{"id":84985,"date":"2020-06-12T13:42:15","date_gmt":"2020-06-12T11:42:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/arm-prohudilas-obnaruzhilas-isklyuchitelnaya-uyazvimost-dlya-ataki-na-spekulyativnye-vychisleniya"},"modified":"2020-06-12T13:42:15","modified_gmt":"2020-06-12T11:42:15","slug":"arm-prohudilas-obnaruzhilas-isklyuchitelnaya-uyazvimost-dlya-ataki-na-spekulyativnye-vychisleniya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/arm-prohudilas-obnaruzhilas-isklyuchitelnaya-uyazvimost-dlya-ataki-na-spekulyativnye-vychisleniya","title":{"rendered":"ARM har f\u00e5et en alvorlig s\u00e5rbarhed for angreb p\u00e5 spekulative beregninger","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

For processorer p\u00e5 et bredt spektrum af Armv8-A (Cortex-A) arkitekturer blev fundet<\/a><\/noindex> sin egen unikke s\u00e5rbarhed for angreb via sidkanaler ved brug af spekulative beregningsalgoritmer. Dette blev meddelt af ARM selv, som ogs\u00e5 har udgivet patches og vejledninger til at afb\u00f8de den fundne s\u00e5rbarhed. Truslen er ikke s\u00e5 stor, men den skal ikke undervurderes, da processorer baseret p\u00e5 ARM-arkitekturen findes overalt, hvilket g\u00f8r risikoen for datal\u00e6kage helt ubegribelig.<\/p>\n

\"ARM<\/p>\n

Den s\u00e5rbarhed, der er blevet fundet af Google-specialister, har det kodeord Straight-Line Speculation (SLS) og den officielle betegnelse CVE-2020-13844. If\u00f8lge ARM er SLS-s\u00e5rbarheden en af formerne for Spectre-s\u00e5rbarheden, som (sammen med Meltdown-s\u00e5rbarheden) blev bredt omtalt i januar 2018. Med andre ord er dette en klassisk s\u00e5rbarhed i mekanismerne for spekulativ beregning med angreb via sidkanaler.<\/p>\n

Spekulative beregninger kr\u00e6ver, at data behandles p\u00e5 forh\u00e5nd langs flere mulige forl\u00f8b, selvom de efterf\u00f8lgende kan kastes ud som un\u00f8dvendige. Angreb via sidkanaler tillader tyveri af s\u00e5danne mellemdata, inden de helt bliver slettet. Resultatet er, at vi har effektive processorer og en risiko for datal\u00e6kage.<\/p>\n

Angrebet Straight-Line Speculation p\u00e5 processorer med ARM-arkitektur f\u00e5r processoren til hver gang at skifte fra en \u00e6ndring i kommandostr\u00f8mmen og begynde at udf\u00f8re instruktioner, der findes direkte i hukommelsen, i stedet for at f\u00f8lge instruktionerne i den nye kommandostr\u00f8m. Det er \u00e5benlyst ikke det bedste valg af instruktioner til udf\u00f8relse, som en angriber kan udnytte.<\/p>\n

<\/center><\/p>\n

Til \u00e6re for ARM har de ikke kun udgivet en vejledning til udviklere, der kan hj\u00e6lpe med at undg\u00e5 risikoen for datal\u00e6kage via angreb p\u00e5 Straight-Line Speculation, men ogs\u00e5 givet patches til de vigtigste operativsystemer som FreeBSD, OpenBSD, Trusted Firmware-A og OP-TEE samt udgivet patches til GCC og LLVM compilere.<\/p>\n

Derudover har virksomheden erkl\u00e6ret, at anvendelsen af patches ikke vil p\u00e5virke ARM-platformenes ydeevne, som det skete p\u00e5 x86-kompatible Intel-platforme med blokering af Spectre- og Meltdown-s\u00e5rbarhederne. Dog vil vi kunne f\u00e5 denne information fra tredjeparts kilder, hvilket vil give et objektivt billede af den nye s\u00e5rbarhed.<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
Kilde: 3dnews.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u043b\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u043d\u0430 \u0448\u0438\u0440\u043e\u043a\u043e\u043c \u0441\u043f\u0435\u043a\u0442\u0440\u0435 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440 Armv8-A (Cortex-A) \u043d\u0430\u0448\u043b\u0430\u0441\u044c \u0441\u0432\u043e\u044f \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u043f\u043e\u0431\u043e\u0447\u043d\u044b\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u0439. \u041e\u0431 \u044d\u0442\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u0441\u0430\u043c\u0430 ARM \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u0430\u0442\u0447\u0438 \u0438 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u0430 \u0434\u043b\u044f \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044f \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043d\u0435 \u0442\u0430\u043a \u0432\u0435\u043b\u0438\u043a\u0430, \u043d\u043e \u043f\u0440\u0435\u043d\u0435\u0431\u0440\u0435\u0433\u0430\u0442\u044c \u0435\u044e \u043d\u0435\u043b\u044c\u0437\u044f, \u0432\u0435\u0434\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b \u043d\u0430 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0435 ARM \u0435\u0441\u0442\u044c \u0432\u0435\u0437\u0434\u0435, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0440\u0438\u0441\u043a \u0443\u0442\u0435\u0447\u0435\u043a […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":84986,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-84985","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47ARM har en alvorlig s\u00e5rbarhed: en exceptionel s\u00e5rbarhed er blevet opdaget for angreb p\u00e5 spekulativ beregning | ProHoster","description":"For processorer p\u00e5 et bredt spektrum af Armv8-A (Cortex-A) arkitekturer","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/arm-prohudilas-obnaruzhilas-isklyuchitelnaya-uyazvimost-dlya-ataki-na-spekulyativnye-vychisleniya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47ARM \u043f\u0440\u043e\u0445\u0443\u0434\u0438\u043b\u0430\u0441\u044c: \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430\u0441\u044c \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u044b\u0435 \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u044f | ProHoster","og:description":"\u0414\u043b\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u043d\u0430 \u0448\u0438\u0440\u043e\u043a\u043e\u043c \u0441\u043f\u0435\u043a\u0442\u0440\u0435 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440 Armv8-A (Cortex-A)","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/arm-prohudilas-obnaruzhilas-isklyuchitelnaya-uyazvimost-dlya-ataki-na-spekulyativnye-vychisleniya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-12T11:42:15+00:00","article:modified_time":"2020-06-12T11:42:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"84985","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:46:42","updated":"2022-10-01 13:37:31","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/84985","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=84985"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/84985\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/84986"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=84985"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=84985"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=84985"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}