Ozakwethu abavela kuwebhusayithi ye-TechPowerUP abanesixhumanisi sokushicilelwa emaphephandabeni e-Dutch ukuthi i-Intel izame ukufumbathisa abacwaningi abathole ubungozi be-MDS. I-Vulnerabilities microarchitectural data sampling (MDS), isampula yedatha evela ku-microarchitecture, kuma-Intel processors abelokhu ethengiswa iminyaka engu-8 edlule. Ubungozi butholwe ngochwepheshe bezokuphepha base-Free University of Amsterdam (Vrije Universiteit Amsterdam, VU Amsterdam). Ngokusho kwencwadi ye-Nieuwe Rotterdamsche Courant, i-Intel inikeze abacwaningi “umvuzo” wama- $40 kanye no-$000 owengeziwe “wokunciphisa usongo” “kwimbobo” ekhonjiwe. Abacwaningi, umthombo usaqhubeka, bayinqabile yonke le mali.
Ngokuyisisekelo, i-Intel akenzanga lutho olukhethekile. Ngemuva kokutholwa kobungozi be-Specter kanye ne-Meltdown, inkampani yethule uhlelo lokuklomelisa ngemali ye-Bug Bounty kulabo abathola ubungozi obuyingozi ezinkundleni ze-Intel futhi bakubike enkampanini. Isimo esingeziwe nesiyisibopho sokuthola umvuzo ukuthi akekho umuntu ngaphandle kwabantu abaqokwe ngokukhethekile abavela kwa-Intel okufanele azi mayelana nokuba sengozini. Lokhu kunikeza i-Intel isikhathi sokunciphisa usongo ngokudala ama-patches nokusebenza nabathuthukisi besistimu yokusebenza nabakhiqizi bezingxenye, isibonelo, ukuhlinzeka ngekhodi yokunamathisela ama-BIOS ebhodi lomama.
Endabeni yokutholwa kwesigaba se-MDS sokuba sengozini, i-Intel cishe yayingenaso isikhathi sokunciphisa ngokushesha usongo. Nakuba ama-patches Ekuphenduleni isimemezelo sokutholwa kobungozi obusha, i-Intel ayizange ibe nesikhathi sokuvuselela ngokugcwele i-microcode yamaphrosesa, futhi lezi zinqubo zisalindile. Akunakwenzeka ukuthi inkampani ihlele "ukugwazisa" ukuze ifihle unomphela usongo olutholwe yiqembu le-VU Amsterdam, kodwa kungenzeka ukuthi izithengele isikhathi sokuhamba.
Source: 3dnews.ru