{"id":33743,"date":"2019-10-31T21:54:27","date_gmt":"2019-10-31T18:54:27","guid":{"rendered":"https:\/\/prohoster.info\/blog\/intel-vam-ne-nuzhno-otklyuchat-hyper-threading-dlya-zashhity-ot-zombieload\/"},"modified":"2019-10-31T21:54:27","modified_gmt":"2019-10-31T18:54:27","slug":"intel-vam-ne-nuzhno-otklyuchat-hyper-threading-dlya-zashhity-ot-zombieload","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/intel-vam-ne-nuzhno-otklyuchat-hyper-threading-dlya-zashhity-ot-zombieload","title":{"rendered":"Intel: teilist ei pea Hyper-Threading'i v\u00e4lja l\u00fclitama ZombieLoad'i kaitseks","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kui p\u00e4rast eelnevaid<\/a><\/noindex> uudiseid<\/a><\/noindex> Kui te olete paanikas, et selgitada v\u00e4lja, kuidas keelata Intel Hyper-Threading, et v\u00e4ltida uue haavatavuse, mis on sarnane Spectre'ile ja Meltdown'ile, kasutamist, siis hingake s\u00fcgavalt sisse \u2014 Intel'i ametlikud juhised ei soovita seda enamikus olukordades teha.<\/p>\n

\"Intel:<\/p>\n

ZombieLoad on sarnane varasematele k\u00fclgkanali r\u00fcnnakutele, mis sunnivad Intel'i protsessoreid avama juurdep\u00e4\u00e4su potentsiaalselt konfidentsiaalsele teabele, mis tavaliselt on isoleeritud ning k\u00e4tte saadav ainult rakendusi kasutades. Turvauuringud on varasemalt teatanud, et see haavatavus esineb enamikul Intel'i kiipidest ning seda saab kasutada Windowsis, MacOS-is ja Linuxis.<\/p>\n

\"Intel:<\/p>\n

Intel ei n\u00f5ustu sellega, kui t\u00f5siseks risk ZombieLoad'i hinnatakse. Ettev\u00f5te otsustas lisada ZombieLoad'ile uue nime \u2014 Mikroarhitekturaalne Andmevalik (MDS), mis k\u00f5lab palju v\u00e4hem hirmutavalt kui viide mingitele zombidele.<\/p>\n

<\/center><\/p>\n

\u201eMDS haavatavus p\u00f5hineb andmete valmisel, mis tilgub v\u00e4lja v\u00e4ikestest struktuuridest CPU-s kohaliku k\u00fclgkanali spekulatiivse t\u00e4itmise kasutamisel,\u201c selgitavad ettev\u00f5ttes. \u201eMDS-i tegelik rakendamine on v\u00e4ga keeruline. Isegi haavatavus ei paku kurjategijale v\u00f5imalust valida, milliseid andmeid ta tahab saada.\u201c<\/p>\n

\u201eMDS on paljus meie viimaste Intel Core 8. ja 9. p\u00f5lvkonna protsessorites ning Intel Xeon Scalable teise p\u00f5lvkonna protsessorite perede puhul riistvara tasandil juba k\u00f5rvaldatud,\u201c \u00f6eldakse ettev\u00f5tte teates. \u201eMuid m\u00f5jutatud tooteid saab ohutuse riski v\u00e4hendamiseks ajakohastada koos vastavate operatsioonis\u00fcsteemi ja h\u00fcperviisori tarkvara v\u00e4rskendustega, mis on saadaval alates t\u00e4nasest. Oleme esitanud rohkem teavet<\/a><\/noindex> oma veebisaidil ja j\u00e4tkame k\u00f5igi \u00fcleskutset, et hoida oma s\u00fcsteemid ajakohased, kuna see on \u00fcks parimaid meetodeid turvalisuse tagamiseks.\u201c<\/p>\n

\"Intel:<\/p>\n

Intel'i esindajad m\u00e4rkisid ka, et ZombieLoad'i uurimisr\u00fchm t\u00f6\u00f6tas koos ettev\u00f5tte ja teiste arvutit\u00f6\u00f6stuse spetsialistidega, et haavatavus enne avalikustamist k\u00f5rvaldada. \u201eTahame t\u00e4nada teadlasi, kes koos meiega t\u00f6\u00f6tasid, ja meie t\u00f6\u00f6stuspartnerite panust selle probleemi koordineeritud lahendusse.\u201c<\/p>\n

Kuidas on lood Hyper-Threading'uga?<\/strong><\/p>\n

Intel teatas, et Hyper-Threading'i keelamine ei ole PC kasutajatele kohustuslik ega ainus valik. Tegelikult \u00fctleb Intel, et iga klient otsustab ise, mida teha. Kui te ei saa garanteerida, et teie tarkvara on turvaline, siis jah, t\u00f5en\u00e4oliselt on Hyper-Threading'i keelamine hea m\u00f5te. Kui tarkvara on saadud ainult Microsofti poest, IT-osakonnast v\u00f5i mingitest usaldusv\u00e4\u00e4rsetest allikatest, siis t\u00f5en\u00e4oliselt v\u00f5ite j\u00e4tkata Hyper-Threading'i kasutamist. K\u00f5ik s\u00f5ltub t\u00f5eliselt sellest, kui palju te oma turvalisuse p\u00e4rast muretsete.<\/p>\n

\u201eKuna tegurid erinevad m\u00e4rgatavalt erinevatel klientidel, ei soovita Intel Hyper-Threading'i keelamist, kuna on oluline m\u00f5ista, et see ei ole ainus viis MDS-i kaitsmiseks ega kaitse \u00fcksi.\u201c<\/p>\n

Samal ajal erinevad operatsioonis\u00fcsteemide tootjate reaktsioonid \u00fcksteisest.<\/p>\n

Google v\u00e4ljastas Chrome OS-i jaoks paranduse, mis l\u00fclitab Chromebookidel Hyper-Threadingu vaikimisi v\u00e4lja. Inimesed, kes soovivad mitme niidiga tehnoloogiat uuesti sisse l\u00fclitada, saavad seda teha ise, m\u00e4rkis ettev\u00f5te.<\/p>\n

Apple v\u00e4ljastas MacOS Mojave jaoks uuenduse ja teatas, et ettev\u00f5tte kliendid, kes on eriti turvalisuse suhtes n\u00f5udlikud, saavad Hyper-Threadingu ise v\u00e4lja l\u00fclitada.<\/p>\n

Microsoft teatas, et on v\u00e4lja andnud plaastrid oma tarkvarale, et v\u00e4hendada MDS-i \u00e4ra kasutamise t\u00f5en\u00e4osust, kuid r\u00f5hutas ka, et kliendid peavad t\u00e4iendavalt saama p\u00fcsivara uuenduse oma arvutitootjatelt.<\/p>\n

Arvestades, et enamik ops\u00fcsteemide tarnijaid on otsustanud Hyper-Threading'i sisse j\u00e4tta, ei ole ZombieLoad oht ilmselt nii t\u00f5sine, nagu see veel p\u00e4ev tagasi tundus. Lisaks pole siiani teada \u00fchtegi juhtumit, kus seda haavatavust oleks reaalses r\u00fcnnakus kasutatud.<\/p>\n

Kuid h\u00fcbriidide kasutamine ilma Hyper-Threading'i tehnoloogia v\u00e4ljal\u00fclitamiseta ei v\u00e4henda Intel'i protsessorite j\u00f5udlust peaaegu \u00fcldse.<\/p>\n

\"Intel:<\/p>\n

Aga te ei usu, kui vaatate testitulemusi<\/a><\/noindex> Intel'i turvapaikade m\u00f5ju j\u00f5udlusele Hyper-Threading'i v\u00e4ljal\u00fclitamisel. Ettev\u00f5te kinnitab, et turvaparandused koos Hyper-Threading'i v\u00e4ljal\u00fclitamisega m\u00f5juvad j\u00f5udlusele kahtlaselt v\u00e4he.<\/p>\n

\"Intel:<\/p>\n

Portaal PCWorld<\/a><\/noindex> ma ei n\u00f5ustu kategooriliselt Inteliga, et Hyper-Threading'i v\u00e4ljal\u00fclitamisel ei ole mingit erilist probleemi, kuigi Intel n\u00e4itab oma dokumendis, et j\u00f5udlus ei ole praktiliselt muutunud. Probleem seisneb Intel'i testide kunstlikkuses, kui Hyper-Threading on v\u00e4lja l\u00fclitatud, kuna ettev\u00f5te ei ole testinud spetsiifilisi mitme niidi koormusi. Kui Intel oleks kasutanud Blender'i, Cinebench'i v\u00f5i muid teste, mis on m\u00f5eldud mitme s\u00fcdamiku ja mitme niidi toetuste jaoks, siis oleksime kohe n\u00e4inud j\u00f5udluse tohutut langust.<\/p>\n

Et r\u00f5hutada Hyper-Threading'i tehnoloogia t\u00e4htsust, v\u00f5ib lihtsalt vaadata Intel i9-9900K protsessoreid 500 dollari eest ja i7-9700K protsessoreid 375 dollari eest, mille peamine erinevus on just Hyper-Threading'i toetus. Hyper-Threading'i keelamine Intel'i protsessorites on tohutu l\u00f6\u00f6k k\u00f5igile, kellele on t\u00e4htis mitme p\u00f5ime j\u00f5udlus.<\/p>\n

Kuid uudised on head neile, kes kasutavad uusimaid Intel'i protsessoreid. Ettev\u00f5tte teatel on paljud tema viimaste 8. ja 9. p\u00f5lvkonna protsessorid juba saanud riistvaramikrokoodi parandused, seega ei pea i9-9900K omanikud muretsema Hyper-Threadingu v\u00e4ljal\u00fclitamise p\u00e4rast. ZombieLoad'i oht on ilmselt k\u00f5rgem vanemate protsessorite puhul. Nende s\u00fcsteemide omanikud peavad toetuma operatsioonis\u00fcsteemide ja tarkvara uuendustele, samuti kasutatavate viiruset\u00f5rje lahenduste t\u00f5hususele, et v\u00e4hendada pahavara ohtu. Tuletame meelde, et ei ole teada, et oleks toimunud \u00fchtegi r\u00fcnnakut, mis kasutaks ZombieLoad'i.<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
Allikas: 3dnews.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0415\u0441\u043b\u0438 \u043f\u043e\u0441\u043b\u0435 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u043d\u043e\u0432\u043e\u0441\u0442\u0435\u0439 \u043e ZombieLoad \u0432\u044b \u0432 \u043f\u0430\u043d\u0438\u043a\u0435 \u0432\u044b\u044f\u0441\u043d\u044f\u0435\u0442\u0435, \u043a\u0430\u043a \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u044e Intel Hyper-Threading, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u043e\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0445\u043e\u0436\u0435\u0439 \u043d\u0430 Spectre \u0438 Meltdown, \u0442\u043e \u0441\u0434\u0435\u043b\u0430\u0439\u0442\u0435 \u0433\u043b\u0443\u0431\u043e\u043a\u0438\u0439 \u0432\u044b\u0434\u043e\u0445 — \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e Intel \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043d\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0434\u0435\u043b\u0430\u0442\u044c \u044d\u0442\u043e \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0441\u043b\u0443\u0447\u0430\u0435\u0432. ZombieLoad \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u0430 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u043c \u0430\u0442\u0430\u043a\u0430\u043c \u043f\u043e «\u043f\u043e\u0431\u043e\u0447\u043d\u044b\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c» (\u0430\u043d\u0433\u043b. side-channel attack), \u0432\u044b\u043d\u0443\u0436\u0434\u0430\u044e\u0449\u0438\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b Intel \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0442\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25423,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-33743","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Intel: teil ei ole vaja ZombieLoad'i kaitseks Hyper-Threading'ut keelata | ProHoster","description":"Kui p\u00e4rast eelnevaid uudiseid ZombieLoad'i kohta olete paanikas ja proovite v\u00e4lja selgitada, kuidas keelata Intel Hyper-Threading, et ennetada uut haavatavust, mis sarnaneb Spectre'iga ja Meltdown'iga, siis tehke s\u00fcgav hinget\u00f5mme \u2014 Intel'i ametlik juhend ei soovita seda enamikul juhtudel teha. ZombieLoad on sarnane varasematele 'k\u00fclgkanali' r\u00fcnnakutele, sundides Intel'i protsessoreid avama","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/intel-vam-ne-nuzhno-otklyuchat-hyper-threading-dlya-zashhity-ot-zombieload","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Intel: \u0432\u0430\u043c \u043d\u0435 \u043d\u0443\u0436\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c Hyper-Threading \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 ZombieLoad | ProHoster","og:description":"\u0415\u0441\u043b\u0438 \u043f\u043e\u0441\u043b\u0435 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u043d\u043e\u0432\u043e\u0441\u0442\u0435\u0439 \u043e ZombieLoad \u0432\u044b \u0432 \u043f\u0430\u043d\u0438\u043a\u0435 \u0432\u044b\u044f\u0441\u043d\u044f\u0435\u0442\u0435, \u043a\u0430\u043a \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u044e Intel Hyper-Threading, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u043e\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0445\u043e\u0436\u0435\u0439 \u043d\u0430 Spectre \u0438 Meltdown, \u0442\u043e \u0441\u0434\u0435\u043b\u0430\u0439\u0442\u0435 \u0433\u043b\u0443\u0431\u043e\u043a\u0438\u0439 \u0432\u044b\u0434\u043e\u0445 \u2014 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e Intel \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043d\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0434\u0435\u043b\u0430\u0442\u044c \u044d\u0442\u043e \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0441\u043b\u0443\u0447\u0430\u0435\u0432. ZombieLoad \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u0430 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u043c \u0430\u0442\u0430\u043a\u0430\u043c \u043f\u043e \u00ab\u043f\u043e\u0431\u043e\u0447\u043d\u044b\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c\u00bb (\u0430\u043d\u0433\u043b. side-channel attack), \u0432\u044b\u043d\u0443\u0436\u0434\u0430\u044e\u0449\u0438\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b Intel \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0442\u044c","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/intel-vam-ne-nuzhno-otklyuchat-hyper-threading-dlya-zashhity-ot-zombieload","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:54:27+00:00","article:modified_time":"2019-10-31T18:54:27+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33743","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 16:31:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:34:12","updated":"2026-01-21 16:31:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/33743","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=33743"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/33743\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/25423"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=33743"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=33743"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=33743"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}