قالب وردپرس درنا توس
Home / Mac / Chrome OS 74 protects Chromebooks against & # 39; ZombieLoad & # 39; Intel vulnerability

Chrome OS 74 protects Chromebooks against & # 39; ZombieLoad & # 39; Intel vulnerability



After this year's Meltdown and Specter attack, new Intel CPU vulnerabilities have occurred. Google has already taken steps to protect Chromebooks today, while Chrome OS 75 next month includes several limitations.

"ZombieLoad" – also known as Micro's Architectural Data Sampling (MDS) vulnerabilities – consists of four issues that exploit CPU design errors to allow attackers to read sensitive data. By visiting a website or running an Android app, users can execute code utilizing MDS to read sensitive memory content.

If Chrome processes are attacked, these sensitive data may contain content on the site, as well as passwords, credit card numbers or cookies. The vulnerabilities can also be exploited to read host memory from a virtual machine, or for an Android App to read privileged process memory (e.g., Keymaster).

Given that most Chromebooks are powered by Intel, Google identified 77 supported devices that are affected. This includes Pixelbook and Pixel Slate, as well as Chromebooks from Asus, Acer, Dell, HP, Lenovo and Samsung. A complete list is available below.

Intel became aware of this issue a month ago and has been working with partners on the updated microprocessor microcode. Google's solution disables Hyper-Threading by default with Chrome OS 74, which rolled out earlier this month.

According to Google, the performance loss should be minimal, but depending on the workload. Hyper-Threading can be re-enabled by machine:

The setting is located in chrome: // flag # scheduler configuration. The "performance" setting selects the configuration that enables Hyper-Threading. The "conservative" setting selects the configuration that disables Hyper-Threading.

Next month Chrome OS 75 will contain additional restrictions. From Tuesday, May 1

4, "Google is not aware of any active exploitation of MDS vulnerabilities."

On other Google platforms, the Chrome browser relies on Apple and Microsoft rights for MacOS and Windows, respectively. The few Android devices running Intel are affected, but Google notes that "the vast majority of Android devices are not affected" because of ARM. More details are available on the Chromium and MDS attack page that describe in depth the CPU vulnerabilities.

AOpen Chromebase Commercial Google Chromebook Pixel (2015)
AOpen Chromebox Commercial Google Pixelbook
ASI Chromebook HEXA Chromebook Pi
ASUS Chromebook C200MA

HP Chromebook 11 2100 -2199 / HP Chromebook 11 G3

ASUS Chromebook C300MA

HP Chromebook 11 2200-2299 / HP Chromebook 11 G4 / G4 EE

ASUS Chromebook Flip C302 HP Chromebook 13 G1
ASUS Chromebox 3 HP Chromebook 14
ASUS Chromebook CN60

HP Chromebook 14 ak000-099 / HP Chromebook 14 G4

ASUS Chromebox CN62 HP Chromebook x2
Acer C720 Chromebook HP Chromebook x360 14
Acer Chromebox 24

HP Chromebox CB1 (000-099) / HP Chromebox G1 / HP Chromebox for Meetings

] Acer Chromebook 11 (C740) HP Chromebox G2
Acer Chromebo Acer Chromebook 15 (C910 / CB5-571) LG Chromebase 22CB25S
Acer Chromebook 15 (CB3-531) LG Chromebase 22CV241
Acer Chromebook Spin 13 (CP713-1WN) Lenovo 100S Chromebook
Acer Chromebox Lenovo N20 Chromebook
Acer Chromebox CXI2 ] Lenovo N21 Chromebook
Lenovo ThinkCentre Chromebook Lenovo ThinkCentre Chromebook
Lenovo ThinkPad 11e Chromebook
Lenovo ThinkPad 11e Chromebook
Lenovo Thinkpad X131e Chromebook
Lenovo ThinkPad 11e Chromebook
Lenovo ThinkPad 11e Chromebook Chromebook 11 for CTL N6 Chromebook
Chromebook 11 (C730 / CB3-111) Pixel slate
Chromebook 11 (C735) Chromebook for Chromebook
Chromebook 14 for work (CP5- 471) Samsung Chromebook 2 11 – XE500C12
Chromebox Reference Samsung Chromebook Plus (LTE)
Consumer Chromebook Samsung Chromebook Plus (V2)
Crambo Chromebook Samsung Chro mebook Pro
Dell Chromebook 11 Senator C1101 Chromebook
Dell Chromebook 11 (3120) Thinkpad 13 Chromebook
Dell Chromebook 13 3380 Toshiba Chromebook
Dell Chromebook 13 7310 ] Toshiba Chromebook 2
Dell Chromebook Toshiba Chromebook 2 (2015 Edition)
Dell Inspiron Chromebook 14 2-in-1 7486 True IDC Chromebook
Education Chromebook Video Set Chromebook
eduGear Chromebook R ViewSonic NMP660 Chromebook
Edxis Chromebook Yoga C630 Chromebook
] Edxis Education Chromebook


Check out 9to5Google on YouTube for more news:

]


Source link