↓ Skip to main content

“It’s just one resistor (15 ohms) and one wire, soldered to DQ26.”

David Buchananda.vidbuchanan.co.uk ↗

A piezo BBQ lighter, a 15 ohm resistor and a wire on a DDR3 data line flip bits in a 2011 Samsung laptop. Spray page tables across half of RAM, glitch one entry, and overwrite the cached copy of setuid su with a root shell. It works about 50% of the time over SSH. Every kernel hardening layer assumes the memory bus tells the truth.