Ukunyibilika okuthe ngqo kunye ne-Specter: yonke into ekufuneka uyazi malunga nobungozi (UPDATED)

Kucingelwa ukuba malunga ne-20% yezixhobo zexeshana kunye nezoqoqosho ezabelwe ukudala i-chip entsha iya kuyilo ngokwalo, ngelixa enye, okt ixesha elininzi kunye nemali, isiya kwimodeli, iimvavanyo kunye neemvavanyo ezenziweyo Ukuqinisekisa ukuba yonke into isebenza kakuhle. Ewe kubonakala ngathi abanye abavelisi abakhange benze izinto ngokufanelekileyo ngeemveliso zabo, kwaye kunjalo Ityala le-IntelNjengoko siza kubona, ayisiyiyo kuphela echaphazelekayo, kodwa sele inengxaki enkulu ngeetshipsi zayo, ukusuka kwingxaki edumileyo yokudada, ngokunye ukusilela kwii-chipset zayo, ukuya ekubeni sesichengeni kwakhona kwafunyanwa Injini yoLawulo, kwaye ngoku oku ...

Zonke iinethiwekhi zentlalo kunye namajelo eendaba akhukuliswe ziindaba, ezinye ziphikisana malunga neli tyala eliza kunika okuninzi ukuze uthethe ngalo kwaye ndikucebisa ukuba wenze isitya esihle sepopcorn ukubukela i-opera yesepha, kuba oku kuphela iqalile. Ke ngoko, ukuze abasebenzisi, ngakumbi abo beLinux, bangalahleki ngolwazi oluninzi kwaye bazi indlela yokwenza Kwaye banamathela entweni, ngaphandle bazi ukuba bayachaphazeleka okanye hayiSiza kupapasha eli nqaku kwiLxA.

Yintoni iSpecter kunye noMeltdown?

Ngokukodwa ingxaki yeRowhammer esele siyibonile ayibalulekanga ngokuthelekiswa nobunzulu bale ngxaki inye. Ngokuqinisekileyo sele uwavile amagama awaziwayo adala uloyiko, kwaye kunjalo Ukunyibilika kunye neSpecial. Olu hlaselo olunokuthi lubeke emngciphekweni ukhuseleko lwethu lusebenzise amanye amanqaku njengokuphuma ngaphandle komyalelo kunye nokwenza intelekelelo eqhutywa kuzo zonke iiprosesa zangoku ukuphucula ukusebenza. Siza kuchaza ukuba yintoni na umntu ngamnye ayinxalenye:

• Ukuxuba: ibizwa njalo kuba inyibilikisa umda wokhuseleko phakathi kwezicelo ezibekwe sisixhobo sehardware, nangona kwisiseko solwazi seMITER saziwa njengeCVE-2017-5754. Yeyona ngxaki imbi kakhulu efunyenweyo kwaye ichaphazela ngakumbi iprosesa ye-Intel ekhutshwe kule minyaka ilishumi idlulileyo. Ngenxa yolu bungozi, inkqubo engenakulungeleka inokufikelela kwindawo egcinwe kwimemori ye-kernel, ingxaki enkulu yokhuseleko. Umzekelo, iindawo zememori ye-RAM zinokulahlwa. Iipatches zokujongana nobungozi zihlisa umgangatho wentsebenzo.
• usongo: igama layo lilele kwindlela ekunzima ngayo ukuyisombulula, ke njengomboniso iya kusilandela kangangexesha elithile. Kubonakala kwiiyantlukwano ezahlukeneyo (i-CVE-2017-5753 kunye ne-CVE-2017-5717), inokuba yinto enzulu, kuba inokuvumela inkqubo "yokukhohlisa" i-kernel ekuhambiseni ulwazi ukusuka kwimimandla yememori elawulwa yinkqubo leyo. amagama, aphula umqobo phakathi kwezicelo. Kule meko, iyachaphazela ii-microprocessors ezingaphezulu, kodwa inokulungiswa ngohlengahlengiso lwesoftware kwaye ilahleko yokusebenza ayisebenzi ...

Oku konke malunga neMeltdown kunye neSpecter ichazwe ngendlela elula kwaye ngaphandle kokusebenzisa ulwimi lobuchwephesha ukuze wonke umntu aqonde. Ekugqibeleni esikubonileyo kukuba iMeltdown kunye neSpecter banokufikelela kwidatha egcinwe kwimemori yeenkqubo ezisebenzayo kwaye oku kusetyenziswa ngokuxhaphakileyo kunye nekhowudi eyingozi sisisongelo. Ngoku, inokundichaphazela njani le nto? Ewe, impendulo ilula nayo, kuba banokuvumela lungisa idatha, iifayile zokucoca kunye nedatha eyimfihlo, iifoto, ii-imeyile, idatha yefom, njl.. Ke ngoko yingxaki enkulu yezokhuseleko, mhlawumbi yenye yezona zinkulu kula maxesha akutshanje.

ILinus Torvalds ithethile

Linus Torvalds, umyili weNVIDIA Fuck wena! Ngoku kubonakala ngathi unike i-Intel umnxeba wokuvuka ngenxa yempazamo enkulu abayenzileyo. Kwaye kwimisonto yengxoxo malunga nengxaki esele ihleli ngenxa yokuchaphazeleka kwe-Linux kernel, amagama okuqala omdali akwenzelwanga ukuba alinde:

Kutheni yonke le nto ngaphandle kokukhetha ukumisela? Injineli ye-CPU enobuchule inokuyilungisa ngokuqinisekisa ukuba uqikelelo aludluli kwimimandla yokhuseleko. […] Ndicinga ukuba i-INtel kufuneka ijonge ii-CPUs zabo, kwaye ndiyavuma ngokwenene ukuba baneengxaki endaweni yokubhala igama elingu-PR bethetha yonke into isebenza ngendlela eyilwe ngayo. (Ngokubhekisele kwiingxelo ze-Intel). ...kwaye oko kuthetha ukuba zonke ezo patches ukunciphisa ingxaki kufuneka zibhalwe "hayi zonke ii-CPU ziyinkunkuma" engqondweni.. (Ngokubhekisele kwisiqwengana esisetyenziswayo kwaye sichaphazela zonke i-x86-64 microprocessors kubandakanya i-AMD ngaphandle kokuchaphazeleka ngenxa yokulahleka kokusebenza) Okanye ngaba i-Intel ithi 'sizibophelele ekuthengiseni i-shit ngonaphakade naphakade, singaze silungise nantoni na'? […] Kuba ukuba kunjalo, mhlawumbi kuya kufuneka siqale sijonge ngakumbi kwicala labantu le-ARM64 (Ngokubhekisa nokuba i-Intel izakusombulula ingxaki okanye iqhubeke nokuthengisa iimveliso). Nceda uthethe nabaphathi. Kungenxa yokuba ndibone kakuhle amathuba amabini:

1. I-Intel ayikaze ithi ilungisa nantoni na.
2. Okanye ezi zisombululo zinendlela yokukhubazeka.

Izibhengezo zibhekisa kwikhowudi ye Ipatch esetyenzisiweyo iphazamisa ukusebenza I-CPU kwaye ichaphazela bonke abaqhubekekisi kolu sapho, nokuba bayachaphazeleka nokuba sesichengeni. Kungenxa yoko le nto i-AMD ibonakalisile ukuba bayasebenza ukunqanda ukuba ii-microprocessors zabo nazo zibe nelahleko yokusebenza kwepatch kuba bengachaphazeleki.

Zeziphi iiprosesa ezichaphazela?

Lo ngumbuzo wesigidi seedola, ukusukela oko Ayichaphazeli iLinux kuphela kude nayoIngxaki ye-chip kwaye ke ichaphazela zombini ii-macOS, iiWindows, i-Android kunye ne-iOS, njl. Ke ngoko ayisiyonto ithile, kwaye ngoku siza kubona ukuba zeziphi iichips ezichaphazelekayo yile ngxaki yoyilo:

IiMicroprocessors ezichaphazelekayo yiMeltdown:

Ngokwenyani Zonke i-Intel microprocessors zenziwe ukusukela ngo-1995 Kude kube ngoku bayachaphazeleka yile ngxaki inkulu, kuba ithatha ithuba lokuphumeza i-odolo ukuze bayisebenzise. Oko kuthetha ukuba iilaptops, iidesktops, iiseva, kunye nee-supercomputer zisebenzisa ezi processor, kunye nezixhobo eziziimobhayili ezinee-chips ze-Atom, njl. Ukwahluka zii-Intel Atom ezisebenzisa ukwenziwa ngokulandelelana kwazo (ezo zaphuma ngaphambi kuka-2013, kuba ezona Atom zangoku zisebenzisa i-OoOE) kunye ne-Intel Itanium ekungekho mntu uya kuba nayo ekhaya kuba yenzelwe oomatshini abakhulu.

* INGCACISO EMFUTSHANE: I-ARM Cortex-A75 ikwachaphazeleka yi-Meltdown. Okwangoku kuphela le modeli ibonakala ichaphazelekile, kodwa sele uyazi ukuba iilayisensi ze-ARM ze-IP cores zabanye abayili be-SoC kwaye ukuba bane-Cortex-A75 baya kuchaphazeleka. Kodwa kubonakala ngathi isiphumo sincinci kule meko ...

Los I-AMD kunye ne-microprocessors esekwe kwi-ARM (IQualcomm, iSamsung, iApple, iMediatek, njl.njl.) Abachaphazeleki yile ngxaki. Ukuba unayo enye yezi chips uyakwazi ukuphefumla lula... Oku kubangele ukuba izabelo ze-Intel zithengiswe kwaye ziwele kwimarike yemasheya ngendlela ephindaphindayo ngaxeshanye nee-AMD zonyukile. Isizathu kukuba i-AMD ayikuvumeli ukubonakaliswa kwememori kolu hlobo, kubandakanya nezalathiso zokucinga, ngenxa yoko azinakuchaphazeleka kwi-Meltdown.

Isichazi esichaphazelekayo seMicroprocessors:

Kule meko inani lezixhobo ezichaphazelekayo kunye neetshipsi ziyandiswaKuba sibona indlela iipilisi, ii-smartphones, iidesktops, iilaptops, iiseva, iikhompyuter, njl. zichaphazelekayo. Kule meko, iichips ze-Intel ziyachaphazeleka, zonke ezo ARM Cortex-A, kunye nee-AMD zinokuchaphazeleka.

* Kwimeko ye-ARM, ichaphazela inani elikhulu lee-SoCs ezisebenzisa uyilo olulungisiweyo okanye ii-ARM IP cores ngaphakathi ezinje ngeQualcomm Snapdragon, i-Samsung Exynox, i-Apple A-Series, iMediatek, i-NVIDIA (anditsho ukuba zii-GPU, kodwa Ii-SoCs ezisekwe kwi-ARM), njl.

*** Abanye abeendaba bazididekile iindaba, kodwa iiGPU azichaphazeleki (jonga UPHANDO (umzuzu wokugqibela)).

** Ngoku siya kwimeko ye-AMD, kwiwebhusayithi esemthethweni yomyili we-CPU sinokubona itafile esikhokelela kwithemba kwaye isishiya sizolile:

Umahluko kuyilo lwe-AMD kuthintela iingxaki ezibangelwa yi-Meltdown, njengoko ezi CPU zingakhankanyi ukuba ikhowudi yomsebenzisi ilayisha ngqo kwimemori ye-kernel. Kwaye i-AMD ASID ikwathintela imiba yeeVM zeendwendwe kunye nabasebenzisi bengcambu kwezi.

IiMicroprocessors AKUKHO zichaphazele yiSpecial:

Olu luhlu lwee-microprocessors zikhululekile ukuba sesichengeni njengeSpecter kuba ijelo labo lokufundisa linobungqongqo kwaye lenziwe ngokulandelelana (ayizizo izakhiwo ze-OoOE) okanye kuba zibandakanya iimpawu ezibenza ukuba bazikhuseles. Ezinye zinokubonakala ngathi zindala kakhulu, kodwa ezinye zezamhlanje njengoko kunjalo I-SPARC kunye ne-AMD Zen. Ke ukuba une-CPU ekuolu luhlu lulandelayo awunakukhathazeka malunga nantoni na:

• YomelelaARM
• I-SuperSPARC
• I-Transmeta Crusoe kunye ne-Efficeon
• IPowerPC 603
• Endala x86: I-Pentium I kunye ne-clones, zonke i-8-bit kunye ne-16-bit chips, i-IDT WinChip, i-VIA C3, i-386 kunye ne-clones, i-486 kunye ne-clones
• Z80
• 6500 kunye nezinye
• 68k
• I-ARM Cortex-A7 MPCore (Raspberry Pi 2)
• I-ARM Cortex-A5
• I-ARM Cortex-A53 MPCore nangona inokwenziwa okwahlukileyo kunangaphambili kwaye ibifurcation, kubonakala ngathi ayichaphazeleki. Okubandakanyiweyo apha yiRaspberry Pi 3 kunye nezinye ii-smartphones kunye neetafile ezinje ngeQualcomm Snapdragon 625 ...
• I-Intel Atom ngaphambi kuka-2013, oko kukuthi, ezo zisekwe kubuchwephesha obunjengeDiamondville, iSilverthorne, iPineview, njl.njl., Kuba abayisebenzisi i-odolo yokuphuma.
• I-VIA C7 isebenzisa iskimu esisiseko sokuqikelela isebe kodwa akuchaphazeleki.
• I-Intel Itanium (IA-64)
• IBM POWER6 inesilinganiselo esilinganiselweyo sesebe ngenxa yoko kubonakala ngathi ayinakuhlaselwa.
• I-Xeon Phi kunye nee-GPGPU
• Uthotho lwe-SPARC T
• I-AMD yeZen: Ii-microprocessors zeRyzen kunye ne-EPyC zinemisebenzi enomdla yokubanakho ukuphazamisa okanye ukungabinakho ukuhlasela kwiSpecter. Oluqwalaselo ndithetha ngalo yi-SME / SEV (uKhuseleko lweMemori eKhuselekileyo kunye noKhuseleko oluSebenzayo oluKhuselekileyo) olunokuthintela nayiphi na imemori yokubuyisela kwimemori enokuthi yonakalise inkqubo kunye nemeko zokujonga ubunyani.

Sisiphi isisombululo?

aplicar iipatches okanye uhlaziye inkqubo yethu, nantoni na, kunye Amabala Siya kuba nelahleko yokusebenza enokuthi siyicacise ukuba yeyiphi kwinqanaba lokugqibela, kodwa ubuncinci kwinqanaba lokhuseleko siya kuthi sikhuseleke ngandlela ithile. Yitsho ukuba sele zikhona iindawo ezichasene neMeltdown yeLinux, kunye nezinye iinkqubo ezisebenzayo. Eyona nto imbi ngokubhekisele kwizixhobo ze-Android, ayizizo zonke ezinezibuyekezo ze-OTA ...

Ungabona olunye ulwazi malunga nayo kwezi zixhumanisi:

• Uluhlu lwee-imeyile ze-Linux Kernel
• Iprojekthi yeXen
• Intel
• AMD
• ARM
• Uphando
• Mozilla
• Debian
• Ubuntu
• USUSE
• Red Hat
• CERT
• VMWare
• Citrix

Yintoni ilahleko yokusebenza?

Sidibene no izisombululo ezibini ezinokubakho:

1. Ngesoftware: Kubandakanya ukumilisela ii-patches ze-macOS, i-Linux, iWindows, i-iOS kunye neenkqubo zokusebenza ze-Android, kodwa ezi ngelishwa azisombululi kuphela ingxaki yezokhuseleko kodwa ziya kwenza inkqubo yethu icothe ngenxa yendlela ezichaphazela ngayo ukwenziwa ngaphandle komyalelo, ukwenziwa kocingelo okanye ukucima i-TLB ye-CPU yethu ngelahleko ebonakalayo yokusebenza. Abanye bathethe ukuya kuthi ga kwi-50% yokusebenza okuncinci kwi-CPU yethu, ezinye izinto ezixeliweyo ezimbi zithetha phakathi kwe-5 kunye ne-30% yokusebenza okulahlekileyo kuxhomekeke kuhlobo lwesoftware esisebenza ngayo. Abanye bazama ukuthomalalisa i-alamu kwaye batyhola ukuba eminye imidlalo yevidiyo evavanyiweyo inike ilahleko ye-2% ekusebenzeni ngokwe-FPS (kuphela kwimeko yeLinux, kwiWindows abakahlalutywanga), kumdlalo wevidiyo umdlalo akufane ubuze ukuba ungene kwisithuba se kernel, kodwa kwenzeka ntoni ngezinye iinkqubo kunye nesoftware enekhowudi enemiyalelo emininzi exhomekeke kwimeko…? Apha ilahleko yokusebenza inokubonakala. Into eyinyani kukuba ezinye ezinje ngeIntel nezinye iiwebhusayithi zizamile ukuthomalalisa abasebenzisi kwaye bathi ilahleko yokusebenza ayizukuxabiseka kuninzi lwabasebenzisi basekhaya kwaye yingxaki eya kuthi ichaphazele amaziko edatha, iiseva, kunye neekhompyuter. siyakholelwa? Inyaniso kukuba kufuneka uhlale uzolile kwaye ulinde ukubona ukuba kwenzeka ntoni.
2. Ngezixhobo zekhompyutha: Kubandakanya uphononongo lweetshipsi zangoku kunye nohlengahlengiso kwakhona lobuchwephesha ukuze kungabikho, okuthatha ixesha, kubiza kakhulu, kwaye asinakulindela izisombululo kungekudala. Ngokubhekisele kwi-Intel ethatha isigqibo sokutshintsha iichips zabo bonke abathengi abachaphazelekayo, ndicinga ukuba impendulo ecacileyo yile: hahaha, linda uhleli. Oko kuya kuthetha ilahleko yezigidi zeedola kwinkampani kwaye andiqondi ukuba iyakwenzeka.

Ukuphulukana nokusebenza akuyi kuqatshelwa kuko konke ukusetyenziswa kunye nazo zonke iimodeli ze-CPU ngendlela efanayo, ngokucacileyo, ke kuya kubakho iimodeli ezichaphazeleka ngakumbi kunabanye. Kwaye kunjalo injakazi enkulu hlawula i-chip yesizukulwana sokugqibela kwaye ubone ukuba enye yezi patches awunakho ukuxhaphaza ukusebenza kwayo kwi-100%, kodwa yile nto xa abanye bengawenzi kakuhle umsebenzi wabo.

Amaziko edatha amakhulu anjengezo Inkonzo yeWebhu yeAmazon, iMicrosoft Azure kunye neLifu likaGoogle Ngenxa yale ngxaki, xa usebenzisa i-Intel microprocessors kwiiseva zabo, ilahleko zomsebenzi ziqikelelwa kwi-20% kwezi meko apho kugcinwa khona idatha ye-SQL. Kuyinyani ukuba abanye abanjengoGoogle bathi ilahleko yokusebenza ayinamsebenzi.

UKUHLAZIYA (Iyure yokugqibela):

Njengoko iiyure zihamba sifunda izinto ezintsha malunga neli tyala:

• Enye yazo yi Isimangalo ngokuchasene ne-Intel oko akukwenziwanga ukuba ulinde. Ngokukodwa, i-chip enkulu ifumene ezintathu zivela e-United States kwaye ngaphezulu ziya kuza. Iinkundla zaseCalifornia, eIndiana naseOregon ziye zaba zezokuqala ukuthatha amanyathelo ngezityholo njengokusilela ukuveza ubukho bobuthathaka ngexesha, zicothisa iiprosesa zazo ngokuhlaziya kwaye zisilele ukukhusela abasebenzisi.
• Izabelo ze-Intel ziyawa ngelixa i-AMD isasaza, kwaye ikwabonakalisile isenzo ukuba oku bekungenzekanga ngekhe kuqapheleke. Kwaye kunjalo Umphathi we-Intel uthengise phantse isiqingatha sezabelo zakhe kwinyanga nje phambi kokuba kutyhilwe ulwaphulo-mthetho. UBrian Krzanich uzilahlile izabelo zakhe kwaye oku, nangona besithi kwinkampani ukuba ayinanto yakwenza neendaba, kungakhokelela ekubeni umntu acinge ukuba babesazi malunga nengxaki ngaphambili kwaye yiyo loo nto benze ngokufanelekileyo.
• Iyavela uyilo olutsha oluchatshazelwe yingxakiNangona ezi zingasasazekanga kangako, zibalulekile kwiiseva nakwiikhompyuter. Sithetha nge-IBM POWER8 (i-Little Endian kunye ne-Big Endian), i-IBM System Z, i-IBM POWER9 (i-Little Endian) kwaye siza kubona ukuba kufuneka silwandise uluhlu kungekudala.
• El I-Linux kernel yenziwe ngokutsha patched ukunqanda amaziko edatha amakhulu, iiseva, kunye neenkqubo ezinkulu ezixhomekeke kuyo ekubeni zichaphazeleke ngamandla. Ngokukodwa, i-KPTI (i-Kernel Page Table Isolate) ichukunyisiwe, eyayisaziwa njenge KAISER okanye colloquially FUCKWIT (Ngokunyanzela uQinise ngokugqibeleleyo i-Kernel ene-Interrupt Trampolines), eyahlula bucala indawo yomsebenzisi kwindawo ye-kernel kwimemori ngokwahlulahlula umxholo ngaphakathi iitafile ezimbini zokubamba ngokwahlukeneyo. Ukwahlula itafile kuhlala kuhlanjululwa Indawo yokugcina ye-TLB ngokonyuka kokungaphumeleli kunye nesidingo semijikelezo yewotshi engaphezulu yokukhangela idatha kunye nemiyalelo kwimemori, oko kukuthi, kunciphisa ukusebenza kakhulu kwaye kuxhomekeke kwinkqubo ebiza inkqubo, iya kuchaphazela ngaphezulu okanye kancinci, kodwa kwi ubuncinci kuthintele iMeltdown iqhushumbe. Olunye ukhuseleko olusebenzayo njenge-ASLR longeziwe kwaye lwenziwe kwiLinux 4.14.11 nakwezinye iinguqulelo zeLTS zangaphambili: 4.9.74, 4.4.109, 3.16.52, 3.18.91 kunye 3.2.97.
• Uqikelelo lwelahleko yokusebenza Ezona zangoku zithetha nge-5% yelahleko yokusebenza ngokokutsho kweLinus Torvalds, kodwa ukwatsho ukuba kwii-CPU ezindala ezingabandakanyi iPCID ifuthe lingaphezulu kakhulu.
• Okwangoku abaphandi bezokhuseleko abakholelwa ukuba oku kusilela kuye kwaxhatshazwa ukwenza uhlaselo, okungenani kubalulekile.
• ULuke Wagner waseMozilla, injineli egxile kwiJavaScript nakwiWebhuAssembly ibanga ukuba benze ii-PoCs kwaye kuyaqinisekiswa ukuba uhlaselo olusekwe kwiJavaScript lunokwenziwa kwizikhangeli. Ke ngoko sele besebenza kwizisombululo ... uGoogle uyasebenza nokuhlaziya iGoogle Chrome kwaye nge-23 kaJanuwari i-Chrome 64 izakupapashwa ngesilungiso. Okwangoku sinokwenza oku kulandelayo:
  • Mozilla FirefoxAkukho nto ingako inokwenziwa, bebephethe umsebenzi wokuhlaziya iinguqu zabo ukusuka kuma-57 ngokuguqula ukusebenza kwe-performance.now () kunye nokukhubaza inqaku le-SharedArrayBuffer kwaye basebenza kwamanye amanyathelo okhuseleko.
  • Google ChromeOkwangoku unako ukwenza iindlela zokukhusela ukwahlula iiwebhusayithi ngesandla. Ngale nto unokufikelela kwidilesi chrome: // iiflegi / # vumela indawo-yenkqubo nganye kwaye senza ukuba ukhetho luphawulwe ngombala otyheli othi iScript seSikripthi sodwa. Ukuba uneChannel kwi-Android unokufikelela kolu khetho kwi chrome: // iiflegi kodwa inokukhokelela kungxabano okanye ilahleko yokusebenza.
• Iimpawu zokulungisa iingxaki zibangela abanye ukuba bangasebenzi. KwiWindows, umzekelo, kukho iingxaki ezithile ze-antivirus kwaye zenziwe izikrini eziluhlaza okwesibhakabhaka kwimbambano. Ke ufuna i-antivirus ehambelanayo ...
• UGoogle usebenza kuhlaziyo eziza kupapashwa namhlanje nge-5 kaJanuwari 2018 ye-Android, kodwa iya kufikelela kuphela kwezo fowuni zixhasa uhlaziyo lwe-OTA, eyokuqala iya kuba yiPixel 2 kwaye ezinye ziya kuxhomekeka kubenzi besiphelo sethu ...
• iapile Ikwalungiselela ii-patches ze-iOS kunye nee-macOS kodwa khange benze naziphi na iingxelo ngalo mzuzu ... Kubonakala ngathi kwi-MacOS High Sierra 10.13.2 ingxaki kubonakala ukuba isonjululwe, kodwa kubonakala ngathi kuhlobo lwe-10.13.3 kuyakubakhona iindaba ezingakumbi. Siza kubona ukuba benza ntoni nge-iOS kwii-iPhones kunye nee-iPads zabo.
• ARM Ikwabonelela ngeziqwengana zabaprosesa bayo abachaphazelekayo, kwaye ii-patches ngoku ziyafumaneka kwi-kernel yeLinux kunye nokusikhumbuza ukuba sisebenzise i-ARM ethembekileyo yeFirmware ukhuseleko olongezelelekileyo.
• Isoftware yewayini kunye nokusebenza Ziindidi zesoftware ezinokuba nelahleko yokusebenza ngakumbi xa usenza ngenxa yenani leescalls ezifunekayo ukuzenza.
• Ayichaphazeli iikhompyuter kuphela kunye nezixhobo eziphathwayo, kunye nezinye izixhobo ezinjengeemoto eziqhagamshelweyo, iinkqubo zoshishino ezine-SoCs ezisekelwe kwiichips ezichaphazelekayo, i-automation yasekhaya, iimveliso ezithile ze-IoT, njl.
• I-NVIDIA ihlaziye abaqhubi bayo kwiimodeli zabo zeGeGorce, Quadro kunye neNVS kuba banokuchaphazeleka yiSpecter kulawulo lwabo, yiyo loo nto bekhawulezile ukuhlaziya abaqhubi. Kodwa ayichaphazeli i-GPU uqobo ... luhlaziyo olulula lomqhubi ukunqanda ukuxhaphaza kwiinkqubo ezisengozini, njengoko izikhangeli, i-antivirus, kunye nezinye iisoftware zihlaziywa. Iindaba ze-GPU ezichaphazelekayo zibubuxoki ...
• Ukwandiswa kwezakhiwo ezichaphazelekayo, Sele uyazi ukuba iMeltdown yingxaki ye-Intel kuphela (zombini i-ARM kunye ne-AMD azichaphazelekanga kwii-PoCs ezenziwe ngempumelelo), ngelixa iSpecter ichaphazela:

• Ngeli xesha i-Intel iyaqhubeka nokusungula iimodeli ezichaphazelekayo kwintengiso ngaphandle kokulungisa nantoni na ngaphaya kwamabala.Ungayithenga iMicroprocessor namhlanje owaziyo ukuba ichaphazelekile? Ayithengiswa kuphela kwiimodeli ezindala esitokhwe, kodwa kunye neemodeli ezisungulwe ngoku ezisandula ukushiya umzi-mveliso njengeCofi Lake ...
• Siza kuqhubeka nokwandisa ulwazi kunye nokulindelwa kweyure yokugqibela, kuba kusenokwenzeka ukuba amanyathelo okhuseleko amatsha aya kuvela kwaye kunokwenzeka ukuba kukhutshwe izinto ezahlukeneyo ezinokuthi ziqhubeke ukuvelisa iingxaki ...

Njengoko ndithethayo Isepha opera iqalile nje, kwaye ndinoluvo lokuba uninzi lweendaba ziya kubhalwa eziye zaba NGOKUPHELELEKILEYO KUKHUSELEKILEYO KAKHULU KWIMBALI:

Ungalibali ukushiya izimvo zakho… Ukuba unamagqabantshintshi ongezelelweyo, amathandabuzo, okanye nantoni na.