednesday July 29 2015, @01:51AM
Assholes are just the right size to fit my cock in.
(Score: 1, Troll) by aristarchus on Wednesday July 29 2015, @07:14AM
No, Runaway is a trucker. Admitted as much some time ago. And his posts match the stereotype. Of course, being a trucker does not reduce the odds of being an asshole, in fact, it increases it exponentially. Rubber duck is long dead, and Kris only stars in Black Vampire movies now. Silver bullets? Or silver-iodide-shine-in-the-dark bullets? Javascript based attacks. As Switch said, just before she died, "Not like this! Not like this!"
(Score: 0) by Anonymous Coward on Wednesday July 29 2015, @03:31PM
1st Gear
vrrmmm
2nd gear
Vrrrm
Kill some hooker
3rd gear
vrrmm
4th gear
vrrmmm
hit a pedestrian
5th gear
vrrm
6th gear
vrrm
Kill another hooker
TOP GEAR!!