{"id":110360,"date":"2023-09-28T09:56:15","date_gmt":"2023-09-28T07:56:15","guid":{"rendered":"https:\/\/prohoster.info\/?p=110360"},"modified":"2023-09-28T09:56:15","modified_gmt":"2023-09-28T07:56:15","slug":"ataka-gpu-zip-pozvolyayushhaya-vossozdat-dannye-otrisovyvaemye-gpu","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/ataka-gpu-zip-pozvolyayushhaya-vossozdat-dannye-otrisovyvaemye-gpu","title":{"rendered":"GPU.zip, care permite reconstruc\u021bia datelor redat\u0103 de GPU","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Un grup de cercet\u0103tori de la mai multe universit\u0103\u021bi din SUA a dezvoltat o nou\u0103 tehnic\u0103 de atac prin canale laterale, care permite recrearea informa\u021biei vizuale procesate pe GPU. Prin metoda propus\u0103, denumit\u0103 GPU.zip, atacatorul poate determina informa\u021bia afi\u0219at\u0103 pe ecran. Printre altele, atacul poate fi realizat prin intermediul unui browser web; de exemplu, s-a demonstrat cum o pagin\u0103 web mali\u021bioas\u0103 deschis\u0103 \u00een Chrome poate ob\u021bine informa\u021bii despre pixeli, afi\u0219a\u021bi \u00een timpul red\u0103rii unei alte pagini web deschise \u00een acela\u0219i browser. <\/p>\n

Sursa scurgerii de informa\u021bii este optimizarea aplicat\u0103 \u00een GPU-urile moderne, care asigur\u0103 compresia datelor grafice. Problema se manifest\u0103 la utilizarea compresiei pe toate GPU-urile integrate testate (AMD, Apple, ARM, Intel, Qualcomm) \u0219i pe pl\u0103cile grafice discrete NVIDIA. \u00cen acest context, cercet\u0103torii au descoperit c\u0103 GPU-urile integrate Intel \u0219i AMD activeaz\u0103 \u00eentotdeauna compresia datelor grafice, chiar dac\u0103 aplica\u021bia nu solicit\u0103 explicit aplicarea unei astfel de optimiz\u0103ri. Utilizarea compresiei duce la corelarea traficului \u00een DRAM \u0219i a Sarcinii pe cache cu natura datelor procesate, care pot fi recreate pe pixel prin analiza prin canale laterale. <\/p>\n

Metoda este destul de lent\u0103; de exemplu, pe un sistem cu GPU integrat AMD Ryzen 7 4800U, atacul care determin\u0103 numele sub care utilizatorul s-a conectat \u00een alt tab la Wikipedia a durat 30 de minute \u0219i a permis determinarea con\u021binutului pixelilor cu o acurate\u021be de 97%. Pe sisteme cu GPU integrat Intel i7-8700, un atac similar a durat 215 minute, cu o acurate\u021be de 98%. <\/p>\n

\u00cen timpul atacului prin browser, site-ul \u021bint\u0103 este deschis ciclic \u00eentr-un iframe pentru a ini\u021bia redarea. Pentru a determina informa\u021bia afi\u0219at\u0103, ie\u0219irea iframe-ului este transformat\u0103 \u00eentr-o reprezentare alb-negru, la care se aplic\u0103 un filtru SVG care efectueaz\u0103 suprapuneri succesive de m\u0103\u0219ti, aduc\u00e2nd sau nu o mare redundan\u021b\u0103 la compresie. Pe baza evalu\u0103rii modific\u0103rii timpului de redare a e\u0219antioanelor de referin\u021b\u0103, se eviden\u021biaz\u0103 prezen\u021ba pixelilor \u00eentuneca\u021bi sau lumino\u0219i \u00eentr-o anumit\u0103 pozi\u021bie. Imaginea general\u0103 este recreat\u0103 prin verificarea succesiv\u0103 pe pixel folosind m\u0103\u0219ti asem\u0103n\u0103toare.

\"GPU.zip,<\/center> <\/p>\n

Produc\u0103torii de GPU \u0219i de browsere au fost informa\u021bi despre problem\u0103 \u00een martie, dar niciun furnizor nu a preg\u0103tit \u00eenc\u0103 o solu\u021bie, deoarece efectuarea unui atac \u00een practic\u0103 nu se dovede\u0219te fezabil\u0103 \u00een condi\u021bii ideale, iar problema are un interes mai mult teoretic. Google nu a decis p\u00e2n\u0103 acum dac\u0103 este oportun s\u0103 blocheze atacul la nivelul browserului Chrome. Chrome este vulnerabil deoarece permite \u00eenc\u0103rcarea iframe de pe un alt site f\u0103r\u0103 a cur\u0103\u021ba Cookie-urile, permite aplicarea de filtre SVG pe iframe \u0219i deleg\u0103 execu\u021bia red\u0103rii GPU-ului. Firefox \u0219i Safari nu sunt afectate de vulnerabilitate, deoarece nu \u00eendeplinesc aceste criterii. De asemenea, atacul nu este aplicabil site-urilor care interzic \u00eencorporarea prin iframe pe alte site-uri (de exemplu, prin setarea antetului HTTP X-Frame-Options la valoarea 'SAMEORIGIN' sau 'DENY', precum \u0219i prin set\u0103rile de acces prin intermediul antetului Content-Security-Policy).
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0421\u0428\u0410 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0432\u0438\u0437\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u043c\u0443\u044e \u0432 GPU. \u041f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u0433\u043e \u043c\u0435\u0442\u043e\u0434\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 GPU.zip, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0432\u044b\u0432\u043e\u0434\u0438\u043c\u0443\u044e \u043d\u0430 \u044d\u043a\u0440\u0430\u043d \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e. \u0421\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e \u0430\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0430 \u0447\u0435\u0440\u0435\u0437 web-\u0431\u0440\u0430\u0443\u0437\u0435\u0440, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043e, \u043a\u0430\u043a \u043e\u0442\u043a\u0440\u044b\u0442\u0430\u044f \u0432 Chrome \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f web-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":110361,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-110360","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Atacul GPU.zip, care permite recrearea datelor redat\u0103 de GPU | ProHoster","description":"Un grup de cercet\u0103tori din mai multe universit\u0103\u021bi din SUA a dezvoltat o nou\u0103 tehnic\u0103 de atac prin canale laterale, care permite recrearea informa\u021biilor vizuale procesate \u00een GPU.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/ataka-gpu-zip-pozvolyayushhaya-vossozdat-dannye-otrisovyvaemye-gpu","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 GPU.zip, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435, \u043e\u0442\u0440\u0438\u0441\u043e\u0432\u044b\u0432\u0430\u0435\u043c\u044b\u0435 GPU | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0421\u0428\u0410 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0432\u0438\u0437\u0443\u0430\u043b\u044c\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u043c\u0443\u044e \u0432 GPU.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/ataka-gpu-zip-pozvolyayushhaya-vossozdat-dannye-otrisovyvaemye-gpu","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-09-28T07:56:15+00:00","article:modified_time":"2023-09-28T07:56:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/110360","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=110360"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/110360\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/110361"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=110360"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=110360"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=110360"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}