Google ebipụtala ọtụtụ ụdị nrigbu na-egosi ohere nke iji adịghị ike klaasị Specter mgbe ị na-eme koodu Javascript na ihe nchọgharị ahụ, na-agafe ụzọ nchebe agbakwunyere na mbụ. Enwere ike iji nrigbu mee ihe iji nweta ebe nchekwa nke usoro nhazi ọdịnaya weebụ na taabụ dị ugbu a. Iji nwalee ọrụ nke nrigbu ahụ, ewepụtara webụsaịtị leaky.page, ma tinye koodu na-akọwa mgbagha ọrụ ahụ na GitHub.
Emebere prototype a na-atụ aro iji wakpo sistemu na Intel Core i7-6500U processors na gburugburu ebe nwere Linux na Chrome 88. Iji jiri nrigbu maka gburugburu ndị ọzọ, achọrọ mgbanwe. Usoro nrigbu abụghị kpọmkwem maka ndị na-arụ ọrụ Intel - mgbe emezigharị kwesịrị ekwesị, ekwenyela na nrigbu ahụ na-arụ ọrụ na sistemụ na CPU sitere na ndị nrụpụta ndị ọzọ, gụnyere Apple M1 dabere na ụkpụrụ ụlọ ARM. Mgbe obere mgbanwe gasịrị, a na-arụkwa ọrụ ahụ na sistemụ arụmọrụ ndị ọzọ yana na ihe nchọgharị ndị ọzọ dabere na injin Chromium.
Na gburugburu ebe dabere na ọkọlọtọ Chrome 88 na Intel Skylake processors, ọ ga-ekwe omume ịwepụ data sitere na usoro maka ịhazi ọdịnaya weebụ na Chrome taabụ ugbu a (usoro ntụgharị) na ọsọ nke 1 kilobyte kwa sekọnd. Tụkwasị na nke a, e mepụtala ihe atụ ndị ọzọ, dịka ọmụmaatụ, nrigbu nke na-enye ohere, na ọnụ ahịa nke ibelata nkwụsi ike, ịbawanye ọnụego ntanye na 8kB/s mgbe ị na-eji arụmọrụ.now () ngụ oge na ihe ziri ezi nke 5 microseconds (0.005 milliseconds). ). A kwadokwara ụdị nke na-arụ ọrụ na ngụ oge ziri ezi nke otu millisekọnd, nke enwere ike iji hazie ịnweta ebe nchekwa nke usoro ọzọ na ọsọ nke ihe dịka 60 bytes kwa nkeji.
Koodu ngosi ebipụtara nwere akụkụ atọ. Akụkụ nke mbụ na-ahazi oge iji tụọ oge mmezu nke ọrụ achọrọ iji weghachi data fọdụrụ na cache processor n'ihi nhụsianya igbu nke ntuziaka CPU. Akụkụ nke abụọ na-ekpebi nhazi ebe nchekwa a na-eji mgbe ị na-ekenye usoro Javascript.
Akụkụ nke atọ na-erigbu ngwa ngwa Specter iji chọpụta ọdịnaya ebe nchekwa nke usoro dị ugbu a n'ihi imepụta ọnọdụ maka mmezu nke ụfọdụ arụrụ arụ, nsonaazụ nke a na-atụfu site na processor mgbe ikpebi amụma na-emezughị, mana akara nke A na-edobe ogbugbu na cache izugbe ma enwere ike iweghachi ya site na iji ụzọ maka ịchọpụta ọdịnaya nke cache site na ọwa ndị ọzọ na-enyocha mgbanwe na ohere ịnweta data echekwara na enweghị nchekwa.
Usoro nrigbu a na-atụ aro na-eme ka o kwe omume ime na-enweghị oge nkenke dị elu dị site na arụmọrụ.now () API, na enweghị nkwado maka ụdị SharedArrayBuffer, nke na-enye ohere ịmepụta arrays na ebe nchekwa nkekọrịta. Nrigbu a gụnyere ngwa Specter, nke na-ebute mkpochapụ koodu nke a na-achịkwa, yana onye nyocha leak nke ọwa n'akụkụ, nke na-achọpụta data echekwara enwetara n'oge a na-akọ nkọ.
A na-etinye ngwa ahụ site na iji usoro Javascript, nke a na-eme mgbalị iji nweta mpaghara na-abụghị ókèala nchekwa, na-emetụta ọnọdụ nke ngọngọ amụma alaka n'ihi ọnụnọ nke nleba anya nha nke onye nchịkọta agbakwunyere (processor na-arụ ọrụ nke ọma). ohere ahụ, na-ele anya n'ihu, ma na-atụgharị ala azụ mgbe ịlelechara). Iji nyochaa ọdịnaya nke cache n'okpuru ọnọdụ nke oge na-ezighi ezi, ewepụtala usoro nke na-eduhie atụmatụ ịchụpụ nke osisi-PLRU nke ejiri na processors wee na-enye ohere, site n'ịba ụba nke cycles, iji mụbaa ọdịiche dị na oge mgbe ị na-alọghachi. uru sitere na cache na mgbe enweghị uru na cache.
Achọpụtara na Google bipụtara ihe nleba anya nke nrigbu ahụ iji gosipụta ike ịwakpo site na iji adịghị ike klaasị Specter na ịgba ndị mmepe weebụ ume iji usoro na-ebelata ihe egwu dị na mwakpo dị otú ahụ. N'otu oge ahụ, Google kwenyere na na-enweghị nnukwu nrụpụta nke ihe atụ a tụrụ aro, ọ gaghị ekwe omume ịmepụta nrigbu zuru ụwa ọnụ nke dị njikere ọ bụghị naanị maka ngosi, kamakwa maka iji ya mee ihe.
Iji belata ihe egwu dị na ya, a na-agba ndị nwe saịtị ume ka ha jiri akwụkwọ nkụnye eji isi mee n'oge na-adịbeghị anya Cross-Origin Opener Policy (COOP), Cross-Origin Embedder Policy (COEP), Cross-Origin Resource Policy (CORP), Fetch Metadata Request, X-Frame- Nhọrọ, X -Ọdịnaya-Ụdị-Nhọrọ na Otu Kuki. Usoro ndị a anaghị echebe ozugbo megide mwakpo, mana ha na-enye gị ohere ikewapụ data saịtị site na ịwepu n'ime usoro nke enwere ike igbu koodu Javascript nke onye mwakpo ahụ (nhichapụ ahụ sitere na ebe nchekwa nke usoro dị ugbu a, nke, na mgbakwunye na koodu onye mwakpo ahụ. , nwekwara ike hazie data sitere na saịtị ọzọ mepere n'otu taabụ ahụ). Isi echiche bụ ikewapụ ogbugbu nke koodu saịtị na usoro dị iche iche site na koodu ndị ọzọ natara site na isi mmalite ndị a na-apụghị ịdabere na ya, dịka ọmụmaatụ, gụnyere site na iframe.
isi: opennet.ru