{"id":212154,"date":"2017-05-24T10:55:40","date_gmt":"2017-05-24T08:55:40","guid":{"rendered":"http:\/\/mybroadband.co.za\/news\/?p=212154"},"modified":"2017-05-24T10:56:32","modified_gmt":"2017-05-24T08:56:32","slug":"security-flaw-found-in-ssd-technology","status":"publish","type":"post","link":"https:\/\/mybroadband.co.za\/news\/hardware\/212154-security-flaw-found-in-ssd-technology.html","title":{"rendered":"Security flaw found in SSD technology"},"content":{"rendered":"<p>Researchers at Carnegie Mellon University have <strong><a href=\"https:\/\/pdfs.semanticscholar.org\/b9bc\/a3c9f531002854af48de121cdcc8e0520c7f.pdf?_ga=2.222220824.1852166610.1495550626-240739962.1495550626\" target=\"_blank\" rel=\"noopener noreferrer\">discovered<\/a>\u00a0<\/strong>an exploitable flaw in\u00a0SSD design.<\/p>\n<p>The flaw makes SSDs which use multi-cell level (MLC) technology vulnerable to attacks, which cause reduced lifespan and data corruption.<\/p>\n<p>Single-level cell (SLC) drives are not affected by the flaw, but faster MLC SSDs are vulnerable due to the method they use to write data to their\u00a0flash cells.<\/p>\n<p>Unlike SLC drives, MLC SSDs write data into a buffer from a flash cell instead of writing from the flash controller.<\/p>\n<p>This process allows the written data to be intercepted and corrupted as it is being written, which causes file corruption and can reduce the lifespan of the drive.<\/p>\n<p>SSD\u00a0manufacturers can fix the\u00a0flaw by writing data from the flash controller, but this would increase latency.<\/p>\n<p>Low latency is a major feature of MLC drives.<\/p>\n<p>The research did not state whether triple-level cell (TLC) drives were affected, but according to <a href=\"https:\/\/www.extremetech.com\/computing\/249678-ssds-vulnerable-deliberate-low-level-data-corruption-attacks?source=Computing\" target=\"_blank\" rel=\"noopener noreferrer\"><strong>ExtremeTech<\/strong><\/a>, the technology could also be vulnerable due to its similar programming process.<\/p>\n<p>ExtremeTech also noted that the vulnerability affects 2D NAND manufactured below the 40nm process node, meaning 3D NAND devices using single-shot programming are unaffected &#8211; as they do not use two-stage programming.<\/p>\n<p>However, once the manufacturing process for 3D NAND advances past 40nm, manufacturers are expected to return to two-stage programming.<\/p>\n<h3 class=\"my-4\">Now read:\u00a0<a href=\"https:\/\/mybroadband.co.za\/news\/hardware\/209146-wd-launches-ssds-in-south-africa-pricing-and-details.html\" rel=\"bookmark\">WD launches SSDs in South Africa \u2013 Pricing and details<\/a><\/h3>\n","protected":false},"excerpt":{"rendered":"<p>Researchers at Carnegie Mellon University have discovered an exploitable flaw in SSD design.<\/p>\n","protected":false},"author":23,"featured_media":171515,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[15,27],"tags":[43404,381,23613,23505,43406,19342,463,43408,793],"class_list":["post-212154","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hardware","category-security","tag-2d","tag-3d","tag-exploit","tag-flaw","tag-mlc","tag-nand","tag-security-2","tag-slc","tag-ssd"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/212154"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/23"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=212154"}],"version-history":[{"count":1,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/212154\/revisions"}],"predecessor-version":[{"id":212162,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/212154\/revisions\/212162"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media\/171515"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=212154"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=212154"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=212154"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}