Uma ngemuva Mayelana ne-ZombieLoad Uma uthukile ucabanga ukuthi ungasivala kanjani isici se-Intel's Hyper-Threading ukuvimbela ukuxhashazwa kobungozi obusha obufana ne-Specter ne-Meltdown, bese udonsa umoya - isiqondiso esisemthethweni se-Intel empeleni asikukhuthazi ukwenza lokhu kwabaningi. amacala.
I-ZombieLoad ifana nokuhlasela kwangaphambilini kwesiteshi eseceleni okuphoqa ama-Intel processors ukuthi adalule ulwazi olubucayi okungenzeka luvamise ukuhlukaniswa futhi lufinyeleleke kuphela ezinhlelweni ezilusebenzisayo. Abacwaningi bezokuphepha bake babika ngaphambilini ukuthi ubungozi bukhona kuma-Intel chips amaningi futhi bungasetshenziswa ku-Windows, MacOS kanye ne-Linux.
I-Intel, ngakolunye uhlangothi, ayihambisani nokuthi ubungozi beZombieLoad buhlolwa kanjani. Inkampani ize yanquma ukunikeza i-ZombieLoad igama elihlukile - I-Microarchitectural Data Sampling (MDS) noma i-Microarchitectural Data Sampling. Vumelana, lokhu kuzwakala kuthusa kakhulu kunereferensi yama-Zombies athile.
"Ukuba sengozini kwe-MDS kusekelwe ekuthathweni kwedatha ekhishwe ezakhiweni ezincane ku-CPU kusetshenziswa isiteshi esiseceleni esicatshangelwayo sokubulawa kwabantu endaweni," kuchaza inkampani. “Ukusebenza okungokoqobo kwe-MDS kuyinkimbinkimbi kakhulu. Ukuba sengozini ngokwayo akunikezi umhlaseli indlela yokukhetha idatha afuna ukuyithola.”
"I-MDS isivele kukhulunywe ngayo ezingeni le-hardware kumaphrosesa ethu amaningi e-Intel Core esizukulwane sesishiyagalombili nesesishiyagalolunye, kanye nomndeni we-Intel Xeon Scalable wesizukulwane sesibili," kusho inkampani. “Kweminye imikhiqizo ethintekile, izindlela zokunciphisa zitholakala ngokuvuselelwa kwe-microcode kuhlanganiswe nesistimu yokusebenza efanele kanye nezibuyekezo zesoftware ye-hypervisor, ezitholakala kusukela namuhla. Sihlinzeke kuwebhusayithi yethu futhi siqhubeke nokukhuthaza wonke umuntu ukuthi agcine amasistimu akhe esesikhathini samanje njengoba lena kungenye yezindlela ezingcono kakhulu zokuhlala uphephile."
I-Intel iphinde yaveza ukuthi ithimba labacwaningi be-ZombieLoad belisebenzisana nenkampani nabanye embonini ye-PC ukuhlanganisa ubungozi ngaphambi kokuthi kwaziwe esidlangalaleni. "Sithanda ukuzwakalisa ukubonga kwethu kubacwaningi abasebenza nathi kanye nozakwethu bemboni ngeqhaza labo ekuxazululeni isixazululo sale nkinga."
Manje kuthiwani nge-Hyper-Threading?
I-Intel ithe ukukhubaza i-Hyper-Threading akudingekile noma ukuphela kwenketho yabasebenzisi be-PC. Eqinisweni, i-Intel ithi kukukhasimende ngalinye ukunquma ukuthi lenzeni. Uma ungeke ukwazi ukuqinisekisa ukuphepha kwesofthiwe oyifakile, khona-ke yebo, mhlawumbe kuwumqondo omuhle ukukhubaza i-Hyper-Threading. Uma isofthiwe iphuma esitolo seMicrosoft kuphela, emnyangweni wakho we-IT, noma ivele ifakwe kulokho okholelwa ukuthi iyimithombo ethembekile, ungashiya i-Hyper-Threading ivuliwe. Kuya ngokuthi ukhathazeke kangakanani ngokuphepha kwakho.
"Ngenxa yokuthi izici ziyahlukahluka kakhulu kumakhasimende, i-Intel ayikukhuthazi ukukhubaza i-Hyper-Threading njengoba kubalulekile ukuqonda ukuthi akuyona ukuphela kwendlela yokuvikela i-MDS futhi ayinikezi isivikelo ngokwayo," kusho inkampani esitatimendeni. .
Ngesikhathi esifanayo, ukusabela kwabakhiqizi besistimu yokusebenza kuyahluka komunye nomunye.
I-Google ikhiphe ukulungiswa kwe-Chrome OS okukhubaza i-Hyper-Threading yama-Chromebook ngokuzenzakalela. Abantu abafuna ukuvula ubuchwepheshe bezintambo eziningi bangakwazi ukuzenzela bona, inkampani ikholelwa ukuthi.
I-Apple ikhiphe isibuyekezo se-MacOS Mojave futhi yamemezela ukuthi amakhasimende enkampani, ikakhulukazi aqaphela ukuphepha, angakwazi ukukhubaza i-Hyper-Threading ngokwabo.
IMicrosoft ithe ikhiphe ama-patches esoftware yayo ukunciphisa amathuba e-MDS, kodwa futhi yaphawula ukuthi amakhasimende kufanele futhi athole izibuyekezo ze-firmware kubakhiqizi bawo be-PC.
Ngenxa yokuthi, ingxenye enkulu, abathengisi besistimu yokusebenza banqume ukushiya i-Hyper-Threading inikwe amandla, usongo lwe-ZombieLoad ngokusobala alubucayi njengoba belubonakala osukwini oludlule. Ngaphezu kwalokho, akukabikho icala elaziwayo lokuba sengozini okusetshenziswe ekuhlaselweni kwangempela.
Ngesikhathi esifanayo, ukusebenzisa ama-patches ngaphandle kokukhubaza ubuchwepheshe be-Hyper-Threading cishe akunciphisi ukusebenza kwe-Intel processors.
Kodwa ngeke ukholwe uma ukubheka Umthelela we-Intel wamapeshi okuvikela ekusebenzeni lapho i-Hyper-Threading ivaliwe. Inkampani ithi iziqephu zokuphepha, kanye nokukhubaza i-Hyper-Threading, kunomthelela omncane ngokusolisayo ekusebenzeni.
Ingosi Angivumelani kakhulu nombono we-Intel wokuthi ukukhubaza i-Hyper-Threading akuyona inkinga enkulu, noma i-Intel ikhombisa kumbhalo wayo ukuthi ukusebenza akushintshile. Inkinga ukuthi izivivinyo ze-Intel zingowokwenziwa uma kukhubaza i-Hyper-Threading, njengoba inkampani ayizange ihlole imithwalo ethile yomsebenzi enemicu eminingi. Ukube i-Intel ibithathe i-Blender, i-Cinebench, noma amanye amabhentshimakhi aklanyelwe ama-multi-core kanye nama-multi-threaded processors, besiyobona ngokushesha ukudipha okukhulu kokusebenza.
Ukugqamisa ukuthi kubaluleke kangakanani ubuchwepheshe be-Hyper-Threading, ungavele ubheke ama-processor we-Intel i9-9900K nama-$500 i7-9700K angu-$375, umehluko omkhulu okuwukusekelwa kwawo kwe-Hyper-Threading. Ukukhubaza i-Hyper-Threading kuma-Intel processors kuyigalelo elimangalisayo kunoma ubani onendaba nokusebenza okunemicu eminingi.
Kodwa kunezindaba ezinhle zalabo abasebenzisa i-Intel processors yakamuva. Le nkampani ithe amaphrosesa ayo amaningi akamuva esizukulwane sesi-8 nesesi-9 asevele anokulungiswa kwe-microcode yehadiwe, ngakho-ke asikho isizathu sokuthi abanikazi be-i9-9900K bakhubaze i-Hyper-Threading. Ingozi ye-ZombieLoad ngokusobala iphezulu kuma-processor amadala. Abanikazi balezi zinhlelo kuzodingeka bathembele ekubuyekezweni kwesistimu yokusebenza nezibuyekezo zesofthiwe, kanye nokusebenza kwezixazululo zabo zokuvikela amagciwane, ukuze kuncishiswe ubungozi bokuthola ikhodi enonya. Ake siphinde sikhumbule iqiniso lokuthi kuze kube manje akukho ukuhlasela kusetshenziswa iZombieLoad okwaziwayo.
Source: 3dnews.ru