Muunad-qaadista Xogta Farsamo-yaqaanka ah^{(Microarchitectural Data Sampling)} ( MDS ) waa baylahda dhinaca CPU . Sida laga soo xigtay Intel , CPU -geeda waxay leedahay dhibco dabacsan oo ay ka faa'iidaysan karaan hackers. Tani waxay la macno tahay in aad gacanta ku hayso CPU -ga si ay u awooddo in ay akhrido xogta muddada gaaban ee lagu kaydiyay kaydadka CPU^(CPU) -gu. Aan aragno sida ay u shaqeyso. Waxaan sidoo kale ii sheegi doonaa sida loo ogaado haddii nidaamkaaga uu saameeyay ka faa'iidaysiga ZombieLoad .

MDS - Muunadaynta Xogta Farshaxanka-Yaryar^{(MDS – Microarchitectural Data Sampling)}

Processor-yaasha casriga ah ee Intel waxa ay ka shaqeeyaan kaydinta xogta gudaha kaydinta, xogta waxa loo diraa lagana soo qaadaa kaydiyaha processor-ka. Xirmooyinka gudaha ee soo-saareyaasha ayaa loo adeegsadaa in lagu dhimo waqtiga xisaabinta. Badbaadintan wakhtiga processor-ka, xogta processor-rada waxa marka hore lagu kaydiyaa xusuusta gudaha ee lagu dhex dhisay processor-ka sida Intel . Xogtu waa qaabka: TIME, DATA , iyo tiirarka IF_VALID . Waa in la hubiyo in qayb xog ahi ay wali shaqaynayso wakhti go'an. Tan waxaa lagu wareejiyaa kaydka CPU si loogu isticmaalo firmware kale ama software kasta oo kombuyuutarka ku jira.

Nuglaanta xogta microarchitectural ( MDS ) waa hab ay haakarisku ku xadaan xogta processor-yada aadka u yar yar wakhtiga dhabta ah. Kalfadhi kasta oo kombuyuutar ah, xogta waxa lagu kaydiyaa filtarrada ( TIME , DATA , IF_VALID ) ee meelahan yar yar. Si degdeg ah ayay isu beddelaan oo marka la xado, qiimihiisu ( ansaxnimadiisu^(validity) sidoo kale) isbeddelo. Weli, haakarisku waxay isticmaali karaan xogta xitaa haddii xogta ku jirta shaandhada/xusuusta processor ay isbedesho, taasoo u oggolaanaysa inay si buuxda u maamulaan mashiinka. Ma cadda. Dhibaatooyinku^(Problems) waxay bilaabmaan marka uu jabsadayhu helo furaha sirta ah ama xog kasta oo kale oo faa'iido leh oo ka timaada kaydiyaha yar ee processor-ka.

Si loo soo koobo kuwa kore, haakarisku waxay ururin karaan xogta inkasta oo nolosha xogta la kaydiyay ay aad u gaaban tahay. Sidii hore loo sheegay, xogtu way sii socotaa isbeddelka, markaa haakarisku waa inay degdegaan.

Khatarta ka imanaysa Muunadaynta Xogta Farsamada-yar^{(Microarchitectural Data Sampling)} ( MDS )

Muunad-qaadista Xogta Farsamada-yar ee^{(Microarchitectural Data Sampling)} ( MDS ) waxa laga yaabaa inay bixiso furaha sirta ah oo ay markaas gacanta ku dhigto faylasha iyo faylalka. MDS waxa laga yaabaa inay bixiso furaha sirta ah sidoo kale. Haddii la waxyeeleeyo, kombuyuutarku waa la bulukeeti karaa sida haddii ay dhacdo Ransomware .

Jilayaasha xaasidka ahi waxay xogta ka soo saari karaan barnaamijyada iyo apps kale marka ay jebiyaan xusuusta processor-ka. Helitaanka xogta RAM ma aha mid adag marka ay haystaan ​​furayaasha sirta ah. Hackers-ku waxay adeegsadaan bogag ama barnaamijyo si xaasidnimo leh loo qaabeeyey si ay u helaan macluumaadka processor-ka.

Midda ugu xun^(Worst) ayaa ah in kombuyuutarku aanu awood u lahayn, iyadoo aan la ogeyn in la jabsaday. Weerarka MDS^(MDS) waxba kagama tagi doono log-ka oo kama tago wax raad ah meel kasta oo ka mid ah kombayutarka, ama shabakada, markaa fursadaha qof kasta uu ku ogaan karo aad ayay u yar tahay.

Noocyada dayacanka MDS

Ilaa hadda, afar nooc oo ka mid ah dhismayaasha yaryar ayaa la ogaaday:

1. Muunadaynta Xogta Dekadda Culayska Farshaxanka-Yaryar-Architectural^{(Load Port Data Sampling)}
2. Muunadaynta Xogta Kaydka Farsamada-yar ee Bakhaarka^{(Microarchitectural Store Buffer Data Sampling)}
3. Muunad-qaadista Xogta Buuxinta Buuxinta Farsamo-yaqaanka^{(Microarchitectural Fill Buffer Data Sampling)} , iyo
4. Muunad-qaadista Xogta Farshaxanka-Yaryar-Architectural ee Muunad la'aanta^{(Microarchitectural Data Sampling Uncacheable)} ah

Tani waxay ahayd muddada ugu dheer (hal sano) ee dayacanka la helay oo loo xafiday sir ahaan ilaa dhammaan soosaarayaasha nidaamka hawlgalka iyo kuwa kale ay u samayn karaan balastar isticmaalyaashooda.

Isticmaalayaasha qaar ayaa su'aal galiyay sababta aysan si fudud u joojin karin hyperthreading si looga ilaaliyo MDS . Jawaabtu waa naafada hyperthreading ma bixiso nooc kasta oo ilaalin ah. Deminta threading-ka sare waxay ka dhigi doontaa kombuyuutarku inay gaabiyaan. Qalab cusub^(Newer) ayaa la dhisay si looga hortago weerarada MDS ee suurtagalka ah.

Kumbiyuutarkaagu ma yahay mid u nugul MDS?

Hubi^(Verify) in nidaamkaagu yahay mid nugul iyo in kale. Ka soo deji Qalabka MDS ^{(MDS Tool)}mdsattacks.com Waxaad halkaas ka heli doontaa macluumaad kale oo badan.

Sidee looga ilaaliyaa kombiyuutarada MDS?

Ku dhawaad ​​dhammaan nidaamyada hawlgalka ayaa soo saaray balastar ay tahay in la isticmaalo marka lagu daro microcode-ka Intel si meesha looga saaro nuglaanta. On Windows OS , cusboonaysiinta Talaadada^(Tuesday) ayaa la sheegay inay ku dhejiyeen kombuyuutarrada intooda badan. Tani, oo ay la socoto koodhka Intel ee lagu dhisayo dhejiska nidaamka hawlgalka, waa inay ku filnaataa inay ka hortagto tijaabinta microarchitectural ( MDS ) inay waxyeeleyso kombayutaradaada.

MDSAttacks website recommends disabling Simultaneous Multi-Threading (SMT), also known as Intel Hyper-Threading Technology, which significantly reduces the impact of MDS-based attacks without the cost of more complex mitigations. Intel has also provided CPU microcode updates, and recommendations for mitigation strategies for operating system (and hypervisor) software. We recommend you install the software updates provided by your operating system and/or hypervisor vendor.

Kumbiyuutarkaaga ha cusboonaysiiyo. Cusbooneysii BIOS-kaaga^{(Update your BIOS)} oo kala soo bax darawalka aaladaha ugu dambeeyay^{(download the latest device driver)} ee processor-ka mareegaha Intel^(Intel) .

Nuglaantan waxa u dhejiyay Microsoft khadkooda^(Microsoft) Windows ee^(Windows) nidaamyada hawlgalka. MacOS sidoo kale waxay heshay balastar May 15th , 2019. Linux ayaa diyaarisay balastarrada laakiin waxay u baahan tahay in si gaar ah loo soo dejiyo si loogu sameeyo Muunadaha Xogta Microarchitecture^{(Microarchitecture Data Sampling)} ( MDS ).

Microarchitectural Data Sampling (MDS) vulnerability explained

Microarchitectural Data Sampling (MDS) is a CPU side vulnerability. According to Intel, its CPU has some loose points that can be exploited by hackers. This means taking control of the CPU to be able to read very short term data stored in CPU internal buffers. Let’s see how it works. We will also tell me how to find out if your system is affected from this ZombieLoad exploit.

MDS – Microarchitectural Data Sampling

Modern Intel processors employ data storage in its internal buffers, the data being sent to and from the processor’s cache. The internal buffers of processors are used to cut compute time. For this saving of processor time, data from processors is first stored in internal memory built into a processor like Intel. The data is of the format: TIME, DATA, and IF_VALID columns. It is to make sure if a piece of data is still valid at a given time. This is transferred to CPU cache for use with other firmware or any other software on the computer.

The microarchitectural data sampling (MDS) vulnerability is a method whereby hackers steal data from processor’s ultra-small buffers in real time. In each computer session, data is stored with filters (TIME, DATA, IF_VALID) into these mini-caches. They keep changing very fast that by the time it is stolen, its value (validity too) changes. Still, hackers can use the data even if the data inside processor filters/memory changes, allowing them to take control of the machine completely. It is not evident. Problems begin when the hacker obtains any encryption key or any other useful data from the mini buffers in the processor.

To rephrase the above, hackers can collect data even though the life of data stored is extremely short. As said earlier, data keeps on changing, so hackers have to be quick.

Risks from Microarchitectural Data Sampling (MDS)

Microarchitectural Data Sampling (MDS) might give away encryption keys and thereby gain control over files and folders. MDS might give away passwords too. If compromised, the computer can be bricked like in case of Ransomware.

Malicious actors can extract data from other programs and apps once they break into the processor memory. Obtaining the RAM data is not difficult once they have the encryption keys. Hackers use maliciously designed web pages or programs to gain access over processor information.

Worst of all is the inability of a compromised computer, not knowing that it has been compromised. MDS attack won’t leave anything in the log and doesn’t leave any footprint anywhere on the computer, or network, so chances of anyone detecting it are very less.

Types of MDS vulnerabilities

As of now, four variants of the microarchitecture are detected:

1. Microarchitectural Load Port Data Sampling
2. Microarchitectural Store Buffer Data Sampling
3. Microarchitectural Fill Buffer Data Sampling, and
4. Microarchitectural Data Sampling Uncacheable Sampling

This was the longest (one year) period for which a vulnerability was found and kept as a secret until all operating system manufacturers and others could develop a patch for their users.

Some users questioned why can’t they simply disable hyperthreading to protect against MDS. The answer is the disabling hyperthreading does not provide any kind of protection. Disabling hyperthreading will make the computers slow. Newer hardware is being built to counter the possible MDS attacks.

Is your computer vulnerable to MDS?

Verify whether your system is vulnerable. Download the MDS Tool from mdsattacks.com. You will get a lot of other information there.

How to protect computers from MDS?

Almost all operating systems have issued a patch which should be used in addition to the Intel microcode to keep the vulnerability away. On Windows OS, the Tuesday updates are said to have patched most computers. This, along with the Intel code that is being built into the operating system patches, should be sufficient to prevent microarchitectural sampling (MDS) from compromising your computers.

MDSAttacks website recommends disabling Simultaneous Multi-Threading (SMT), also known as Intel Hyper-Threading Technology, which significantly reduces the impact of MDS-based attacks without the cost of more complex mitigations. Intel has also provided CPU microcode updates, and recommendations for mitigation strategies for operating system (and hypervisor) software. We recommend you install the software updates provided by your operating system and/or hypervisor vendor.

Keep your computer(s) updated. Update your BIOS and download the latest device driver for your processor from the Intel website.

This vulnerability has been patched by Microsoft for their Windows line of operating systems. macOS too received a patch on May 15th, 2019. Linux has prepared the patches but needs to be downloaded separately for Microarchitecture Data Sampling (MDS).

Related posts

• Module igfxEM wuxuu joojiyay qaladka shaqada Windows 11/10

• Intel Thunderbolt Dock software ma shaqeynayo Windows 11/10

• Waa maxay Hyperthreading ee CPU iyo sidee buu u shaqeeyaa?

• Adapter-ka Intel Dual Band Wireless-AC 7260 wuxuu sii wadaa goynta

• Cilada codsiga Igfxem.exe - Xusuusta lama akhrin karo

• Daar ama dami Intel Turbo Boost Max Technology Windows 11/10

• AMD vs Intel - Waa maxay faraqa ugu weyn?

• Markaad iibsanayso laptop-ka ciyaaraha ama kombuyuutar-yar, hel mid sita kaadhka fiidyowga ah ee ka wanaagsan, ma aha processor-ka Intel Core i7

• Sida loo maareeyo Xadka Isticmaalka Xogta ee Windows 11/10

• Darawalka Intel & Kaaliyaha Taageerada: Soo deji, rakib, cusboonaysii darawalada Intel

• Muuji Uninstaller Driver ee AMD, INTEL, NVIDIA Drivers

• Ku labanlaab xawaaraha WiFi-ga laptop-yada Windows iyo tablet-yada leh kaararka shabakadda Intel

• Sida loo dhaafo processor-ka Intel (CPU)

• Hagaaji dhibaatooyinka darawalada garaafka Intel ee Windows 11/10

• Ma soo dejin karo Faylka Diiwaanka Dhammaan xogta laguma qorin Diiwaanka

• Intel NUC10i5FNH dib u eegis: Waxqabadka adag ee qaab yar!

• Setup BitLocker wuxuu ku guul daraystay inuu dhoofiyo dukaanka BCD (Xogta Isku xidhka Boot).

• Darawalka lagu rakibay looma ansaxsana kombayutarkan

• Qalabka Intel Extreme Tuning Utility wuxuu kuu ogolaanayaa inaad dhaafto xawaaraha CPU, xusuusta iyo baska

• Daar mishiinka Processor-ka Intel Hubinta ilaalinta nuglaanta