{"id":112031,"date":"2023-12-06T21:10:26","date_gmt":"2023-12-06T19:10:26","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/slam-ataka-na-cpu-intel-amd-i-arm-pozvolyayushhaya-opredelit-soderzhimoe-pamyati"},"modified":"2023-12-06T21:10:26","modified_gmt":"2023-12-06T19:10:26","slug":"slam-ataka-na-cpu-intel-amd-i-arm-pozvolyayushhaya-opredelit-soderzhimoe-pamyati","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/slam-ataka-na-cpu-intel-amd-i-arm-pozvolyayushhaya-opredelit-soderzhimoe-pamyati","title":{"rendered":"SLAM \u2013 nj\u00eb sulm ndaj CPU-ve Intel, AMD dhe ARM, q\u00eb mund\u00ebson identifikimin e p\u00ebrmbajtjes s\u00eb memories","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nj\u00eb grup hulumtuesish nga Universiteti i Lir\u00eb i Amsterdamit prezantoi nj\u00eb teknik\u00eb t\u00eb re sulmi SLAM (Spectre Linear Address Masking), e cila ofron nj\u00eb m\u00ebnyr\u00eb t\u00eb re p\u00ebr t\u00eb shfryt\u00ebzuar dob\u00ebsit\u00eb mikroarkitekturore t\u00eb klas\u00ebs Spectre, ku ndodhin rrjedhje t\u00eb t\u00eb dh\u00ebnave gjat\u00eb p\u00ebrkthimit t\u00eb adresave jo kanonike, dhe p\u00ebr t\u00eb anashkaluar verifikimet e kanonik\u00ebs p\u00ebrfshihen zgjerimet q\u00eb ofrohen n\u00eb procesor\u00ebt e rinj p\u00ebr maskimin e adresave lineare. Hulumtuesit publikuan nj\u00eb mjet me implementimin e metod\u00ebs dhe propozuan nj\u00eb demonstrim q\u00eb tregon se si mund t\u00eb nxirren nga memoria e b\u00ebrtham\u00ebs t\u00eb dh\u00ebna q\u00eb p\u00ebrputhen me nj\u00eb mask\u00eb t\u00eb caktuar (tregohet se si n\u00eb disa dhjet\u00ebra sekonda n\u00eb Ubuntu t\u00eb nxirret nga memoria e b\u00ebrtham\u00ebs nj\u00eb varg me hash-in e fjal\u00ebkalimit t\u00eb p\u00ebrdoruesit root).

\r\n \"Luaj\r\n
<\/div>\r\n <\/div><\/center> <\/p>\n

Sulmi mund t\u00eb realizohet n\u00eb sisteme me procesor\u00eb Intel q\u00eb mb\u00ebshtesin zgjerimin LAM (Linear Address Masking), procesor\u00eb AMD me zgjerimin UAI (Upper Address Ignore) dhe procesor\u00eb ARM me zgjerimin TBI (Top Byte Ignore). Zgjerimet e p\u00ebrmendura lejojn\u00eb p\u00ebrdorimin e disa bit\u00ebve t\u00eb treguesve 64-bit p\u00ebr ruajtjen e metadatat q\u00eb nuk jan\u00eb t\u00eb lidhura me adresimin (p\u00ebr programet e zakonshme nuk k\u00ebrkohet aq shum\u00eb memorie sa mund t\u00eb adresojn\u00eb treguesit 64-bit, k\u00ebshtu q\u00eb bit\u00ebt e sip\u00ebrm mund t\u00eb angazhohen, p\u00ebr shembull, p\u00ebr kontrolle q\u00eb lidhen me sigurin\u00eb). \u00cbsht\u00eb interesante q\u00eb procesor\u00ebt Intel, AMD dhe ARM q\u00eb mb\u00ebshtesin LAM, UAI dhe TBI jan\u00eb vet\u00ebm shpallur, por nuk prodhohen masivisht, \u00e7ka e b\u00ebn SLAM sulmin e par\u00eb spekulativ ndaj CPU-ve t\u00eb ardhshme. Sulmi mund t\u00eb realizohet gjithashtu n\u00eb CPU-t\u00eb e vjetra AMD Zen+ dhe Zen 2, t\u00eb prekura nga dob\u00ebsia CVE-2020-12965. <\/p>\n

N\u00eb p\u00ebrputhje me shfryt\u00ebzimin e dob\u00ebsive Spectre, p\u00ebr realizimin e sulmit SLAM k\u00ebrkohet q\u00eb n\u00eb b\u00ebrtham\u00eb t\u00eb ekzistojn\u00eb sekuenca t\u00eb caktuara instruksionesh (gadget), t\u00eb cilat \u00e7ojn\u00eb n\u00eb ekzekutimin spekulativ t\u00eb instruksioneve. Instruksionet e tilla shkaktojn\u00eb leximin spekulativ t\u00eb t\u00eb dh\u00ebnave nga memoria n\u00eb var\u00ebsi t\u00eb kushteve t\u00eb jashtme, n\u00eb t\u00eb cilat mund t\u00eb ndikoj\u00eb sulmuesi. Pas p\u00ebrcaktimit t\u00eb parashikimit t\u00eb gabuar, rezultati i ekzekutimit spekulativ hidhet posht\u00eb, por t\u00eb dh\u00ebnat e trajtuara mbeten n\u00eb cache dhe mund t\u00eb nxirren m\u00eb von\u00eb p\u00ebrmes analiz\u00ebs p\u00ebrmes kanaleve an\u00ebsore. P\u00ebr nxjerrjen e t\u00eb dh\u00ebnave t\u00eb mbetura n\u00eb cache, hulumtuesit p\u00ebrdorin metod\u00ebn Evict+Reload, e cila bazohet n\u00eb krijimin e kushteve p\u00ebr t\u00eb d\u00ebbuar t\u00eb dh\u00ebnat nga cache (p\u00ebr shembull, krijohet aktivitet q\u00eb plot\u00ebson n\u00eb m\u00ebnyr\u00eb t\u00eb barabart\u00eb cache-in me p\u00ebrmbajtje tipike) dhe ekzekutimin e operacioneve, koha e ekzekutimit t\u00eb t\u00eb cilave lejon t\u00eb gjykohet p\u00ebr pranin\u00eb e t\u00eb dh\u00ebnave n\u00eb cache-in e procesorit. <\/p>\n

P\u00ebr t\u00eb realizuar nj\u00eb sulm SLAM p\u00ebrdoren pajisje t\u00eb bazuara n\u00eb kod, n\u00eb t\u00eb cilin t\u00eb dh\u00ebnat e kontrolluara nga sulmuesi (m\u00eb posht\u00eb variabla \u2018secret\u2019) p\u00ebrdoren si tregues. P\u00ebr shembull: void unmasked_gadget(long **secret) { **secret; } <\/p>\n

V\u00ebrehet se k\u00ebto modele kodi p\u00ebrdoren shpesh n\u00eb programe, p\u00ebr shembull, n\u00eb kernelin Linux jan\u00eb identifikuar dhjet\u00ebra mij\u00ebra t\u00eb tilla gadget, nga t\u00eb cilat t\u00eb pakt\u00ebn disa qindra jan\u00eb t\u00eb p\u00ebrshtatshme p\u00ebr t'u p\u00ebrdorur n\u00eb eksploit\u00eb. Rrjedhja mund t\u00eb bllokohet duke shtuar n\u00eb k\u00ebto gadget instrukcione shtes\u00eb q\u00eb bllokojn\u00eb ekzekutimin spekulativ. Kompania Intel ka p\u00ebr q\u00ebllim t\u00eb ofroj\u00eb nj\u00eb metod\u00eb softuore p\u00ebr bllokimin e rrjedhjes para fillimit t\u00eb shp\u00ebrndarjes s\u00eb procesor\u00ebve me mb\u00ebshtetje LAM. Kompania AMD rekomandoi p\u00ebrdorimin e metodave ekzistuese p\u00ebr bllokimin e sulmeve t\u00eb klas\u00ebs Spectre v2. Zhvilluesit e kernelit Linux, p\u00ebr t\u00eb mbrojtur nga sulmi, vendos\u00ebn t\u00eb \u00e7aktivizojn\u00eb p\u00ebr default mb\u00ebshtetje LAM deri n\u00eb publikimin e rekomandimeve nga Intel p\u00ebr bllokimin e dob\u00ebsis\u00eb.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 SLAM (Spectre Linear Address Masking), \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0443\u044e \u043d\u043e\u0432\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043b\u0430\u0441\u0441\u0430 Spectre, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043f\u0440\u0438 \u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u0438 \u043d\u0435\u043a\u0430\u043d\u043e\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u0430 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u043a\u0430\u043d\u043e\u043d\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u044e\u0442\u0441\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0432 \u043d\u043e\u0432\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043b\u0438\u043d\u0435\u0439\u043d\u044b\u0445 \u0430\u0434\u0440\u0435\u0441\u043e\u0432. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043c\u0435\u0442\u043e\u0434\u0430 \u0438 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112031","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47SLAM \u2014 sulm ndaj CPU-ve Intel, AMD dhe ARM q\u00eb lejon t\u00eb p\u00ebrcaktohet p\u00ebrmbajtja e memories | ProHoster","description":"Nj\u00eb grup hulumtuesish nga Universiteti i Lir\u00eb i Amsterdamit prezantoi nj\u00eb teknik\u00eb t\u00eb re sulmi SLAM (Spectre Linear Address Masking), e cila ofron nj\u00eb m\u00ebnyr\u00eb t\u00eb re p\u00ebr t\u00eb shfryt\u00ebzuar dob\u00ebsit\u00eb mikroarkitekturore t\u00eb klas\u00ebs Spectre, ku ndodhin rrjedhje t\u00eb t\u00eb dh\u00ebnave gjat\u00eb p\u00ebrkthimit t\u00eb adresave jo kanonike, dhe p\u00ebr t\u00eb anashkaluar verifikimet e kanonik\u00ebs p\u00ebrfshihen zgjerimet q\u00eb ofrohen n\u00eb procesor\u00ebt e rinj p\u00ebr maskimin e adresave lineare. Hulumtuesit publikuan nj\u00eb mjet me implementimin e metod\u00ebs dhe propozuan","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/slam-ataka-na-cpu-intel-amd-i-arm-pozvolyayushhaya-opredelit-soderzhimoe-pamyati","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47SLAM \u2014 \u0430\u0442\u0430\u043a\u0430 \u043d\u0430 CPU Intel, AMD \u0438 ARM, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 SLAM (Spectre Linear Address Masking), \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0443\u044e \u043d\u043e\u0432\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043b\u0430\u0441\u0441\u0430 Spectre, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043f\u0440\u0438 \u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u0438 \u043d\u0435\u043a\u0430\u043d\u043e\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u0430 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u043a\u0430\u043d\u043e\u043d\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u044e\u0442\u0441\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0432 \u043d\u043e\u0432\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043b\u0438\u043d\u0435\u0439\u043d\u044b\u0445 \u0430\u0434\u0440\u0435\u0441\u043e\u0432. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043c\u0435\u0442\u043e\u0434\u0430 \u0438 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0430","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/slam-ataka-na-cpu-intel-amd-i-arm-pozvolyayushhaya-opredelit-soderzhimoe-pamyati","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-12-06T19:10:26+00:00","article:modified_time":"2023-12-06T19:10:26+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/112031","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=112031"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/112031\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=112031"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=112031"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=112031"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}