{"id":112031,"date":"2023-12-06T21:10:26","date_gmt":"2023-12-06T19:10:26","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/slam-ataka-na-cpu-intel-amd-i-arm-pozvolyayushhaya-opredelit-soderzhimoe-pamyati"},"modified":"2023-12-06T21:10:26","modified_gmt":"2023-12-06T19:10:26","slug":"slam-ataka-na-cpu-intel-amd-i-arm-pozvolyayushhaya-opredelit-soderzhimoe-pamyati","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/slam-ataka-na-cpu-intel-amd-i-arm-pozvolyayushhaya-opredelit-soderzhimoe-pamyati","title":{"rendered":"SLAM \u2014 nj\u00eb sulm mbi CPU-t\u00eb Intel, AMD dhe ARM, q\u00eb lejon p\u00ebrcaktimin e p\u00ebrmbajtjes s\u00eb memories","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Grupi i studiuesve nga Universiteti i Lir\u00eb n\u00eb Amsterdam prezantoi nj\u00eb teknik\u00eb t\u00eb re sulmi SLAM (Mashtimi i Adresave Lineare Spectre), e cila ofron nj\u00eb m\u00ebnyr\u00eb t\u00eb re p\u00ebr t\u00eb shfryt\u00ebzuar dob\u00ebsit\u00eb mikroarkitektonike t\u00eb klas\u00ebs Spectre, ku rrjedhja e t\u00eb dh\u00ebnave ndodh gjat\u00eb p\u00ebrkthimit t\u00eb adresave jo kanonike, dhe p\u00ebr t\u00eb anashkaluar verifikimet e kanonicitetit jan\u00eb angazhuar zgjerime t\u00eb ofruara n\u00eb procesor\u00ebt e rinj p\u00ebr mashtimin e adresave lineare. Studiuesit publikuan nj\u00eb mjet me implementimin e metod\u00ebs dhe ofruan nj\u00eb demonstrim q\u00eb tregon se si mund t\u00eb nxirren t\u00eb dh\u00ebnat nga memoria e b\u00ebrtham\u00ebs q\u00eb p\u00ebrfshijn\u00eb nj\u00eb mask\u00eb t\u00eb caktuar (tregohet se si brenda disa dhjet\u00ebra sekondash n\u00eb Ubuntu mund t\u00eb nxirret nga memoria e b\u00ebrtham\u00ebs nj\u00eb varg me hash t\u00eb fjal\u00ebkalimit t\u00eb p\u00ebrdoruesit root).

\r\n \"Luaj\r\n
<\/div>\r\n <\/div><\/center> <\/p>\n

Sulmi mund t\u00eb realizohet n\u00eb sisteme me procesor\u00eb Intel, q\u00eb mb\u00ebshtesin zgjerimin LAM (Mashtimi i Adresave Lineare), procesor\u00eb AMD me zgjerimin UAI (Injorimi i Adres\u00ebs S\u00eb Sip\u00ebrme) dhe procesor\u00eb ARM me zgjerimin TBI (Injorimi i Byte-it S\u00eb Sip\u00ebrme). Zgjerimet e lartp\u00ebrmendura lejojn\u00eb p\u00ebrdorimin e disa bit\u00ebve t\u00eb treguesve 64-bit p\u00ebr ruajtjen e metadatatave q\u00eb nuk lidhen me adresimin (p\u00ebr programet normale nuk k\u00ebrkohet aq shum\u00eb memorie q\u00eb mund t\u00eb adresojn\u00eb tregues 64-bit, prandaj bit\u00ebt e sip\u00ebrm mund t\u00eb angazhohen, p\u00ebr shembull, p\u00ebr verifikime q\u00eb kan\u00eb lidhje me sigurin\u00eb). \u00cbsht\u00eb interesante q\u00eb procesor\u00ebt Intel, AMD dhe ARM q\u00eb mb\u00ebshtesin LAM, UAI dhe TBI jan\u00eb vet\u00ebm shpallur, por nuk prodhohen masivisht, duke e b\u00ebr\u00eb SLAM sulmin e par\u00eb spekulativ ndaj CPU-ve t\u00eb ardhshme. Sulmi gjithashtu mund t\u00eb realizohet n\u00eb CPU-t\u00eb e vjetra AMD Zen+ dhe Zen 2, t\u00eb cilat jan\u00eb t\u00eb ndjeshme ndaj dob\u00ebsis\u00eb CVE-2020-12965. <\/p>\n

Si p\u00ebr analogji me shfryt\u00ebzimin e dob\u00ebsive Spectre, p\u00ebr t\u00eb realizuar nj\u00eb sulm SLAM nevojitet q\u00eb n\u00eb b\u00ebrtham\u00eb t\u00eb ekzistojn\u00eb sekuenca t\u00eb caktuara instrukcionesh (gadget\u00eb) q\u00eb \u00e7ojn\u00eb n\u00eb ekzekutimin spekulativ t\u00eb instrukcioneve. Instrukcione t\u00eb tilla \u00e7ojn\u00eb n\u00eb leximin spekulativ t\u00eb t\u00eb dh\u00ebnave nga memoria n\u00eb var\u00ebsi t\u00eb kushteve t\u00eb jashtme, t\u00eb cilat mund t\u00eb ndikohen nga sulmuesi. Pasi t\u00eb p\u00ebrcaktohet nj\u00eb parashikim i gabuar, rezultati i ekzekutimit spekulativ hidhet posht\u00eb, por t\u00eb dh\u00ebnat e p\u00ebrpunuara mbeten n\u00eb cache dhe mund t\u00eb nxirren m\u00eb von\u00eb p\u00ebrmes analiz\u00ebs p\u00ebrmes kanaleve t\u00eb tjera. P\u00ebr t\u00eb nxjerr\u00eb t\u00eb dh\u00ebnat e ngelura n\u00eb cache, studiuesit p\u00ebrdorin metod\u00ebn Evict+Reload, e cila bazohet n\u00eb krijimin e kushteve p\u00ebr t\u00eb d\u00ebbuar t\u00eb dh\u00ebnat nga cache (p\u00ebr shembull, krijohet aktivitet q\u00eb mbush barazim cache me p\u00ebrmbajtje standarde) dhe ekzekutimin e operacioneve, koha e realizimit t\u00eb cilave lejon t\u00eb jepet nj\u00eb gjykim mbi prani t\u00eb dh\u00ebnash n\u00eb cache-in e procesorit. <\/p>\n

P\u00ebr realizimin e sulmit SLAM p\u00ebrdoren gadget\u00eb t\u00eb bazuar n\u00eb kod, ku t\u00eb dh\u00ebnat e kontrolluara nga sulmuesi (n\u00eb vijim variabla «secret») p\u00ebrdoren si nj\u00eb tregues. P\u00ebr shembull: void unmasked_gadget(long **secret) { **secret; } <\/p>\n

V\u00ebrehet se k\u00ebto modele t\u00eb kodit shpesh p\u00ebrdoren n\u00eb programe, p\u00ebr shembull, n\u00eb b\u00ebrtham\u00ebn Linux jan\u00eb identifikuar dhjet\u00ebra mij\u00ebra gadget\u00eb t\u00eb till\u00eb, nga t\u00eb cil\u00ebt t\u00eb pakt\u00ebn disa qindra jan\u00eb t\u00eb p\u00ebrdorsh\u00ebm n\u00eb eksploit\u00eb. Shp\u00ebrthimi mund t\u00eb bllokohet p\u00ebrmes shtimit t\u00eb instrukcioneve t\u00eb tjera n\u00eb gadget\u00ebt e till\u00eb, t\u00eb cilat bllokojn\u00eb ekzekutimin spekulativ. Kompania Intel ka p\u00ebr q\u00ebllim t\u00eb ofroj\u00eb nj\u00eb metod\u00eb programore p\u00ebr bllokimin e shp\u00ebrthimeve para fillimit t\u00eb d\u00ebrgesave t\u00eb procesor\u00ebve me mb\u00ebshtetje p\u00ebr LAM. Kompania AMD rekomandoi p\u00ebrdorimin e metodave ekzistuese p\u00ebr bllokimin e sulmeve t\u00eb klas\u00ebs Spectre v2. Zhvilluesit e b\u00ebrtham\u00ebs Linux p\u00ebr mbrojtje nga sulmi vendos\u00ebn t\u00eb \u00e7aktivizojn\u00eb mb\u00ebshtetje p\u00ebr LAM si parazgjedhje deri n\u00eb publikimin e rekomandimeve nga Intel p\u00ebr bllokimin e dob\u00ebsis\u00eb.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 SLAM (Spectre Linear Address Masking), \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0443\u044e \u043d\u043e\u0432\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043b\u0430\u0441\u0441\u0430 Spectre, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0443\u0442\u0435\u0447\u043a\u0430 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043f\u0440\u0438 \u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u0438 \u043d\u0435\u043a\u0430\u043d\u043e\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0430\u0434\u0440\u0435\u0441\u043e\u0432, \u0430 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a \u043a\u0430\u043d\u043e\u043d\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u0432\u043b\u0435\u043a\u0430\u044e\u0442\u0441\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0435 \u0432 \u043d\u043e\u0432\u044b\u0445 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043c\u0430\u0441\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043b\u0438\u043d\u0435\u0439\u043d\u044b\u0445 \u0430\u0434\u0440\u0435\u0441\u043e\u0432. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043c\u0435\u0442\u043e\u0434\u0430 \u0438 \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112031","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47SLAM \u2014 nj\u00eb sulm ndaj CPU Intel, AMD dhe ARM q\u00eb lejon p\u00ebrcaktimin e p\u00ebrmbajtjes s\u00eb kujtes\u00ebs | ProHoster","description":"Grupi i hulumtuesve nga Universiteti i Lir\u00eb t\u00eb Amsterdamit prezantoi nj\u00eb teknik\u00eb t\u00eb re sulmi SLAM (Spectre Linear Address Masking), q\u00eb ofron nj\u00eb m\u00ebnyr\u00eb t\u00eb re p\u00ebr t\u00eb shfryt\u00ebzuar dob\u00ebsit\u00eb mikroarkitekturore t\u00eb klas\u00ebs.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/slam-ataka-na-cpu-intel-amd-i-arm-pozvolyayushhaya-opredelit-soderzhimoe-pamyati","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47SLAM \u2014 \u0430\u0442\u0430\u043a\u0430 \u043d\u0430 CPU Intel, AMD \u0438 ARM, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u043f\u0430\u043c\u044f\u0442\u0438 | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0410\u043c\u0441\u0442\u0435\u0440\u0434\u0430\u043c\u0441\u043a\u043e\u0433\u043e \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043d\u043e\u0432\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 SLAM (Spectre Linear Address Masking), \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0449\u0443\u044e \u043d\u043e\u0432\u044b\u0439 \u0441\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043b\u0430\u0441\u0441\u0430.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/slam-ataka-na-cpu-intel-amd-i-arm-pozvolyayushhaya-opredelit-soderzhimoe-pamyati","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-12-06T19:10:26+00:00","article:modified_time":"2023-12-06T19:10:26+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/112031","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=112031"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/112031\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=112031"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=112031"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=112031"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}