{"id":110360,"date":"2023-09-28T09:56:15","date_gmt":"2023-09-28T07:56:15","guid":{"rendered":"https:\/\/prohoster.info\/?p=110360"},"modified":"2023-09-28T09:56:15","modified_gmt":"2023-09-28T07:56:15","slug":"ataka-gpu-zip-pozvolyayushhaya-vossozdat-dannye-otrisovyvaemye-gpu","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/ataka-gpu-zip-pozvolyayushhaya-vossozdat-dannye-otrisovyvaemye-gpu","title":{"rendered":"GPU r\u00fcnnak.zip, mis v\u00f5imaldab rekonstrueerida GPU poolt joonistatud andmeid","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Mitme Ameerika \u00dclikooli teadlaste grupp on v\u00e4lja t\u00f6\u00f6tanud uue k\u00fclgkanalite r\u00fcnnetehnika, mis v\u00f5imaldab taastada GPU-s t\u00f6\u00f6deldud visuaalset teavet. Kasutades soovitatud meetodit, mida nimetatakse GPU.zip, suudab r\u00fcndaja kindlaks teha ekraanile edastatavat teavet. R\u00fcnnaku saab teostada ka veebibrauseri kaudu, n\u00e4iteks on n\u00e4idatud, kuidas Chrome'is avatud pahavara veebileht v\u00f5ib saada teavet pikslitest, mida kuvab sama brauseris avatud teine veebileht. <\/p>\n

Teabe leke tuleneb kaasaegsete GPU-de kasutatavast optimeerimisest, mis tagab graafiliste andmete tihendamise. Probleem ilmneb k\u00f5igi testitud integreeritud GPU-de (AMD, Apple, ARM, Intel, Qualcomm) ja eraldiseisvate NVIDIA kaardiga. Selgub, et integreeritud GPU-d Intel ja AMD sisse l\u00fclitavad alati graafiliste andmete tihendamise, isegi kui rakendus ei soovi sellist optimeerimist. Tihendamise t\u00f5ttu korreleeruvad DRAM-i liiklus ja m\u00e4lukaalu koormus t\u00f6\u00f6deldud andmete iseloomuga, mida saab taastada piksel-piksel kaudu k\u00fclgkanalite anal\u00fc\u00fcsi abil. <\/p>\n

Meetod on piisavalt aeglane. N\u00e4iteks AMD Ryzen 7 4800U integreeritud GPU-s\u00fcsteemis kestis r\u00fcnne, et m\u00e4\u00e4rata nime, millega kasutaja sisenes teises vahekaardis Wikipedia-sse, 30 minutit ja v\u00f5imaldas m\u00e4\u00e4rata pikslite sisu 97% t\u00e4psusega. Intel i7-8700 integreeritud GPU-s\u00fcsteemides kestis sarnane r\u00fcnne 215 minutit, t\u00e4psus 98%. <\/p>\n

R\u00fcnneteostamisel brauseri kaudu avatakse sihtveebisait ts\u00fckliliselt iframe'is, et algatada joonistamine. Kuvatud teabe m\u00e4\u00e4ramiseks muudetakse iframe'i v\u00e4ljund must-valgeks, millele rakendatakse SVG-filtrit, mis teostab j\u00e4rjestikuseid maskide pealeladumisi, mis toovad ja ei too suurt \u00fclem\u00e4\u00e4rasust tihendamise puhul. Kliendikati muutuva joonistamise ajahinnangu p\u00f5hjal eristatakse teatud positsioonis tumedate v\u00f5i heledate pikslite olemasolu. \u00dcldine pilt taastatakse j\u00e4rjestikuse piksel-piksel kontrollimise kaudu, kasutades sarnaseid maske.

\"GPU<\/center> <\/p>\n

GPU ja brauserite tootjad said probleemist teada m\u00e4rtsis, kuid \u00fckski tootja pole siiani parandust valmis saanud, kuna r\u00fcnnaku teostamine praktikas ei paista olevat ideaalsetes tingimustes t\u00f5en\u00e4oline ja probleem on rohkem teoreetilise huvi objekt. Google ei ole veel teinud otsust Chrome'i brauseri tasemel r\u00fcnnaku blokeerimise otstarbekuse kohta. Chrome on haavatav, kuna lubab laadida iframe'i teiselt saidilt ilma k\u00fcpsiste kustutamiseta, v\u00f5imaldab rakendada iframe'ile SVG-filtre ja delegeerib GPU-renderdusohtlikkuse. Firefox ja Safari ei ole haavatavad, kuna nad ei vasta nendele kriteeriumidele. R\u00fcnnak ei ole samuti rakendatav saitidele, mis keelavad iframe'i kaudu teistele saitidele integreerimise (n\u00e4iteks, seadistades HTTP-pealkirja X-Frame-Options v\u00e4\u00e4rtuseks \"SAMEORIGIN\" v\u00f5i \"DENY\", samuti juurdep\u00e4\u00e4sukonfiguratsioonidega Content-Security-Policy pealkirja kaudu).
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0421\u0428\u0410 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0432\u0438\u0437\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u043c\u0443\u044e \u0432 GPU. \u041f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u043c\u0435\u0442\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 GPU.zip, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0432\u044b\u0432\u043e\u0434\u0438\u043c\u0443\u044e \u043d\u0430 \u044d\u043a\u0440\u0430\u043d \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e. \u0421\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 web-\u0431\u0440\u0430\u0443\u0437\u0435\u0440, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043e, \u043a\u0430\u043a \u043e\u0442\u043a\u0440\u044b\u0442\u0430\u044f \u0432 Chrome \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f web-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":110361,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-110360","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47GPU r\u00fcnnak.zip, mis v\u00f5imaldab taastada GPU poolt joonistatud andmeid | ProHoster","description":"Mitme Ameerika \u00dchendriikide \u00fclikooli teadlaste r\u00fchm arendas v\u00e4lja uue r\u00fcnnetehnika, mis v\u00f5imaldab taastada GPU-s t\u00f6\u00f6tlenud visuaalset teavet.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/ataka-gpu-zip-pozvolyayushhaya-vossozdat-dannye-otrisovyvaemye-gpu","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 GPU.zip, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435, \u043e\u0442\u0440\u0438\u0441\u043e\u0432\u044b\u0432\u0430\u0435\u043c\u044b\u0435 GPU | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0421\u0428\u0410 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0432\u0438\u0437\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u043c\u0443\u044e \u0432 GPU.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/ataka-gpu-zip-pozvolyayushhaya-vossozdat-dannye-otrisovyvaemye-gpu","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-09-28T07:56:15+00:00","article:modified_time":"2023-09-28T07:56:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/110360","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=110360"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/110360\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/110361"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=110360"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=110360"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=110360"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}