{"id":104840,"date":"2022-08-15T21:36:39","date_gmt":"2022-08-15T19:36:40","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/prodemonstrirovan-vzlom-terminala-starlink"},"modified":"2022-08-15T21:36:39","modified_gmt":"2022-08-15T19:36:40","slug":"prodemonstrirovan-vzlom-terminala-starlink","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/prodemonstrirovan-vzlom-terminala-starlink","title":{"rendered":"Demonstrovan hackovac\u00ed termin\u00e1l Starlink","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

V\u011bdec z Katolick\u00e9 univerzity v Leuvenu na konferenci Black Hat p\u0159edstavil techniku kompromitace u\u017eivatelsk\u00e9ho termin\u00e1lu Starlink, kter\u00fd se pou\u017e\u00edv\u00e1 pro p\u0159ipojen\u00ed u\u017eivatel\u016f k satelitn\u00ed s\u00edti SpaceX. Termin\u00e1l je vybaven vlastn\u00edm 64bitov\u00fdm SoC, kter\u00fd vytvo\u0159ila spole\u010dnost STMicro speci\u00e1ln\u011b pro SpaceX. Programov\u00e9 prost\u0159ed\u00ed je zalo\u017eeno na Linuxu. <\/p>\n

Navrhovan\u00e1 metoda umo\u017e\u0148uje prov\u00e1d\u011bt sv\u016fj k\u00f3d na termin\u00e1lu Starlink, z\u00edskat root p\u0159\u00edstup a p\u0159\u00edstup do u\u017eivateli b\u011b\u017en\u011b nedostupn\u00e9 intern\u00ed s\u00edt\u011b, kterou termin\u00e1ly pou\u017e\u00edvaj\u00ed nap\u0159\u00edklad pro aktualizaci firmwaru. Publikovan\u00e9 v\u00fdsledky mohou b\u00fdt tak\u00e9 pou\u017eity pro pokro\u010dil\u00e9 experimenty v oblasti programov\u011b definovan\u00fdch r\u00e1diov\u00fdch syst\u00e9m\u016f (SDR) d\u00edky specifick\u00e9 struktu\u0159e termin\u00e1lu Starlink (pole f\u00e1zovan\u00fdch ant\u00e9n, \u0159\u00edzen\u00fdch programov\u011b). <\/p>\n

Hackov\u00e1n\u00ed termin\u00e1lu Starlink je zaj\u00edmav\u00e9 z pohledu \u00fatoku na dob\u0159e zabezpe\u010den\u00fd Linuxov\u00fd syst\u00e9m s kvalitn\u00ed implementac\u00ed re\u017eimu bezpe\u010dn\u00e9ho zav\u00e1d\u011bn\u00ed (Secure Boot). Proto\u017ee se syst\u00e9mu nepoda\u0159ilo komprimovat software, hack byl proveden na hardwarov\u00e9 \u00farovni pomoc\u00ed speci\u00e1ln\u00edho laboratorn\u00edho vybaven\u00ed. Nakonec se pot\u0159ebn\u00e9 za\u0159\u00edzen\u00ed pro hack sn\u00ed\u017eilo na hotovou modifikovanou desku (modchip), kter\u00e1 pou\u017e\u00edv\u00e1 b\u011b\u017en\u00fd mikrokontrol\u00e9r Raspberry Pi RP2040 (2j\u00e1drov\u00fd Cortex M0). <\/p>\n

P\u0159ipraven\u00e1 modchip deska se p\u0159ipojuje k ur\u010dit\u00fdm tras\u00e1m hlavn\u00ed desky termin\u00e1lu Starlink a zp\u016fsobuje selh\u00e1n\u00ed zm\u011bnou nap\u011bt\u00ed v konkr\u00e9tn\u00edch \u010d\u00e1stech elektrick\u00e9ho sch\u00e9matu («voltage fault»). Vyvol\u00e1n\u00ed selh\u00e1n\u00ed v okam\u017eiku kontroly digit\u00e1ln\u00edho podpisu v ROM bootloaderu (BL1) umo\u017e\u0148uje spu\u0161t\u011bn\u00ed libovoln\u00e9ho k\u00f3du na SoC, a to i v p\u0159\u00edpad\u011b, \u017ee tento k\u00f3d nem\u00e1 platn\u00fd digit\u00e1ln\u00ed podpis. <\/p>\n

Schematick\u00e1 deska pro hackov\u00e1n\u00ed termin\u00e1l\u016f Starlink byla zve\u0159ejn\u011bna na GitHubu ve form\u00e1tu KiCad. Tak\u00e9 byl zve\u0159ejn\u011bn k\u00f3d pou\u017eit\u00e9ho firmwaru mikrokontrol\u00e9ru pro \u00fatok. N\u00e1klady na v\u00fdrobu desky jsou odhadov\u00e1ny p\u0159ibli\u017en\u011b na 25 dolar\u016f.

\"Demonstrovan<\/center>
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0438\u0437 \u041b\u0451\u0432\u0435\u043d\u0441\u043a\u043e\u0433\u043e \u043a\u0430\u0442\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b \u043d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Black Hat \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u0430 Starlink, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0430\u0431\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u043a \u0441\u043f\u0443\u0442\u043d\u0438\u043a\u043e\u0432\u043e\u0439 \u0441\u0435\u0442\u0438 SpaceX. \u0422\u0435\u0440\u043c\u0438\u043d\u0430\u043b \u043e\u0441\u043d\u0430\u0449\u0451\u043d \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c 64-\u0440\u0430\u0437\u0440\u044f\u0434\u043d\u043e\u043c SoC, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 STMicro \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0434\u043b\u044f SpaceX. \u041f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043e \u043d\u0430 Linux. \u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0441\u0432\u043e\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u0435 Starlink, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c root-\u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0443\u044e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":104841,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-104840","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47P\u0159edstaven hack termin\u00e1lu Starlink | ProHoster","description":"V\u00fdzkumn\u00edk z Katolick\u00e9 univerzity v Lovani p\u0159edstavil na konferenci Black Hat techniku kompromitace u\u017eivatelsk\u00e9ho termin\u00e1lu Starlink, kter\u00fd se pou\u017e\u00edv\u00e1 k p\u0159ipojen\u00ed abonent\u016f k satelitn\u00ed s\u00edti.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/prodemonstrirovan-vzlom-terminala-starlink","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d \u0432\u0437\u043b\u043e\u043c \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u0430 Starlink | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0438\u0437 \u041b\u0451\u0432\u0435\u043d\u0441\u043a\u043e\u0433\u043e \u043a\u0430\u0442\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b \u043d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Black Hat \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0440\u043c\u0438\u043d\u0430\u043b\u0430 Starlink, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0430\u0431\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u043a \u0441\u043f\u0443\u0442\u043d\u0438\u043a\u043e\u0432\u043e\u0439 \u0441\u0435\u0442\u0438.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/prodemonstrirovan-vzlom-terminala-starlink","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-08-15T19:36:40+00:00","article:modified_time":"2022-08-15T19:36:40+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"104840","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-08-15 19:37:53","updated":"2022-09-28 09:46:41","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/104840","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=104840"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/104840\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/104841"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=104840"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=104840"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=104840"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}