5 ms·
>unlike Rowhammer, RAMBleed does not require persistent bit flips, and is thus effective against ECC memory commonly used by server computers. Seems like mitig
by expliced 7y ago
>unlike Rowhammer, RAMBleed does not require persistent bit flips, and is thus effective against ECC memory commonly used by server computers.
Seems like mitigations for Rowhammer is not enough for RAMBleed.
- syn0byte 7y agoECC isn't effective mitigation against Rowhammer either. https://www.vusec.net/projects/eccploit/ https://www.vusec.net/projects/eccploit/ tl;dr ECC logic can't cope with 'single' errors involving > 2 bits.
- deleted 7y ago[deleted]
- Dylan16807 7y agoIt has to cause a huge amount of single-bit errors to find a spot suitable for a three-bit error. If these errors are actually treated as errors, then chips will be disabled or processes will get blacklisted long before they can be used to exploit. So this is really "ECC is often configured wrong", not "ECC isn't effective".
- opencl 7y agoSEV is a completely different thing than ECC. It encrypts the memory. RAMBleed reads raw physical bits which are encrypted and thus useless when SEV is enabled. The paper even specifically says that SEV and other similar technologies protect against this.