Moderator

Xiaomi Miui Hellas Team

Rank: 7Rank: 7Rank: 7

Credits
28417
Device
Mi 5s
Online time
519 Hours
Send PM

Mijia Smart PTZ CameraMi VRMi Band 2Mi ScaleMi Plastic In-ear PhonesMi Selfie StickMi Yi CameraYi Action CameraMijia 360° Panoramic CameraMi HeadphonesMijia VR Play 2Magic CubeXiaomi 6 LaunchNinebot MiniMi Bluetooth SpeakerMijia Walkie TalkieMijia Qi CycleMijia Electric ScooterMijia Mi Bunny RobotMi  BunnyMijia Story TellerMi TV 70Mi VR HeadsetMi HomeMi Bluetooth HeadsetMi WiFiUnlock MedalMi Kids WatchMi Bluetooth Canon SpeakerMi MIXMi Power StripMi Power Bank 10000MAH Mi BandMi Notebook AirXiaomi 7th AnniversaryMIUI 6MarshmallowAwesome!AnTuTuFantastic!MIUI Devices ContestMIUI 2016FlashholicMIUI 8I Love MIUIXiaomi Mi 4Redmi 1SMi 4cRedmi 2Mi 4SMi 5sRedmi 3SRedmi 4/Prime/4AMi 5s PlusMi PadMi Max Redmi ProRedmi Note 3Redmi Note 4Mi 5Redmi Note 2Redmi 4X4 Million Forum MembersXiaomi Mi 6Mi 5XRedmi Note 4XMi Max 2Mi 4iRedmi 3Thanksgiving DayFan Of MIUI RussiaMi Live Medal1 Million Forum App InstallsI Love 2016Fan Of MIUI SpainHappy New YearMIUI Drawing TalentMIUI Lucky FridaySuper SaturdayHappy Valentine's Day3 Million Forum App InstallsMIUI 50 Million UsersMerry ChristmasHappy Singles' DayRooster Year of 2017MIUI Fan from TurkeyMIUI 2017Pokemon Master Medal1800K Forum MembersFan Of MIUI BangladeshHappy DiwaliDiwali MIUI Fan From Nepal1400K Forum MembersMIUI 300 WeeksMIUI Forum App1700K Forum Members1500K Forum MembersMIUI Fan From IndonesiaMIUI World TourMIUI Weekly PollMIUI SMIUI Fan from Malaysia2100K Forum MembersFan Of MIUI ItalyMIUI 6th AnniversaryMIUI 20 Million Users1900K Forum MembersXiaomi 6th Anniversary2 Million Forum MembersFan Of MIUI IndiaFan Of MIUI GreeceMIUI Font LoverMIUI 100 Million Users500K Forum MembersHappy Holi MedalMIUI 4th AnniversaryMIUI Fan From PhilippinesMIUI Fan from IndiaMIUI 7th AnniversaryMIUI 9MIUI Philippines Fan MeetupSuper WednesdaySuper Sunday3500K Forum MembersFan Of MIUI Ukraine300K Forum MembersFan Of MIUI Australia90000 Forum Members100k Forum MembersRingolicious Medal5 Million Forum App InstallsWomen's Day MedalSurge S1MIUI 5th AnniversaryCamera Filter Guru MedalSuper ThursdayMIUI Fan From Myanmar10 Million Forum Posts3 Million Forum MembersPuzzle MasterFan Of MIUI FranceMIUI Happy MedalSuper Friday1st AnniversaryRocket to FutureSuper MondaySuper TuesdayMIUI PMiPopI Love Mi BunnyGamer Mi BunnyAlpaca Mi Bunny MIUI ReviewOTA FeedbackMIUI FB FollowerMIUI Quick DiscussionMi Lover MedalDie-hard MIUI FanMIUI Weekly Devices QuizOreoStar Wars8 Million Forum MembersXiaomi 8th AnniversaryDebate MasterNougatTechnology GuruForum Contest LoverMIUI FollowerSupriseUpdates LoverMIUI Medals CollectorRingtone ExpertMIUI Halloween 2017Indonesia Independence Day25 Million StrongMIUI Android 4.4 KitKatMi Bunny Game Master India Independence DayMr. DependableMIUI SuperstarMi 5XRedmi Note 5A/Prime7 Million Forum MembersMIUI Twitter Follower2017 Annual AwardsMost Active MIUIerMIUI G+ FollowerStar Of TechnologyMi TalentMIUI KingAndroid GuruAndroid ElfMi Story TellerApp StarMaster Of TechnologyInbox ZeroApp TalentScroll Of WisdomMIUI ExpertRingtone Star Most Popular Forum UserPioneer of MIUI English Forum Youth PledgeMIUI Ice Bucket ChallengeTheme TalentRedmi 5/Plus

[Chat] [MIUI Tech Discussion #9] Can Rowhammer Attack Be Used to Hack Android Devices?

  [ Promote]
16015 351 |
07:26, May-07-2018 | From PC
|
|
Go to reply no.
IMG_20180511_082421.jpg

Greetings MIUIers & Mi Fans!
     We're back to discuss about Rowhammer attack!
Security researchers have discovered an effective way to exploit a four-year-old hacking technique called 'Rowhammer attack' to hijack an Android phone remotely.

So what is a Rowhammer attack?
The Rowhammer attack targets the design of DRAM memory. On a system where the DRAM is insufficiently refreshed, targeted operations on a row of DRAM memory may be able to influence the memory values on neighboring rows,” the CERT Division of the Software Engineering Institute (SEI) at Carnegie Mellon University succinctly explained.

The result of such an attack is that the value of one or more bits in physical memory (in this case GPU memory) is flipped, and may offer new access to the target system.
Successful Rowhammer attacks have been previously demonstrated against local machines, remote machines, and Linux virtual machines on cloud servers.

android-face.jpg

However, the same team of researchers has now shown how their proof-of-concept attack "GLitch" can exploit the Rowhammer attack technique simply by hosting a website running malicious JavaScript code to remotely hack an Android smartphone under just 2 minutes, without relying on any software bug.

Since the malicious code runs only within the privileges of the web browser, it can spy on user's browsing pattern or steal their credentials. However, the attacker cannot gain further access to user's Android phone.

Check how GLitch attack works!



In the video, the researchers show their JavaScript-based GLitch attack on a Nexus 5 running over Mozilla's Firefox browser to gain read/write privileges, giving them the ability to execute malicious code over the software.

GLitch is the first remote Rowhammer technique that exploits the graphics processing units (GPU), which is found in almost all mobile processors, instead of the CPU that was exploited in all previous theorized versions of the Rowhammer attack.

Since the ARM processors inside Android smartphones include a type of cache that makes it difficult to access targeted rows of memory, researchers make use of GPU, whose cache can be more easily controlled, allowing hackers to hammer targeted rows without any interference.

The technique is named GLitch with first two letters capitalized because it uses a widely used browser-based graphics code library known as WebGL for rendering graphics to trigger a known glitch in DDR3 and DDR4 memory chips.

Currently, GLitch targets smartphones running the Snapdragon 800 and 801 system on a chip—that includes both CPU and GPU—meaning the PoC works only on older Android phones like the LG Nexus 5, HTC One M8, or LG G2. The attack can be launched against Firefox and Chrome.

glitch-rowhammer-android-hacking.gif

Software Patch can't fully fix the Rowhammer issue!

Since Rowhammer exploits a computer hardware weakness, no software patch can completely fix the issue. Researchers say the Rowhammer threat is not only real but also has the potential to cause some real, severe damage.

Although there's no way to fully block an Android phone's GPU from tampering with the DRAM, the team has been working with Google on ways to solve the problem.

What do you think...

Should we really have to worry about that kind of attacks?

Special Thanks to our admins @Nanana @candicesu & Mi 5s Subforum Management Team!




Favorite29 Share

Rated by 16 people   Experience Prestige Reason  

Ratpenatt + 5 Well Done !!
candicesu + 10 Awesome!
Katrix + 10 + 5 Awesome!
Dasari5 + 5 Fantastic!
rahul_09 + 10 + 5 Awesome!
hellforo + 5 Great!
VikuBalupura + 10 + 5 Fantastic!
1805291908 + 1 Awesome!
V430 + 1 Great!
chgbhat + 4 Fantastic!
MiDevCode + 5 Thanks!
MI2Ninja + 5 Great!
srsakib + 10 + 3 Fantastic!
Manish@786 + 10 + 3 Fantastic!
KoHsetGyi + 10 + 3 Awesome!
Prince26712 + 10 + 5 Awesome!

Experience +111  Prestige +29  View Rating Log

MIUI Device Team

ADF-01

Credits
30161
Device
Mi Max 2
Online time
598 Hours
Send PM

Mi ScaleMi MIXMi BoxMijia Qi CycleMi HeadphonesMi HomeMijia Smart PTZ CameraMi TV 70Mi  BunnyMagic CubeMijia Walkie TalkieMi Band 2Xiaomi 7th AnniversaryI Love MIUIFlashholicMIUI Devices ContestFantastic!MarshmallowAwesome!Mi 4iRedmi Note 4XPuzzle MasterMIUI Lucky FridayMIUI 7th AnniversarySuper MondayMIUI Fan From PhilippinesFan Of MIUI BangladeshFan Of MIUI IndiaHappy DiwaliMIUI PMIUI 100 Million UsersFan Of MIUI SpainHappy Singles' DaySuper SundayHappy New YearMIUI 9MIUI 50 Million UsersMIUI Weekly PollDiwali MIUI 2017Rocket to FutureFan Of MIUI GreeceMIUI Fan from TurkeyMIUI Happy MedalGamer Mi BunnyMIUI Device TeamOTA FeedbackTheme TalentMIUI Device ExpertAndroid GuruMr. DependableMi Lover MedalMIUI Halloween 2017Most Active MIUIerXiaomi 8th Anniversary2017 Annual AwardsMIUI Weekly Devices QuizNougatForum Contest LoverSupriseYouth PledgeMIUI Twitter FollowerMIUI G+ FollowerDebate MasterStar Of TechnologyStar WarsUpdates LoverScroll Of WisdomMIUI Android 4.4 KitKatMi Story TellerMIUI Medals CollectorDie-hard MIUI Fan25 Million StrongAndroid ElfTechnology GuruRingtone ExpertMaster Of TechnologyMIUI ExpertMIUI Follower

10:44, May-11-2018 | From Mi Max 2
|
Yes, we should..
And probably another exploit will discover while we're still dealing with this issue..

Hopefully, Google can give us a security patch ASAP..

Moderator

Rank: 7Rank: 7Rank: 7

Credits
21236
Device
Mi 5s
Online time
283 Hours
Send PM

Mi Band 2Magic CubeMijia Qi CycleMi VRXiaomi 6 LaunchXiaomi 7th AnniversaryI Love MIUIAwesome!MarshmallowFantastic!MIUI 8MIUI Devices Contest4 Million Forum MembersMi 5sMi TVSuper SundayMIUI SMIUI 20173500K Forum MembersSuper WednesdayMIUI 9Fan Of MIUI BangladeshMIUI 7th AnniversaryRocket to FutureHappy New YearMIUI Lucky FridayPuzzle MasterMIUI 100 Million UsersMIUI Happy MedalFan Of MIUI IndiaMiPopI Love Mi BunnyMIUI Device TeamAndroid GuruMIUI Weekly Devices QuizMost Popular Forum UserMIUI Device ExpertDie-hard MIUI Fan2017 Annual AwardsBlack SharkXiaomi 8th Anniversary6 Million Forum MembersDebate MasterRingtone ExpertTechnology GuruMIUI Medals CollectorMIUI Android 4.4 KitKatStar WarsMi Story TellerUpdates LoverMost Active MIUIerMIUI FollowerMIUI ExpertAndroid ElfMi Lover MedalForum Contest LoverPioneer of MIUI English Forum Scroll Of Wisdom

14:05, May-11-2018 | From PC
|
Thanks for the valuable information.  
Don' forget to mention me in your reply!




Proud to be a Bangladeshi!

Elite Member

Rank: 6Rank: 6

Credits
12533
Device
Mi MIX
Online time
80 Hours
Send PM

Unlock MedalMi MIXMi BoxMi TV 70Magic CubeMi Kids WatchMi Notebook AirYi Action CameraMijia 360° Panoramic CameraMi Bluetooth HeadsetAwesome!FlashholicMIUI Devices ContestFantastic!I Love MIUIMi TVMi MIXMIUI P10 Million Forum PostsSuper MondayWomen's Day MedalMIUI Fan From PhilippinesMIUI Happy Medal5 Million Forum App Installs2 Million Forum MembersPuzzle MasterHappy Singles' DayHappy Valentine's DayMIUI Fan From IndonesiaMIUI Lucky FridaySuper SundayMIUI 9Happy New YearMerry ChristmasMIUI Weekly PollRocket to FutureMIUI SMIUI 50 Million UsersMiPopGamer Mi BunnyBlack SharkMi TalentQuick SurveyOTA FeedbackXiaomi 8th AnniversaryMIUI Twitter FollowerMIUI SuperstarApp StarMIUI FB FollowerSuprise5 Million Forum Members2017 Annual AwardsDebate MasterMIUI Medals CollectorAndroid Elf7 Million Forum MembersMIUI Quick DiscussionRedmi Quiz MasterMIUI Halloween 20176 Million Forum MembersNougatDie-hard MIUI FanMr. DependableAndroid GuruMIUI Weekly Devices QuizTheme TalentMi Lover MedalMIUI Follower8 Million Forum MembersForum Contest LoverMi Story TellerStar WarsOreo

14:20, May-11-2018 | From Mi MIX
|
Of course we should, that thing is very dangerous

Elite Member

Rank: 6Rank: 6

Credits
13429
Device
Redmi Note 3
Online time
236 Hours
Send PM

Magic CubeMijia Mi Bunny RobotYi Action CameraMi Power Bank 10000MAH Mi HeadphonesXiaomi 6 LaunchMijia Story TellerNinebot MiniMijia VR Play 2Mi VRMi WiFiMi VR HeadsetMi TV 70Unlock MedalMi Band 2Mi Notebook AirMi  BunnyMi Water PurifierMi BandMi HomeMi Power StripMijia Smart PTZ CameraMi Selfie StickMi Kids WatchMi BoxMi Bluetooth HeadsetMi ScaleXiaomi 7th AnniversaryAnTuTuAwesome!FlashholicMarshmallowFantastic!I Love MIUIMIUI 8MIUI 2016MIUI Devices ContestMi TVMi 4iRedmi Note 4Redmi Note 3Redmi 4XMIUI 50 Million UsersMIUI 2017Rooster Year of 2017MIUI Monthly Talk3 Million Forum App InstallsMIUI Lucky FridayMIUI PSuper Monday1st AnniversaryMIUI Fan from IndiaHappy Valentine's DayFan Of MIUI ItalyMIUI Fan from MalaysiaFan Of MIUI GreeceAtaturk MourningHappy New YearMIUI Fan From PhilippinesI Love 2016Fan Of MIUI PolandFan Of MIUI IndiaMIUI Fan From Singapore1900K Forum MembersHappy Diwali2 Million Forum MembersHappy Singles' DayMIUI Fan From IndonesiaMIUI World TourMIUI Weekly PollMerry ChristmasFan Of MIUI RussiaThanksgiving DayFan Of MIUI BangladeshRocket to FutureMIUI 20 Million UsersMIUI S1500K Forum Members1 Million Forum App InstallsMIUI Drawing Talent90000 Forum MembersMIUI 7th AnniversaryRingolicious MedalSuper SaturdayHappy Holi MedalCamera Filter Guru Medal5 Million Forum App InstallsMIUI Forum AppMIUI Fan From Myanmar300K Forum MembersMIUI 9MIUI Philippines Fan MeetupXiaomi 5th AnniversarySuper Sunday500K Forum MembersDiwali MIUI 100 Million Users3500K Forum MembersMIUI Happy MedalMIUI Font LoverMIUI 5th AnniversarySuper WednesdaySingapore Merlion MedalPuzzle MasterWomen's Day MedalSuper Friday10 Million Forum PostsSuper ThursdaySuper TuesdaySurge S13 Million Forum MembersMIUI Fan From NepalGamer Mi BunnyMiPopSummer Mi BunnyI Love Mi BunnyAlpaca Mi Bunny MIUI ReviewMIUI FB FollowerTheme TalentStar Of TechnologyForum Contest LoverMi Lover MedalSupriseMIUI Quick DiscussionPioneer of MIUI English Forum NougatMi Bunny Game Master 8 Million Forum MembersIndia Independence DayQuick Survey5 Million Forum MembersMIUI Android 4.4 KitKatXiaomi 8th AnniversaryStar WarsMIUI Weekly Devices QuizDebate MasterMr. DependableMIUI Twitter FollowerMIUI Medals CollectorApp TalentDie-hard MIUI FanMIUI ExpertYouth PledgeAndroid ElfMIUI Superstar7 Million Forum MembersUpdates LoverScroll Of WisdomMIUI Ice Bucket Challenge2017 Annual Awards6 Million Forum MembersMIUI FollowerTechnology GuruMi TalentInbox ZeroMost Popular Forum UserApp TalentOTA FeedbackHumor MasterAndroid GuruMIUI Halloween 2017Master Of TechnologyMIUI KingMi Story Teller

14:40, May-11-2018 | From PC
|
Thanks for the valuable information.  

Senior Member

Rank: 2

Credits
28
Device
Redmi 5 Plus
Online time
0 Hours
Send PM
14:45, May-11-2018 | From PC
|
nice info gan

Diamond Member

Rank: 5Rank: 5

Credits
1275
Device
0
Online time
0 Hours
Send PM

MIUI PHappy Singles' DaySuper SundayMIUI Weekly PollNougatMIUI SuperstarMIUI Quick DiscussionApp Star

15:35, May-11-2018 | From Mi Max 2
|
what about thor hammer

MIUI Beta Team - Global

Rank: 6Rank: 6

Credits
13178
Device
Redmi Note 4 MTK
Online time
58 Hours
Send PM

Mi Notebook AirMijia Walkie TalkieMi  BunnyMijia Smart PTZ CameraMi ScaleMi BoxMi MIXMi Band 2Magic CubeMijia Story TellerMi Bluetooth SpeakerUnlock MedalMijia 360° Panoramic CameraMijia Qi CycleYi Action CameraMi TV 70Mi HeadphonesMi Bluetooth HeadsetMi Kids WatchXiaomi 7th AnniversaryI Love MIUIMIUI Devices ContestFantastic!Awesome!FlashholicRedmi Note 45 Million Forum App InstallsMIUI Happy MedalHappy Valentine's DayMIUI Fan From IndonesiaFan Of MIUI India10 Million Forum PostsMIUI 2017Rocket to FutureSuper Sunday300K Forum MembersMIUI 9MIUI SMIUI 7th AnniversaryMIUI 5th AnniversaryMIUI 20 Million UsersMIUI PRooster Year of 2017Happy Singles' DayPuzzle MasterHappy DiwaliMIUI Weekly PollHappy New YearMIUI Lucky FridayWomen's Day MedalMIUI 50 Million UsersMerry ChristmasSurge S12 Million Forum MembersSuper MondayGamer Mi BunnySummer Mi BunnyMiPopXiaomi 8th Anniversary8 Million Forum MembersMIUI SuperstarMIUI Weekly Devices QuizStar WarsOreo5 Million Forum MembersApp StarNougatQuick SurveyMIUI FB FollowerSupriseMi TalentMIUI KingTechnology GuruOTA FeedbackMr. DependableMIUI Halloween 2017Debate MasterAndroid ElfTheme TalentMIUI G+ FollowerDie-hard MIUI Fan7 Million Forum Members6 Million Forum Members2017 Annual AwardsMIUI Twitter FollowerRingtone ExpertMi Story TellerForum Contest LoverMIUI Android 4.4 KitKatMIUI Medals CollectorMost Active MIUIerPioneer of MIUI English Forum Mi Lover MedalIndia Independence DayScroll Of WisdomStar Of TechnologyMIUI FollowerAndroid GuruMIUI Quick Discussion

15:38, May-11-2018 | From Redmi Note 4X
|
thanks for sharing

Diamond Member

Rank: 5Rank: 5

Credits
801
Device
0
Online time
0 Hours
Send PM

I Love MIUISuper SundayHappy Singles' DayMIUI Happy MedalMIUI SuperstarNougatSupriseXiaomi 8th AnniversaryMi Story TellerStar Of TechnologyMi Lover Medal

15:43, May-11-2018 | From Redmi Note 5A
|
thank,s  info

MIUI News Team

⭐⭐⭐

Rank: 6Rank: 6

Credits
41090
Device
Redmi 3S
Online time
1404 Hours
Send PM

Mi ScaleMijia Smart PTZ CameraMijia Story TellerMi BoxMi TV 70Mi Band 2Mi HomeMijia Qi CycleMagic CubeMi  BunnyMijia Walkie TalkieUnlock MedalMi MIXMi Bluetooth HeadsetMi Kids WatchMijia 360° Panoramic CameraMi Notebook AirI Love MIUIMIUI Devices ContestAwesome!Fantastic!Flashholic4 Million Forum MembersRedmi 3SXiaomi Mi 4Redmi Note 4Redmi NoteXiaomi Mi 6Redmi 3Redmi 1SMi PadMi 4cRedmi ProMi 5s PlusRedmi Note 4XMi Note 2Redmi Note 2Mi Pad 3Mi MIXMi 4SHappy Singles' Day300K Forum MembersMIUI 92 Million Forum MembersRocket to FutureMIUI PMIUI Fan From IndonesiaWomen's Day Medal5 Million Forum App Installs3 Million Forum MembersSuper ThursdayHappy Holi Medal10 Million Forum PostsSuper MondayMIUI 2017MIUI Font LoverMIUI Lucky FridayHappy Valentine's DayPuzzle MasterMIUI 20 Million UsersHappy DiwaliMIUI 50 Million UsersMIUI Happy MedalMIUI Fan From PhilippinesDiwali Surge S1MIUI SFan Of MIUI BangladeshMIUI 7th AnniversaryCamera Filter Guru MedalMIUI 100 Million UsersMerry ChristmasHappy New YearGamer Mi BunnyMiPopMIUI News Team6 Million Forum MembersMIUI Twitter Follower8 Million Forum MembersForum Contest Lover2017 Annual AwardsMIUI G+ FollowerQuick SurveyNougat5 Million Forum MembersMIUI FB FollowerSupriseMIUI SuperstarApp StarMi MIX 2Xiaomi 8th Anniversary7 Million Forum MembersMIUI Weekly Devices QuizMi TalentMIUI KingBlack SharkStar WarsRedmi 5AScroll Of WisdomPioneer of MIUI English Forum Mi Story TellerOTA FeedbackStar Of TechnologyMaster Of TechnologyMIUI FollowerUpdates LoverMIUI Medals CollectorMIUI Android 4.4 KitKatMost Active MIUIerTheme TalentRedmi Note 5/ProMi Lover MedalRingtone ExpertOreoMr. DependableTechnology GuruMi A1Redmi Note 5A/PrimeMi Note 3MIUI Quick DiscussionMIUI Halloween 2017Android ElfMIUI ExpertDie-hard MIUI FanDebate MasterAndroid GuruMi 5X

15:55, May-11-2018 | From Redmi 3S
|
Thanks for sharing


Please Click Reply Below Or Type My Tag @PrinceKaran To Notify Me, So you'll get my attention.

Credits Management

Quick Reply Top Return to the list