-
Notifications
You must be signed in to change notification settings - Fork 0
Expand file tree
/
Copy pathAMD.html
More file actions
315 lines (254 loc) · 14.7 KB
/
Copy pathAMD.html
File metadata and controls
315 lines (254 loc) · 14.7 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
<html lang="en">
<head>
<meta charset="UTF-8">
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>NewsFlash | Post</title>
<!-- Favicon -->
<link rel="icon" type="image/png" sizes="32x32" href="./assets/images/favicon.png">
<!-- Remix icons -->
<link href="https://cdn.jsdelivr.net/npm/remixicon@2.5.0/fonts/remixicon.css" rel="stylesheet">
<!-- Swiper.js styles -->
<link rel="stylesheet" href="./assets/css/swiper-bundle.min.css"/>
<!-- Custom styles -->
<link rel="stylesheet" href="./assets/css/main.css">
</head>
<body>
<!-- Header -->
<header class="header" id="header">
<nav class="navbar container">
<a href="./index.html">
<h2 class="logo">TechFlash</h2>
</a>
<div class="menu" id="menu">
<ul class="list">
<li class="list-item">
<a href="#" class="list-link current">Home</a>
</li>
<li class="list-item">
<a href="#" class="list-link">Categories</a>
<ul class="Categories">
<li class="list-item">
<a href="#" class="list-link">AI</a>
</li>
<li class="list-item">
<a href="#" class="list-link">IOT</a>
</li>
<li class="list-item">
<a href="#" class="list-link">E-sports</a>
</li>
<li class="list-item">
<a href="#" class="list-link">Software</a>
</li>
<li class="list-item">
<a href="#" class="list-link">Blockchain</a>
</li>
<li class="list-item">
<a href="#" class="list-link">How-to-do</a>
</li>
</ul>
</li>
<li class="list-item">
<a href="#" class="list-link">Reviews</a>
</li>
<li class="list-item">
<a href="#" class="list-link">News</a>
</li>
<li class="list-item">
<a href="#" class="list-link">Contact</a>
</li>
<li class="list-item screen-lg-hidden">
<a href="./sign-in.html" class="list-link">Sign in</a>
</li>
<li class="list-item screen-lg-hidden">
<a href="./sign-up.html" class="list-link">Sign up</a>
</li>
</ul>
</div>
<div class="list list-right">
<button class="btn place-items-center" id="theme-toggle-btn">
<i class="ri-sun-line sun-icon"></i>
<i class="ri-moon-line moon-icon"></i>
</button>
<button class="btn place-items-center" id="search-icon">
<i class="ri-search-line"></i>
</button>
<button class="btn place-items-center screen-lg-hidden menu-toggle-icon" id="menu-toggle-icon">
<i class="ri-menu-3-line open-menu-icon"></i>
<i class="ri-close-line close-menu-icon"></i>
</button>
<a href="sign-in.html" class="list-link screen-sm-hidden">Sign in</a>
<a href="sign-in.html" class="btn sign-up-btn fancy-border screen-sm-hidden">
<span>Sign up</span>
</a>
</div>
</nav>
</header>
<!-- Search -->
<div class="search-form-container container" id="search-form-container">
<div class="form-container-inner">
<form action="" class="form">
<input class="form-input" type="text" placeholder="What are you looking for?">
<button class="btn form-btn" type="submit">
<i class="ri-search-line"></i>
</button>
</form>
<span class="form-note">Or press ESC to close.</span>
</div>
<button class="btn form-close-btn place-items-center" id="form-close-btn">
<i class="ri-close-line"></i>
</button>
</div>
<!-- blog post -->
<section class="blog-post section-header-offset">
<div class="blog-post-container container">
<div class="blog-post-data">
<h3 class="title blog-post-title">"Zenbleed" vulnerability puts AMD Ryzen users at risk of data theft</h3>
<div class="article-data">
<span>July 25th 2023</span>
<span class="article-data-spacer"></span>
<span>3 Min read</span>
</div>
</div>
<div class="container">
<img src="./assets/images/amd.jpg" alt="">
<h4>Why it matters: A new vulnerability has been discovered that affects the entirety of AMD's Zen 2 processor line, including the Ryzen 3000/4000/5000 CPUs and the Epyc enterprise processors. Called Zenbleed, the exploit can be used to steal sensitive data such as passwords and encryption keys. Most worrying of all, attacks can be carried out remotely.</h4>
<p>Google security researcher Tavis Ormand reported Zenbleed (CVE-2023-20593) to AMD on May 15 before revealing its details this week. As we've seen with previous similar attacks like Spectre and Meltdown, it takes advantage of the speculative execution technique used by modern processors to optimize their performance. Zenbleed is closer to the more easily exploitable Meltdown than Spectre.</p>
<h5>Zenbleed works by manipulating the register files to force a mispredicted command. As Ormandy explains:</h5>
<p>"The bug works like this, first of all you need to trigger something called the XMM Register Merge Optimization2, followed by a register rename and a mispredicted vzeroupper. This all has to happen within a precise window to work"</p>
<p>"We now know that basic operations like strlen, memcpy and strcmp will use the vector registers - so we can effectively spy on those operations happening anywhere on the system!"</p>
<p>"This works because the register file is shared by everything on the same physical core. In fact, two hyperthreads even share the same physical register file."</p>
<img src="./assets/images/amd/amd-1.jpg" alt="">
<p>Cloudflare specifies that the vulnerability is caused by a register not being written to 0 correctly under specific microarchitectural circumstances. This may cause data from another process and/or thread to be stored in the YMM register, which may allow an attacker to potentially access sensitive information.</p>
<p>The company adds that while the error is associated with speculative execution, it is not a side-channel vulnerability. It adds that the attack can be executed remotely through JavaScript on a website, meaning that the attacker need not have physical access to the computer or server.</p>
<p>The vulnerability allows the pilfering of data at speeds of 30KB per second per core, fast enough to monitor encryption keys and passwords as users log in. It can steal data from any software running on the system, including virtual machines, sandboxes, containers, and processes. As Tom's Hardware notes, its ability to read data across virtual machines will be especially concerning for cloud service providers and their customers.</p>
<p>AMD says in a security advisory that it has already released a microcode patch for its second-generation Epyc 7002 processors, but many of the updates for the other Zen 2 CPUs aren't arriving until between October and December. Moreover, AMD says the performance impact resulting from the update will vary depending on workload and system configuration.</p>
<p>Ormandy is recommending Zen 2 users get and apply AMD's microcode update. He has also provided a software workaround that involves setting a control bit to disable some of the functionality that prevents exploitation. It may impact system performance, but it's better to be safe than sorry until the updates arrives.</p>
<div class="author d-grid">
<div class="author-image-box">
<img src="./assets/images/dummy-user.png" alt="" class="article-image">
</div>
<div class="author-about">
<h3 class="author-name">Ramanan</h3>
<p>Tech Enthusiast , student at KCE</p>
<ul class="list social-media">
<li class="list-item">
<a href="#" class="list-link"><i class="ri-instagram-line"></i></a>
</li>
<li class="list-item">
<a href="#" class="list-link"><i class="ri-facebook-circle-line"></i></a>
</li>
<li class="list-item">
<a href="#" class="list-link"><i class="ri-twitter-line"></i></a>
</li>
</ul>
</div>
</div>
</div>
</div>
</section>
<!-- Newsletter -->
<section class="newsletter section">
<div class="container">
<h2 class="title section-title" data-name="Newsletter">Newsletter</h2>
<div class="form-container-inner">
<h6 class="title newsletter-title">Subscribe to TechFlash</h6>
<p class="newsletter-description">stay connected</p>
<form action="" class="form">
<input class="form-input" type="text" placeholder="Enter your email address">
<button class="btn form-btn" type="submit">
<i class="ri-mail-send-line"></i>
</button>
</form>
</div>
</div>
</section>
<!-- Footer -->
<footer class="footer section">
<div class="footer-container container d-grid">
<div class="company-data">
<a href="./index.html">
<h2 class="logo">TechFlash</h2>
</a>
<p class="company-description">Stay ahead of the curve with our tech flash – the latest news and reviews on all the latest devices and software!</p>
<ul class="list social-media">
<li class="list-item">
<a href="https://www.instagram.com" class="list-link"><i class="ri-instagram-line"></i></a>
</li>
<li class="list-item">
<a href="https://www.facebook.com" class="list-link"><i class="ri-facebook-circle-line"></i></a>
</li>
<li class="list-item">
<a href="https://twitter.com" class="list-link"><i class="ri-twitter-line"></i></a>
</li>
<li class="list-item">
<a href="https://in.pinterest.com" class="list-link"><i class="ri-pinterest-line"></i></a>
</li>
</ul>
<span class="copyright-notice">©2023 TechFlash. All rights reserved.</span>
</div>
<div>
<h6 class="title footer-title">Categories</h6>
<ul class="footer-list list">
<li class="list-item">
<a href="#" class="list-link">AI</a>
</li>
<li class="list-item">
<a href="#" class="list-link">IOT</a>
</li>
<li class="list-item">
<a href="#" class="list-link">E-sports</a>
</li>
<li class="list-item">
<a href="#" class="list-link">Software</a>
</li>
<li class="list-item">
<a href="#" class="list-link">Blockchain</a>
</li>
<li class="list-item">
<a href="#" class="list-link">How-to-do</a>
</li>
</ul>
</div>
<div>
<h6 class="title footer-title">Useful links</h6>
<ul class="footer-list list">
<li class="list-item">
<a href="#" class="list-link">Home</a>
</li>
<li class="list-item">
<a href="#" class="list-link">Elements</a>
</li>
<li class="list-item">
<a href="#" class="list-link">Tags</a>
</li>
<li class="list-item">
<a href="#" class="list-link">Authors</a>
</li>
</ul>
</div>
<div>
<h6 class="title footer-title">Company</h6>
<ul class="footer-list list">
<li class="list-item">
<a href="#" class="list-link">Contact us</a>
</li>
<li class="list-item">
<a href="#" class="list-link">F.A.Q</a>
</li>
<li class="list-item">
<a href="#" class="list-link">Careers</a>
</li>
<li class="list-item">
<a href="#" class="list-link">Authors</a>
</li>
</ul>
</div>
</div>
</footer>
<!-- Swiper.js -->
<script src="./assets/js/swiper-bundle.min.js"></script>
<!-- Custom script -->
<script src="./assets/js/main.js"></script>
</body>
</html>