{"id":84985,"date":"2020-06-12T13:42:15","date_gmt":"2020-06-12T11:42:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/arm-prohudilas-obnaruzhilas-isklyuchitelnaya-uyazvimost-dlya-ataki-na-spekulyativnye-vychisleniya"},"modified":"2020-06-12T13:42:15","modified_gmt":"2020-06-12T11:42:15","slug":"arm-prohudilas-obnaruzhilas-isklyuchitelnaya-uyazvimost-dlya-ataki-na-spekulyativnye-vychisleniya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/arm-prohudilas-obnaruzhilas-isklyuchitelnaya-uyazvimost-dlya-ataki-na-spekulyativnye-vychisleniya","title":{"rendered":"A ARM encontrou uma vulnerabilidade cr\u00edtica para ataques a c\u00e1lculos especulativos","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Para processadores em uma ampla gama de arquiteturas Armv8-A (Cortex-A) foi encontrada<\/a><\/noindex> sua pr\u00f3pria vulnerabilidade \u00fanica para ataques de canal lateral usando algoritmos de computa\u00e7\u00e3o especulativa. Isto foi comunicado pela pr\u00f3pria ARM, que forneceu patches e orienta\u00e7\u00f5es para mitigar a vulnerabilidade encontrada. O risco n\u00e3o \u00e9 t\u00e3o grande, mas n\u00e3o deve ser ignorado, pois os processadores com arquitetura ARM est\u00e3o em toda parte, o que torna o risco de vazamentos incalcul\u00e1vel em suas consequ\u00eancias.<\/p>\n

\"A<\/p>\n

A vulnerabilidade descoberta pelos especialistas do Google na arquitetura ARM recebeu o codinome Straight-Line Speculation (SLS) e a designa\u00e7\u00e3o oficial CVE-2020-13844. Segundo a ARM, a vulnerabilidade SLS \u00e9 uma das formas da vulnerabilidade Spectre, que se tornou amplamente conhecida em janeiro de 2018, junto com a vulnerabilidade Meltdown. Em outras palavras, \u00e9 uma vulnerabilidade cl\u00e1ssica nos mecanismos de computa\u00e7\u00e3o especulativa, permitindo ataques por canais laterais.<\/p>\n

Computa\u00e7\u00f5es especulativas exigem o processamento de dados antecipadamente em v\u00e1rias ramifica\u00e7\u00f5es poss\u00edveis, embora posteriormente possam ser descartadas como desnecess\u00e1rias. Ataques de canal lateral permitem roubar esses dados intermedi\u00e1rios antes que sejam completamente eliminados. Como resultado, temos processadores de alto desempenho e o risco de vazamento de dados.<\/p>\n

O ataque Straight-Line Speculation em processadores com arquitetura ARM faz com que o processador, a cada mudan\u00e7a no fluxo de comandos, passe a executar instru\u00e7\u00f5es encontradas diretamente na mem\u00f3ria, em vez de seguir as instru\u00e7\u00f5es no novo fluxo de comandos. \u00c9 evidente que esse n\u00e3o \u00e9 o melhor cen\u00e1rio de escolha de instru\u00e7\u00f5es para execu\u00e7\u00e3o, do qual um invasor pode se aproveitar.<\/p>\n

<\/center><\/p>\n

Para o cr\u00e9dito da ARM, ela n\u00e3o apenas lan\u00e7ou um guia para desenvolvedores que ajudar\u00e1 a evitar o risco de vazamento atrav\u00e9s do ataque Straight-Line Speculation, mas tamb\u00e9m forneceu patches para os principais sistemas operacionais, como FreeBSD, OpenBSD, Trusted Firmware-A e OP-TEE, al\u00e9m de ter lan\u00e7ado patches para os compiladores GCC e LLVM.<\/p>\n

A empresa tamb\u00e9m afirmou que a aplica\u00e7\u00e3o dos patches n\u00e3o afetar\u00e1 o desempenho das plataformas ARM, como ocorreu nas plataformas compat\u00edveis com x86 Intel com o bloqueio das vulnerabilidades Spectre e Meltdown. No entanto, poderemos descobrir isso atrav\u00e9s de fontes externas, o que proporcionar\u00e1 uma vis\u00e3o objetiva sobre a nova vulnerabilidade.<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
Fonte: 3dnews.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u043b\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u043d\u0430 \u0448\u0438\u0440\u043e\u043a\u043e\u043c \u0441\u043f\u0435\u043a\u0442\u0440\u0435 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440 Armv8-A (Cortex-A) \u043d\u0430\u0448\u043b\u0430\u0441\u044c \u0441\u0432\u043e\u044f \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u043f\u043e\u0431\u043e\u0447\u043d\u044b\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u0439. \u041e\u0431 \u044d\u0442\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u0441\u0430\u043c\u0430 ARM \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u0430\u0442\u0447\u0438 \u0438 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u0430 \u0434\u043b\u044f \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044f \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043d\u0435 \u0442\u0430\u043a \u0432\u0435\u043b\u0438\u043a\u0430, \u043d\u043e \u043f\u0440\u0435\u043d\u0435\u0431\u0440\u0435\u0433\u0430\u0442\u044c \u0435\u044e \u043d\u0435\u043b\u044c\u0437\u044f, \u0432\u0435\u0434\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b \u043d\u0430 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0435 ARM \u0435\u0441\u0442\u044c \u0432\u0435\u0437\u0434\u0435, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0440\u0438\u0441\u043a \u0443\u0442\u0435\u0447\u0435\u043a […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":84986,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-84985","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47ARM foi comprometida: uma vulnerabilidade excepcional foi descoberta para ataque a c\u00e1lculos especulativos | ProHoster","description":"Para processadores em uma ampla gama de arquiteturas Armv8-A (Cortex-A)","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/arm-prohudilas-obnaruzhilas-isklyuchitelnaya-uyazvimost-dlya-ataki-na-spekulyativnye-vychisleniya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47ARM \u043f\u0440\u043e\u0445\u0443\u0434\u0438\u043b\u0430\u0441\u044c: \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430\u0441\u044c \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u044b\u0435 \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u044f | ProHoster","og:description":"\u0414\u043b\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u043d\u0430 \u0448\u0438\u0440\u043e\u043a\u043e\u043c \u0441\u043f\u0435\u043a\u0442\u0440\u0435 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440 Armv8-A (Cortex-A)","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/arm-prohudilas-obnaruzhilas-isklyuchitelnaya-uyazvimost-dlya-ataki-na-spekulyativnye-vychisleniya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-12T11:42:15+00:00","article:modified_time":"2020-06-12T11:42:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"84985","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:46:42","updated":"2022-10-01 13:37:31","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/84985","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=84985"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/84985\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media\/84986"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=84985"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=84985"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=84985"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}