You are viewing a single comment's thread.

view the rest of the comments →

[–] [deleted] 4 points -3 points (+1|-4) ago 

[Deleted]

0
15

[–] chakan2 [S] 0 points 15 points (+15|-0) ago 

The language used isn't the interesting bit here...it's a physical exploit. That is bad ass...they're using the frequency of data writes to one sector to manipulate other unrelated sectors.

Think of it as running a magnet across the chip to wipe the bits...now...instead of a magnet I just start writing to one chip super fast to create that same field and manipulate stuff around it.

It's an awesome hack.

0
10

[–] Vespera 0 points 10 points (+10|-0) ago  (edited ago)

I'm not sure you understood the article. The vulnerability in question is hardware oriented: they only used JavaScript to demonstrate it.

Rowhammer could theoretically be exploited by almost any computer process. It doesn't matter what software/language/operating-system is used. It is a CPU security hole - which is something that can't be fixed without a major BIOs update. Assuming one is provided, and the user is savvy enough to install it.

For now, it has only been demonstrated locally.

0
5

[–] praguepride 0 points 5 points (+5|-0) ago 

Said someone who didn't read the article :P