{"id":84985,"date":"2020-06-12T13:42:15","date_gmt":"2020-06-12T11:42:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/arm-prohudilas-obnaruzhilas-isklyuchitelnaya-uyazvimost-dlya-ataki-na-spekulyativnye-vychisleniya"},"modified":"2020-06-12T13:42:15","modified_gmt":"2020-06-12T11:42:15","slug":"arm-prohudilas-obnaruzhilas-isklyuchitelnaya-uyazvimost-dlya-ataki-na-spekulyativnye-vychisleniya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/arm-prohudilas-obnaruzhilas-isklyuchitelnaya-uyazvimost-dlya-ataki-na-spekulyativnye-vychisleniya","title":{"rendered":"ARM a prezentat o bre\u0219\u0103: a fost descoperit\u0103 o vulnerabilitate excep\u021bional\u0103 pentru atacuri asupra calculului speculativ","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Pentru procesoarele cu o gam\u0103 larg\u0103 de arhitecturi Armv8-A (Cortex-A) a fost descoperit\u0103<\/a><\/noindex> o vulnerabilitate unic\u0103 pentru atacurile prin canale laterale folosind algoritmi de calcul speculativ. ARM \u00eens\u0103\u0219i a anun\u021bat acest lucru \u0219i a furnizat patch-uri \u0219i ghiduri pentru atenuarea vulnerabilit\u0103\u021bii descoperite. Pericolul nu este at\u00e2t de mare, dar nu trebuie neglijat, deoarece procesoarele pe arhitectura ARM sunt omniprezente, ceea ce face riscul scurgerilor de date imens \u00een consecin\u021be.<\/p>\n

\"ARM<\/p>\n

Vulnerabilitatea descoperit\u0103 de speciali\u0219tii Google \u00een arhitecturile ARM a primit numele de cod Straight-Line Speculation (SLS) \u0219i denumirea oficial\u0103 CVE-2020-13844. Potrivit ARM, vulnerabilitatea SLS este o form\u0103 a vulnerabilit\u0103\u021bii Spectre, care (\u00eempreun\u0103 cu vulnerabilitatea Meltdown) a devenit bine cunoscut\u0103 \u00een ianuarie 2018. Cu alte cuvinte, este o vulnerabilitate clasic\u0103 \u00een mecanismele de calcul speculativ cu atacuri prin canale laterale.<\/p>\n

Calculul speculativ necesit\u0103 procesarea datelor \u00een avans pe mai multe ramuri posibile, de\u0219i ulterior acestea pot fi abandonate ca fiind inutile. Atacurile prin canale laterale permit furtul acestor date intermediare \u00eenainte de a fi complet distruse. Ca urmare, avem procesoare performante \u0219i un risc crescut de scurgere a datelor.<\/p>\n

Atacul Straight-Line Speculation asupra procesoarelor cu arhitectur\u0103 ARM determin\u0103 procesorul s\u0103 treac\u0103 \u00eentotdeauna la executarea instruc\u021biunilor g\u0103site direct \u00een memorie, dup\u0103 o modificare \u00een fluxul de comenzi, \u00een loc s\u0103 urmeze instruc\u021biunile din noul flux de comenzi. Evident, acesta nu este cel mai bun scenariu pentru selectarea instruc\u021biunilor de executat, pe care un atacator \u00eel poate exploata.<\/p>\n

<\/center><\/p>\n

La cinstea ARM, compania nu doar c\u0103 a publicat un ghid pentru dezvoltatori care va ajuta la evitarea riscurilor de scurgere prin atacul Straight-Line Speculation, dar a furnizat \u0219i patch-uri pentru sistemele de operare de baz\u0103, precum FreeBSD, OpenBSD, Trusted Firmware-A \u0219i OP-TEE, \u0219i a lansat patch-uri pentru compilatoarele GCC \u0219i LLVM.<\/p>\n

De asemenea, compania a declarat c\u0103 aplicarea patch-urilor nu va afecta performan\u021ba platformelor ARM, a\u0219a cum s-a \u00eent\u00e2mplat pe platformele compatibile x86 Intel cu blocarea vulnerabilit\u0103\u021bilor Spectre \u0219i Meltdown. Cu toate acestea, vom putea afla acest lucru din surse externe, ceea ce va oferi o imagine obiectiv\u0103 asupra noii vulnerabilit\u0103\u021bi.<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
Sursa: 3dnews.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u043b\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u043d\u0430 \u0448\u0438\u0440\u043e\u043a\u043e\u043c \u0441\u043f\u0435\u043a\u0442\u0440\u0435 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440 Armv8-A (Cortex-A) \u043d\u0430\u0448\u043b\u0430\u0441\u044c \u0441\u0432\u043e\u044f \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u043f\u043e\u0431\u043e\u0447\u043d\u044b\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u0439. \u041e\u0431 \u044d\u0442\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0430 \u0441\u0430\u043c\u0430 ARM \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u0430\u0442\u0447\u0438 \u0438 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u0430 \u0434\u043b\u044f \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044f \u043d\u0430\u0439\u0434\u0435\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438. \u041e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u043d\u0435 \u0442\u0430\u043a \u0432\u0435\u043b\u0438\u043a\u0430, \u043d\u043e \u043f\u0440\u0435\u043d\u0435\u0431\u0440\u0435\u0433\u0430\u0442\u044c \u0435\u044e \u043d\u0435\u043b\u044c\u0437\u044f, \u0432\u0435\u0434\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b \u043d\u0430 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0435 ARM \u0435\u0441\u0442\u044c \u0432\u0435\u0437\u0434\u0435, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0440\u0438\u0441\u043a \u0443\u0442\u0435\u0447\u0435\u043a […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":84986,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-84985","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47ARM a fost compromis\u0103: a fost descoperit\u0103 o vulnerabilitate excep\u021bional\u0103 pentru atacurile asupra calculului speculativ | ProHoster","description":"Pentru procesoarele cu o gam\u0103 larg\u0103 de arhitecturi Armv8-A (Cortex-A)","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/arm-prohudilas-obnaruzhilas-isklyuchitelnaya-uyazvimost-dlya-ataki-na-spekulyativnye-vychisleniya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47ARM \u043f\u0440\u043e\u0445\u0443\u0434\u0438\u043b\u0430\u0441\u044c: \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430\u0441\u044c \u0438\u0441\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u043f\u0435\u043a\u0443\u043b\u044f\u0442\u0438\u0432\u043d\u044b\u0435 \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u044f | ProHoster","og:description":"\u0414\u043b\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 \u043d\u0430 \u0448\u0438\u0440\u043e\u043a\u043e\u043c \u0441\u043f\u0435\u043a\u0442\u0440\u0435 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440 Armv8-A (Cortex-A)","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/arm-prohudilas-obnaruzhilas-isklyuchitelnaya-uyazvimost-dlya-ataki-na-spekulyativnye-vychisleniya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-12T11:42:15+00:00","article:modified_time":"2020-06-12T11:42:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"84985","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:46:42","updated":"2022-10-01 13:37:31","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/84985","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=84985"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/84985\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/84986"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=84985"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=84985"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=84985"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}