Waxaan hubaa inaad ka warqabto dayacanka hardware Specter iyo Meltdown ee la shaaciyay sanadkii hore ee Janaayo^(January) . Nuglaanta qalabkani waxay u saamaxdaa barnaamijyadu inay xadaan xogta lagu farsamaynayo kombayutarka. Ka dib waxaa yimid Specter 2^{(Spectre 2)} ! Iyadoo tan la yareeyay, xalku wuxuu keenay hoos u dhac la taaban karo oo waxqabadka ah. Retpoline waxay ahayd jawaab tan! Maqaalkan, waxaan ku arki doonaa sida aad awood ugu yeelan karto Retpoline Windows ^(Retpoline)10^{(Windows 10)} .

Daar Retpoline Windows 10

Waxaa xiiso leh in la ogaado in Retpoline ay tahay farsamada wax ka beddelka laba-geesoodka ah ee uu sameeyay Google . Waa in laga ilaaliyo "Branch target injection" oo sidoo kale loo yaqaan "Spectre." Xalkani wuxuu hubinayaa in waxqabadka CPU uu soo hagaagayo. Microsoft waxay tan u soo gudbinaysaa marxalado. Iyo kakanaanta hirgelintiisa awgeed, faa'iidooyinka wax-qabadku waa Windows 10 v1809 iyo sii-deynta dambe.

Si aad gacanta ugu suurta geliso Rerpoline Windows , hubi inaad haysato KB4482887 Cusbooneysii^{(KB4482887 Update)} .

Marka xigta, ku dar cusboonaysiinta qaabaynta diiwaangelinta ee soo socota:

Ku saabsan SKU-yada Macmiilka:^{(On Client SKUs:)}

reg add "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverride /t REG_DWORD /d 0x400

reg add "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverrideMask /t REG_DWORD /d 0x400

Dib u bilow

On Server SKUs:

reg add "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverride /t REG_DWORD /d 0x400

reg add "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverrideMask /t REG_DWORD /d 0x401

Dib u bilow

Sida loo xaqiijiyo heerka Retpoline ee Windows

Si loo xaqiijiyo haddii Retpoline uu firfircoon yahay, waxaad isticmaali kartaa Get-SpeculationControlSettings PowerShell cmdlet. Qoraalkan PowerShell wuxuu^{(This PowerShell script)} muujinayaa xaaladda la hagaajin karo ee Windows nuglaanta dhinaca-kanaalka fulinta mala-awaalka ah ee kala duwan. Waxaa ku jira kala duwanaanshaha Specter^(Spectre) 2 iyo Meltdown . Markaad soo dejiso qoraalka oo aad fuliso, tani waa sida ay u egtahay.

Speculation control settings for CVE-2017-5715 [branch target injection] 

Hardware support for branch target injection mitigation is present: True  
Windows OS support for branch target injection mitigation is present: True 
Windows OS support for branch target injection mitigation is enabled: True 
… 
BTIKernelRetpolineEnabled           : True 
BTIKernelImportOptimizationEnabled  : True 
...

Retpoline waa hagaajinta waxqabadka Specter Variant 2^{(Spectre Variant 2)} . Furaha ayaa ah in ay u baahan tahay labada qalab iyo taageerada OS ee duritaanka laanta la beegsanayo si ay u jirto oo ay awood u yeelato. Ogow in Skylake iyo jiilalka dambe ee soo -saareyaasha Intel aysan la socon karin Retpoline . Waxa kaliya oo ay awood u yeelan doonaan soo dejinta soo dejinta^{(Import Optimization)} processor-radan.

Cusboonaysiinta mustaqbalka, sifadan ayaa ku iman doonta si toos ah. Ilaa hadda, waxaa lagu oggolaan doonaa habaynta daruuraha. Microsoft waxay ka shaqaynaysaa xal kaas oo aan u baahnayn Retpoline . Jiilka soo socda ee qalabku waa inuu awoodaa inuu taas hagaajiyo - laakiin ilaa markaa cusboonaysiinta ayaa dabooli doonta dayacanka.

How to manually enable Retpoline on Windows 10

I am sure that you are awarе of the hardware vulnerabilities Spectre and Meltdown which were revealed last year in January. Thеѕe hardware vulnerabilities allow programs to ѕteal dаta that is being processed on the comрuter. Then cаme the Spectre 2! While this was mitigated, the solution resulted in more substantial performance dеgradation. Retpoline was an answer to this! In this post, we will see how you can enable Retpoline on Windows 10.

Enable Retpoline on Windows 10

It is interesting to note that Retpoline is a binary modification technique developed by Google. It is to protect against “Branch target injection,” also referred to as “Spectre.”  This solution makes sure that CPU performance improves. Microsoft is rolling this out in phases. And because of the complexity of its implementation, the performance benefits are for Windows 10 v1809 and later releases.

To manually enable Rerpoline on Windows, make sure you have the KB4482887 Update.

Next, add the following registry configuration updates:

On Client SKUs:

reg add "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverride /t REG_DWORD /d 0x400

reg add "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverrideMask /t REG_DWORD /d 0x400

Reboot.

On Server SKUs:

reg add "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverride /t REG_DWORD /d 0x400

reg add "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverrideMask /t REG_DWORD /d 0x401

Reboot.

How to verify Retpoline status on Windows

To confirm if Retpoline is active, you can use the Get-SpeculationControlSettings PowerShell cmdlet. This PowerShell script reveals the state of configurable Windows mitigations for various speculative execution side-channel vulnerabilities. It includes Spectre variant 2 and Meltdown. Once you download the script and execute, this is how it looks.

Speculation control settings for CVE-2017-5715 [branch target injection] 

Hardware support for branch target injection mitigation is present: True  
Windows OS support for branch target injection mitigation is present: True 
Windows OS support for branch target injection mitigation is enabled: True 
… 
BTIKernelRetpolineEnabled           : True 
BTIKernelImportOptimizationEnabled  : True 
...

Retpoline is a performance optimization for Spectre Variant 2. The key is that it requires both hardware and OS support for branch target injection to be present and enabled. Do note that Skylake and later generations of Intel processors are not compatible with Retpoline. They will have only Import Optimization enabled on these processors.

In future updates, this feature will come enabled by default. As of now, they will be allowed via cloud configuration. Microsoft is working on a solution which will no longer require Retpoline. The next generation of hardware should be able to fix that- but till then the updates will patch the vulnerabilities.

Related posts

• Sida loo damiyo Badbaadada Cusbooneysiinta Muuqaalka ee Windows 10

• Sida loo isticmaalo Network Sniffer Tool PktMon.exe gudaha Windows 10

• Ku qari ikhtiyaarka aaladaha gudaha Menu Macnaha guud ee Taskbar gudaha Windows 10

• Sida loo rakibo NumPy adoo isticmaalaya PIP Windows 10

• Ku billow faylasha si fudud myLauncher for Windows 10 kombiyuutarada

• Ciyaaraha isboortiga ee bilaashka ah ee ugu fiican Windows 10 PC

• Aqoonsiga Dhacdada 158 qalad - Diskiga isku midka ah ee GUIDs ee ku jira Windows 10

• Samee Firefox ka samee kontaroolada warbaahinta ee Firefox Windows 10 Shaashada qufulka

• Sida loo awoodo sanduuqa raadinta dhaxalka ah ee File Explorer ee Windows 10

• Waa maxay Xidhmada Awood-siinta ee Windows 10

• Ka yeel ka-hortagga-xumeynta gudaha Windows 10 Hello Wajiga Xaqiijinta

• Sharaxaada Martigeliyaha Habaynta Casriga ah ee Windows 10. Ammaan ma tahay?

• Tilmaamo cusub oo ku jira Windows 10 nooca 20H2 Oktoobar 2020 Cusbooneysii

• Sida loo joojiyo fasalada kaydinta la saari karo iyo gelida gudaha Windows 10

• Hagaaji qulqulka baytariyada degdega ah Windows 10 adoo isticmaalaya Graphics Hybrid

• Sida loo hawlgeliyo Windows 10 Enterprise Edition

• Sida loo dhaqan geliyo Raadinta Badbaadada Google ee Microsoft Edge gudaha Windows 10

• Waa maxay nidaamka splwow64.exe gudaha Windows 10 oo ma joojin karaa?

• Sida loogu daro Secure Delete menu macnaha guud ee gudaha Windows 10

• Software-ka xaddidaya baytariyada bilaashka ah ee Windows 10