#badram — Public Fediverse posts

It's not a great day when you have to read https://www.gnu.org/software/grub/manual/grub/html_node/badram.html

#badram

"It's always DNS", right? I've been troubleshooting a "failing" hard disk for weeks now. Occasional disk errors in dmesg, and the odd system crash followed by a fsck with tons of errors. Nope, not a failing hard disk. Bad RAM. I swear, RAM is worse than DNS for me.

#homelab #selfhosting #badram

COSIC researcher Jesse De Meulemeester presented "#BadRAM: Practical Memory Aliasing Attacks on Trusted Execution Environments" at IEEE SSP in San Francisco.
https://sp2025.ieee-security.org/program.html
🔗Badram website: https://badram.eu/

Today Jesse De Meulemeester will present "BadRAM: Practical Memory Aliasing Attacks on Trusted Execution Environments" at IEEE SSP in San Francisco.
https://sp2025.ieee-security.org/program.html
#badram #ieeessp
BadRAM - Breaching Processor Security via Rogue Memory Modules: info and demo on https://badram.eu/

Security Week 2451: атака BadRAM на процессоры AMD

На прошлой неделе исследователи из университетов Бельгии, Германии и Великобритании продемонстрировали необычную аппаратную атаку, эксплуатирующую уязвимость в процессорах AMD. Хотя это и сложная атака, при некоторых условиях она может представлять интерес, так как позволяет обойти новейшие средства защиты данных при использовании виртуализации. Практическая реализация атаки предполагает модификацию так называемого чипа SPD на модуле оперативной памяти, в котором прописаны параметры этого модуля. Таким образом атакующие могут сообщить процессору, что объем планки памяти в два раза больше, чем на самом деле, например, 32 гигабайта вместо 16. Таким образом можно перенаправить поток данных от «защищенной» виртуальной ОС в руки потенциального злоумышленника.

https://habr.com/ru/companies/kaspersky/articles/866860/

#badram

This Week in Security: Recall, BadRAM, and OpenWRT https://hackaday.com/2024/12/13/this-week-in-security-recall-badram-and-openwrt/ #ThisWeekinSecurity #HackadayColumns #SecurityHacks #openwrt #BadRAM #recall #News

This Week in Security: Recall, BadRAM, and OpenWRT - Microsoft’s Recall feature is back. You may remember our coverage of the new AI fe... - https://hackaday.com/2024/12/13/this-week-in-security-recall-badram-and-openwrt/ #thisweekinsecurity #hackadaycolumns #securityhacks #openwrt #badram #recall #news

#BadRAM: Historischer Seitenkanal hebelt RAM-Verschlüsselung aus | c't Magazin https://www.heise.de/news/BadRAM-Historischer-Seitenkanal-hebelt-Confidential-Computing-in-der-Cloud-aus-10193941.html

AMD's Secure Encrypted Virtualization (SEV) technology faces a serious threat! 🛡️ Researchers have revealed a $10 attack that can bypass its defenses, potentially compromising cloud security. This "BadRAM" technique manipulates memory to expose sensitive data. 😱💻 Major cloud providers like AWS and Google Cloud could be affected. Stay informed! #CyberSecurity #AMD #CloudComputing #BadRAM #newz

https://www.theregister.com/2024/12/10/amd_secure_vm_tech_undone/

🚨 Security Alert! Researchers uncover critical vulnerability in AMD's Secure Encrypted Virtualization (SEV) tech 🖥️ Hackers can potentially exploit memory aliasing to infiltrate devices using a technique called #BadRAM 🕵️ AMD issued CVE-2024-21944 advisory - update your systems! 🛡️ #CyberSecurity #TechNews #newz

https://www.techradar.com/pro/security/amd-vm-security-tools-can-be-bypassed-letting-hackers-infilitrate-your-devices-experts-warn

BadRAM Attack Uses $10 Equipment to Break AMD Processor Protections – Source: www.securityweek.com https://ciso2ciso.com/badram-attack-uses-10-equipment-to-break-amd-processor-protections-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #cpuvulnerability #Endpointsecurity #securityweekcom #securityweek #BadRAM #amd #CPU

BadRAM Attack Uses $10 Equipment to Break AMD Processor Protections – Source: www.securityweek.com https://ciso2ciso.com/badram-attack-uses-10-equipment-to-break-amd-processor-protections-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #cpuvulnerability #Endpointsecurity #securityweekcom #securityweek #BadRAM #amd #CPU

BadRAM Attack Uses $10 Equipment to Break AMD Processor Protections – Source: www.securityweek.com https://ciso2ciso.com/badram-attack-uses-10-equipment-to-break-amd-processor-protections-source-www-securityweek-com/ #rssfeedpostgeneratorecho #CyberSecurityNews #cpuvulnerability #Endpointsecurity #securityweekcom #securityweek #BadRAM #amd #CPU

BadRAM Attack Uses $10 Equipment to Break AMD Processor Protections https://www.securityweek.com/badram-attack-uses-10-equipment-to-break-amd-processor-protections/ #EndpointSecurity #CPUvulnerability #BadRAM #Amd #CPU

BadRAM Attack Uses $10 Equipment to Break AMD Processor Protections https://www.securityweek.com/badram-attack-uses-10-equipment-to-break-amd-processor-protections/ #EndpointSecurity #CPUvulnerability #BadRAM #Amd #CPU

BadRAM Attack Uses $10 Equipment to Break AMD Processor Protections https://www.securityweek.com/badram-attack-uses-10-equipment-to-break-amd-processor-protections/ #EndpointSecurity #CPUvulnerability #BadRAM #Amd #CPU

BadRAM Attack Uses $10 Equipment to Break AMD Processor Protections https://www.securityweek.com/badram-attack-uses-10-equipment-to-break-amd-processor-protections/ #EndpointSecurity #CPUvulnerability #BadRAM #Amd #CPU

BadRAM Attack Uses $10 Equipment to Break AMD Processor Protections https://www.securityweek.com/badram-attack-uses-10-equipment-to-break-amd-processor-protections/ #EndpointSecurity #CPUvulnerability #BadRAM #Amd #CPU

New #BadRAM attack neuters #security assurances in #AMD #Epyc processors

One of the oldest maxims in hacking is that once an attacker has physical access to a device, it’s game over for its security. The basis is sound.
#AMDEpyc

https://arstechnica.com/information-technology/2024/12/new-badram-attack-neuters-security-assurances-in-amd-epyc-processors/

International research team uncovers vulnerability in cloud server security
#badram #cosic #kuleuven
https://nieuws.kuleuven.be/en/content/2024/vulnerability-in-cloud-server-security-badram

#BadRAM: Tampering with DRAM modules allows attackers to bypass SEV-SNP's write protection and forging attestation reports, breaking all trust in
#SEV-SNP
https://badram.eu/
Research by COSIC KU Leuven, the University of Lübeck, and the University of Birmingham

#BadRAM / #CVE_2024_21944 #vulnerability seems quite far fetched to me. If your trust model includes #AMDSEV you hopefully also have assurances of physical security.
https://arstechnica.com/information-technology/2024/12/new-badram-attack-neuters-security-assurances-in-amd-epyc-processors/