{"id":110360,"date":"2023-09-28T09:56:15","date_gmt":"2023-09-28T07:56:15","guid":{"rendered":"https:\/\/prohoster.info\/?p=110360"},"modified":"2023-09-28T09:56:15","modified_gmt":"2023-09-28T07:56:15","slug":"ataka-gpu-zip-pozvolyayushhaya-vossozdat-dannye-otrisovyvaemye-gpu","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/ataka-gpu-zip-pozvolyayushhaya-vossozdat-dannye-otrisovyvaemye-gpu","title":{"rendered":"GPU.zip, que permite recriar os dados renderizados pelo GPU","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Um grupo de pesquisadores de v\u00e1rias universidades dos EUA desenvolveu uma nova t\u00e9cnica de ataque via canais laterais, permitindo recriar informa\u00e7\u00f5es visuais processadas na GPU. Com o m\u00e9todo proposto, chamado GPU.zip, o atacante pode determinar as informa\u00e7\u00f5es exibidas na tela. Entre outras coisas, o ataque pode ser realizado atrav\u00e9s de um navegador web, demonstrando, por exemplo, como uma p\u00e1gina web maliciosa aberta no Chrome pode obter informa\u00e7\u00f5es sobre os pixels exibidos ao renderizar outra p\u00e1gina web aberta no mesmo navegador. <\/p>\n

A fonte da vazamento de informa\u00e7\u00f5es \u00e9 a otimiza\u00e7\u00e3o aplicada nas GPUs modernas, que garante a compress\u00e3o dos dados gr\u00e1ficos. O problema se manifesta ao usar compress\u00e3o em todas as GPUs integradas testadas (AMD, Apple, ARM, Intel, Qualcomm) e em placas de v\u00eddeo discretas da NVIDIA. Os pesquisadores descobriram que as GPUs integradas da Intel e AMD sempre ativam a compress\u00e3o de dados gr\u00e1ficos, mesmo que o aplicativo n\u00e3o solicite especificamente a aplica\u00e7\u00e3o dessa otimiza\u00e7\u00e3o. O uso da compress\u00e3o faz com que o tr\u00e1fego na DRAM e a carga no cache correlacionem-se com a natureza dos dados processados, que podem ser recriados pixel por pixel atrav\u00e9s da an\u00e1lise via canais laterais. <\/p>\n

O m\u00e9todo \u00e9 bastante lento; por exemplo, em um sistema com GPU integrada AMD Ryzen 7 4800U, o ataque para determinar o nome pelo qual o usu\u00e1rio entrou em outra aba do Wikipedia levou 30 minutos e permitiu identificar o conte\u00fado dos pixels com precis\u00e3o de 97%. Em sistemas com GPU integrada Intel i7-8700, um ataque semelhante levou 215 minutos com precis\u00e3o de 98%. <\/p>\n

Ao realizar um ataque atrav\u00e9s do navegador, o site alvo \u00e9 aberto ciclicamente em um iframe para iniciar a renderiza\u00e7\u00e3o. Para determinar as informa\u00e7\u00f5es exibidas, a sa\u00edda do iframe \u00e9 transformada em uma representa\u00e7\u00e3o em preto e branco, \u00e0 qual se aplica um filtro SVG, realizando sobreposi\u00e7\u00f5es sucessivas de m\u00e1scaras que introduzem e n\u00e3o introduzem grande redund\u00e2ncia durante a compress\u00e3o. Com base na avalia\u00e7\u00e3o da mudan\u00e7a no tempo de renderiza\u00e7\u00e3o de amostras de refer\u00eancia, \u00e9 destacado a presen\u00e7a de pixels escuros ou claros em uma determinada posi\u00e7\u00e3o. A imagem total \u00e9 recriada atrav\u00e9s de uma verifica\u00e7\u00e3o pixel por pixel usando essas m\u00e1scaras.

\"GPU.zip,<\/center> <\/p>\n

Os fabricantes de GPU e navegadores foram informados sobre o problema em mar\u00e7o, mas nenhum fornecedor se preparou para uma corre\u00e7\u00e3o at\u00e9 agora, j\u00e1 que a realiza\u00e7\u00e3o de um ataque em condi\u00e7\u00f5es pr\u00e1ticas \u00e9 duvidosa e o problema \u00e9 de maior interesse te\u00f3rico. O Google ainda n\u00e3o decidiu se vale a pena bloquear o ataque no n\u00edvel do navegador Chrome. O Chrome \u00e9 vulner\u00e1vel porque permite o carregamento de iframes de outros sites sem limpeza dos Cookies, permite a aplica\u00e7\u00e3o de filtros SVG em iframes e delega a execu\u00e7\u00e3o de renderiza\u00e7\u00e3o para o GPU. O Firefox e o Safari n\u00e3o s\u00e3o suscet\u00edveis \u00e0 vulnerabilidade, pois n\u00e3o atendem a esses crit\u00e9rios. O ataque tamb\u00e9m n\u00e3o \u00e9 aplic\u00e1vel a sites que pro\u00edbem a incorpora\u00e7\u00e3o via iframe em outros sites (por exemplo, configurando o cabe\u00e7alho HTTP X-Frame-Options para o valor \"SAMEORIGIN\" ou \"DENY\", bem como por meio de configura\u00e7\u00f5es de acesso utilizando o cabe\u00e7alho Content-Security-Policy).
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0421\u0428\u0410 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0432\u0438\u0437\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u043c\u0443\u044e \u0432 GPU. \u041f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u043c\u0435\u0442\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 GPU.zip, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0432\u044b\u0432\u043e\u0434\u0438\u043c\u0443\u044e \u043d\u0430 \u044d\u043a\u0440\u0430\u043d \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e. \u0421\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 web-\u0431\u0440\u0430\u0443\u0437\u0435\u0440, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043e, \u043a\u0430\u043a \u043e\u0442\u043a\u0440\u044b\u0442\u0430\u044f \u0432 Chrome \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f web-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":110361,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-110360","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ataque GPU.zip, permitindo recriar dados renderizados pela GPU | ProHoster","description":"Um grupo de pesquisadores de v\u00e1rias universidades dos EUA desenvolveu uma nova t\u00e9cnica de ataque por canais laterais, permitindo recriar informa\u00e7\u00f5es visuais processadas na GPU.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/ataka-gpu-zip-pozvolyayushhaya-vossozdat-dannye-otrisovyvaemye-gpu","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 GPU.zip, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435, \u043e\u0442\u0440\u0438\u0441\u043e\u0432\u044b\u0432\u0430\u0435\u043c\u044b\u0435 GPU | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0421\u0428\u0410 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0432\u0438\u0437\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u043c\u0443\u044e \u0432 GPU.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/ataka-gpu-zip-pozvolyayushhaya-vossozdat-dannye-otrisovyvaemye-gpu","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-09-28T07:56:15+00:00","article:modified_time":"2023-09-28T07:56:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/110360","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=110360"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/110360\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media\/110361"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=110360"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=110360"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=110360"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}