Row Hammer: Flipping Bits in Memory Without Accessing Them - Papers We Love

[@SebastiaanDeckers]

Great talk, amazing animations and diagrams.

[@burnflare]

Sebastiaan Deckers Thanks!

[@shepardhudson4528]

You probably dont care at all but does anyone know of a method to get back into an instagram account?? I was dumb forgot my account password. I would love any tips you can give me

[@mylesmarlon1526]

@Shepard Hudson Instablaster ;)

[@dudzcom]

Great talk! Thanks!

[@ihstein]

I have a question: In the exploit part, you suppose that the rowhammer occurs within a PTE, which is a priori a kernel land address and by consequence not accessible to read (and hammer) ?

[@michaeldamolsen]

The assumption is that you will be able to access a row near the PTE, or ideally rows on both sides of it. If you cause a very large number of PTEs to be allocated, this will increase your chances of flipping a bit on one of them. This technique of creating a large number of exploitable structures in the hope that one of them will be compromised is called spraying. I know you asked a long time ago, and probably found this on your own, but I thought I'd leave an answer for others that read the comments :)

[@ihstein]

@@michaeldamolsen Yes, thanks anyway ! Your answer may be useful for other folks

[@timfalardeau9753]

I predict sysadmins around the world will be watching this video in the coming weeks... There is a PANIC among my kind...