{"id":101262,"date":"2021-09-13T22:22:38","date_gmt":"2021-09-13T20:22:38","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/novaya-tehnika-ekspluataczii-uyazvimostej-klassa-spectre-v-chrome"},"modified":"2021-09-13T22:22:38","modified_gmt":"2021-09-13T20:22:38","slug":"novaya-tehnika-ekspluataczii-uyazvimostej-klassa-spectre-v-chrome","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/novaya-tehnika-ekspluataczii-uyazvimostej-klassa-spectre-v-chrome","title":{"rendered":"Teknika e re p\u00ebr shfryt\u00ebzimin e vulnerabiliteteve t\u00eb klas\u00ebs Spectre n\u00eb Chrome","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nj\u00eb grup hulumtuesish nga universitetet amerikane, australiane dhe izraelite ka propozuar nj\u00eb teknik\u00eb t\u00eb re sulmi p\u00ebrmes kanaleve an\u00ebsore p\u00ebr shfryt\u00ebzimin e vulnerabiliteteve t\u00eb klas\u00ebs Spectre n\u00eb shfletuesit q\u00eb bazohen n\u00eb motorin Chromium. Sulmi, i njohur me emrin Spook.js, mund\u00ebson q\u00eb, p\u00ebrmes ekzekutimit t\u00eb nj\u00eb kodi JavaScript, t\u00eb anashkalohet mekanizmi i izolimit t\u00eb faqeve dhe t\u00eb lexohet p\u00ebrmbajtja e gjith\u00eb hap\u00ebsir\u00ebs adresore t\u00eb procesit aktual, dmth. t\u00eb arrihet n\u00eb t\u00eb dh\u00ebnat e faqeve t\u00eb hapura n\u00eb tab t\u00eb tjera, por q\u00eb p\u00ebrpunohen n\u00eb nj\u00eb proces t\u00eb vet\u00ebm. <\/p>\n

Pasi Chrome i ekzekuton faqet e ndryshme n\u00eb procese t\u00eb ndryshme, mund\u00ebsia p\u00ebr realizimin e sulmeve praktike \u00ebsht\u00eb e kufizuar nga sh\u00ebrbimet q\u00eb lejojn\u00eb p\u00ebrdorues t\u00eb ndrysh\u00ebm t\u00eb publikojn\u00eb faqet e tyre. Metoda i lejon sulmuesve, nga nj\u00eb faqe ku ata kan\u00eb mund\u00ebsi t\u00eb integrojn\u00eb kodin e tyre JavaScript, t\u00eb identifikojn\u00eb pranin\u00eb e faqeve t\u00eb tjera t\u00eb hapura nga p\u00ebrdoruesi n\u00eb t\u00eb nj\u00ebjtin website dhe t\u00eb nxjerrin informacione t\u00eb ndjeshme nga to, p\u00ebr shembull, kredencialet ose t\u00eb dh\u00ebnat bankare, t\u00eb vendosura nga sistemi i autofill n\u00eb formular\u00ebt web. Si demostrim \u00ebsht\u00eb treguar se si mund t\u00eb sulmohet nj\u00eb blog tjet\u00ebr n\u00eb sh\u00ebrbimin Tumblr, n\u00ebse pronari i tij hap nj\u00eb tab tjet\u00ebr t\u00eb blogut t\u00eb sulmuesit t\u00eb vendosur n\u00eb t\u00eb nj\u00ebjtin sh\u00ebrbim.

\r\n \"Luaj\r\n
<\/div>\r\n <\/div><\/center> <\/p>\n

Nj\u00eb variant tjet\u00ebr i aplikimit t\u00eb metod\u00ebs \u00ebsht\u00eb sulmi ndaj zgjatimeve t\u00eb shfletuesit, i cili lejon q\u00eb gjat\u00eb instalimit t\u00eb nj\u00eb zgjatjeje t\u00eb kontrolluar nga sulmuesit, t\u00eb nxirren t\u00eb dh\u00ebna nga zgjatje t\u00eb tjera. Si shembull, \u00ebsht\u00eb treguar si, duke instaluar nj\u00eb zgjatje t\u00eb d\u00ebmshme, mund t\u00eb nxirren informacione t\u00eb ndjeshme nga menaxheri i fjal\u00ebkalimeve LastPass.

\r\n \"Luaj\r\n
<\/div>\r\n <\/div> <\/center> <\/p>\n

Hulumtuesit kan\u00eb publikuar nj\u00eb prototip eksploiti q\u00eb funksionon n\u00eb Chrome 89 n\u00eb sisteme me CPU Intel i7-6700K dhe i7-7600U. N\u00eb krijimin e eksploiti jan\u00eb p\u00ebrdorur prototipet e publikuara m\u00eb par\u00eb nga kompania Google t\u00eb kodit JavaScript p\u00ebr kryerjen e sulmeve t\u00eb klas\u00ebs Spectre. \u00cbsht\u00eb v\u00ebn\u00eb re se hulumtuesit kan\u00eb arritur t\u00eb p\u00ebrgatitin eksploita funksional\u00eb p\u00ebr sisteme q\u00eb bazohen n\u00eb procesor\u00ebt Intel dhe Apple M1, t\u00eb cil\u00ebt ofrojn\u00eb mund\u00ebsin\u00eb p\u00ebr t\u00eb organizuar leximin e memories me shpejt\u00ebsi 500 byte n\u00eb sekond\u00eb dhe sakt\u00ebsi 96%. Supozohet se metoda \u00ebsht\u00eb e aplikueshme edhe p\u00ebr procesor\u00ebt AMD, por nuk \u00ebsht\u00eb arritur t\u00eb p\u00ebrgatitet nj\u00eb exploit plot\u00ebsisht funksional. <\/p>\n

Sulmi \u00ebsht\u00eb i aplikuesh\u00ebm p\u00ebr \u00e7do shfletues t\u00eb bazuar n\u00eb motorin Chromium, duke p\u00ebrfshir\u00eb Google Chrome, Microsoft Edge dhe Brave. Studiuesit gjithashtu besojn\u00eb se metoda mund t\u00eb adaptohet p\u00ebr t\u00eb punuar me Firefox, por meqen\u00ebse motori i Firefox-i ndryshon shum\u00eb nga Chrome, puna p\u00ebr krijimin e nj\u00eb eksploit t\u00eb till\u00eb \u00ebsht\u00eb l\u00ebn\u00eb p\u00ebr n\u00eb t\u00eb ardhmen. <\/p>\n

P\u00ebr t\u00eb mbrojtur nga sulmet q\u00eb realizohen p\u00ebrmes shfletuesit, t\u00eb lidhura me ekzekutimin spekulativ t\u00eb instrukcioneve, n\u00eb Chrome \u00ebsht\u00eb realizuar segmentimi i adres\u00ebs s\u00eb hap\u00ebsir\u00ebs \u2014 izolimi n\u00eb sandbox lejon funksionimin e JavaScript vet\u00ebm me tregues 32-bit dhe ndan memorjen e p\u00ebrpunuesve n\u00eb kupa (heap) prej 4GB q\u00eb nuk nd\u00ebrhyjn\u00eb. P\u00ebr t\u00eb organizuar qasjen n\u00eb t\u00eb gjith\u00eb hap\u00ebsir\u00ebn e adres\u00ebs s\u00eb procesit dhe p\u00ebr t\u00eb kaluar kufizimin 32-bit, hulumtuesit e p\u00ebrdorin teknik\u00ebn e D\u00ebshmimit t\u00eb Tipit, e cila lejon t\u00eb detyrohet motori JavaScript t\u00eb p\u00ebrpunoj\u00eb nj\u00eb objekt me nj\u00eb tip t\u00eb pap\u00ebrshtatsh\u00ebm, duke ofruar mund\u00ebsin\u00eb p\u00ebr t\u00eb formuar nj\u00eb tregues 64-bit mbi baz\u00ebn e nj\u00eb kombinimi t\u00eb dy vlerave 32-bit. <\/p>\n

Thelbi i sulmit \u00ebsht\u00eb se gjat\u00eb p\u00ebrpunimit t\u00eb nj\u00eb objekti t\u00eb d\u00ebmsh\u00ebm t\u00eb formuar n\u00eb m\u00ebnyr\u00eb t\u00eb ve\u00e7ant\u00eb n\u00eb motorin JavaScript krijohen kushte q\u00eb \u00e7ojn\u00eb n\u00eb ekzekutimin spekulativ t\u00eb instrukcioneve q\u00eb realizojn\u00eb qasje n\u00eb nj\u00eb array. Objekti zgjidhet n\u00eb m\u00ebnyr\u00eb q\u00eb fushat e kontrolluara nga sulmuesit t\u00eb vendosen n\u00eb nj\u00eb zon\u00eb q\u00eb p\u00ebrdor nj\u00eb tregues 64-bit. Pasi lloji i objektit t\u00eb d\u00ebmsh\u00ebm nuk p\u00ebrputhet me llojin e array-t t\u00eb p\u00ebrpunuar, n\u00eb kushte normale k\u00ebto veprime bllokohen nga mekanizmi i deoptimizimit t\u00eb kodit n\u00eb Chrome, q\u00eb p\u00ebrdoret p\u00ebr qasjen n\u00eb array. P\u00ebr t\u00eb zgjidhur k\u00ebt\u00eb problem, kodi p\u00ebr sulmin e D\u00ebshmimit t\u00eb Tipit transferohet n\u00eb nj\u00eb bllok kushtor 'if', i cili nuk aktivizohet n\u00eb kushte normale, por ekzekutohet n\u00eb modalitetin spekulativ, kur parashikimi i gabuar i procesorit p\u00ebr deg\u00ebzimet e ardhshme ndodh. <\/p>\n

Si pasoj\u00eb, procesori spekule aktivizon nj\u00eb tregues 64-bit\u00ebsh t\u00eb formuar dhe rregullon gjendjen pas p\u00ebrcaktimit t\u00eb parashikimit t\u00eb d\u00ebshtuar, por gjurm\u00ebt e ekzekutimit mbesin n\u00eb cache t\u00eb p\u00ebrgjithsh\u00ebm dhe mund t\u00eb rikuperohen p\u00ebrmes metodave t\u00eb p\u00ebrcaktimit t\u00eb p\u00ebrmbajtjes s\u00eb caches nga kanale t\u00eb jashtme, duke analizuar ndryshimin e koh\u00ebs s\u00eb aksesit n\u00eb t\u00eb dh\u00ebnat e ruajtura dhe t\u00eb pa ruajtura. P\u00ebr analizimin e p\u00ebrmbajtjes s\u00eb caches n\u00eb kushte t\u00eb pasakt\u00ebsis\u00eb s\u00eb mjaftueshme t\u00eb or\u00ebs, t\u00eb disponueshme n\u00eb JavaScript, p\u00ebrdoret metoda e propozuar nga Google, e cila mashtron strategjin\u00eb e p\u00ebrdorur nga procesor\u00ebt p\u00ebr shkarkimin e t\u00eb dh\u00ebnave nga cache Tree-PLRU dhe lejon, p\u00ebrmes rritjes s\u00eb numrit t\u00eb cikleve, t\u00eb rris\u00eb n\u00eb m\u00ebnyr\u00eb t\u00eb konsiderueshme diferenc\u00ebn n\u00eb koh\u00eb n\u00eb prani dhe munges\u00eb t\u00eb vler\u00ebs n\u00eb cache.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0445, \u0430\u0432\u0441\u0442\u0440\u0430\u043b\u0438\u0439\u0441\u043a\u0438\u0445 \u0438 \u0438\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043b\u0430\u0441\u0441\u0430 Spectre \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u0445 \u043d\u0430 \u0431\u0430\u0437\u0435 \u0434\u0432\u0438\u0436\u043a\u0430 Chromium. \u0410\u0442\u0430\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f Spook.js, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u043f\u0443\u0441\u043a JavaScript-\u043a\u043e\u0434\u0430 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 \u0441\u0430\u0439\u0442\u043e\u0432 \u0438 \u043f\u0440\u043e\u0447\u0438\u0442\u0430\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0432\u0441\u0435\u0433\u043e \u0430\u0434\u0440\u0435\u0441\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0430 \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430, \u0442.\u0435. \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c \u0441\u0442\u0440\u0430\u043d\u0438\u0446, \u0437\u0430\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101262","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Teknika e re e shfryt\u00ebzimit t\u00eb dob\u00ebsive t\u00eb klas\u00ebs Spectre n\u00eb Chrome | ProHoster","description":"Nj\u00eb grup studiuesish nga universitete amerikane, australiane dhe izraelite propozoi nj\u00eb teknik\u00eb t\u00eb re sulmi p\u00ebrmes kanaleve t\u00eb jashtme p\u00ebr shfryt\u00ebzimin e dob\u00ebsive t\u00eb klas\u00ebs Spectre n\u00eb shfletuesit e bazuar n\u00eb motorin Chromium.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/novaya-tehnika-ekspluataczii-uyazvimostej-klassa-spectre-v-chrome","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u043e\u0432\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043b\u0430\u0441\u0441\u0430 Spectre \u0432 Chrome | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0445, \u0430\u0432\u0441\u0442\u0440\u0430\u043b\u0438\u0439\u0441\u043a\u0438\u0445 \u0438 \u0438\u0437\u0440\u0430\u0438\u043b\u044c\u0441\u043a\u0438\u0445 \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043b\u0430\u0441\u0441\u0430 Spectre \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u0445 \u043d\u0430 \u0431\u0430\u0437\u0435 \u0434\u0432\u0438\u0436\u043a\u0430 Chromium.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/novaya-tehnika-ekspluataczii-uyazvimostej-klassa-spectre-v-chrome","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-09-13T20:22:38+00:00","article:modified_time":"2021-09-13T20:22:38+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101262","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-09-13 21:00:47","updated":"2022-10-04 03:17:37","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/101262","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=101262"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/101262\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=101262"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=101262"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=101262"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}