{"id":11235,"date":"2022-02-02T07:00:00","date_gmt":"2022-02-02T15:00:00","guid":{"rendered":"https:\/\/formtek.com\/blog\/?p=11235"},"modified":"2021-07-25T10:26:59","modified_gmt":"2021-07-25T18:26:59","slug":"security-it-isnt-only-software-hardware-can-be-vulnerable-too","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/security-it-isnt-only-software-hardware-can-be-vulnerable-too\/","title":{"rendered":"Security: It Isn’t Only Software — Hardware Can Be Vulnerable Too"},"content":{"rendered":"\n

Rowhammer is a vulnerability in lower end DRAM memory chips that can be used by hackers to exploit computers. The memory chip is attacked by forcing the same small piece of data to be read over and over. That small area of memory is “hammered” until ultimately there is an excess electrical charge that “leaks” to adjacent areas in memory which then can cause the adjacent memory to “flip” or change the values that it held. <\/p>\n\n\n\n

Changing a bit from 0 to 1 doesn’t seem like it would provide enough leverage to exploit the machine, but skilled hackers are able to use this technique to ultimately take control of computer servers and routers.<\/p>\n\n\n\n

A team of researchers from Google found that<\/a> “as an electrical coupling phenomenon within the silicon itself, Rowhammer allows the potential bypass of hardware and software memory protection policies. This can allow untrusted code to break out of its sandbox and take full control of the system”.<\/p>\n\n\n\n

Rowhammer is becoming a more serious problem because memory is shrinking and enabling, squeezing the memory cells closer and closer together. And researchers have studied this type of attack method<\/a> and have become very adept at being able to apply it. They’ve found that the attack can even be launched from Javascript. Browsers running Javascript can become the entryway for Rowhammer attacks.<\/p>\n\n\n\n

The speed of processors like GPUs<\/a> can accelerate the attacks. One test was able to launch a browser-based attacke and break into a smartphone in less than two minutes.<\/p>\n\n\n\n

Onur Mutlu<\/a>, professor at ETH Zurich<\/a>, wrote that “as systems security researchers understand more about RowHammer, and as the RowHammer phenomenon continues to fundamentally affect memory chips due to technology scaling problems, researchers and practitioners will develop different types of attacks to exploit RowHammer in various contexts and in many more creative ways. RowHammer is a critical problem that manifests in the difficulties in DRAM scaling and is expected to only become worse in the future.”<\/p>\n

\"Digg<\/a><\/div>
\"Reddit<\/a><\/div>
\"Stumble<\/a><\/div>
\"Buzz<\/a><\/div>
\"Vote<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Kick<\/a><\/div>
\"Shout<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Post<\/a><\/div>
\"Google<\/a><\/div><\/div>","protected":false},"excerpt":{"rendered":"

Rowhammer is a vulnerability in lower end DRAM memory chips that can be used by hackers to exploit computers. The memory chip is attacked by forcing the same small piece of data to be read over and over. That small…<\/span><\/p>\n

Read more ›<\/a><\/div>\n

<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[31],"tags":[],"class_list":["post-11235","post","type-post","status-publish","format-standard","hentry","category-security"],"_links":{"self":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/11235","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/comments?post=11235"}],"version-history":[{"count":1,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/11235\/revisions"}],"predecessor-version":[{"id":11236,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/11235\/revisions\/11236"}],"wp:attachment":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/media?parent=11235"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/categories?post=11235"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/tags?post=11235"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}