Guddoomiyaha Gobolka Virginia wuxuu saxeexay Awaamiirta Fulinta ee AI 6: Waa cusub oo loogu talagalay Amniga AI iyo halista sii socota ee wasakhda Frag Kernel nuglaanta-Maalinta Zero
Saxiixa dhawaanta ee Dardaaranka fulinta AI ee 6 ee Gudoomiyaha Gobolka Virginia Spanberger waxay calaamad u tahay wakhti muhiim ah dadaalka dawlada ee wax ka qabashada walaacyada amniga ee la xiriira AI. Dardaarankan, oo tixraacaya weerarrada Wakiilka Anthropic FOIA-ka ee gobolka, wuxuu muujinayaa wacyiga sii kordhaya ee khataraha iman kara ee la xidhiidha tignoolajiyada AI iyo baahida loo qabo tallaabo sharciyeed. Xirfadlayaasha teknoolojiyadda ahaan, waxaa muhiim ah in la fahmo saameynta dardaarankan iyo saameynta ay ku yeelan karto horumarinta iyo geynta tignoolajiyada AI.
Khatarta Sii Kordheysa ee Walaacyada Amniga La Xiriira ee AI
Qaadashada sii kordheysa ee tignoolajiyada AI waxay horseeday kor u kaca walaacyada amniga. Marka loo eego warbixinta AI Herald, tirada shilalka amniga ee AI ee la xidhiidha ayaa cirka isku shareeray sanadkii la soo dhaafay, iyada oo qaar badan oo ka mid ah dhacdooyinkan ay ku lug leeyihiin weerarrada Anthropic FOIA-Agent. Weerarradan, kuwaas oo ka faa'iidaysta dayacanka nidaamyada AI, waxay yeelan karaan cawaaqib xun, oo ay ku jiraan jebinta xogta iyo isu tanaasulka nidaamka.
| Nooca Dhacdada | Tirada Dhacdooyinka | Kor u kaca sanadki hore |
|---|---|---|
| Werarada Anthropic FOIA-Wakiilka | 250 | 300% |
| Nidaamka AI wuu tanaasulaa | 150 | 200% |
| Jebinta Xogta | 100 | 150% |
Korodhka naxdinta leh ee weerarrada Anthropic FOIA-Agent, oo 300% kordhay sannadkii la soo dhaafay, waxay hoosta ka xariiqday baahida degdegga ah ee ficilka wax looga qabanayo walaacyadan amniga.
Nuglaanta-Maalin Zero-ka wasakhda ah ee Frag Kernel: Khatar soo socota
Nuglaanta Dirty Frag kernel eber-maalin waxay khatar weyn ku tahay qaybinta Linux, taasoo u oggolaanaysa isticmaaleyaasha aan mudnaanta lahayn inay helaan xidid go'aamin kara qaybinta Linux inta badan. Sida lagu muujiyey muujinta Hyunwoo Kim, nuglaanta Dirty Frag waxaa laga faa'iidaysan karaa si fudud oo looga faa'iidaysto, taas oo ka dhigaysa walaac adag maamulayaasha nidaamka iyo xirfadlayaasha amniga.
`` Python
Tusaalaha koodhka ka faa'iidaysiga ee nuglaanta Dirty Frag
soo dejinta os
Qeex culayska ka faa'iidaysiga
xamuulka = b"\x48\x31\xc0\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\x3\x50\x68\ x2f\x2f\x73\x68\x68\x2f\x75\x73\x72\x89\x3\x50\x53\x89\x1\xb0\x0b\xcd\x80"
Samee hannaan cusub oo fuli culeyska lacagta
os.system ("echo '{}' | sudo tee /proc/self/mem> /dev/null".format(payload.hex())) ``
💡 ** Aragtida Furaha:** Nuglaanta maalin-la'aanta Dirty Frag waxay khatar weyn ku tahay qaybinta Linux, maamulayaasha nidaamka iyo xirfadlayaasha amnigu waa inay qaadaan tallaabo degdeg ah oo ay ku dhejinayaan oo ay ku cusbooneysiinayaan nidaamkooda.
Isku xirka dhibcaha: Awaamiirta fulinta AI 6 iyo nuglaanta wasakhda
Saxiixa Awaamiirta Fulinta ee AI 6 iyo jiritaanka nuglaanshaha eber-ka Dirty Frag kernel ayaa si dhow isugu xidhan. Diiradda dardaaranka ee wax ka qabashada walaacyada amniga ee la xiriira AI ayaa si gaar ah u khuseeya macnaha u nuglaanshaha Dirty Frag, kaas oo looga faa'iidaysan karo in lagu waxyeeleeyo nidaamyada AI. Iyagoo wax ka qabanaya nuglaanta Dirty Frag, xirfadlayaasha tignoolajiyadu waxay kaa caawin karaan yaraynta khataraha la xidhiidha walaacyada amniga ee AI.
Yaraynta Nuglaanshaha Frag wasakh ah
Si loo yareeyo nuglaanta Dirty Frag, maamulayaasha nidaamka iyo xirfadlayaasha amniga waxay qaadi karaan tallaabooyin dhowr ah, oo ay ku jiraan:
- Ku dhejinta iyo cusboonaysiinta qaybinta Linux si ay u noqoto nooca ugu dambeeyay
- Hirgelinta weelka iyo sanduuqyada ciidda ee microVM si loo go'doomiyo nidaamyada nugul
- La socodka diiwaanka nidaamka iyo taraafikada shabakadaha calaamadaha dhiig-miirashada
``yml
Tusaale qaabaynta sanduuqa ciid weelka
nooca: "3" adeegyada: adeeg nuglaanta: sawirka: nugul-sawir weel_name: weel nugul dib u bilow: had iyo jeer badbaado_door: - seccomp: aan xaddidnayn mugga: - ./vulnerable-data:/data ``
⚠️ ** Khatarta Dhismaha:** Ku guuldareysiga in la yareeyo nuglaanta Wasaqda Wasaqda waxay keeni kartaa khataro amni oo la taaban karo, oo ay ku jiraan jebinta xogta iyo khalkhalgelinta nidaamka. Maamulayaasha nidaamka iyo xirfadlayaasha amniga waa inay qaadaan tallaabo degdeg ah si ay wax uga qabtaan dayacankan.
Talooyin ku socda Xirfadlayaasha Farsamada
Si loo maro muuqaalka qalafsan ee welwelka iyo dayacanka la xiriira AI, xirfadlayaasha tignoolajiyada waa in:
- La soco wixii kusaabsan walaaca iyo dayacanka amaanka ee laxidhiidha AI ee ugu dambeeyay
- Hirgeli tilaabooyin amni oo adag, oo ay ku jiraan dhejinta iyo cusboonaysiinta nidaamyada, iyo hirgelinta weelka iyo sanduuqyada ciidda ee microVM
- La soco diiwaannada nidaamka iyo taraafikada shabakadaha calaamadaha dhiig-miirashada
Qaadashada tillaabooyinkan, xirfadlayaasha tignoolajiyadu waxay gacan ka geysan karaan hubinta amniga iyo daacadnimada nidaamyada AI waxayna yareynayaan khataraha la xiriira walaacyada amniga ee la xiriira AI.
Ilaha
- Warbixinta AI Herald - Wararkii ugu dambeeyay iyo cusbooneysiinta AI
- muujinta Hyunwoo Kim
- [Warbixinta toddobaadlaha AI] (https://aiweekly.co/ai-news-today) - Sheekooyinka AI ugu sarreeya iyo cusboonaysiinta tooska ah
- [Warbixinta Adduunka ee AI] (https://theworldofai.org/ai-news/) - Wararka AI maalinlaha ah iyo cusboonaysiinta
- Head Up Warbixinta AI - Wararka AI iyo cusboonaysiinta maanta muhiimka ah