{"id":99420,"date":"2021-03-13T16:22:51","date_gmt":"2021-03-13T14:22:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-prodemonstriroval-ekspluatacziyu-uyazvimostej-spectre-cherez-vypolnenie-javascript-v-brauzere"},"modified":"2021-03-13T16:22:51","modified_gmt":"2021-03-13T14:22:51","slug":"google-prodemonstriroval-ekspluatacziyu-uyazvimostej-spectre-cherez-vypolnenie-javascript-v-brauzere","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/google-prodemonstriroval-ekspluatacziyu-uyazvimostej-spectre-cherez-vypolnenie-javascript-v-brauzere","title":{"rendered":"Google demonstreeris Spectre haavatavuste kasutamist JavaScripti t\u00e4itmise kaudu brauseris","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Google'i ettev\u00f5te avaldas mitu protot\u00fc\u00fcpi eksploitidest, mis n\u00e4itavad, et Spectre'i haavatavusi saab \u00e4ra kasutada JavaScripti koodi k\u00e4itamisega brauseris, m\u00f6\u00f6da minnes varasemalt lisatud kaitsemeetmetest. Eksploitid v\u00f5ivad olla kasutatud, et saada juurdep\u00e4\u00e4s protsessi m\u00e4lule, mis t\u00f6\u00f6tab veebisisu t\u00f6\u00f6tlemisega k\u00e4esolevas vahekaardis. Eksploidide t\u00f6\u00f6 testimiseks on k\u00e4ivitatud leht leaky.page, ja kood loogika kirjeldusega on paigutatud GitHubi. <\/p>\n

\u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0439 \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f \u0440\u0430\u0441\u0441\u0447\u0438\u0442\u0430\u043d \u043d\u0430 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u043c\u0438 Intel Core i7-6500U \u0432 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0441 Linux \u0438 Chrome 88. \u0414\u043b\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u0434\u043b\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0439 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439. \u041c\u0435\u0442\u043e\u0434 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u0435\u043d \u0434\u043b\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel — \u043f\u043e\u0441\u043b\u0435 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u0430\u0434\u0430\u043f\u0442\u0430\u0446\u0438\u0438 \u0431\u044b\u043b\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u0440\u0430\u0431\u043e\u0442\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0441 CPU \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Apple M1 \u043d\u0430 \u0431\u0430\u0437\u0435 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b ARM. \u041f\u043e\u0441\u043b\u0435 \u043d\u0435\u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u0435\u043d \u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0438 \u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u0445 \u043d\u0430 \u0431\u0430\u0437\u0435 \u0434\u0432\u0438\u0436\u043a\u0430 Chromium. <\/p>\n

Tavalise Chrome 88 ja Intel Skylake'i protsessoritega keskkonnas \u00f5nnestus saavutada andmete leke praeguse Chrome'i vahekaardi veebisisu t\u00f6\u00f6tlemise protsessist (renderer process) kiirusel 1 kilobait sekundis. T\u00e4iendavalt arendati v\u00e4lja alternatiive protot\u00fc\u00fcbid, n\u00e4iteks eksploidi, mis lubab stabiilsuse v\u00e4henemise hindade juures suurendada leke kiiruseni 8kB\/s, kasutades performance.now() taimerit, mille t\u00e4psus on 5 mikrosekundit (0.005 millisekundit). Samuti on ette valmistatud variant, mis t\u00f6\u00f6tab taimeri t\u00e4psusega \u00fches millisekundis, mida saab kasutada juurdep\u00e4\u00e4su korraldamiseks teise protsessi m\u00e4lule kiirusel umbes 60 baiti sekundis. <\/p>\n

Avaldatud demonstreerimiskood koosneb kolmest osast. Esimene osa kalibreerib taimerit, et hinnata operatsioonide teostamise aega, mis on vajalik CPU spetsiifiliste juhiste tulemusena protsessori vahem\u00e4lus j\u00e4\u00e4nud andmete taastamiseks. Teine osa m\u00e4\u00e4rab kindlaks m\u00e4lukorra, mida kasutatakse JavaScripti massiivi paigutamisel. <\/p>\n

Kolmas osa rakendab Spectre haavatavust m\u00e4lu sisu m\u00e4\u00e4ramiseks praeguses protsessis, luues tingimused teatud toimingute spekulatiivseks elluviimiseks. Need toimingud k\u00f5rvaldatakse protsessori poolt p\u00e4rast eba\u00f5nnestunud prognoosi tuvastamist, kuid t\u00e4itmise j\u00e4ljed j\u00e4\u00e4vad \u00fcldisesse vahem\u00e4llu ja v\u00f5ivad olla taastatud vahem\u00e4lu sisu m\u00e4\u00e4ramise meetodite abil, mis anal\u00fc\u00fcsivad juurdep\u00e4\u00e4suaja muutusi vahem\u00e4lus ja mitte vahem\u00e4lus olevatele andmetele. <\/p>\n

Pakutud ekspluatatsiooni tehnika v\u00f5imaldab m\u00f6\u00f6da minna t\u00e4psetest ajastajatest, mis on saadaval l\u00e4bi API performance.now(), ja ilma SharedArrayBuffer t\u00fc\u00fcbi toeta, mis v\u00f5imaldab luua massiive jagatud m\u00e4lu s\u00fcsteemis. Eksploitatsioon sisaldab Spectre m\u00e4ssavat gadget\u2019i, mis kutsub esile juhitava spekulatiivse koodi t\u00e4itmise, ja k\u00fclgkanali lekke anal\u00fcsaatorit, mis m\u00e4\u00e4rab vahem\u00e4llu sisenenud andmed spekulatiivse t\u00e4itmise k\u00e4igus. <\/p>\n

Gadget on teostatud JavaScripti massiivi abil, mille kaudu \u00fcritatakse juurde p\u00e4\u00e4seda m\u00e4luaadressile v\u00e4ljaspool puhvri piire, mis m\u00f5jutab \u00fcleminekute ennustamise ploki seisundit, kuna kompilaator on lisanud puhvri suuruse kontrolli (protsessor t\u00e4idab spekulatiivselt p\u00f6\u00f6rdumist, kuid t\u00fchistab oleku p\u00e4rast kontrollimist). Vahem\u00e4lu sisu anal\u00fc\u00fcsimiseks, kus ajastamise t\u00e4psus on ebapiisav, on pakutud meetod, mis petab protsessorite kasutatavat Tree-PLRU vahem\u00e4lu andmete eemaldamise strateegiat ning v\u00f5imaldab m\u00e4rkimisv\u00e4\u00e4rselt suurendada erinevust vahem\u00e4lus oleva ja vahem\u00e4lust puudumise v\u00e4\u00e4rtuse tagastamise ajal. <\/p>\n

Tuleb m\u00e4rkida, et Google on avaldanud eksploitatsiooni protot\u00fc\u00fcbi, et n\u00e4idata m\u00e4rkamatute r\u00fcnnakute realismi Spectre klassi haavatavuste kasutamise kaudu ning julgustada veebi arendajaid rakendama tehnikaid, mis v\u00e4hendavad selliste r\u00fcnnakute riske. Samuti usub Google, et ilma m\u00e4rkimisv\u00e4\u00e4rse protot\u00fc\u00fcbi \u00fcmbertegemiseta ei ole v\u00f5imalik luua \u00fcldkasutatavaid eksploitatsioone, mis oleksid valmis mitte ainult demonstreerimiseks, vaid ka laialdaseks kasutamiseks. <\/p>\n

Veebilehtede omanikele soovitatakse v\u00e4hendada riski, kasutades hiljuti rakendatud Cross-Origin Opener Policy (COOP), Cross-Origin Embedder Policy (COEP), Cross-Origin Resource Policy (CORP), Fetch Metadata Request, X-Frame-Options, X-Content-Type-Options ja SameSite Cookie. Need mehhanismid ei paku otsest kaitset r\u00fcnnakute eest, kuid v\u00f5imaldavad isoleerida veebisaidi andmed lekete eest protsessides, kus v\u00f5ib k\u00e4ivituda r\u00fcndaja JavaScripti kood (lekkeid toimub jooksvast protsessist, kus r\u00fcndaja koodiga v\u00f5ivad samal ajal t\u00f6\u00f6tada ka teise saidi andmed, mis avati samas vahekaardis). Peamine idee on eraldada erinevates protsessides saidi koodi k\u00e4itamine usaldusv\u00e4\u00e4rsetest allikatest saadud kolmanda osapoole koodist, n\u00e4iteks iframe'i kaudu laaditud koodist.

\r\n \"M\u00e4ngi\r\n
<\/div>\r\n <\/div><\/center>
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u043e\u0432 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432, \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043b\u0430\u0441\u0441\u0430 Spectre \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 JavaScript-\u043a\u043e\u0434\u0430 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u0432 \u043e\u0431\u0445\u043e\u0434 \u0440\u0430\u043d\u0435\u0435 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b. \u042d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0449\u0435\u0433\u043e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 web-\u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u0432 \u0442\u0435\u043a\u0443\u0449\u0435\u0439 \u0432\u043a\u043b\u0430\u0434\u043a\u0435. \u0414\u043b\u044f \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0430\u0439\u0442 leaky.page, \u0430 \u043a\u043e\u0434 \u0441 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435\u043c \u043b\u043e\u0433\u0438\u043a\u0438 \u0440\u0430\u0431\u043e\u0442\u0430 \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d \u043d\u0430 GitHub. \u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-99420","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google demonstreeris Spectre rikkeid JavaScripti t\u00e4itmise kaudu brauseris | ProHoster","description":"Ettev\u00f5te Google avaldas mitu protot\u00fc\u00fcpi eksploitidest, mis n\u00e4itavad v\u00f5imalust ekspluateerida Spectre rikkeid JavaScripti koodi t\u00e4itmise kaudu brauseris, m\u00f6\u00f6da minnes varasemalt rakendatud kaitsemeetoditest.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/google-prodemonstriroval-ekspluatacziyu-uyazvimostej-spectre-cherez-vypolnenie-javascript-v-brauzere","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Spectre \u0447\u0435\u0440\u0435\u0437 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 JavaScript \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u043e\u0432 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432, \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043b\u0430\u0441\u0441\u0430 Spectre \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 JavaScript-\u043a\u043e\u0434\u0430 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u0432 \u043e\u0431\u0445\u043e\u0434 \u0440\u0430\u043d\u0435\u0435 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/google-prodemonstriroval-ekspluatacziyu-uyazvimostej-spectre-cherez-vypolnenie-javascript-v-brauzere","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-03-13T14:22:51+00:00","article:modified_time":"2021-03-13T14:22:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"99420","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-13 14:24:19","updated":"2022-10-02 07:42:08","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/99420","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=99420"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/99420\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=99420"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=99420"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=99420"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}