{"id":33743,"date":"2019-10-31T21:54:27","date_gmt":"2019-10-31T18:54:27","guid":{"rendered":"https:\/\/prohoster.info\/blog\/intel-vam-ne-nuzhno-otklyuchat-hyper-threading-dlya-zashhity-ot-zombieload\/"},"modified":"2019-10-31T21:54:27","modified_gmt":"2019-10-31T18:54:27","slug":"intel-vam-ne-nuzhno-otklyuchat-hyper-threading-dlya-zashhity-ot-zombieload","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/intel-vam-ne-nuzhno-otklyuchat-hyper-threading-dlya-zashhity-ot-zombieload","title":{"rendered":"Intel: nemus\u00edte vyp\u00edna\u0165 Hyper-Threading na ochranu pred ZombieLoad","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Ak po predch\u00e1dzaj\u00facich<\/a><\/noindex> novink\u00e1ch<\/a><\/noindex> Ak sa panik\u00e1rite, \u017ee mus\u00edte vypn\u00fa\u0165 funkciu Intel Hyper-Threading, aby ste zabr\u00e1nili vyu\u017eitiu novej zranite\u013enosti podobnej Spectre a Meltdown, zhlboka sa nad\u00fdchnite \u2014 ofici\u00e1lne odpor\u00fa\u010danie spolo\u010dnosti Intel to vlastne pre v\u00e4\u010d\u0161inu pr\u00edpadov neodpor\u00fa\u010da.<\/p>\n

\"Intel:<\/p>\n

ZombieLoad je podobn\u00e1 predch\u00e1dzaj\u00facim \u00fatokom typu \u201epostrann\u00e9 kan\u00e1ly\u201c (angl. side-channel attack), ktor\u00e9 n\u00fatia procesory Intel otvori\u0165 pr\u00edstup k potenci\u00e1lne d\u00f4vern\u00fdm inform\u00e1ci\u00e1m, ktor\u00e9 s\u00fa zvy\u010dajne izolovan\u00e9 a dostupn\u00e9 iba pre aplik\u00e1cie, ktor\u00e9 ich pou\u017e\u00edvaj\u00fa. Bezpe\u010dnostn\u00ed v\u00fdskumn\u00edci predt\u00fdm uviedli, \u017ee t\u00e1to zranite\u013enos\u0165 je pr\u00edtomn\u00e1 vo v\u00e4\u010d\u0161ine \u010dipov Intel a m\u00f4\u017ee by\u0165 vyu\u017eit\u00e1 v syst\u00e9moch Windows, MacOS a Linux.<\/p>\n

\"Intel:<\/p>\n

Spolo\u010dnos\u0165 Intel sa pritom nezhoduje s t\u00fdm, ako v\u00e1\u017ene je posudzovan\u00e9 riziko ZombieLoad. Firma sa dokonca rozhodla premenova\u0165 ZombieLoad na Microarchitectural Data Sampling (MDS) alebo Mikroarchitektonick\u00e1 vzorka d\u00e1t. Priznajme si, znie to ove\u013ea menej desivo ako odkaz na nejak\u00fdch zomb\u00edkov.<\/p>\n

<\/center><\/p>\n

\u201eZranite\u013enos\u0165 MDS je zalo\u017een\u00e1 na vzorkovan\u00ed \u00fadajov, ktor\u00e9 unikaj\u00fa z mal\u00fdch \u0161trukt\u00far v CPU pri pou\u017eit\u00ed lok\u00e1lne vykon\u00e1van\u00e9ho postrann\u00e9ho kan\u00e1la \u0161pekulat\u00edvneho vykon\u00e1vania,\u201c vysvet\u013euj\u00fa v spolo\u010dnosti. \u201ePraktick\u00e9 vyu\u017eitie MDS je ve\u013emi zlo\u017eit\u00e1 z\u00e1le\u017eitos\u0165. Samotn\u00e1 zranite\u013enos\u0165 neposkytuje \u00fato\u010dn\u00edkovi sp\u00f4sob, ako vybra\u0165 tie \u00fadaje, ktor\u00e9 chce z\u00edska\u0165.\u201c<\/p>\n

\u201eMDS u\u017e bola odstr\u00e1nen\u00e1 na hardv\u00e9rovej \u00farovni v mnoh\u00fdch na\u0161ich najnov\u0161\u00edch procesoroch Intel Core 8. a 9. gener\u00e1cie, ako aj v rodine procesorov Intel Xeon Scalable druhej gener\u00e1cie,\u201c uv\u00e1dza sa v spr\u00e1ve spolo\u010dnosti. \u201ePre ostatn\u00e9 ovplyvnen\u00e9 produkty s\u00fa opatrenia na zn\u00ed\u017eenie rizika dostupn\u00e9 prostredn\u00edctvom aktualiz\u00e1cie mikrok\u00f3du v kombin\u00e1cii s pr\u00edslu\u0161n\u00fdmi aktualiz\u00e1ciami opera\u010dn\u00e9ho syst\u00e9mu a softv\u00e9ru hyperv\u00edzora, ktor\u00e9 s\u00fa dostupn\u00e9 u\u017e dnes. Poskytli sme viac inform\u00e1ci\u00ed<\/a><\/noindex> na na\u0161ej webovej str\u00e1nke a na\u010falej vyz\u00fdvame v\u0161etk\u00fdch, aby udr\u017eiavali svoje syst\u00e9my aktu\u00e1lne, preto\u017ee to je jeden z najlep\u0161\u00edch sp\u00f4sobov na zabezpe\u010denie bezpe\u010dnosti.`<\/p>\n

\"Intel:<\/p>\n

Predstavitelia spolo\u010dnosti Intel tie\u017e uviedli, \u017ee v\u00fdskumn\u00e1 skupina ZombieLoad spolupracovala s firmou a \u010fal\u0161\u00edmi odborn\u00edkmi v oblasti PC, aby opravila zranite\u013enos\u0165 predt\u00fdm, ako sa o nej verejne dozvedelo. \u201eChceli by sme po\u010fakova\u0165 v\u00fdskumn\u00edkom, ktor\u00ed s nami spolupracovali, a na\u0161im partnerom v priemysle za ich pr\u00edspevok k koordinovan\u00e9mu rie\u0161eniu tohto probl\u00e9mu.\u201c<\/p>\n

A \u010do Hyper-Threading?<\/strong><\/p>\n

Intel uviedla, \u017ee vypnutie Hyper-Threading nie je povinn\u00e1 a jedin\u00e1 mo\u017enos\u0165 pre pou\u017e\u00edvate\u013eov PC. V skuto\u010dnosti, pod\u013ea spolo\u010dnosti Intel, si ka\u017ed\u00fd z\u00e1kazn\u00edk s\u00e1m rozhoduje, \u010do m\u00e1 robi\u0165. Ak nem\u00f4\u017eete zaru\u010di\u0165 bezpe\u010dnos\u0165 nain\u0161talovan\u00e9ho softv\u00e9ru, potom \u00e1no, pravdepodobne je dobr\u00fd n\u00e1pad vypn\u00fa\u0165 Hyper-Threading. Ak v\u0161ak softv\u00e9r poch\u00e1dza v\u00fdhradne z Microsoftu, z IT oddelenia alebo je jednoducho nain\u0161talovan\u00fd z d\u00f4veryhodn\u00fdch, pod\u013ea v\u00e1\u0161ho n\u00e1zoru, zdrojov, pravdepodobne m\u00f4\u017eete necha\u0165 Hyper-Threading zapnut\u00fd. V\u0161etko naozaj z\u00e1vis\u00ed len od toho, ako sa ob\u00e1vate o svoju bezpe\u010dnos\u0165.<\/p>\n

\u201eKe\u010f\u017ee faktory sa v\u00fdrazne l\u00ed\u0161ia pre r\u00f4znych z\u00e1kazn\u00edkov, Intel nedoporu\u010duje vyp\u00edna\u0165 Hyper-Threading, preto\u017ee je d\u00f4le\u017eit\u00e9 pochopi\u0165, \u017ee to nie je jedin\u00fd sp\u00f4sob, ako zabezpe\u010di\u0165 ochranu pred MDS a samo o sebe neposkytuje ochranu,\u201c uviedla spolo\u010dnos\u0165.<\/p>\n

Z\u00e1rove\u0148 sa reakcie v\u00fdrobcov opera\u010dn\u00fdch syst\u00e9mov navz\u00e1jom l\u00ed\u0161ia.<\/p>\n

Spolo\u010dnos\u0165 Google vydala opravu pre Chrome OS, ktor\u00e1 predvolene vyp\u00edna Hyper-Threading pre Chromebooky. \u013dudia, ktor\u00ed chc\u00fa technol\u00f3giu viacjadrov\u00e9ho spracovania zapn\u00fa\u0165 sp\u00e4\u0165, m\u00f4\u017eu to urobi\u0165 sami, tvrdia v spolo\u010dnosti.<\/p>\n

Spolo\u010dnos\u0165 Apple vydala aktualiz\u00e1ciu pre MacOS Mojave a uviedla, \u017ee z\u00e1kazn\u00edci spolo\u010dnosti, najm\u00e4 t\u00ed, ktor\u00ed maj\u00fa vysok\u00e9 n\u00e1roky na bezpe\u010dnos\u0165, m\u00f4\u017eu Hyper-Threading vypn\u00fa\u0165 sami.<\/p>\n

Spolo\u010dnos\u0165 Microsoft uviedla, \u017ee vydala patche pre svoj softv\u00e9r, aby zn\u00ed\u017eila pravdepodobnos\u0165 vyu\u017eitia MDS, ale tie\u017e poznamenala, \u017ee z\u00e1kazn\u00edci by mali dodato\u010dne z\u00edska\u0165 aktualiz\u00e1ciu firmv\u00e9ru od svojich v\u00fdrobcov PC.<\/p>\n

Vzh\u013eadom na to, \u017ee v\u00e4\u010d\u0161ina dod\u00e1vate\u013eov opera\u010dn\u00fdch syst\u00e9mov sa rozhodla ponecha\u0165 Hyper-Threading zapnut\u00fd, hrozba ZombieLoad zjavne nie je tak\u00e1 v\u00e1\u017ena, ako sa to zdalo pred de\u0148. Okrem toho st\u00e1le neexistuje \u017eiadny zn\u00e1my pr\u00edpad vyu\u017eitia zranite\u013enosti v re\u00e1lnom \u00fatoku.<\/p>\n

Pou\u017e\u00edvanie patchov bez vypnutia technol\u00f3gie Hyper-Threading takmer nezni\u017euje v\u00fdkon procesorov Intel.<\/p>\n

\"Intel:<\/p>\n

Ale nebudete veri\u0165, ak sa pozriete na v\u00fdsledky testovania<\/a><\/noindex> Intel oh\u013eadom vplyvu patchov na v\u00fdkon pri vypnutom Hyper-Threadingu. Spolo\u010dnos\u0165 tvrd\u00ed, \u017ee bezpe\u010dnostn\u00e9 opravy spolu s vypnut\u00edm Hyper-Threadingu maj\u00fa podozrivo mal\u00fd vplyv na v\u00fdkon.<\/p>\n

\"Intel:<\/p>\n

Port\u00e1l PCWorld<\/a><\/noindex> kategoricky nes\u00fahlas\u00ed s n\u00e1zvom Intel, \u017ee vypnutie Hyper-Threadingu nepredstavuje \u017eiaden zvl\u00e1\u0161tny probl\u00e9m, hoci Intel vo svojom dokumente demon\u0161truje, \u017ee v\u00fdkon sa takmer nezmenil. Probl\u00e9m spo\u010d\u00edva v umelosti testov Intel pri vypnut\u00ed Hyper-Threadingu, preto\u017ee spolo\u010dnos\u0165 netestovala \u0161pecifick\u00e9 viacvl\u00e1knov\u00e9 za\u0165a\u017eenia. Keby Intel vykonal testy Blender, Cinebench alebo in\u00e9 navrhnut\u00e9 na viacjadrov\u00e9 a viacvl\u00e1knov\u00e9 procesory, okam\u017eite by sme videli v\u00fdrazn\u00fd pokles v\u00fdkonu.<\/p>\n

Aby sme zd\u00f4raznili, ak\u00e1 d\u00f4le\u017eit\u00e1 je technol\u00f3gia Hyper-Threading, sta\u010d\u00ed sa pozrie\u0165 na procesory Intel i9-9900K za 500 dol\u00e1rov a i7-9700K za 375 dol\u00e1rov, ktor\u00fdch hlavn\u00fd rozdiel spo\u010d\u00edva pr\u00e1ve v podpore Hyper-Threading. Vypnutie Hyper-Threading na procesoroch Intel je obrovsk\u00fd z\u00e1sah pre v\u0161etk\u00fdch, pre ktor\u00fdch je viacer\u00e9 spracovanie v\u00fdkonu d\u00f4le\u017eit\u00e9.<\/p>\n

Ale pre t\u00fdch, ktor\u00ed pou\u017e\u00edvaj\u00fa najnov\u0161ie procesory Intel, je tu aj dobr\u00e1 spr\u00e1va. Ako uviedli vo firme, mnoho z jej posledn\u00fdch procesorov 8. a 9. gener\u00e1cie u\u017e obsahuje opravy hardv\u00e9rov\u00e9ho mikrok\u00f3du, a preto nie s\u00fa majitelia i9-9900K d\u00f4vody na vypnutie Hyper-Threadingu. Hrozba ZombieLoad je zjavne vy\u0161\u0161ia pre star\u0161ie procesory. Majitelia t\u00fdchto syst\u00e9mov sa bud\u00fa musie\u0165 spolieha\u0165 na aktualiz\u00e1cie opera\u010dn\u00e9ho syst\u00e9mu a softv\u00e9ru, ako aj na \u00fa\u010dinnos\u0165 antimalv\u00e9rov\u00fdch rie\u0161en\u00ed, ktor\u00e9 pou\u017e\u00edvaj\u00fa, aby zn\u00ed\u017eili riziko prijatia malwaru. A op\u00e4\u0165 pripom\u00edname, \u017ee zatia\u013e nie s\u00fa zn\u00e1me \u017eiadne \u00fatoky vyu\u017e\u00edvaj\u00face ZombieLoad.<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
Zdroj: 3dnews.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0415\u0441\u043b\u0438 \u043f\u043e\u0441\u043b\u0435 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u043d\u043e\u0432\u043e\u0441\u0442\u0435\u0439 \u043e ZombieLoad \u0432\u044b \u0432 \u043f\u0430\u043d\u0438\u043a\u0435 \u0432\u044b\u044f\u0441\u043d\u044f\u0435\u0442\u0435, \u043a\u0430\u043a \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u044e Intel Hyper-Threading, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u043e\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0445\u043e\u0436\u0435\u0439 \u043d\u0430 Spectre \u0438 Meltdown, \u0442\u043e \u0441\u0434\u0435\u043b\u0430\u0439\u0442\u0435 \u0433\u043b\u0443\u0431\u043e\u043a\u0438\u0439 \u0432\u044b\u0434\u043e\u0445 — \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e Intel \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043d\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442 \u0434\u0435\u043b\u0430\u0442\u044c \u044d\u0442\u043e \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0441\u043b\u0443\u0447\u0430\u0435\u0432. ZombieLoad \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u0430 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u043c \u0430\u0442\u0430\u043a\u0430\u043c \u043f\u043e «\u043f\u043e\u0431\u043e\u0447\u043d\u044b\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c» (\u0430\u043d\u0433\u043b. side-channel attack), \u0432\u044b\u043d\u0443\u0436\u0434\u0430\u044e\u0449\u0438\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b Intel \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0442\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25423,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-33743","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Intel: Nemus\u00edte vyp\u00edna\u0165 Hyper-Threading na ochranu pred ZombieLoad | ProHoster","description":"Ak sa po predch\u00e1dzaj\u00facich spr\u00e1vach o ZombieLoad panik\u00e1rne sna\u017e\u00edte zisti\u0165, ako.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/intel-vam-ne-nuzhno-otklyuchat-hyper-threading-dlya-zashhity-ot-zombieload","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Intel: \u0432\u0430\u043c \u043d\u0435 \u043d\u0443\u0436\u043d\u043e \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c Hyper-Threading \u0434\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 ZombieLoad | ProHoster","og:description":"\u0415\u0441\u043b\u0438 \u043f\u043e\u0441\u043b\u0435 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u043d\u043e\u0432\u043e\u0441\u0442\u0435\u0439 \u043e ZombieLoad \u0432\u044b \u0432 \u043f\u0430\u043d\u0438\u043a\u0435 \u0432\u044b\u044f\u0441\u043d\u044f\u0435\u0442\u0435, \u043a\u0430\u043a.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/intel-vam-ne-nuzhno-otklyuchat-hyper-threading-dlya-zashhity-ot-zombieload","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:54:27+00:00","article:modified_time":"2019-10-31T18:54:27+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33743","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 16:31:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:34:12","updated":"2026-01-21 16:31:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/33743","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=33743"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/33743\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/25423"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=33743"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=33743"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=33743"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}