Hacker GitHub

← All repos

isec-tugraz/rowhammerjs

View on GitHub ↗ ★ 522 C++

Rowhammer.js - A Remote Software-Induced Fault Attack in JavaScript

15 mentions on Hacker News by 13 people: 1 story, 14 comments · first 2015-07-27 · latest 2024-03-25

Mentions per year 15 mentions · busiest year 2016 (6)
20082026
AllStoriesComments NewestTopOldest
  1. Rowhammer has a javascript implementation that can run in the browser: https://github.com/IAIK/rowhammerjs
    comment by cortesoft · 2024-03-25 · in ZenHammer: Rowhammer attacks on AMD Zen-based platforms
  2. > Not at all. https://github.com/IAIK/rowhammerjs This has existed for years and its use has been observed in the wild. RowHammer isn't new.
    comment by acuozzo · 2021-11-15 · in Blacksmith – Rowhammer bit flips on all DRAM devices today despite mitigations
  3. …it on HN first. If folks start to explot it you'll hear about it. It did come to that, years ago: https://github.com/IAIK/rowhammerjs
    comment by acuozzo · 2021-11-15 · in Blacksmith – Rowhammer bit flips on all DRAM devices today despite mitigations
  4. > What are the realistic attacks that this vulnerability allows? https://github.com/IAIK/rowhammerjs
    comment by acuozzo · 2021-11-15 · in Blacksmith – Rowhammer bit flips on all DRAM devices today despite mitigations
  5. What about something like https://github.com/IAIK/rowhammerjs ?
    comment by etimberg · 2020-12-19 · in How Shopify Uses WebAssembly Outside of the Browser
  6. RowHammer most certainly works in a VM: https://github.com/IAIK/rowhammerjs
    comment by dleslie · 2018-09-26 · in Wasmjit: Kernel Mode WebAssembly Runtime for Linux
  7. What's more, rowhammer can be done from js: https://github.com/IAIK/rowhammerjs
    comment by Crespyl · 2016-10-24 · in Is Your Site Leaking Password Reset Links?
  8. You can even execute the rowhammer attack from the loaded javascript: https://github.com/IAIK/rowhammerjs There's no protection against it really. It doesn't matter if you can scan APKs for this behaviour if any app can open a webview with…
    comment by viraptor · 2016-10-24 · in Using Rowhammer bitflips to root Android phones
  9. You can execute it from regular JS https://github.com/IAIK/rowhammerjs
    comment by throwaway2048 · 2016-03-18 · in Once thought safe, DDR4 memory shown to be vulnerable to “Rowhammer”
  10. …it's possible to exploit the row-hammer behavior of the host system's DRAM from Javascript: https://github.com/IAIK/rowhammerjs
    comment by al2o3cr · 2016-02-20 · in A Skeleton Key of Unknown Strength (CVE-2015-7547)
  11. Except, it does. Remember RowHammer? https://github.com/IAIK/rowhammerjs
    comment by kuschku · 2016-01-18 · in Things I learned from OpenSSH about reading very sensitive files
  12. …using Rowhammer, and they'll tell you how. Additionally, there is something called Rowhammer.js: https://github.com/IAIK/rowhammerjs
    comment by fabulist · 2016-01-05 · in Rowhammer.js: Root privileges for web apps?
  13. …a device via installation from "totally trivial" to "requiring significant vulnerability". [1]: https://github.com/IAIK/rowhammerjs
    comment by johncolanduoni · 2015-10-19 · in Facebook iOS App Scrapes Your Clipboard?
  14. It must be really slow in order to avoid attacks like this one: https://github.com/IAIK/rowhammerjs
    comment by sklogic · 2015-08-14 · in Let’s sunset C/C++