瑞士蘇黎世聯邦理工學院的約翰內斯·威克納（Johannes Wikner）和卡維·拉扎維（Kaveh Razavi）周五發表了一份報告，詳細介紹了一種跨進程的 Spectre 攻擊方法，該攻擊可以解除地址空間佈局隨機化（Address Space Layout Randomization, ASLR）， 並從Set User ID（suid）進程中洩露 root 密碼的雜湊值。研究人員宣稱他們已成功實施此類攻擊。

Spectre 攻擊是指由於處理器執行推測執行的方式而導致的一系列攻擊，推測執行是一種預先進行運算的性能最佳化技術。運算結果可以在需要時使用，否則將被丟棄。

分支預測（branch prediction）是推測性執行的一種形式，現代處理器利用它來猜測程式將採取的路徑。它與分支目標預測（branch target prediction）相關，後者試圖預測特定分支中將執行的下一條指令的目標位址。

Spectre 攻擊試圖使分支預測器作出錯誤的預測，這樣當處理器執行相關指令時，它會存取包含密碼或加密密鑰等機密資料的越界記憶體。隨後對儲存這些機密的記憶體區域進行操作，攻擊者可藉由觀察側通道（如 CPU 快取存取和功率波動）來推斷出這些機密。

間接分支預測器屏障 (IBPB) 的目的是防禦針對 x86 Intel 和 AMD 晶片的 Spectre v2 (CVE-2017-5715) 攻擊。IBPB 的目的則防止轉發先前學習的用於推測執行的間接分支目標預測。

顯然，這道屏障沒有被正確的運作。

「我們在最近的 Intel 微架構（例如 Golden Cove 和 Raptor Cove，存在於第 12、13 和 14 代 Intel Core 處理器以及第 5 和第 6 代 Xeon 處理器中）中發現了一個微碼錯誤，該錯誤保留了分支預測，以便它們仍然可以在 IBPB 使它們失效後使用，」Wikner 解釋說。「這種屏障後推測允許攻擊者繞過進程上下文和虛擬機器施加的安全邊界。」

威克納和拉扎維還設法從使用 Zen 2 架構構建的 AMD 晶片上的非特權進程中洩漏任意核心記憶體。

Intel 和 AMD 攻擊相的的影片已經發表，展示了預期中來自命令列互動的技術細節。

Intel 晶片（包括 Intel Core 第 12、13 和 14 代以及 Xeon 第 5 和第 6 代）可能很容易受到攻擊。在 AMD Zen 1(+) 和 Zen 2 硬體上，該問題可能會影響 Linux 使用者。

相關細節已於 2024 年 6 月披露，但 Intel 和 AMD 獨立發現了這個問題。

Intel 在 2024 年 3 月發表的微碼修補程式 (INTEL-SA-00982) 中修復了該問題。儘管如此，某些 Intel 硬體可能尚未收到該微碼更新。

威克納和拉扎維在他們的技術摘要中觀察到：「然而，在撰寫本文時，此微碼更新在 Ubuntu 儲存庫中不可用。」

看來 Ubuntu 隨後已經處理了這個問題。

AMD 在 2022 年 11 月的安全公告 AMD-SB-1040 中發表了自己的公告。該公司指出，虛擬機器管理程式和／或作業系統供應商需要自行進行改善工作。

「由於 AMD 的問題已知並被追蹤於 AMD-SB-1040，AMD 將此問題視為軟體錯誤，」研究人員解釋說。「我們目前正在與 Linux 核心維護人員合作，以合併我們提出的軟體修補程式。」 

• 延伸閱讀：Google提出Spectre軟體解決方案，且不影響電腦效能
• 延伸閱讀：Spectre變種攻擊再現，SWAPGS漏洞幾乎讓所有Intel主流處理器中標
• 資料來源：theregister

從 9 月份蘋果推出 iPhone 16 系列以來，部分使用者就被 iPhone 16 Pro 和 iPhone 16 Pro Max 的隨機性卡死和重啟問題折磨，出現這類問題時也沒什麼徵兆，在正常使用過程中 iPhone 會突然卡死，然後自己重新啟動。

在 Reddit、X/Twitter 以及蘋果官方支援社群都有用戶反應了相同的問題，這些使用者嘗試將系統更新到 iOS 18 和 iOS 18.0.1 甚至 iOS 18.1 測試版也無濟於事，仍然還會繼續出現隨機性的卡死、重啟問題。

從使用者的回饋來看，這個問題似乎只影響 Pro 機型，因為沒有使用者提到 iPhone 16 和 iPhone 16 Plus 也出現類似問題，但蘋果到現在還沒有給出官方回應。

值得注意的是這類問題的出現本身就帶有極強的隨機性，有的使用者可能遇到的頻次更高 (極端情況下有使用者的 iPhone 每天會卡死 10~20 次)，有的使用者則可能遇到的次數比較低，甚至還有使用者稱在待機狀態下 iPhone 也自己卡死然後完成重啟。

還有使用者因為無法忍受這個問題而聯絡蘋果售後客服，蘋果工程師並未告知具體的原因，但蘋果售後服務給用戶更換了新 iPhone，不知道換新後是否有助於解決問題。

還有個情況是有網友嘗試將 iPhone 完全重灌系統就不會再出現卡死了，但如果從 iCloud 備份恢復則可能再次出現卡死，所以這個問題有可能與 iCloud 有關。

• 延伸閱讀：iPhone 16 全系列購機指南：4款機型特色與差異解析，買數字系列還是 Pro 系列？
• 延伸閱讀：iPhone 16 實測，和 Pro 系列分野最小的一代，iPhone 14 以前機型值得升級
• 延伸閱讀：iPhone 16 Pro Max與Galaxy S24 Ultra運行16款APP速度實測：iPhone遊戲佔優勢、影像編輯三星險勝

台灣最大廣告科技公司 OneAD 攜手旗下數據科技品牌 OneDATA，推出市場首創、 專以「零售數據」打造的多通路零售數據智能平台（Retail DMP）「Webb韋伯」。Webb 結合消費者全旅程的多源數據，並獨家開發 AI 模組「RetailGPT」，提供多維度的數據行銷應用，助力品牌在 RMN 生態系蓬勃發展的時代奪得先機。

Webb韋伯：在最後一哩影響消費者購物決策

Webb 匯集了消費者在所有購物途徑中的數據，涵蓋比價、電商、發票、團購、記帳等 13 種數據源，並結合 OneDATA 的獨家 AI 模組「RetailGPT」，以提供更精準的零售分析。OneAD 總經理葉毓輝以巧克力品牌為例，透過 Webb 能夠分析消費者通常是在哪個時段、哪些通路出沒，而買巧克力時還會同時購買哪些產品；而除單一品牌外，也能提供競品分析，協助品牌制定廣告投放策略，在最後一哩影響消費者的購物決策。

Webb 平台的核心為 OneDATA 獨家開發的 AI 智能「RetailGPT」， 建構出針對特定產業最完整的「零售商品文本字詞庫」，包含 3C用品、家用電器、美妝個清、醫藥保健、食品飲料、酒類、服飾鞋帽、母嬰育兒、運動健身、居家生活、旅遊戶外共 11 種產業的多通路數據。RetailGPT 能自動分析龐大且繁雜的數據，辨識出在零售端不同通路品名截然不同的同一商品，並找出不同類商品間的潛在關聯性，還可依品牌需求生成客製化分析，提供包括商品名稱、別名、購買時間與通路等多維資訊，助品牌深入發掘潛在商機。

從「以人為本」到「以商品為本」的數據行銷

傳統的數據行銷模式「以人為本」，品牌難以取得完整的消費者數據，例如在蝦皮等平台上，品牌無法得知經銷商如何銷售商品，也無法掌握商品在通路中的銷售情況。而隨著數位轉型和通路媒體的興起，「以商品為本」著重於分析商品在多通路中的銷售數據，以了解商品在不同通路中的銷售表現、消費者購買行為，以及商品與其他商品的關聯性等。

OneAD 推出的 Webb 韋伯平台就是一個以商品為本的零售數據智能平台，可以幫助品牌進行商品分析、通路選擇，以及跨平台投放等，從而提升行銷效益。 Webb 現階段已具備超過 100 家線上線下主要通路、11 個產業以及 25,000 個以上品牌的深度數據洞察。

• 延伸閱讀：OneAD SuperView串流內影音廣告前進台灣前10大影音平台
• 延伸閱讀：OneAD與愛爾達強強聯手，為品牌進攻超級體育迷的心
• 延伸閱讀：OneAD攜手品牌D2C，數百行銷人齊聚Gather Town元宇宙

Apple on Monday shared another glimpse at the new Hearing Health features coming to AirPods Pro 2 with iOS 18.1 next week. However, even if you have compatible hardware running the latest software, these new features won’t be available worldwide.

#3765 Updated WitchSpring R v1.315 + 4 DLCs + Bonus Content

Genres/Tags: RPG, Isometric, 3D, Turn-based
Companies: Kiwiwalks, Pixmain
Languages: ENG/MULTI7
Original Size: 12.3 GB
Repack Size: 3.2/3.4 GB

Download Mirrors (Direct Links)

• Filehoster: DataNodes (Speed & Usability) [Use IDM]
  Click to show direct links

  WitchSpring_R_–_fitgirl-repacks.site_–_.part1.rar
  WitchSpring_R_–_fitgirl-repacks.site_–_.part2.rar
  WitchSpring_R_–_fitgirl-repacks.site_–_.part3.rar
  WitchSpring_R_–_fitgirl-repacks.site_–_.part4.rar
  WitchSpring_R_–_fitgirl-repacks.site_–_.part5.rar
  WitchSpring_R_–_fitgirl-repacks.site_–_.part6.rar
  WitchSpring_R_–_fitgirl-repacks.site_–_.part7.rar
  fg-optional-bonus-content.bin
  
• Filehoster: FuckingFast (REALLY Fucking Fast )
  
  Click to show direct links

  WitchSpring_R_–_fitgirl-repacks.site_–_.part1.rar
  WitchSpring_R_–_fitgirl-repacks.site_–_.part2.rar
  WitchSpring_R_–_fitgirl-repacks.site_–_.part3.rar
  WitchSpring_R_–_fitgirl-repacks.site_–_.part4.rar
  WitchSpring_R_–_fitgirl-repacks.site_–_.part5.rar
  WitchSpring_R_–_fitgirl-repacks.site_–_.part6.rar
  WitchSpring_R_–_fitgirl-repacks.site_–_.part7.rar
  fg-optional-bonus-content.bin
  
• Filehoster: MultiUpload (10+ hosters, interchangeable) [Use JDownloader2]
• SOON Filehoster: OneDrive (Uploaded by DyR0 t(-_-t), compatible with torrent mirrors)

Download Mirrors (Torrent)

• 1337x | [magnet] [.torrent file only]
  
• Tapochek.net

Discussion and (possible) future updates on CS.RIN.RU thread

Screenshots (Click to enlarge)

Repack Features

• Based on WitchSpring.R.v1.315-TENOKE ISO release: tenoke-witchspring.r.v1.315.iso (13,234,233,344 bytes)
• Game version: v1.315; 4 DLCs are included and activated
• 100% Lossless & MD5 Perfect: all files are identical to originals after installation
• Bonus OST in WAV format nullified, NOTHING re-encoded
• Selective Download feature: you may skip downloading and installing of bonus content (OST in MP3 format, Wallpapers & Booklet)
• Significantly smaller archive size (compressed from 12.3 to 3.2/3.4 GB)
• Installation takes 3-6 minutes (depending on your system)
• After-install integrity check so you could make sure that everything installed properly
• HDD space after installation: up to 12.3 GB
• Language can be changed in game settings
• At least 2 GB of free RAM (inc. virtual) required for installing this repack

Backwards Compatibility

This repack IS NOT backwards compatible with my previous WSR repack.

The post WitchSpring R – v1.315 + 4 DLCs + Bonus Content appeared first on FitGirl Repacks.

#4938 Hot Wheels Monster Trucks: Stunt Mayhem – Deluxe Edition + DLC + Windows 7 Fix

Genres/Tags: Arcade, Racing, Third person view, 3D
Companies: 3D Clouds, GameMillPublishing
Languages: ENG/MULTI7
Original Size: 3.2 GB
Repack Size: 2 GB

Download Mirrors (Direct Links)

• Filehoster: DataNodes (Speed & Usability) [Use IDM]
  Click to show direct links

  Hot_Wheels_MT_Stunt_Mayhem_–_fitgirl-repacks.site_–_.part1.rar
  Hot_Wheels_MT_Stunt_Mayhem_–_fitgirl-repacks.site_–_.part2.rar
  Hot_Wheels_MT_Stunt_Mayhem_–_fitgirl-repacks.site_–_.part3.rar
  Hot_Wheels_MT_Stunt_Mayhem_–_fitgirl-repacks.site_–_.part4.rar
  Hot_Wheels_MT_Stunt_Mayhem_–_fitgirl-repacks.site_–_.part5.rar
  
• Filehoster: FuckingFast (REALLY Fucking Fast )
  
  Click to show direct links

  Hot_Wheels_MT_Stunt_Mayhem_–_fitgirl-repacks.site_–_.part1.rar
  Hot_Wheels_MT_Stunt_Mayhem_–_fitgirl-repacks.site_–_.part2.rar
  Hot_Wheels_MT_Stunt_Mayhem_–_fitgirl-repacks.site_–_.part3.rar
  Hot_Wheels_MT_Stunt_Mayhem_–_fitgirl-repacks.site_–_.part4.rar
  Hot_Wheels_MT_Stunt_Mayhem_–_fitgirl-repacks.site_–_.part5.rar
• Filehoster: MultiUpload (10+ hosters, interchangeable) [Use JDownloader2]
• SOON Filehoster: OneDrive (Uploaded by DyR0 t(-_-t), compatible with torrent mirrors)

Download Mirrors (Torrent)

• 1337x | [magnet] [.torrent file only]
  
• Tapochek.net

Discussion and (possible) future updates on CS.RIN.RU thread

Screenshots (Click to enlarge)

Repack Features

• Based on Hot.Wheels.Monster.Trucks.Stunt.Mayhem.PROPER-TENOKE ISO release: tenoke-hot.wheels.monster.trucks.stunt.mayhem.proper.iso (3,455,782,912 bytes)
• Treasure Hunt Pack DLC is included and activated
• 100% Lossless & MD5 Perfect: all files are identical to originals after installation
• NOTHING ripped, NOTHING re-encoded
• Significantly smaller archive size (compressed from 3.2 to 2 GB)
• Installation takes 2-8 minutes (depending on your system)
• After-install integrity check so you could make sure that everything installed properly
• HDD space after installation: 3 GB
• Language can be changed in game settings
• Repack uses XTool library by Razor12911
• At least 2 GB of free RAM (inc. virtual) required for installing this repack

How to play on Windows 7?

• Run “KexSetup_x64Rel.exe” from “_Windows 7 Fix” folder and install that extension
• Open “HTW\Binaries\Win64\HTW-Win64-Shipping.exe” file properties in Explorer, then “VxKex” tab
• Check “Enable VxKex for this program” and “Report a different version of Windows, Windows 10” checkboxes, Apply, OK
• Run the game as usual

The post Hot Wheels Monster Trucks: Stunt Mayhem – Deluxe Edition + DLC + Windows 7 Fix appeared first on FitGirl Repacks.

In the past, Apple has always required streaming platforms available on the App Store to provide a way for users to subscribe directly through the app using in-app purchases. However, as this is no longer a requirement, many platforms have been ditching Apple’s in-app purchases, and Disney has just done so.

We’ve been hearing rumors about Apple gearing up to announce new M4 Macs as soon as next week, but it looks like the company also has some updates for its accessories. More specifically, the company is reportedly working on new versions of the , Magic Trackpad and – but you probably shouldn’t get too excited about that.

The first Apple Intelligence features are coming next week in iOS 18.1. If you have an AI-compatible iPhone model, the software update will bring a host of new features. But not right away—Apple Intelligence will come with a waitlist. Here’s how you can act now to jump the line.

While Apple announced a new iPad mini with a press release last week, the company still has bigger plans to announce new Macs this month. As inventory runs low at Apple Stores, we’re expecting updates to the MacBook Pro, iMac, Mac mini, and more.

The iOS 18.1 RC is now available for developers and public beta testers. The update is set for a release next week with a slew of important new features and big fixes. While we’ve been chronicling all of the changes for the last two months, Apple has also now shared the full release notes for the update.

Apple is preparing a host of big software updates for next week, including iOS 18.1 with the first Apple Intelligence features. But it turns out, there’s another iPhone software update on the way: iOS 17.7.1 is coming soon too.

I spent more time than I care to admit in airports this year, and I’ve found the LISEN Universal Flight Airplane Phone Holder Mount for MagSafe to be an exceptional iPhone accessory. It’s not designed to charge but to keep your iPhone secure and at the right level at all times.

Apple has a packed iOS 18.1 update coming next week, with Apple Intelligence and a whole lot more. But despite months of beta testing, there’s one new feature we just learned about today: iOS 18.1 upgrades business messaging to include RCS support.

Apple is preparing major new software updates for release next week. One of them will be new firmware for that enable key iOS 18.1 features related to hearing health. Here’s the build number to look out for as you await the AirPods update.

Apple today released final beta of iOS 18.1 to developers and public beta testers. This gives us our first look at the full release notes of the update, revealing that iOS 18.1 includes several notable bug fixes for iPhone users.

Listen to a recap of the top stories of the day from 9to5Mac. 9to5Mac Daily is available on iTunes and Apple’s Podcasts app, Stitcher, TuneIn, Google Play, or through our dedicated RSS feed for Overcast and other podcast players.

Sponsored by CardPointers: The best way to maximize your credit card rewards. Save 30% and get a $100 Savings Card today.

Today alongside RC versions of iOS 18.1, iPadOS 18.1, and macOS Sequoia 15.1, Apple has also debuted RC updates for its non-AI platforms. Apple Intelligence is limited to the company’s three flagship products, but there are still updates coming for the Vision Pro, Apple TV, and Watch. Here’s what to expect.