{"guid":"01da121b-bd49-4805-aaaf-a6ec1f4f941f","title":"Rowhammer.js: Root privileges for web apps?","subtitle":"A tale of fault attacks on DRAM and attacks on CPU caches","slug":"32c3-7197-rowhammer_js_root_privileges_for_web_apps","link":"https://events.ccc.de/congress/2015/Fahrplan/events/7197.html","description":"\"Insanity: doing the same thing over and over again and expecting different results.\" \nAlbert Einstein - Who did not live long enough to see Rowhammer\n\nRecent studies have found that repeated accesses to DRAM rows can cause random bit flips, resulting in the so called Rowhammer vulnerability. We present Rowhammer.js, the first remote software-induced hardware-fault attack, from JavaScript. We also extend our presentation with an overview of cache side-channel attacks, that use the same technique to evict data from the cache.","original_language":"eng","persons":["Clémentine Maurice","Daniel Gruss"],"tags":["Security"],"view_count":25920,"promoted":false,"date":"2015-12-28T18:15:00.000+01:00","release_date":"2015-12-28T01:00:00.000+01:00","updated_at":"2026-04-17T12:30:07.194+02:00","length":1859,"duration":1859,"thumb_url":"https://static.media.ccc.de/media/congress/2015/7197-hd.jpg","poster_url":"https://static.media.ccc.de/media/congress/2015/7197-hd_preview.jpg","timeline_url":"https://static.media.ccc.de/media/congress/2015/01da121b-bd49-4805-aaaf-a6ec1f4f941f-timeline.jpg","thumbnails_url":"https://static.media.ccc.de/media/congress/2015/01da121b-bd49-4805-aaaf-a6ec1f4f941f-thumbnails.vtt","frontend_link":"https://media.ccc.de/v/32c3-7197-rowhammer_js_root_privileges_for_web_apps","url":"https://api.media.ccc.de/public/events/01da121b-bd49-4805-aaaf-a6ec1f4f941f","conference_title":"32C3: gated communities","conference_url":"https://api.media.ccc.de/public/conferences/32c3","related":[{"event_id":2172,"event_guid":"ELK9-ZQeFcqKxBYW8eay8g","weight":2},{"event_id":2277,"event_guid":"ad722522-5817-4317-8f3d-bb443b4e6c77","weight":2},{"event_id":2811,"event_guid":"fa0727ab-81a7-4197-bc7d-0ce5e9dc4526","weight":2},{"event_id":2816,"event_guid":"78ea005f-4ddb-44d1-82e5-a2825ddea4e1","weight":2},{"event_id":2820,"event_guid":"1d7d4787-c77a-4e6e-9398-f3b4dcaa3587","weight":4},{"event_id":2822,"event_guid":"4c070a2c-0558-48b8-b612-b8507a51154e","weight":2},{"event_id":2832,"event_guid":"489a414b-2d6b-4f20-8187-813169ca19c9","weight":4},{"event_id":2837,"event_guid":"9f2e9ff0-1555-470b-8743-9f07f54e9097","weight":3},{"event_id":2844,"event_guid":"b753dbd8-32bb-437c-9f15-db0d7ac1811a","weight":2},{"event_id":2847,"event_guid":"6f79c506-a6cd-4430-bfbf-1841aca06e41","weight":3},{"event_id":2850,"event_guid":"4f1a0717-6931-4580-9e49-5d523be045df","weight":3},{"event_id":2868,"event_guid":"0549d204-604a-46c5-92a2-e64b85aa9892","weight":3},{"event_id":2871,"event_guid":"74515f8e-a752-4cbb-b407-3a70fca5b0b3","weight":3},{"event_id":2876,"event_guid":"144b2208-bf0b-494c-99e5-665ed18f1e8f","weight":2},{"event_id":2882,"event_guid":"df35c860-60fc-4df8-801c-b2f4f91b33b8","weight":4},{"event_id":2902,"event_guid":"930673b3-4f75-40eb-8be5-574469c3920f","weight":3},{"event_id":2919,"event_guid":"4d473646-e765-441b-98eb-653dfe6bdeb1","weight":2},{"event_id":2939,"event_guid":"c87fa147-d1f4-4353-82db-c3e5b646884b","weight":3},{"event_id":2944,"event_guid":"5fb6f7b5-c237-4b64-b786-85e4c95f13ad","weight":2},{"event_id":2947,"event_guid":"422ba0b9-debb-436e-9822-e9a201dec845","weight":2},{"event_id":3603,"event_guid":"798573a8-f544-48f0-abaf-ebc405f03f4a","weight":3},{"event_id":3606,"event_guid":"1aa7a4c5-1a3f-444f-99fb-e9c7b4744794","weight":18},{"event_id":3671,"event_guid":"4ef69e6a-026f-4b30-888d-af654b220a3d","weight":2},{"event_id":3698,"event_guid":"994082de-ef8e-4f8e-8c46-ec0eb110b845","weight":2},{"event_id":3704,"event_guid":"a1f43609-a446-41e7-9ac6-4db12bcb14c1","weight":3},{"event_id":3708,"event_guid":"aaec73e9-66b9-46d2-aa0f-9f43018198ea","weight":2},{"event_id":3712,"event_guid":"cb23378b-6db0-4e2f-a4c8-f5006a467ca3","weight":2},{"event_id":3715,"event_guid":"4c92b3f4-e32a-483b-9e5f-4e8201849284","weight":5},{"event_id":3733,"event_guid":"855ab830-c6c0-4be7-b84c-31ba78e90e3c","weight":2},{"event_id":3735,"event_guid":"a097896d-04fc-4f58-8d8e-a8dbef9812b4","weight":2},{"event_id":3762,"event_guid":"25e2df7d-5740-4c2f-bc34-986326d606fe","weight":2},{"event_id":4791,"event_guid":"8d29d28d-a222-4731-bdfc-fde590385cae","weight":2},{"event_id":4826,"event_guid":"16645200-2036-4a3c-a44d-a5ff44ac2991","weight":2},{"event_id":4842,"event_guid":"581ccbad-4bbf-47a2-8845-f52278d61061","weight":2}],"recordings":[{"size":28,"length":1850,"mime_type":"audio/mpeg","language":"deu","filename":"32c3-7197-de-Rowhammerjs_Root_privileges_for_web_apps.mp3","state":"downloaded","folder":"mp3-translated","high_quality":true,"width":null,"height":null,"updated_at":"2015-12-29T18:06:11.720+01:00","recording_url":"https://cdn.media.ccc.de/congress/2015/mp3-translated/32c3-7197-de-Rowhammerjs_Root_privileges_for_web_apps.mp3","url":"https://api.media.ccc.de/public/recordings/8844","event_url":"https://api.media.ccc.de/public/events/01da121b-bd49-4805-aaaf-a6ec1f4f941f","conference_url":"https://api.media.ccc.de/public/conferences/32c3"},{"size":22,"length":1850,"mime_type":"audio/opus","language":"deu","filename":"32c3-7197-de-Rowhammerjs_Root_privileges_for_web_apps.opus","state":"downloaded","folder":"opus-translation","high_quality":true,"width":null,"height":null,"updated_at":"2015-12-29T14:46:44.071+01:00","recording_url":"https://cdn.media.ccc.de/congress/2015/opus-translation/32c3-7197-de-Rowhammerjs_Root_privileges_for_web_apps.opus","url":"https://api.media.ccc.de/public/recordings/8773","event_url":"https://api.media.ccc.de/public/events/01da121b-bd49-4805-aaaf-a6ec1f4f941f","conference_url":"https://api.media.ccc.de/public/conferences/32c3"},{"size":null,"length":null,"mime_type":"application/x-subrip","language":"eng","filename":"DRAFT_32c3-7197-en-de-Rowhammerjs_Root_privileges_for_web_apps.en_DRAFT.srt","state":"todo","folder":"","high_quality":true,"width":null,"height":null,"updated_at":"2022-01-14T19:23:26.287+01:00","recording_url":"https://cdn.media.ccc.de/congress/2015/DRAFT_32c3-7197-en-de-Rowhammerjs_Root_privileges_for_web_apps.en_DRAFT.srt","url":"https://api.media.ccc.de/public/recordings/57261","event_url":"https://api.media.ccc.de/public/events/01da121b-bd49-4805-aaaf-a6ec1f4f941f","conference_url":"https://api.media.ccc.de/public/conferences/32c3"},{"size":153,"length":1859,"mime_type":"video/mp4","language":"eng-deu","filename":"32c3-7197-en-de-Rowhammerjs_Root_privileges_for_web_apps_sd.mp4","state":"downloaded","folder":"h264-sd","high_quality":false,"width":720,"height":576,"updated_at":"2016-02-03T14:12:10.921+01:00","recording_url":"https://cdn.media.ccc.de/congress/2015/h264-sd/32c3-7197-en-de-Rowhammerjs_Root_privileges_for_web_apps_sd.mp4","url":"https://api.media.ccc.de/public/recordings/8774","event_url":"https://api.media.ccc.de/public/events/01da121b-bd49-4805-aaaf-a6ec1f4f941f","conference_url":"https://api.media.ccc.de/public/conferences/32c3"},{"size":128,"length":1859,"mime_type":"video/webm","language":"eng-deu","filename":"32c3-7197-en-de-Rowhammerjs_Root_privileges_for_web_apps_webm-sd.webm","state":"downloaded","folder":"webm-sd","high_quality":false,"width":720,"height":576,"updated_at":"2016-02-03T14:12:11.001+01:00","recording_url":"https://cdn.media.ccc.de/congress/2015/webm-sd/32c3-7197-en-de-Rowhammerjs_Root_privileges_for_web_apps_webm-sd.webm","url":"https://api.media.ccc.de/public/recordings/8775","event_url":"https://api.media.ccc.de/public/events/01da121b-bd49-4805-aaaf-a6ec1f4f941f","conference_url":"https://api.media.ccc.de/public/conferences/32c3"},{"size":28,"length":1850,"mime_type":"audio/mpeg","language":"eng","filename":"32c3-7197-en-Rowhammerjs_Root_privileges_for_web_apps.mp3","state":"downloaded","folder":"mp3","high_quality":true,"width":null,"height":null,"updated_at":"2015-12-29T18:24:11.015+01:00","recording_url":"https://cdn.media.ccc.de/congress/2015/mp3/32c3-7197-en-Rowhammerjs_Root_privileges_for_web_apps.mp3","url":"https://api.media.ccc.de/public/recordings/8888","event_url":"https://api.media.ccc.de/public/events/01da121b-bd49-4805-aaaf-a6ec1f4f941f","conference_url":"https://api.media.ccc.de/public/conferences/32c3"},{"size":438,"length":1859,"mime_type":"video/mp4","language":"eng-deu","filename":"32c3-7197-en-de-Rowhammerjs_Root_privileges_for_web_apps_hd.mp4","state":"downloaded","folder":"h264-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2016-02-03T14:11:55.443+01:00","recording_url":"https://cdn.media.ccc.de/congress/2015/h264-hd/32c3-7197-en-de-Rowhammerjs_Root_privileges_for_web_apps_hd.mp4","url":"https://api.media.ccc.de/public/recordings/8676","event_url":"https://api.media.ccc.de/public/events/01da121b-bd49-4805-aaaf-a6ec1f4f941f","conference_url":"https://api.media.ccc.de/public/conferences/32c3"},{"size":419,"length":1859,"mime_type":"video/mp4","language":"eng","filename":"32c3-7197-en-Rowhammerjs_Root_privileges_for_web_apps.mp4","state":"downloaded","folder":"h264-hd-web","high_quality":true,"width":1920,"height":1080,"updated_at":"2016-02-03T14:11:55.130+01:00","recording_url":"https://cdn.media.ccc.de/congress/2015/h264-hd-web/32c3-7197-en-Rowhammerjs_Root_privileges_for_web_apps.mp4","url":"https://api.media.ccc.de/public/recordings/8674","event_url":"https://api.media.ccc.de/public/events/01da121b-bd49-4805-aaaf-a6ec1f4f941f","conference_url":"https://api.media.ccc.de/public/conferences/32c3"},{"size":420,"length":1859,"mime_type":"video/mp4","language":"deu","filename":"32c3-7197-de-Rowhammerjs_Root_privileges_for_web_apps.mp4","state":"downloaded","folder":"h264-hd-web","high_quality":true,"width":1920,"height":1080,"updated_at":"2016-02-03T14:11:55.259+01:00","recording_url":"https://cdn.media.ccc.de/congress/2015/h264-hd-web/32c3-7197-de-Rowhammerjs_Root_privileges_for_web_apps.mp4","url":"https://api.media.ccc.de/public/recordings/8675","event_url":"https://api.media.ccc.de/public/events/01da121b-bd49-4805-aaaf-a6ec1f4f941f","conference_url":"https://api.media.ccc.de/public/conferences/32c3"},{"size":300,"length":1859,"mime_type":"video/webm","language":"eng-deu","filename":"32c3-7197-en-de-Rowhammerjs_Root_privileges_for_web_apps_webm-hd.webm","state":"downloaded","folder":"webm-hd","high_quality":true,"width":1920,"height":1080,"updated_at":"2016-02-03T21:01:46.148+01:00","recording_url":"https://cdn.media.ccc.de/congress/2015/webm-hd/32c3-7197-en-de-Rowhammerjs_Root_privileges_for_web_apps_webm-hd.webm","url":"https://api.media.ccc.de/public/recordings/8816","event_url":"https://api.media.ccc.de/public/events/01da121b-bd49-4805-aaaf-a6ec1f4f941f","conference_url":"https://api.media.ccc.de/public/conferences/32c3"},{"size":25,"length":1850,"mime_type":"audio/opus","language":"eng","filename":"32c3-7197-en-Rowhammerjs_Root_privileges_for_web_apps.opus","state":"downloaded","folder":"opus","high_quality":true,"width":null,"height":null,"updated_at":"2015-12-29T14:46:06.911+01:00","recording_url":"https://cdn.media.ccc.de/congress/2015/opus/32c3-7197-en-Rowhammerjs_Root_privileges_for_web_apps.opus","url":"https://api.media.ccc.de/public/recordings/8772","event_url":"https://api.media.ccc.de/public/events/01da121b-bd49-4805-aaaf-a6ec1f4f941f","conference_url":"https://api.media.ccc.de/public/conferences/32c3"}]}