DMA: an gano wani sabon yanayin raunin tsaro

Tsawa 3 / USB-C

An gano sabon yanayin rauni ta hanyar DMA (Samun Memwaorywalwar ajiya ta kai tsaye). Waɗannan nau'ikan hare-haren na DMA ba sabon abu bane, an san su shekaru da yawa, amma yanzu ƙungiyar masu binciken tsaro sun gano wata sabuwar barazanar da ta shafi manyan tsarukan aiki: GNU / Linux, FreeBSD da sauran BSD, Microsoft Windows da Apple macOS. Harin da ke amfani da wannan yanayin yana iya kewaye hanyoyin kariya.

Ta haɗa haɗarin na'urar toshe mai haɗari zuwa kwamfutar, ana iya yin waɗannan hare-haren. Na'urorin na iya zama mafi bambance-bambancen, daga adaftar cibiyar sadarwar USB, linzamin kwamfuta, maballan komputa, pendrive ko rumbun kwamfutar waje, katin zane na waje, firintocinku, da sauransu. Amma suna shafar tashar jiragen ruwa musamman tsãwa 3, wato, saboda haka kuma a USB-C wanda aka dogara. Thunderbolt yana ba da damar abubuwan da aka haɗa ta hanyarsa don ketare manufofin tsaro na tsarin aiki da ƙwaƙwalwar tsarin, samun damar shiga wasu na'urori ta hanyar DMA. Adireshin ƙwaƙwalwa (karanta da rubutu) wanda ya kamata a ajiye. A waɗancan wuraren ƙwaƙwalwar, za a iya samun keɓaɓɓun bayanai kamar su kalmomin shiga da aka adana, banki ko bayanan shiga don wasu mahimman ayyuka, ƙimar masu zaman kansu da mai binciken ya adana, da dai sauransu.

Sake OS yana amfani da naúrar IOMMU (I / O sashen kula da ƙwaƙwalwar ajiya) don toshe sauran hare-haren DMA da suka gabata ta hana halattattun na'urorin haɗi daga samun damar wasu wuraren ƙwaƙwalwar kuma kawai a basu damar samun damar waɗanda suka dace. Madadin haka, wani tari da ake kira Thunderclap na iya wautar da wannan kariya kuma ya tsallake shi don haramtattun dalilai.


Bar tsokaci

Your email address ba za a buga. Bukata filayen suna alama da *

*

*

  1. Alhakin bayanai: AB Internet Networks 2008 SL
  2. Manufar bayanan: Sarrafa SPAM, sarrafa sharhi.
  3. Halacci: Yarda da yarda
  4. Sadarwar bayanan: Ba za a sanar da wasu bayanan ga wasu kamfanoni ba sai ta hanyar wajibcin doka.
  5. Ajiye bayanai: Bayanin yanar gizo wanda Occentus Networks (EU) suka dauki nauyi
  6. Hakkoki: A kowane lokaci zaka iyakance, dawo da share bayanan ka.