Kwihutisha udushya twa AI no kugabanya ingaruka z'umutekano: Kwibira cyane muri WeVisOne-VL na Dirty Frag Kernel Zero-Day Vulnerability

** Gufungura-isoko rya WeVisOne-VL, Moderi ihuriweho na Visual-Language Model (VLM), ifite ubushobozi bwo guhindura ibintu mubyerekezo bya mudasobwa, ariko kuvumburwa vuba aha kwa Dirty Frag kernel zero-umunsi byangiza umutekano muke kuri sisitemu ishingiye kuri Linux hamwe ningaruka ziterwa na WeVisOne-VL hamwe na Dirty.

WeVisOne-VL: VLM Yunze ubumwe kubikorwa bya mudasobwa

WeVisOne-VL ni iterambere ryibanze mubyerekezo bya mudasobwa, kuko rihuza imbaraga zo gutahura ibintu, pigiseli yo murwego, hamwe na Optical Character Recognition (OCR) muburyo bumwe. Ubu buryo bwahujwe butuma icyitegererezo gifata ibintu byinshi bigaragara mu ndimi no mu ndimi, bigatuma bikoreshwa mu bikorwa bitandukanye, birimo amashusho na videwo, sisitemu yigenga, hamwe n’imikoranire ya mudasobwa.

Imyubakire ya WeVisOne-VL ishingiye kubikorwa byinshi byo kwiga, byemerera icyitegererezo kwiga imirimo myinshi icyarimwe. Ubu buryo butuma icyitegererezo gikoresha ubumenyi busangiwe mumirimo, bikavamo kunoza imikorere no gukora neza.

Nkuko bigaragara mu mbonerahamwe iri hejuru, WeVisOne-VL iruta icyitegererezo cyibanze muri iyo mirimo uko ari itatu, ikerekana akamaro kayo mu gufata ibintu byinshi biranga amashusho n’indimi.

Umwanda Frag Kernel Zero-Umunsi Intege nke: Ikibazo gikomeye cyumutekano

Intege nke za Dirty Frag zeru-umunsi ni ikibazo gikomeye cyumutekano kigira ingaruka kuri Linux nyinshi, bigatuma abakoresha badafite uburenganzira bwo kubona imizi ya deterministic. Iyi ntege nke ireba cyane cyane, kuko ishobora gukoreshwa nabateye kugirango igenzure sisitemu ishingiye kuri Linux, ikoreshwa cyane muri comptabilite, seriveri, nibindi bikorwa remezo bikomeye.

Intege nke ziterwa ninenge yo mumikorere ya kernel ya Linux ikora udupaki twacitsemo ibice, ishobora gukoreshwa nabateye kugirango bakore code uko bishakiye bafite amahirwe menshi. Kugira ngo iyi ntege igabanuke, abakoresha Linux barashobora gukoresha patch yatanzwe numuryango wa Linux ya kernel cyangwa bagakoresha urubuga rwa kontineri nka Docker, rutanga urwego rwumutekano.

`` python

Urugero kode yo kugenzura intege nke za Dirty Frag

gutumiza mu mahanga

def check_dirty_frag_vulnerability (): # Koresha itegeko kugirango urebe niba ufite intege nke ibisohoka = subprocess.check_output (["uname", "-r"]) kernel_version = ibisohoka.decode ("utf-8"). strip ()

# Reba niba verisiyo yimikorere ishobora kwibasirwa
niba kernel_version <"5.15.0-25":
    icapiro ("Sisitemu irashobora kwibasirwa na Dirty Frag")
ikindi:
    icapiro ("Sisitemu ntishobora kwibasirwa na Dirty Frag")

kugenzura_dirty_frag_vulnerability () `` `

. Abakoresha Linux bagomba gukoresha patch yatanzwe numuryango wa Linux cyangwa gukoresha urubuga rwa kontineri nka Docker kugirango bagabanye iyi ntege nke.

Kugabanya ingaruka z'umutekano hamwe na Containerisation na Sandbox ya MicroVM

Ibikoresho bya kontineri nka Docker na microVM sandbox nka gVisor birashobora gutanga urwego rwumutekano mukurwanya intege nke za kernel nka Dirty Frag. Izi porogaramu zikoresha sisitemu y'imikorere yo murwego rwo gutandukanya porogaramu na serivisi, zibabuza kubona ibikoresho bya sisitemu byoroshye.

`` yml

Urugero Docker iboneza kugirango igabanye intege nke za Dirty Frag

verisiyo: "3" serivisi: serivisi yanjye: ishusho: ishusho yanjye ongera utangire: burigihe umutekano_opt: - nta-shyashya-abikorera `` `

. Niyo mpamvu, ni ngombwa gushyira mubikorwa ingamba zuzuye z'umutekano zirimo kuvugurura buri gihe, ibishishwa, no gukurikirana.

Ibyifuzo byo Kohereza Umutekano

Kugirango tumenye neza kohereza WeVisOne-VL no kugabanya ingaruka ziterwa n’intege nke za Dirty Frag, turasaba ibi bikurikira:

• Koresha patch yatanzwe numuryango wa Linux kernel kugirango ukosore intege nke za Dirty Frag
• Koresha urubuga rwa kontineri nka Docker kugirango utange urwego rwumutekano
• Shyira mu bikorwa ingamba z'umutekano zuzuye zirimo kuvugurura buri gihe, ibishishwa, no gukurikirana
• Koresha microVM sandbox nka gVisor kugirango utandukanye porogaramu na serivisi

Inkomoko

• [WeVisOne-VL ya Tencent]
• [Ububiko bwa Linux Kernel]
• [Umutekano wa Docker] (https://docs.docker.com/engine/umutekano/) - Inyandiko zemewe kumiterere yumutekano wa Docker nibikorwa byiza.
• [gVisor] (https://gvisor.dev/) - Urubuga rwemewe rwa gVisor, sandbox ya microVM yo kubona porogaramu na serivisi. -.