{"id":33686,"date":"2019-10-31T21:54:10","date_gmt":"2019-10-31T18:54:10","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novaya-uyazvimost-zatragivaet-prakticheski-kazhdyj-chip-intel-proizvedyonnyj-s-2011-goda\/"},"modified":"2019-10-31T21:54:10","modified_gmt":"2019-10-31T18:54:10","slug":"novaya-uyazvimost-zatragivaet-prakticheski-kazhdyj-chip-intel-proizvedyonnyj-s-2011-goda","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/novaya-uyazvimost-zatragivaet-prakticheski-kazhdyj-chip-intel-proizvedyonnyj-s-2011-goda","title":{"rendered":"Uus haavatavus m\u00f5jutab praktiliselt iga Intel'i kiipi, mis on toodetud alates 2011. aastast","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Infotehnoloogia spetsialistid on avastanud uue haavatavuse Intel'i kiipides, mida saab kasutada konfidentsiaalse teabe varastamiseks otse protsessorist. Uuringud nimetasid seda \"ZombieLoad\". ZombieLoad on k\u00f5rvalekalde r\u00fcnnak, mis on suunatud Intel'i kiipidele, v\u00f5imaldades h\u00e4kkeritel kasutada nende arhitektuuri puudust, et hankida juhuslikke andmeid. Siiski ei v\u00f5imalda see sisestada ja k\u00e4ivitada juhuslikku pahavara, mist\u00f5ttu ei saa seda kasutada ainus t\u00f6\u00f6riistana kaugete arvutite sissetungi ja h\u00e4kkimise jaoks.<\/p>\n

\"Uus<\/p>\n

Intel'i teatel koosneb ZombieLoad neljast vigastusest nende kiipide mikrokoodis, millest uurijad teatasid ettev\u00f5ttele vaid kuu tagasi. Haavatavused m\u00f5jutavad praktiliselt k\u00f5iki Intel'i kiipidega arvuteid, mis on v\u00e4lja antud alates 2011. aastast. ARM'i ja AMD kiibid ei ole selle haavatavuse suhtes altid.<\/p>\n

ZombieLoad meenutab varasemaid tuntud r\u00fcnnakuid Meltdown ja Spectre, mis kasutasid spekulatiivse (eelneva) k\u00e4su t\u00e4itmise s\u00fcsteemi viga. Spekulatiivne t\u00e4itmine aitab protsessoritel teatud m\u00e4\u00e4ral ennustada, mida rakendus v\u00f5i operatsioonis\u00fcsteem v\u00f5ib l\u00e4hitulevikus vajada, v\u00f5imaldades rakenduse t\u00f6\u00f6tada kiiremini ja efektiivsemalt. Protsessor tagastab oma prognooside tulemused, kui need osutuvad \u00f5igeks, v\u00f5i t\u00fchistab t\u00e4itmise tulemused, kui ennustus on vale. Nii Meltdown kui ka Spectre kasutavad v\u00f5imalust, et kuritarvitada seda funktsionaalsust ja p\u00e4\u00e4seda otsesele juurdep\u00e4\u00e4sule protsessori k\u00e4itatavale teabele.<\/p>\n

<\/center><\/p>\n

ZombieLoad t\u00f5lgitakse kui \"zombi laadimine\", mis osaliselt seletab haavatavuse mehhanismi. R\u00fcnnaku k\u00e4igus suunatakse protsessorisse nii palju andmeid, et see ei suuda neid \u00f5igesti t\u00f6\u00f6delda, sundides protsessorit k\u00fcsima abi mikrokoodilt, et v\u00e4ltida s\u00fcsteemi kokkuvarisemist. Tavaliselt saavad rakendused n\u00e4ha ainult oma andmeid, kuid protsessori \u00fclekoormusest tingitud viga v\u00f5imaldab selle piiri \u00fcletada. Uuringud on teatanud, et ZombieLoad suudab hankida igasuguseid andmeid, mida protsessori tuumad kasutavad. Intel teatab, et mikrokoodi parandamine aitab puhastada protsessori puhverdamise protsessis, v\u00e4ltides rakenduste lugemist neile mittekohaseid andmeid.<\/p>\n

Videodemonstreerimisel n\u00e4itasid uurijad, et haavatavust saab kasutada selleks, et reaalajas teada saada, milliseid veebisaite inimene k\u00fclastab, kuid seda on samuti lihtne kasutada selliste andmete, nagu paroolid v\u00f5i makses\u00fcsteemide kasutajate ligip\u00e4\u00e4suv\u00f5tmed, k\u00e4tte saamiseks.<\/p>\n<\/p>\n

Nagu Meltdown ja Spectre, on ZombieLoad haavatavad mitte ainult PC-d ja s\u00fclearvutid, vaid ka pilveteenused. serverid<\/a>Haavatavust saab kasutada virtuaalmasinates, mis peaksid olema teistest virtuaals\u00fcsteemidest ja nende host-seadmest isoleeritud, et potentsiaalselt m\u00f6\u00f6da minna sellest isolatsioonist. Nii v\u00e4idab Daniel Gruss, \u00fcks uurijatest, kes avastas haavatavuse, et see suudab lugeda andmeid serveri protsessoritest sama h\u00e4sti nagu koduarvutites. See on potentsiaalselt t\u00f5sine probleem pilveteenustes, kus erinevate klientide virtuaalmasinad t\u00f6\u00f6tavad sama serveritehnika peal. Kuigi ZombieLoad r\u00fcnnakutest ei ole kunagi avalikult teatatud, ei saa uurijad v\u00e4listada, et need on v\u00f5inud juhtuda, kuna andmete vargused ei j\u00e4ta alati j\u00e4lgi.<\/p>\n

Mida see t\u00e4hendab tavakasutaja jaoks? Pole p\u00f5hjust paanikaks. See pole sugugi eksploit v\u00f5i null p\u00e4eva haavatavus, kus kurjategija v\u00f5ib teie arvuti hetkega \u00fcle v\u00f5tta. Gruss selgitab, et ZombieLoad'i rakendamine on \"kergem kui Spectre\", kuid \"keerulisem kui Meltdown\" \u2014 m\u00f5lemad n\u00f5uavad teatud oskuste ja j\u00f5upingutuste kogumit r\u00fcnnakus. Tegelikult, et ZombieLoad'i r\u00fcnnakut teostada, peate laadima nakatunud rakenduse ja k\u00e4ivitama selle, ainult siis aitab haavatavus kurjategijal allalaadida k\u00f5ik teie andmed. Sellegipoolest on olemas palju lihtsamaid viise arvuti h\u00e4kkimiseks ja nende varastamiseks.<\/p>\n

Korporatsioon Intel on juba v\u00e4lja andnud mikrokoodi haavatavate protsessorite parandamiseks, sealhulgas Intel Xeon'i, Intel Broadwell'i, Sandy Bridge'i, Skylake'i ja Haswell'i kiipide, samuti k\u00f5ikide Atom'i ja Knights'i protsessorite jaoks. Ka teised suured ettev\u00f5tted on v\u00e4ljastanud haavatavuse paranduse. Apple, Microsoft ja Google on samuti oma brauserile juba vastavad plaastrid v\u00e4lja andnud.<\/p>\n

Intervjuus TechCrunch'ile teatas Intel, et kiipide mikrokoodide uuendused, nagu ka varasemad plaastrid, m\u00f5jutavad protsessorite j\u00f5udlust. Inteli esindaja teatas, et enamik parandatud tarbijaseadmeid v\u00f5ib halvimal juhul kaotada 3% j\u00f5udlusest, ja andmekeskuste puhul v\u00f5ib langus olla kuni 9%. Kuid Inteli arvates ei toimu seda enamikus stsenaariumites m\u00e4rkimisv\u00e4\u00e4rselt.<\/p>\n

Kuid Apple'i insenerid ei ole Inteli arvamusega absoluutselt n\u00f5us, nad erakordselt lehelt<\/a><\/noindex> T\u00e4ieliku kaitse meetodi kohta «Microarchitectural Data Sampling» (ametlik nimetus ZombieLoad) v\u00e4idetakse, et haavatavuse t\u00e4ielikuks k\u00f5rvaldamiseks tuleb Intel'i protsessorites t\u00e4ielikult v\u00e4lja l\u00fclitada Hyper-Threading tehnoloogia, mis Apple'i spetsialistide testide kohaselt v\u00f5ib kasutusseadmete j\u00f5udlust teatud \u00fclesannetes alandada kuni 40%.<\/p>\n

Ei Intel ega Daniel koos oma meeskonnaga ei ole avaldanud koodi, mis rakendaks haavatavust, seega ei ole tavalisele kasutajale otsest ja kohest ohtu. Kiiresti v\u00e4lja antud plaastrid k\u00f5rvaldavad selle t\u00e4ielikult, kuid arvestades, et iga selline parandamine toob kasutajatele kaasa teatud j\u00f5udluskaotused, on Inteli suunas tekkinud m\u00f5ned k\u00fcsimused.<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
Allikas: 3dnews.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0447\u0438\u043f\u0430\u0445 Intel, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0438\u0437 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u0437\u0432\u0430\u043b\u0438 \u0435\u0451 «ZombieLoad». ZombieLoad — \u044d\u0442\u043e \u0430\u0442\u0430\u043a\u0430 \u043f\u043e\u0431\u043e\u0447\u043d\u043e\u0433\u043e \u0442\u0438\u043f\u0430, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0430\u044f \u043d\u0430 \u0447\u0438\u043f\u044b Intel, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0432 \u0438\u0445 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043d\u043e \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u043d\u0430 \u043d\u0435 \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25371,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-33686","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Uus haavatavus m\u00f5jutab praktiliselt k\u00f5iki Intel'i kiipe, mis on toodetud alates 2011. aastast | ProHoster","description":"Infoturbeedi spetsialistid avastasid uue haavatavuse Intel'i kiipides, mida saab kasutada konfidentsiaalse teabe varastamiseks otse protsessorist.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/novaya-uyazvimost-zatragivaet-prakticheski-kazhdyj-chip-intel-proizvedyonnyj-s-2011-goda","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043a\u0430\u0436\u0434\u044b\u0439 \u0447\u0438\u043f Intel, \u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0451\u043d\u043d\u044b\u0439 \u0441 2011 \u0433\u043e\u0434\u0430 | ProHoster","og:description":"\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0447\u0438\u043f\u0430\u0445 Intel, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0438\u0437 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/novaya-uyazvimost-zatragivaet-prakticheski-kazhdyj-chip-intel-proizvedyonnyj-s-2011-goda","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:54:10+00:00","article:modified_time":"2019-10-31T18:54:10+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33686","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:03:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:35:31","updated":"2026-02-09 17:03:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/33686","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=33686"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/33686\/revisions"}],"predecessor-version":[{"id":159073,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/33686\/revisions\/159073"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/25371"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=33686"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=33686"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=33686"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}