Moderator

Xiaomi Miui Hellas Team

Rank: 7Rank: 7Rank: 7

Credits
28017
Device
Mi 5s
Online time
515 Hours
Send PM

Mi VRMi Plastic In-ear PhonesMi Band 2Mijia Smart PTZ CameraMi ScaleMijia Mi Bunny RobotMi Selfie StickMi Yi CameraMi HeadphonesMijia Walkie TalkieMijia VR Play 2Magic CubeXiaomi 6 LaunchNinebot MiniMi Bluetooth SpeakerMijia Qi CycleMi  BunnyMijia Electric ScooterYi Action CameraMijia 360° Panoramic CameraMijia Story TellerMi TV 70Mi VR HeadsetMi Power Bank 10000MAH Mi Kids WatchMi Bluetooth Canon SpeakerUnlock MedalMi WiFiMi Notebook AirMi HomeMi Bluetooth HeadsetMi BandMi MIXMi Power StripXiaomi 7th AnniversaryAwesome!MIUI 8AnTuTuFantastic!MarshmallowI Love MIUIMIUI Devices ContestMIUI 6MIUI 2016FlashholicXiaomi Mi 4Mi 4SRedmi 1SRedmi 2Mi 5sRedmi Note 4Redmi 4/Prime/4AMi 5s PlusMi PadMi Max Redmi ProMi 5Redmi 3SMi 4cRedmi Note 2Xiaomi Mi 6Mi 4iMi 5XRedmi 3Redmi 4XRedmi Note 4X4 Million Forum MembersMi Max 2Redmi Note 3Mi Live MedalFan Of MIUI RussiaThanksgiving DayFan Of MIUI Spain1 Million Forum App InstallsI Love 2016Happy Singles' Day2100K Forum MembersPokemon Master MedalMIUI 2017Happy New YearFan Of MIUI AustraliaMIUI Lucky FridayFan Of MIUI IndiaFan Of MIUI Ukraine3 Million Forum App InstallsMIUI 50 Million Users3500K Forum MembersRooster Year of 2017MIUI Fan from TurkeyMerry ChristmasSuper SaturdayFan Of MIUI BangladeshHappy DiwaliMIUI 20 Million UsersDiwali 1800K Forum Members1400K Forum MembersMIUI Forum App1700K Forum Members1500K Forum MembersMIUI Fan From IndonesiaMIUI World TourMIUI Fan From NepalFan Of MIUI ItalyMIUI Weekly PollHappy Valentine's DayMIUI 6th AnniversaryXiaomi 6th AnniversaryMIUI S1900K Forum Members2 Million Forum MembersSuper SundayMIUI Drawing TalentWomen's Day MedalMIUI 4th AnniversaryMIUI 7th AnniversaryMIUI 300 WeeksMIUI Fan From PhilippinesSuper FridayMIUI P5 Million Forum App InstallsHappy Holi MedalFan Of MIUI Greece90000 Forum Members100k Forum MembersRingolicious MedalMIUI Philippines Fan MeetupMIUI 9MIUI Font LoverMIUI 100 Million Users500K Forum MembersMIUI Happy Medal300K Forum MembersMIUI Fan from MalaysiaSurge S1Fan Of MIUI France10 Million Forum Posts3 Million Forum MembersSuper TuesdaySuper WednesdayMIUI Fan from India1st AnniversaryMIUI 5th AnniversarySuper MondayRocket to FuturePuzzle MasterMIUI Fan From MyanmarSuper ThursdayCamera Filter Guru MedalGamer Mi BunnyI Love Mi BunnyMiPopAlpaca Mi Bunny MIUI ReviewNougatDie-hard MIUI FanSupriseXiaomi 8th AnniversaryMIUI FB FollowerDebate MasterMi Lover MedalMIUI Weekly Devices QuizOreoOTA FeedbackStar WarsForum Contest LoverMIUI Follower8 Million Forum MembersTechnology GuruUpdates LoverMIUI Medals CollectorRingtone ExpertMIUI Halloween 2017Indonesia Independence Day25 Million StrongMIUI Android 4.4 KitKatMi Bunny Game Master India Independence DayMr. DependableMIUI SuperstarMi 5XRedmi Note 5A/Prime7 Million Forum MembersMIUI Twitter Follower2017 Annual AwardsMost Active MIUIerMIUI G+ FollowerStar Of TechnologyMi TalentMIUI KingAndroid GuruAndroid ElfMi Story TellerApp StarMaster Of TechnologyInbox ZeroApp TalentScroll Of WisdomMIUI ExpertRingtone Star Most Popular Forum UserPioneer of MIUI English Forum Youth PledgeMIUI Ice Bucket ChallengeTheme TalentRedmi 5/Plus

[Chat] [MIUI Tech Discussion #9] Can Rowhammer Attack Be Used to Hack Android Devices?

  [ Promote]
12975 318 |
07:26, May-07-2018 | From PC
|
|
Go to reply no.
IMG_20180511_082421.jpg

Greetings MIUIers & Mi Fans!
     We're back to discuss about Rowhammer attack!
Security researchers have discovered an effective way to exploit a four-year-old hacking technique called 'Rowhammer attack' to hijack an Android phone remotely.

So what is a Rowhammer attack?
The Rowhammer attack targets the design of DRAM memory. On a system where the DRAM is insufficiently refreshed, targeted operations on a row of DRAM memory may be able to influence the memory values on neighboring rows,” the CERT Division of the Software Engineering Institute (SEI) at Carnegie Mellon University succinctly explained.

The result of such an attack is that the value of one or more bits in physical memory (in this case GPU memory) is flipped, and may offer new access to the target system.
Successful Rowhammer attacks have been previously demonstrated against local machines, remote machines, and Linux virtual machines on cloud servers.

android-face.jpg

However, the same team of researchers has now shown how their proof-of-concept attack "GLitch" can exploit the Rowhammer attack technique simply by hosting a website running malicious JavaScript code to remotely hack an Android smartphone under just 2 minutes, without relying on any software bug.

Since the malicious code runs only within the privileges of the web browser, it can spy on user's browsing pattern or steal their credentials. However, the attacker cannot gain further access to user's Android phone.

Check how GLitch attack works!



In the video, the researchers show their JavaScript-based GLitch attack on a Nexus 5 running over Mozilla's Firefox browser to gain read/write privileges, giving them the ability to execute malicious code over the software.

GLitch is the first remote Rowhammer technique that exploits the graphics processing units (GPU), which is found in almost all mobile processors, instead of the CPU that was exploited in all previous theorized versions of the Rowhammer attack.

Since the ARM processors inside Android smartphones include a type of cache that makes it difficult to access targeted rows of memory, researchers make use of GPU, whose cache can be more easily controlled, allowing hackers to hammer targeted rows without any interference.

The technique is named GLitch with first two letters capitalized because it uses a widely used browser-based graphics code library known as WebGL for rendering graphics to trigger a known glitch in DDR3 and DDR4 memory chips.

Currently, GLitch targets smartphones running the Snapdragon 800 and 801 system on a chip—that includes both CPU and GPU—meaning the PoC works only on older Android phones like the LG Nexus 5, HTC One M8, or LG G2. The attack can be launched against Firefox and Chrome.

glitch-rowhammer-android-hacking.gif

Software Patch can't fully fix the Rowhammer issue!

Since Rowhammer exploits a computer hardware weakness, no software patch can completely fix the issue. Researchers say the Rowhammer threat is not only real but also has the potential to cause some real, severe damage.

Although there's no way to fully block an Android phone's GPU from tampering with the DRAM, the team has been working with Google on ways to solve the problem.

What do you think...

Should we really have to worry about that kind of attacks?

Special Thanks to our admins @Nanana @candicesu & Mi 5s Subforum Management Team!




Favorite27 Share

Rated by 16 people   Experience Prestige Reason  

Ratpenatt + 5 Well Done !!
candicesu + 10 Awesome!
Katrix + 10 + 5 Awesome!
Dasari5 + 5 Fantastic!
rahul_09 + 10 + 5 Awesome!
hellforo + 5 Great!
VikuBalupura + 10 + 5 Fantastic!
1805291908 + 1 Awesome!
V430 + 1 Great!
chgbhat + 4 Fantastic!
MiDevCode + 5 Thanks!
MI2Ninja + 5 Great!
srsakib + 10 + 3 Fantastic!
Manish@786 + 10 + 3 Fantastic!
KoHsetGyi + 10 + 3 Awesome!
Prince26712 + 10 + 5 Awesome!

Experience +111  Prestige +29  View Rating Log

MIUI Device Team

ADF-01

Credits
30162
Device
Mi Max 2
Online time
573 Hours
Send PM

Mi HomeMijia Smart PTZ CameraMi ScaleMi HeadphonesMi Band 2Mi  BunnyMijia Qi CycleMagic CubeMi MIXMijia Walkie TalkieMi BoxMi TV 70Xiaomi 7th AnniversaryFlashholicFantastic!I Love MIUIAwesome!MIUI Devices ContestMarshmallowRedmi Note 4XMi 4iMIUI Happy MedalMIUI Weekly PollSuper MondayFan Of MIUI SpainHappy New YearFan Of MIUI BangladeshMIUI 7th AnniversaryMIUI Fan From PhilippinesPuzzle MasterFan Of MIUI IndiaMIUI 2017MIUI PHappy DiwaliHappy Singles' DayFan Of MIUI GreeceMIUI 50 Million UsersDiwali MIUI 9Rocket to FutureMIUI Lucky FridayMIUI 100 Million UsersMIUI Fan from TurkeyGamer Mi BunnyMIUI Device TeamMIUI FollowerAndroid Guru2017 Annual Awards25 Million StrongTechnology GuruMi Lover MedalXiaomi 8th AnniversarySupriseMIUI Twitter FollowerDebate MasterAndroid ElfRingtone ExpertMIUI G+ FollowerMost Active MIUIerYouth PledgeTheme TalentOTA FeedbackMr. DependableMIUI Halloween 2017Master Of TechnologyDie-hard MIUI FanMIUI Android 4.4 KitKatMi Story TellerScroll Of WisdomUpdates LoverMIUI ExpertMIUI Device ExpertMIUI Medals CollectorStar WarsStar Of Technology

10:44, May-11-2018 | From Mi Max 2
|
Yes, we should..
And probably another exploit will discover while we're still dealing with this issue..

Hopefully, Google can give us a security patch ASAP..

Moderator

Rank: 7Rank: 7Rank: 7

Credits
20494
Device
Mi 5s
Online time
280 Hours
Send PM

Magic CubeMijia Qi CycleMi VRXiaomi 6 LaunchMi Band 2Xiaomi 7th AnniversaryMIUI 8MIUI Devices ContestAwesome!I Love MIUIFantastic!Marshmallow4 Million Forum MembersMi 5sMi TVMIUI 7th AnniversaryRocket to Future3500K Forum MembersMIUI 9MIUI 2017Super WednesdayMIUI SFan Of MIUI BangladeshMIUI Happy MedalFan Of MIUI IndiaPuzzle MasterHappy New YearMIUI Lucky FridayMIUI 100 Million UsersMiPopI Love Mi BunnyMIUI Device Team6 Million Forum MembersMost Popular Forum UserMIUI Device ExpertRingtone ExpertXiaomi 8th AnniversaryDie-hard MIUI FanDebate MasterBlack SharkAndroid ElfAndroid GuruMi Lover MedalStar WarsMIUI Android 4.4 KitKatUpdates Lover2017 Annual AwardsMi Story TellerTechnology GuruMIUI Medals CollectorForum Contest LoverMIUI ExpertPioneer of MIUI English Forum MIUI FollowerMost Active MIUIerScroll Of Wisdom

14:05, May-11-2018 | From PC
|
Thanks for the valuable information.  
Don' forget to mention me in your reply!




Proud to be a Bangladeshi!

Elite Member

Rank: 6Rank: 6

Credits
12272
Device
Mi MIX
Online time
77 Hours
Send PM

Mi BoxMi TV 70Mi MIXYi Action CameraMagic CubeUnlock MedalMijia 360° Panoramic CameraMi Notebook AirMi Kids WatchMi Bluetooth HeadsetAwesome!Fantastic!MIUI Devices ContestFlashholicI Love MIUIMi TVMi MIXSuper Monday2 Million Forum MembersMIUI 50 Million UsersSuper SundayPuzzle MasterMIUI Happy MedalRocket to FutureMIUI Fan From IndonesiaMIUI Lucky FridayMIUI PHappy Singles' Day10 Million Forum PostsMIUI SMIUI Fan From PhilippinesMIUI 9MIUI Weekly PollHappy New YearHappy Valentine's Day5 Million Forum App InstallsWomen's Day MedalMerry ChristmasMiPopGamer Mi BunnyOreoMIUI FB FollowerXiaomi 8th AnniversaryDebate Master5 Million Forum MembersBlack SharkMi TalentQuick SurveyOTA FeedbackSupriseMr. DependableAndroid GuruAndroid Elf2017 Annual AwardsMIUI Twitter Follower6 Million Forum MembersDie-hard MIUI FanMIUI Medals Collector7 Million Forum MembersStar WarsMIUI FollowerMi Lover MedalMIUI Weekly Devices QuizMi Story TellerForum Contest LoverMIUI Halloween 2017Redmi Quiz MasterTheme TalentNougatMIUI Quick Discussion8 Million Forum Members

14:20, May-11-2018 | From Mi MIX
|
Of course we should, that thing is very dangerous

Elite Member

Rank: 6Rank: 6

Credits
13288
Device
Redmi Note 3
Online time
234 Hours
Send PM

Magic CubeMijia Mi Bunny RobotYi Action CameraMi Power Bank 10000MAH Mi HeadphonesXiaomi 6 LaunchMijia Story TellerNinebot MiniMijia VR Play 2Mi VRMi WiFiMi VR HeadsetMi TV 70Unlock MedalMi Band 2Mi Notebook AirMi  BunnyMi Water PurifierMi BandMi HomeMi Power StripMijia Smart PTZ CameraMi Selfie StickMi Kids WatchMi BoxMi Bluetooth HeadsetMi ScaleXiaomi 7th AnniversaryAnTuTuAwesome!FlashholicMarshmallowFantastic!I Love MIUIMIUI 8MIUI 2016MIUI Devices ContestMi TVMi 4iRedmi Note 4Redmi Note 3Redmi 4XMIUI 50 Million UsersMIUI 2017Rooster Year of 2017MIUI Monthly Talk3 Million Forum App InstallsMIUI Lucky FridayMIUI PSuper Monday1st AnniversaryMIUI Fan from IndiaHappy Valentine's DayFan Of MIUI ItalyMIUI Fan from MalaysiaFan Of MIUI GreeceAtaturk MourningHappy New YearMIUI Fan From PhilippinesI Love 2016Fan Of MIUI PolandFan Of MIUI IndiaMIUI Fan From Singapore1900K Forum MembersHappy Diwali2 Million Forum MembersHappy Singles' DayMIUI Fan From IndonesiaMIUI World TourMIUI Weekly PollMerry ChristmasFan Of MIUI RussiaThanksgiving DayFan Of MIUI BangladeshRocket to FutureMIUI 20 Million UsersMIUI S1500K Forum Members1 Million Forum App InstallsMIUI Drawing Talent90000 Forum MembersMIUI 7th AnniversaryRingolicious MedalSuper SaturdayHappy Holi MedalCamera Filter Guru Medal5 Million Forum App InstallsMIUI Forum AppMIUI Fan From Myanmar300K Forum MembersMIUI 9MIUI Philippines Fan MeetupXiaomi 5th AnniversarySuper Sunday500K Forum MembersDiwali MIUI 100 Million Users3500K Forum MembersMIUI Happy MedalMIUI Font LoverMIUI 5th AnniversarySuper WednesdaySingapore Merlion MedalPuzzle MasterWomen's Day MedalSuper Friday10 Million Forum PostsSuper ThursdaySuper TuesdaySurge S13 Million Forum MembersMIUI Fan From NepalGamer Mi BunnyMiPopSummer Mi BunnyI Love Mi BunnyAlpaca Mi Bunny MIUI ReviewMIUI FB FollowerTheme TalentStar Of TechnologyForum Contest LoverMi Lover MedalSupriseMIUI Quick DiscussionPioneer of MIUI English Forum NougatMi Bunny Game Master 8 Million Forum MembersIndia Independence DayQuick Survey5 Million Forum MembersMIUI Android 4.4 KitKatXiaomi 8th AnniversaryStar WarsMIUI Weekly Devices QuizDebate MasterMr. DependableMIUI Twitter FollowerMIUI Medals CollectorApp TalentDie-hard MIUI FanMIUI ExpertYouth PledgeAndroid ElfMIUI Superstar7 Million Forum MembersUpdates LoverScroll Of WisdomMIUI Ice Bucket Challenge2017 Annual Awards6 Million Forum MembersMIUI FollowerTechnology GuruMi TalentInbox ZeroMost Popular Forum UserApp TalentOTA FeedbackHumor MasterAndroid GuruMIUI Halloween 2017Master Of TechnologyMIUI KingMi Story Teller

14:40, May-11-2018 | From PC
|
Thanks for the valuable information.  

Senior Member

Rank: 2

Credits
28
Device
Redmi 5 Plus
Online time
0 Hours
Send PM
14:45, May-11-2018 | From PC
|
nice info gan

Diamond Member

Rank: 5Rank: 5

Credits
1090
Device
0
Online time
0 Hours
Send PM

Happy Singles' DayMIUI Weekly PollMIUI P

15:35, May-11-2018 | From Mi Max 2
|
what about thor hammer

MIUI Beta Team - Global

Rank: 6Rank: 6

Credits
12370
Device
Redmi Note 4 MTK
Online time
57 Hours
Send PM

Mijia Walkie TalkieMi  BunnyMi Band 2Magic CubeMi TV 70Mi BoxMijia Smart PTZ CameraMi MIXMi HeadphonesMijia Qi CycleUnlock MedalMijia 360° Panoramic CameraYi Action CameraMi Kids WatchMi Bluetooth HeadsetMi Bluetooth SpeakerMi ScaleMijia Story TellerMi Notebook AirXiaomi 7th AnniversaryI Love MIUIMIUI Devices ContestFantastic!Awesome!FlashholicRedmi Note 4MIUI 9Rocket to Future300K Forum MembersMIUI SMIUI 7th AnniversaryHappy Valentine's DayMIUI Happy MedalMIUI 5th AnniversaryMIUI 2017Women's Day MedalMIUI Fan From IndonesiaMIUI Weekly PollHappy Singles' Day2 Million Forum MembersMIUI 20 Million Users5 Million Forum App InstallsSuper SundayMIUI P10 Million Forum PostsFan Of MIUI IndiaSurge S1Merry ChristmasRooster Year of 2017Super MondayHappy New YearHappy DiwaliMIUI 50 Million UsersMIUI Lucky FridayPuzzle MasterMiPopGamer Mi BunnySummer Mi BunnyOreoDebate MasterStar WarsAndroid ElfNougatQuick Survey5 Million Forum MembersOTA FeedbackMIUI FB FollowerSupriseMIUI Halloween 2017Xiaomi 8th AnniversaryMIUI Weekly Devices QuizMi Talent7 Million Forum MembersMIUI KingTheme TalentDie-hard MIUI FanIndia Independence DayMi Lover MedalMi Story TellerMIUI Android 4.4 KitKatAndroid Guru2017 Annual AwardsStar Of TechnologyTechnology GuruScroll Of WisdomMr. DependableMIUI Twitter FollowerPioneer of MIUI English Forum MIUI FollowerMIUI Quick Discussion8 Million Forum MembersMIUI G+ FollowerMost Active MIUIer6 Million Forum MembersForum Contest LoverMIUI Medals CollectorRingtone Expert

15:38, May-11-2018 | From Redmi Note 4X
|
thanks for sharing

Diamond Member

Rank: 5Rank: 5

Credits
644
Device
0
Online time
0 Hours
Send PM

I Love MIUIMIUI Happy MedalHappy Singles' DayXiaomi 8th AnniversarySupriseMi Lover MedalStar Of TechnologyMi Story Teller

15:43, May-11-2018 | From Redmi Note 5A
|
thank,s  info

MIUI News Team

⭐⭐⭐

Rank: 6Rank: 6

Credits
40706
Device
Redmi 3S
Online time
1389 Hours
Send PM

Mijia Smart PTZ CameraMi HomeMi ScaleMi Notebook AirMi BoxMi MIXMi  BunnyMagic CubeMijia Story TellerMi Band 2Unlock MedalMijia Qi CycleMijia 360° Panoramic CameraMi TV 70Mijia Walkie TalkieMi Kids WatchMi Bluetooth HeadsetFlashholicI Love MIUIFantastic!MIUI Devices ContestAwesome!Mi MIXRedmi ProRedmi Note 2Mi PadXiaomi Mi 6Mi 4cRedmi 3Redmi NoteRedmi 1SMi 5s PlusRedmi Note 4XMi Note 24 Million Forum MembersMi Pad 3Mi 4SXiaomi Mi 4Redmi Note 4Redmi 3S10 Million Forum PostsMIUI 7th AnniversaryFan Of MIUI BangladeshHappy Holi Medal300K Forum MembersMIUI Font LoverRocket to FutureMIUI 2017MIUI 9Happy Valentine's DayCamera Filter Guru MedalMIUI SMIUI 20 Million UsersHappy DiwaliPuzzle MasterMIUI 50 Million UsersHappy Singles' DayHappy New YearMerry ChristmasMIUI 100 Million UsersSurge S1Women's Day MedalDiwali 2 Million Forum MembersSuper ThursdayMIUI PMIUI Lucky Friday3 Million Forum MembersSuper MondayMIUI Happy MedalMIUI Fan From PhilippinesMIUI Fan From Indonesia5 Million Forum App InstallsMiPopGamer Mi BunnyMIUI News TeamMi 5XMi Note 3Redmi Note 5A/PrimeSupriseForum Contest Lover5 Million Forum MembersMIUI KingBlack SharkXiaomi 8th AnniversaryMi TalentQuick Survey8 Million Forum MembersMi A1MIUI Weekly Devices QuizMIUI FB FollowerTheme TalentAndroid GuruMIUI Halloween 2017Mr. DependableDebate MasterAndroid ElfMaster Of TechnologyRingtone ExpertMIUI G+ FollowerMIUI Twitter FollowerMi MIX 2Nougat7 Million Forum MembersStar Wars2017 Annual Awards6 Million Forum MembersMi Story TellerScroll Of WisdomMi Lover MedalStar Of TechnologyOTA FeedbackMIUI ExpertDie-hard MIUI FanOreoMIUI Quick DiscussionPioneer of MIUI English Forum MIUI FollowerMIUI Android 4.4 KitKatUpdates LoverTechnology GuruMIUI Medals CollectorRedmi Note 5/ProMost Active MIUIerRedmi 5A

15:55, May-11-2018 | From Redmi 3S
|
Thanks for sharing


Please Click Reply Below Or Type My Tag @PrinceKaran To Notify Me, So you'll get my attention.

Credits Management

Quick Reply Top Return to the list