{"id":100020,"date":"2021-04-25T10:22:40","date_gmt":"2021-04-25T08:22:40","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/komanda-iz-universiteta-minnesoty-poyasnila-motivy-eksperimentov-s-somnitelnymi-kommitami-v-yadro-linux"},"modified":"2021-04-25T10:22:40","modified_gmt":"2021-04-25T08:22:40","slug":"komanda-iz-universiteta-minnesoty-poyasnila-motivy-eksperimentov-s-somnitelnymi-kommitami-v-yadro-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/komanda-iz-universiteta-minnesoty-poyasnila-motivy-eksperimentov-s-somnitelnymi-kommitami-v-yadro-linux","title":{"rendered":"T\u00fdm z Univerzity v Minneapolisu vysv\u011btlil motivy experimentov\u00e1n\u00ed se sporn\u00fdmi commity do j\u00e1dra Linuxu.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Skupina v\u011bdc\u016f z Univerzity v Minnesot\u011b, jej\u00ed\u017e p\u0159\u00edjem zm\u011bn byl ned\u00e1vno zablokov\u00e1n Gregem Kroa-Hartmanem, zve\u0159ejnila otev\u0159en\u00fd dopis s omluvou a vysv\u011btlen\u00edm sv\u00fdch motiv\u016f. P\u0159ipom\u00edn\u00e1me, \u017ee skupina se zab\u00fdvala zkoum\u00e1n\u00edm slab\u00fdch m\u00edst v recenzov\u00e1n\u00ed p\u0159ich\u00e1zej\u00edc\u00edch patch\u016f a hodnocen\u00edm mo\u017enosti propu\u0161t\u011bn\u00ed zm\u011bn do j\u00e1dra s skryt\u00fdmi zranitelnostmi. Po obdr\u017een\u00ed sporn\u00e9ho patchu od jednoho z \u00fa\u010dastn\u00edk\u016f skupiny s bezv\u00fdznamnou opravou se objevila domn\u011bnka, \u017ee v\u011bdci se znovu pokou\u0161ej\u00ed experimentovat s v\u00fdvoj\u00e1\u0159i j\u00e1dra. Vzhledem k tomu, \u017ee takov\u00e9 experimenty potenci\u00e1ln\u011b p\u0159edstavuj\u00ed bezpe\u010dnostn\u00ed hrozbu a zab\u00edraj\u00ed \u010das komit\u00e9r\u016fm, rozhodlo se o zablokov\u00e1n\u00ed p\u0159\u00edjmu zm\u011bn a op\u011btovn\u00e9m p\u0159ezkoum\u00e1n\u00ed v\u0161ech d\u0159\u00edve p\u0159ijat\u00fdch patch\u016f. <\/p>\n

Ve sv\u00e9m otev\u0159en\u00e9m dopise \u00fa\u010dastn\u00edci skupiny uvedli, \u017ee jejich \u010dinnost byla motivov\u00e1na v\u00fdhradn\u011b dobr\u00fdmi \u00famysly a snahou zlep\u0161it proces recenzov\u00e1n\u00ed zm\u011bn t\u00edm, \u017ee odhal\u00ed a odstran\u00ed slab\u00e1 m\u00edsta. Skupina ji\u017e mnoho let zkoum\u00e1 procesy, kter\u00e9 vedou k vzniku zranitelnost\u00ed, a aktivn\u011b pracuje na odhalov\u00e1n\u00ed a odstran\u011bn\u00ed zranitelnost\u00ed v j\u00e1d\u0159e Linuxu. Je tvrzeno, \u017ee v\u0161echny ze 190 patch\u016f zaslan\u00fdch na op\u011btovn\u00e9 p\u0159ezkoum\u00e1n\u00ed jsou legitimn\u00ed, opravuj\u00ed existuj\u00edc\u00ed probl\u00e9my a neobsahuj\u00ed z\u00e1m\u011brn\u00e9 chyby nebo skryt\u00e9 zranitelnosti. <\/p>\n

Znepokojiv\u00e1 studie zam\u011b\u0159en\u00e1 na propagaci skryt\u00fdch zranitelnost\u00ed byla provedena v srpnu minul\u00e9ho roku a omezila se na zasl\u00e1n\u00ed t\u0159\u00ed patch\u016f s chybami, z nich\u017e \u017e\u00e1dn\u00fd nebyl za\u0159azen do k\u00f3dov\u00e9 z\u00e1kladny j\u00e1dra. S t\u011bmito patchemi spojen\u00e1 aktivita se omezila pouze na diskusi a propagace patch\u016f byla zastavena na \u00farovni p\u0159ed p\u0159id\u00e1n\u00edm zm\u011bn do Gitu. K\u00f3d t\u0159ech problematick\u00fdch patch\u016f zat\u00edm nen\u00ed uveden, proto\u017ee by to odhalilo toto\u017enosti t\u011bch, kte\u0159\u00ed prov\u00e1d\u011bli po\u010d\u00e1te\u010dn\u00ed recenzov\u00e1n\u00ed (informace budou zve\u0159ejn\u011bny po z\u00edsk\u00e1n\u00ed souhlasu od v\u00fdvoj\u00e1\u0159\u016f, kte\u0159\u00ed chyby neidentifikovali). <\/p>\n

Hlavn\u00edm zdrojem v\u00fdzkumu nebyly vlastn\u00ed patche, ale anal\u00fdza kdykoli p\u0159idan\u00fdch extern\u00edch patch\u016f, kter\u00e9 v budoucnu vedly k zranitelnostem. K p\u0159id\u00e1n\u00ed t\u011bchto patch\u016f t\u00fdm z Univerzity Minnesoty nem\u00e1 \u017e\u00e1dn\u00fd vztah. Celkem bylo prozkoum\u00e1no 138 probl\u00e9mov\u00fdch patch\u016f, kter\u00e9 vedly k chyb\u00e1m, a v okam\u017eiku publikov\u00e1n\u00ed v\u00fdsledk\u016f v\u00fdzkumu byly v\u0161echny souvisej\u00edc\u00ed chyby opraveny, v\u010detn\u011b za \u00fa\u010dasti t\u00fdmu, kter\u00fd v\u00fdzkum prov\u00e1d\u011bl. <\/p>\n

V\u00fdzkumn\u00edci lituj\u00ed, \u017ee zvolili nevhodnou metodu prov\u00e1d\u011bn\u00ed experimentu. Chybou bylo, \u017ee v\u00fdzkum byl proveden bez z\u00edsk\u00e1n\u00ed povolen\u00ed a bez upozorn\u011bn\u00ed komunity. Motivem skryt\u00e9 \u010dinnosti bylo cht\u00edt dos\u00e1hnout \u010distoty experimentu, proto\u017ee upozorn\u011bn\u00ed by mohlo p\u0159il\u00e1kat zvl\u00e1\u0161tn\u00ed pozornost k patch\u016fm a jejich hodnocen\u00ed na z\u00e1klad\u011b obecn\u00fdch podm\u00ednek. P\u0159esto\u017ee c\u00edlem bylo zlep\u0161en\u00ed bezpe\u010dnosti j\u00e1dra, nyn\u00ed si v\u00fdzkumn\u00edci uv\u011bdomili, \u017ee vyu\u017eit\u00ed komunity jako pokusn\u00e9ho kr\u00e1l\u00edka bylo nep\u0159esn\u00e9 a neetick\u00e9. P\u0159itom v\u00fdzkumn\u00edci uji\u0161\u0165uj\u00ed, \u017ee nikdy by \u00famysln\u011b neubl\u00ed\u017eili komunit\u011b ani by nezav\u00e1d\u011bli nov\u00e9 zranitelnosti do pracovn\u00edho k\u00f3du j\u00e1dra. <\/p>\n

Co se t\u00fd\u010de bez\u00fa\u010deln\u00e9ho patchu, kter\u00fd se stal katalyz\u00e1torem blokace, nem\u00e1 \u017e\u00e1dn\u00fd vztah k minul\u00e9mu v\u00fdzkumu a souvis\u00ed s nov\u00fdm projektem zam\u011b\u0159en\u00fdm na vytvo\u0159en\u00ed n\u00e1stroj\u016f pro automatizovan\u00e9 odhalov\u00e1n\u00ed chyb, kter\u00e9 vznikaj\u00ed v d\u016fsledku p\u0159id\u00e1n\u00ed jin\u00fdch patch\u016f. <\/p>\n

\u010clenov\u00e9 skupiny se nyn\u00ed sna\u017e\u00ed naj\u00edt cesty k n\u00e1vratu k \u00fa\u010dasti na v\u00fdvoji a maj\u00ed v \u00famyslu nav\u00e1zat vztahy s Linux Foundation a komunitou v\u00fdvoj\u00e1\u0159\u016f, prok\u00e1zat svou u\u017eite\u010dnost v oblasti zvy\u0161ov\u00e1n\u00ed bezpe\u010dnosti j\u00e1dra a vyj\u00e1d\u0159it touhu intenzivn\u011b pracovat pro spole\u010dn\u00e9 dobro a navr\u00e1tit d\u016fv\u011bru.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u041c\u0438\u043d\u043d\u0435\u0441\u043e\u0442\u044b, \u043f\u0440\u0438\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u043e\u0442 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0430 \u0434\u043d\u044f\u0445 \u0431\u044b\u043b \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d \u0413\u0440\u0435\u0433\u043e\u043c \u041a\u0440\u043e\u0430-\u0425\u0430\u0440\u0442\u043c\u0430\u043d\u043e\u043c, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0435 \u043f\u0438\u0441\u044c\u043c\u043e \u0441 \u0438\u0437\u0432\u0438\u043d\u0435\u043d\u0438\u044f\u043c\u0438 \u0438 \u043f\u043e\u044f\u0441\u043d\u0435\u043d\u0438\u0435\u043c \u043c\u043e\u0442\u0438\u0432\u043e\u0432 \u0441\u0432\u043e\u0435\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438. \u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u0447\u0442\u043e \u0433\u0440\u0443\u043f\u043f\u0430 \u0437\u0430\u043d\u0438\u043c\u0430\u043b\u0430\u0441\u044c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u043b\u0430\u0431\u044b\u0445 \u043c\u0435\u0441\u0442 \u0440\u0435\u0446\u0435\u043d\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u044e\u0449\u0438\u0445 \u043f\u0430\u0442\u0447\u0435\u0439 \u0438 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f \u0432 \u044f\u0434\u0440\u043e \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0441\u043e \u0441\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438. \u041f\u043e\u0441\u043b\u0435 \u043f\u043e\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u044f \u043e\u0442 \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u043e\u0432 \u0433\u0440\u0443\u043f\u043f\u044b \u0441\u043e\u043c\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0430\u0442\u0447\u0430 \u0441 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100020","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47T\u00fdm z Univerzity Minnesoty vysv\u011btlil motivy experiment\u016f se sporn\u00fdmi commity v j\u00e1d\u0159e Linuxu | ProHoster","description":"Skupina v\u00fdzkumn\u00edk\u016f z Univerzity Minnesoty, jej\u00ed\u017e p\u0159ij\u00edm\u00e1n\u00ed zm\u011bn bylo ned\u00e1vno zablokov\u00e1no Gregem Kroa-Hartmanem, zve\u0159ejnila otev\u0159en\u00fd dopis s omluvou a vysv\u011btlen\u00edm motiv\u016f sv\u00fdch \u010dinnost\u00ed.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/komanda-iz-universiteta-minnesoty-poyasnila-motivy-eksperimentov-s-somnitelnymi-kommitami-v-yadro-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u043c\u0430\u043d\u0434\u0430 \u0438\u0437 \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u041c\u0438\u043d\u043d\u0435\u0441\u043e\u0442\u044b \u043f\u043e\u044f\u0441\u043d\u0438\u043b\u0430 \u043c\u043e\u0442\u0438\u0432\u044b \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u043e\u0432 \u0441 \u0441\u043e\u043c\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u043a\u043e\u043c\u043c\u0438\u0442\u0430\u043c\u0438 \u0432 \u044f\u0434\u0440\u043e Linux | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u041c\u0438\u043d\u043d\u0435\u0441\u043e\u0442\u044b, \u043f\u0440\u0438\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u043e\u0442 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0430 \u0434\u043d\u044f\u0445 \u0431\u044b\u043b \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d \u0413\u0440\u0435\u0433\u043e\u043c \u041a\u0440\u043e\u0430-\u0425\u0430\u0440\u0442\u043c\u0430\u043d\u043e\u043c, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0435 \u043f\u0438\u0441\u044c\u043c\u043e \u0441 \u0438\u0437\u0432\u0438\u043d\u0435\u043d\u0438\u044f\u043c\u0438 \u0438 \u043f\u043e\u044f\u0441\u043d\u0435\u043d\u0438\u0435\u043c \u043c\u043e\u0442\u0438\u0432\u043e\u0432 \u0441\u0432\u043e\u0435\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/komanda-iz-universiteta-minnesoty-poyasnila-motivy-eksperimentov-s-somnitelnymi-kommitami-v-yadro-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-04-25T08:22:40+00:00","article:modified_time":"2021-04-25T08:22:40+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100020","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-04-25 08:48:48","updated":"2022-10-05 16:50:39","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/100020","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=100020"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/100020\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=100020"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=100020"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=100020"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}