Haddii ka dib Ku saabsan ZombieLoad Haddii aad ku jirto argagax garashada sida loo curyaamiyo qaabka Hyper-threading ee Intel si looga hortago ka faa'iidaysiga nuglaanshaha cusub ee la mid ah Specter iyo Meltdown, ka dibna si qoto dheer u neefso - Hagida rasmiga ah ee Intel runtii kuma talinayso inaad tan sameyso inta badan. kiisaska.
ZombieLoad waxay la mid tahay weerarradii kanaalka hore ee ku qasbaya soo-saareyaasha Intel inay soo bandhigaan macluumaadka xasaasiga ah ee sida caadiga ah go'doonsan oo la heli karo oo keliya codsiyada adeegsada. Baarayaasha amniga ayaa horey u sheegay in dayacanka uu ku jiro inta badan chips-yada Intel lagana faa’ideysan karo Windows, MacOS iyo Linux.
Intel, dhankeeda, kuma raacsana sida halista ZombieLoad loo qiimeeyo. Shirkaddu xitaa waxay go'aansatay inay siiso ZombieLoad magac ka duwan - Microarchitectural Data Sampling (MDS) ama Muunadeynta Xogta Farshaxanka ee Microarchitectural. Ogow, tani waxay u muuqataa cabsi aad uga yar marka loo eego tixraaca zombies-ka qaarkood.
"Nuglaanshaha MDS waxay ku salaysan tahay muunad xog ah oo laga soo daayay dhismayaal yar yar oo CPU ah iyadoo la adeegsanayo kanaalka dhinaca fulinta ee maxalli ah," shirkaddu waxay sharraxday. "Hawlgalka la taaban karo ee MDS waa mid aad u adag. Nuglaanta lafteedu ma siinayso weeraryahan hab uu ku doorto xogta uu rabo in uu helo."
"MDS waxaa mar hore looga hadlay heerka hardware in badan oo ka mid ah our ugu dambeeyay 8th iyo 9th jiilka Intel Core Processor, iyo sidoo kale jiilka XNUMXaad Intel Xeon Scalable processor qoyska," ayay tiri shirkaddu. "Alaabooyinka kale ee ay saameeyeen, tillaabooyinka yaraynta ayaa lagu heli karaa iyada oo loo marayo cusboonaysiinta microcode oo ay weheliso nidaamka hawlgalka ku habboon iyo cusboonaysiinta software-ka hypervisor, kuwaas oo la heli karo laga bilaabo maanta. Waanu bixinay ku qor shabakadayada oo aan sii wadno dhiirigelinta qof walba si uu u cusbooneysiiyo nidaamkooda sababtoo ah tani waa mid ka mid ah siyaabaha ugu wanaagsan ee lagu ilaalin karo badbaadada."
Intel waxay sidoo kale muujisay in kooxda cilmi-baarista ee ZombieLoad ay la shaqeynayeen shirkadda iyo kuwa kale ee warshadaha PC si ay u daboolaan nuglaanshaha ka hor inta aan si cad loo ogaan. "Waxaan jeclaan lahayn inaan u mahadcelino cilmi-baarayaasha nala shaqeeyay iyo la-hawlgalayaashayada warshadaha si ay gacan uga geystaan xallinta la isku dubariday ee dhibaatadan."
Haddaba maxaa ku saabsan Hyper-stringing?
Intel waxay sheegtay in curyaaminta Hyper-stringing aan loo baahnayn ama ikhtiyaarka kaliya ee isticmaalayaasha PC. Dhab ahaantii, Intel waxay leedahay waxay ku xiran tahay macmiil kasta inuu go'aansado waxa la sameeyo. Haddii aadan dammaanad qaadi karin ammaanka software-ka aad rakibtay, markaas haa, waxa ay u badan tahay fikrad wanaagsan in la joojiyo Hyper-stringing. Haddii software-ku uu ka yimaado oo kaliya dukaanka Microsoft, qaybta IT-ga, ama si fudud looga rakibay waxa aad aaminsan tahay in ay yihiin ilo lagu kalsoon yahay, waxa aad u maleyn kartaa in aad ka tagi karto Hyper-stringing. Runtii waxay ku xidhan tahay sida aad uga walaacsan tahay badbaadadaada.
"Sababtoo ah arrimuhu si aad ah ayey ugu kala duwan yihiin macaamiisha, Intel kuma talinayso in la joojiyo Hyper-stringing sababtoo ah waxaa muhiim ah in la fahmo in aysan ahayn habka kaliya ee lagu bixin karo ka hortagga MDS oo aan kaligiis ilaalineynin," ayay shirkaddu ku tiri hadal ay soo saartay. .
Isla mar ahaantaana, falcelinta soosaarayaasha nidaamka hawlgalka way ka duwan yihiin midba midka kale.
Google ayaa soo saartay hagaajin loogu talagalay Chrome OS kaas oo curyaamiya Hyper-stringing ee buugaagta Chrome-ka si caadi ah. Dadka raba inay dib u soo celiyaan tikniyoolajiyadda dunta badan leh way samayn karaan naftooda, shirkaddu waxay aaminsan tahay.
Apple ayaa u soo saartay MacOS Mojave cusboonaysiin waxayna ku dhawaaqday in macaamiisha shirkadu, gaar ahaan kuwa amniga ilaalinaya, ay iyagu curyaami karaan Hyper-stringing.
Microsoft waxay sheegtay inay sii daysay balastar barnaamijyadeeda si loo yareeyo suurtagalnimada MDS, laakiin sidoo kale waxay xustay in macaamiishu ay sidoo kale ka helaan cusbooneysiinta firmware-ka soo saarayaasha kombuyuutarkooda.
Sababtoo ah xaqiiqda ah in, inta badan, iibiyeyaasha nidaamka qalliinka ay go'aansadeen inay ka tagaan Hyper-stringing, khatarta ZombieLoad ma aha mid halis ah sida ay u muuqatay maalin ka hor. Intaa waxaa dheer, weli ma jiro kiis la og yahay oo ku saabsan nuglaanta loo isticmaalo weerar dhab ah.
Isla mar ahaantaana, isticmaalka balastarrada iyada oo aan la curyaamin tignoolajiyada Hyper-stringing ku dhawaad ma dhimayso waxqabadka soo-saareyaasha Intel.
Laakiin ma rumaysan doontid haddii aad eegto Saamaynta Intel ee balastarrada amniga ee waxqabadka marka Hyper-stringing la joojiyo. Shirkaddu waxay sheeganeysaa in balastarrada amniga, oo ay weheliso curyaaminta Hyper-stringing, ay shaki yar ku leeyihiin waxqabadka.
portal Aad ayaan uga soo horjeedaa fikradda Intel ee ah curyaaminta Hyper-stringing ma keenayso dhibaato gaar ah, in kasta oo Intel ay ku muujiso dukumeentigeeda in wax qabadku aanu waxba iska beddelin. Dhibaatadu waxay tahay in tijaabooyinka Intel ay yihiin kuwo macmal ah marka ay curyaamiyaan Hyper-stringing, maadaama shirkadu aysan tijaabin culeysyo shaqo oo badan oo isku xiran. Haddii Intel ay qaadan lahayd Blender, Cinebench, ama bartilmaameedyo kale oo loogu talagalay soo-saareyaal-core-core iyo multi-threaded, waxaan isla markiiba arki lahayn wax-qabad baaxad leh.
Si loo muujiyo sida ay muhiimka u tahay tignoolajiyada Hyper-stringing, waxaad kaliya eegi kartaa $9 Intel i9900-500K iyo $7 i9700-375K processor, farqiga ugu weyn ee kaas oo ah taageeradooda Hyper-stringing. Deminta Hyper-stringing-ka-soo-saareyaasha Intel waa dharbaaxo cajiib ah qof kasta oo daneynaya waxqabadka isku-xidhka badan.
Laakiin waxaa jira war wanaagsan kuwa isticmaalaya processor-yadii ugu dambeeyay ee Intel. Shirkaddu waxay sheegtay in qaar badan oo ka mid ah soo-saareyaasheeda jiilkii 8-aad iyo 9-aad ay hore u haysteen qalabyada microcode-ka ee hardware-ka ah, markaa ma jirto sabab ay i9-9900K milkiilayaasha u joojiyaan Hyper-Threading. Khatarta ZombieLoad waxay si cad ugu sareysaa soo-saareyaashii hore. Milkiilayaasha nidaamyadani waxay u baahan doonaan inay ku tiirsanaadaan nidaamka hawlgalka iyo cusboonaysiinta softiweerka, iyo sidoo kale waxqabadka xalalkooda ka hortagga, si loo yareeyo khatarta helitaanka kood xaasidnimo ah. Aynu sidoo kale mar kale dib u xasuusano xaqiiqda ah in ilaa hadda aan la ogeyn weerar la isticmaalayo ZombieLoad.
Source: 3dnews.ru