{"id":33743,"date":"2019-10-31T21:54:27","date_gmt":"2019-10-31T18:54:27","guid":{"rendered":"https:\/\/prohoster.info\/blog\/intel-vam-ne-nuzhno-otklyuchat-hyper-threading-dlya-zashhity-ot-zombieload\/"},"modified":"2019-10-31T21:54:27","modified_gmt":"2019-10-31T18:54:27","slug":"intel-vam-ne-nuzhno-otklyuchat-hyper-threading-dlya-zashhity-ot-zombieload","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/intel-vam-ne-nuzhno-otklyuchat-hyper-threading-dlya-zashhity-ot-zombieload","title":{"rendered":"Intel: Te ei pea Hyper-Threadingit ZombieLoad'i vastu kaitsmiseks v\u00e4lja l\u00fclitama","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kui te p\u00e4rast eelnevatest<\/a><\/noindex> uudiseid<\/a><\/noindex> Kui olete ZombieLoad'i t\u00f5ttu paanikas ja proovite v\u00e4lja selgitada, kuidas keelata Intel Hyper-Threading funktsioon, et v\u00e4ltida uue haavatavuse, mis sarnaneb Spectre'ile ja Meltdown'ile, kasutamist, siis hingake s\u00fcgavalt sisse \u2014 Intel'i ametlik juhend ei soovita seda enamikul juhtudel teha.<\/p>\n

\"Intel:<\/p>\n

ZombieLoad sarnaneb varasemate \"k\u00fclgkanali\" r\u00fcnnakutega, mis sunnivad Intel'i protsessoreid avama ligip\u00e4\u00e4su potentsiaalselt konfidentsiaalsele teabele, mis on tavaliselt isoleeritud ja k\u00e4ttesaadav ainult selle kasutavatele rakendustele. Turvauuringute teadlased on eelnevalt teatanud, et see haavatavus on olemas enamikus Intel'i kiipides ja seda saab kasutada Windowsis, MacOS-s ja Linuxis.<\/p>\n

\"Intel:<\/p>\n

Intel ei n\u00f5ustu selle t\u00f5sidusega, kuidas ZombieLoad'i riski hinnatakse. Ettev\u00f5te otsustas isegi nimetada ZombieLoad'i uuesti \u2014 Mikroohtarkitekturaalne Andmete Valimine (MDS). N\u00f5ustuge, et see k\u00f5lab palju v\u00e4hem hirmutavalt kui viide zombidele.<\/p>\n

<\/center><\/p>\n

\u201eMDS haavatavus p\u00f5hineb andmete valimisel, mis lekivad protsessoris olevatest v\u00e4ikestest struktuuridest, kui kasutatakse kohalikult teostatavat k\u00fclgkanalit spekulatiivse t\u00e4itmise ajal,\u201d selgitavad ettev\u00f5ttes. \u201eMDS-i praktiline \u00e4ra kasutamine on v\u00e4ga keeruline. Isegi haavatavus ei anna r\u00fcndajale v\u00f5imalust valida neid andmeid, mida ta soovib saada.\u201d<\/p>\n

\u201eMDS on juba paljudes meie uusimas Intel Core 8. ja 9. p\u00f5lvkonna protsessorites ning teise p\u00f5lvkonna Intel Xeon Scalable protsessorites riistvaraliselt k\u00f5rvaldatud,\u201d \u00f6eldakse ettev\u00f5tte teates. \u201eMuude m\u00f5jutatud toodete puhul on riskide v\u00e4hendamise meetmed saadaval koos mikrokoodi uuendustega ja vastavate operatsioonis\u00fcsteemi ja h\u00fcperviisori tarkvara uuendustega, mis on saadaval t\u00e4nasest. Oleme rohkem teavet<\/a><\/noindex> oma veebisaidil ja j\u00e4tkame \u00fcleskutset k\u00f5igile hoida oma s\u00fcsteemid ajakohastatud, kuna see on \u00fcks parimaid viise turvalisuse tagamiseks.\u201d<\/p>\n

\"Intel:<\/p>\n

Intel esindajad m\u00e4rkisid ka, et ZombieLoad'i uurimisgrupp t\u00f6\u00f6tas koos ettev\u00f5tte ja teiste PC-t\u00f6\u00f6stuse spetsialistidega, et k\u00f5rvaldada haavatavus enne, kui see sai avalikkusele teada. \u201eSoovime t\u00e4nada uurijaid, kes t\u00f6\u00f6tasid meiega, ja meie t\u00f6\u00f6stuse partnereid nende panuse eest selle probleemi koordineeritud lahendamisse,\u201d<\/p>\n

Kuidas on siis Hyper-Threadingiga?<\/strong><\/p>\n

Intel teatas, et Hyper-Threadingu keelamine ei ole PC kasutajatele kohustuslik ega ainu\u00fcksi variant. Tegelikult \u00fctleb Intel, et iga klient otsustab iseseisvalt, mida teha. Kui te ei suuda tagada oma tarkvara turvalisust, siis jah, t\u00f5en\u00e4oliselt on Hyper-Threadingu keelamine hea m\u00f5te. Kui aga tarkvara on saadud Microsofti poest, IT-osakonnast v\u00f5i lihtsalt usaldusv\u00e4\u00e4rsetest allikatest, siis t\u00f5en\u00e4oliselt v\u00f5ite Hyper-Threadingu sisse j\u00e4tta. K\u00f5ik s\u00f5ltub sellest, kui palju te oma turvalisuse p\u00e4rast muretsete.<\/p>\n

\u201eKuna tegurid varieeruvad m\u00e4rgatavalt klientide l\u00f5ikes, ei soovita Intel Hyper-Threadingu keelata, kuna on oluline m\u00f5ista, et see ei ole ainu\u00fcksi meetod MDS-i kaitseks ning ei paku kaitset iseenesest,\u201d seisab ettev\u00f5tte avalduses.<\/p>\n

Samuti erinevad operatsioonis\u00fcsteemide tootjate reaktsioonid \u00fcksteisest.<\/p>\n

Google vabastas Chrome OS-le paranduse, mis keelab vaikimisi Hyper-Threadingu Chromebookidele. Inimesed, kes soovivad multitehingutehnoloogia uuesti aktiveerida, saavad seda ise teha, arvavad nad ettev\u00f5ttes.<\/p>\n

Apple vabastas MacOS Mojave jaoks uuenduse ja teatas, et ettev\u00f5tte kliendid, kes on eriti turvalisuse suhtes n\u00f5udlikud, saavad Hyper-Threadingu ise v\u00e4lja l\u00fclitada.<\/p>\n

Microsoft teatas, et on oma tarkvarale v\u00e4lja andnud plaastrid MDSi kasutamise t\u00f5en\u00e4osuse v\u00e4hendamiseks, kuid m\u00e4rkis ka, et kliendid peaksid oma PC tootjatelt saama t\u00e4iendavad p\u00fcsivara uuendused.<\/p>\n

Kuna enamik operatsioonis\u00fcsteemide tarnijaid on otsustanud j\u00e4tta Hyper-Threading sisse l\u00fclitatuna, ei ole ZombieLoad'i oht ilmtingimata nii t\u00f5sine, nagu see tundus veel p\u00e4eva tagasi. Lisaks pole siiani \u00fchtegi tuntud juhtumit, kus haavatavust oleks reaalses r\u00fcnnakus kasutatud.<\/p>\n

Samas, pat\u0161ide kasutamine ilma Hyper-Threading'i tehnoloogia v\u00e4ljal\u00fclitamiseta v\u00e4hendab Intel'i protsessorite j\u00f5udlust peaaegu \u00fcldse.<\/p>\n

\"Intel:<\/p>\n

Kuid te ei usu, kui vaatate testimise tulemusi<\/a><\/noindex> Intel'i turvapat\u0161ide m\u00f5ju j\u00f5udlusele, kui Hyper-Threading on v\u00e4lja l\u00fclitatud. Ettev\u00f5te v\u00e4idab, et turvapaigad koos Hyper-Threading'i v\u00e4ljal\u00fclitamisega m\u00f5jutavad j\u00f5udlust kahtlaselt v\u00e4he.<\/p>\n

\"Intel:<\/p>\n

Portaal PCWorld<\/a><\/noindex> ei n\u00f5ustu kategooriliselt Intel'i arvamusega, et Hyper-Threading'i v\u00e4ljal\u00fclitamine ei ole suur probleem, kuigi Intel demonstreerib oma dokumendis, et j\u00f5udlus ei ole praktiliselt muutunud. Probleem seisneb Intel'i testide kunstlikkuses Hyper-Threading'i v\u00e4ljal\u00fclitamisel, kuna ettev\u00f5te ei ole testinud spetsiifilisi mitme l\u00f5ime koormusi. Kui Intel oleks teinud Blender'i, Cinebench'i v\u00f5i teiste testide, mis on suunatud mitme s\u00fcdamiku ja mitme l\u00f5ime protsessoritele, oleksime n\u00e4inud suurt j\u00f5udluse langust.<\/p>\n

Et r\u00f5hutada, kui oluline on Hyper-Threadingu tehnoloogia, v\u00f5ib lihtsalt vaadata Intel i9-9900K protsessoreid hinnaga 500 dollarit ja i7-9700K protsessoreid hinnaga 375 dollarit, mille olulisem erinevus on just Hyper-Threadingu toetuses. Hyper-Threadingu keelamine Intel protsessoritel on tohutu l\u00f6\u00f6k k\u00f5igile, kellele on oluline mitme l\u00f5imelise j\u00f5udluse saavutamine.<\/p>\n

Kuid on ka hea uudis neile, kes kasutavad uusimaid Intel'i protsessoreid. Ettev\u00f5tte s\u00f5nul on paljudel nende viimastel 8. ja 9. p\u00f5lvkonna protsessoritel juba olemas riistvara mikrokoodi parandused, seega ei ole i9-9900K omanikel mingeid p\u00f5hjuseid Hyper-Threading'i v\u00e4ljal\u00fclitamiseks. ZombieLoad'i oht on ilmselgelt suurem vanemate protsessorite puhul. Nende s\u00fcsteemide omanikud peavad toetuma operatsioonis\u00fcsteemi ja tarkvara uuendustele, samuti nende kasutatavate viiruset\u00f5rje lahenduste t\u00f5hususele, et v\u00e4hendada pahavara saamise riski. Ja tuletame veel kord meelde, et siiani pole teavet \u00fchegi r\u00fcnnaku kohta, kus oleks kasutatud ZombieLoad'i.<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
Allikas: 3dnews.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0415\u0441\u043b\u0438 \u043f\u043e\u0441\u043b\u0435 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u043d\u043e\u0432\u043e\u0441\u0442\u0435\u0439 \u043e ZombieLoad \u0432\u044b \u0432 \u043f\u0430\u043d\u0438\u043a\u0435 \u0432\u044b\u044f\u0441\u043d\u044f\u0435\u0442\u0435, \u043a\u0430\u043a \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u044e Intel Hyper-Threading, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u043e\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0445\u043e\u0436\u0435\u0439 \u043d\u0430 Spectre \u0438 Meltdown, \u0442\u043e \u0441\u0434\u0435\u043b\u0430\u0439\u0442\u0435 \u0433\u043b\u0443\u0431\u043e\u043a\u0438\u0439 \u0432\u044b\u0434\u043e\u0445 — \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e Intel \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043d\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0434\u0435\u043b\u0430\u0442\u044c \u044d\u0442\u043e \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0441\u043b\u0443\u0447\u0430\u0435\u0432. ZombieLoad \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u0430 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u043c \u0430\u0442\u0430\u043a\u0430\u043c \u043f\u043e «\u043f\u043e\u0431\u043e\u0447\u043d\u044b\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c» (\u0430\u043d\u0433\u043b. side-channel attack), \u0432\u044b\u043d\u0443\u0436\u0434\u0430\u044e\u0449\u0438\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b Intel \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0442\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25423,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-33743","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Intel: te ei pea Hyper-Threadingut ZombieLoadi kaitseks v\u00e4lja l\u00fclitama | ProHoster","description":"Kui p\u00e4rast eelmisi uudiseid ZombieLoadi kohta olete paanikas ja \u00fcritate v\u00e4lja selgitada, kuidas.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/intel-vam-ne-nuzhno-otklyuchat-hyper-threading-dlya-zashhity-ot-zombieload","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Intel: \u0432\u0430\u043c \u043d\u0435 \u043d\u0443\u0436\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c Hyper-Threading \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 ZombieLoad | ProHoster","og:description":"\u0415\u0441\u043b\u0438 \u043f\u043e\u0441\u043b\u0435 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u043d\u043e\u0432\u043e\u0441\u0442\u0435\u0439 \u043e ZombieLoad \u0432\u044b \u0432 \u043f\u0430\u043d\u0438\u043a\u0435 \u0432\u044b\u044f\u0441\u043d\u044f\u0435\u0442\u0435, \u043a\u0430\u043a.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/intel-vam-ne-nuzhno-otklyuchat-hyper-threading-dlya-zashhity-ot-zombieload","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:54:27+00:00","article:modified_time":"2019-10-31T18:54:27+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33743","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 16:31:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:34:12","updated":"2026-01-21 16:31:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/33743","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=33743"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/33743\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/25423"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=33743"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=33743"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=33743"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}