{"id":110360,"date":"2023-09-28T09:56:15","date_gmt":"2023-09-28T07:56:15","guid":{"rendered":"https:\/\/prohoster.info\/?p=110360"},"modified":"2023-09-28T09:56:15","modified_gmt":"2023-09-28T07:56:15","slug":"ataka-gpu-zip-pozvolyayushhaya-vossozdat-dannye-otrisovyvaemye-gpu","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/ataka-gpu-zip-pozvolyayushhaya-vossozdat-dannye-otrisovyvaemye-gpu","title":{"rendered":"\u00datok GPU.zip, kter\u00fd umo\u017e\u0148uje rekonstrukci dat zobrazen\u00fdch GPU","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Skupina v\u00fdzkumn\u00edk\u016f z n\u011bkolika americk\u00fdch univerzit vyvinula novou techniku \u00fatoku pomoc\u00ed vedlej\u0161\u00edch kan\u00e1l\u016f, kter\u00e1 umo\u017e\u0148uje zrekonstruovat vizu\u00e1ln\u00ed informace zpracov\u00e1van\u00e9 v GPU. Pomoc\u00ed navrhovan\u00e9 metody, nazvan\u00e9 GPU.zip, m\u016f\u017ee \u00fato\u010dn\u00edk ur\u010dit informace zobrazovan\u00e9 na obrazovce. Mezi jin\u00fdmi prost\u0159edky m\u016f\u017ee b\u00fdt \u00fatok proveden prost\u0159ednictv\u00edm webov\u00e9ho prohl\u00ed\u017ee\u010de; nap\u0159\u00edklad bylo demonstrov\u00e1no, jak m\u016f\u017ee \u0161kodliv\u00e1 webov\u00e1 str\u00e1nka otev\u0159en\u00e1 v Chrome z\u00edskat informace o pixelech zobrazovan\u00fdch p\u0159i vykreslov\u00e1n\u00ed jin\u00e9 webov\u00e9 str\u00e1nky otev\u0159en\u00e9 ve stejn\u00e9m prohl\u00ed\u017ee\u010di. <\/p>\n

Zdrojem \u00faniku informac\u00ed je pou\u017e\u00edv\u00e1n\u00ed optimalizac\u00ed v modern\u00edch GPU, kter\u00e9 zaji\u0161\u0165uj\u00ed kompresi grafick\u00fdch dat. Probl\u00e9m se projevuje p\u0159i pou\u017eit\u00ed komprese na v\u0161ech testovan\u00fdch integrovan\u00fdch GPU (AMD, Apple, ARM, Intel, Qualcomm) a diskr\u00e9tn\u00edch grafick\u00fdch kart\u00e1ch NVIDIA. P\u0159itom v\u00fdzkumn\u00edci zjistili, \u017ee integrovan\u00e9 GPU Intel a AMD v\u017edy zahrnuj\u00ed kompresi grafick\u00fdch dat, i kdy\u017e aplikace speci\u00e1ln\u011b nepo\u017eaduje pou\u017eit\u00ed takov\u00e9to optimalizace. Pou\u017eit\u00ed komprese vede k tomu, \u017ee provoz v DRAM a z\u00e1t\u011b\u017e na cache koreluj\u00ed s charakterem zpracov\u00e1van\u00fdch dat, kter\u00e1 lze pixelov\u011b zrekonstruovat anal\u00fdzou pomoc\u00ed vedlej\u0161\u00edch kan\u00e1l\u016f. <\/p>\n

Metoda je pom\u011brn\u011b pomal\u00e1; nap\u0159\u00edklad na syst\u00e9mu s integrovan\u00fdm GPU AMD Ryzen 7 4800U \u00fatok, kter\u00fd m\u011bl za c\u00edl zjistit n\u00e1zev, pod kter\u00fdm se u\u017eivatel p\u0159ihl\u00e1sil na Wikipedii v jin\u00e9 z\u00e1lo\u017ece, trval 30 minut a dovolil ur\u010dit obsah pixel\u016f s p\u0159esnost\u00ed 97%. Na syst\u00e9mech s integrovan\u00fdm GPU Intel i7-8700 trval podobn\u00fd \u00fatok 215 minut p\u0159i p\u0159esnosti 98%. <\/p>\n

P\u0159i prov\u00e1d\u011bn\u00ed \u00fatoku prost\u0159ednictv\u00edm prohl\u00ed\u017ee\u010de se c\u00edlov\u00e1 str\u00e1nka opakovan\u011b otev\u00edr\u00e1 v iframe pro iniciaci vykreslov\u00e1n\u00ed. Pro ur\u010den\u00ed zobrazovan\u00fdch informac\u00ed se v\u00fdstup iframe p\u0159ev\u00e1d\u00ed na \u010dernob\u00edlou reprezentaci, na kterou se aplikuje SVG filtr, prov\u00e1d\u011bj\u00edc\u00ed postupn\u00e9 p\u0159ekr\u00fdv\u00e1n\u00ed masek, kter\u00e9 vn\u00e1\u0161ej\u00ed a nevn\u00e1\u0161ej\u00ed zna\u010dnou redundantnost p\u0159i kompresi. Na z\u00e1klad\u011b hodnocen\u00ed zm\u011bny doby vykreslov\u00e1n\u00ed referen\u010dn\u00edch vzork\u016f se vy\u010dle\u0148uje p\u0159\u00edtomnost tmav\u00fdch nebo sv\u011btl\u00fdch pixel\u016f na ur\u010dit\u00e9 pozici. Celkov\u00fd obraz se rekonstruuje pomoc\u00ed postupn\u00e9ho pixelov\u00e9ho ov\u011b\u0159ov\u00e1n\u00ed s vyu\u017eit\u00edm podobn\u00fdch masek.

\"\u00datok<\/center> <\/p>\n

V\u00fdrobci GPU a prohl\u00ed\u017ee\u010d\u016f byli o probl\u00e9mu informov\u00e1ni v b\u0159eznu, ale \u017e\u00e1dn\u00fd dodavatel dosud nep\u0159ipravil opravu, proto\u017ee proveden\u00ed \u00fatoku prakticky nen\u00ed za ide\u00e1ln\u00edch podm\u00ednek jist\u00e9 a probl\u00e9m m\u00e1 v\u011bt\u0161\u00ed teoretick\u00fd z\u00e1jem. Google dosud neu\u010dinil rozhodnut\u00ed o vyu\u017eitelnosti blokov\u00e1n\u00ed \u00fatoku na \u00farovni prohl\u00ed\u017ee\u010de Chrome. Chrome je zraniteln\u00fd, proto\u017ee umo\u017e\u0148uje na\u010d\u00edt\u00e1n\u00ed iframe z jin\u00e9ho webu bez \u010di\u0161t\u011bn\u00ed Cookies, umo\u017e\u0148uje pou\u017eit\u00ed SVG filtr\u016f na iframe a deleguje vykreslov\u00e1n\u00ed na GPU. Firefox a Safari nejsou zraniteln\u00e9, proto\u017ee nespl\u0148uj\u00ed dan\u00e1 krit\u00e9ria. \u00datok tak\u00e9 nen\u00ed uplatniteln\u00fd na weby, kter\u00e9 zakazuj\u00ed vkl\u00e1d\u00e1n\u00ed prost\u0159ednictv\u00edm iframe na jin\u00fdch webech (nap\u0159\u00edklad nastaven\u00edm HTTP hlavi\u010dky X-Frame-Options na hodnotu \"SAMEORIGIN\" nebo \"DENY\", stejn\u011b jako pomoc\u00ed nastaven\u00ed p\u0159\u00edstupu pomoc\u00ed hlavi\u010dky Content-Security-Policy).
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0421\u0428\u0410 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0432\u0438\u0437\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u043c\u0443\u044e \u0432 GPU. \u041f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u043c\u0435\u0442\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 GPU.zip, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0432\u044b\u0432\u043e\u0434\u0438\u043c\u0443\u044e \u043d\u0430 \u044d\u043a\u0440\u0430\u043d \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e. \u0421\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 web-\u0431\u0440\u0430\u0443\u0437\u0435\u0440, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043e, \u043a\u0430\u043a \u043e\u0442\u043a\u0440\u044b\u0442\u0430\u044f \u0432 Chrome \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f web-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":110361,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-110360","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u00datok GPU.zip, umo\u017e\u0148uj\u00edc\u00ed rekonstrukci dat vykreslovan\u00fdch GPU | ProHoster","description":"Skupina v\u00fdzkumn\u00edk\u016f z n\u011bkolika americk\u00fdch univerzit vyvinula novou techniku \u00fatoku pomoc\u00ed bo\u010dn\u00edch kan\u00e1l\u016f, kter\u00e1 umo\u017e\u0148uje rekonstrukci vizu\u00e1ln\u00edch informac\u00ed zpracov\u00e1van\u00fdch v GPU.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/ataka-gpu-zip-pozvolyayushhaya-vossozdat-dannye-otrisovyvaemye-gpu","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 GPU.zip, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435, \u043e\u0442\u0440\u0438\u0441\u043e\u0432\u044b\u0432\u0430\u0435\u043c\u044b\u0435 GPU | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0421\u0428\u0410 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0432\u0438\u0437\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u043c\u0443\u044e \u0432 GPU.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/ataka-gpu-zip-pozvolyayushhaya-vossozdat-dannye-otrisovyvaemye-gpu","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-09-28T07:56:15+00:00","article:modified_time":"2023-09-28T07:56:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/110360","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=110360"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/110360\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/110361"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=110360"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=110360"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=110360"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}