Spole\u010dnost Intel potvrdila autenticitu zdrojov\u00fdch k\u00f3d\u016f UEFI firmwaru a BIOSu zve\u0159ejn\u011bn\u00fdch nezn\u00e1m\u00fdm u\u017eivatelem na GitHubu. Celkem bylo zve\u0159ejn\u011bno 5,8 GB k\u00f3du, n\u00e1stroj\u016f, dokumentace, blob\u016f a konfigurac\u00ed souvisej\u00edc\u00edch se sestavov\u00e1n\u00edm firmwaru pro syst\u00e9my s procesory zalo\u017een\u00fdmi na mikroarchitektu\u0159e Alder Lake, vydan\u00e9 v listopadu 2021. Nejnov\u011bj\u0161\u00ed aktualizace v zve\u0159ejn\u011bn\u00e9m k\u00f3du je datov\u00e1na 30. z\u00e1\u0159\u00ed 2022. <\/p>\n
Podle prohl\u00e1\u0161en\u00ed Intelu k \u00faniku do\u0161lo vinou t\u0159et\u00ed strany, a nikoli v d\u016fsledku kompromitace infrastruktury spole\u010dnosti. D\u00e1le se uv\u00e1d\u00ed, \u017ee k\u00f3d, kter\u00fd se dostal na ve\u0159ejnost, pokr\u00fdv\u00e1 projekt Project Circuit Breaker, jen\u017e zahrnuje odm\u011bny od 500 do 100 000 dolar\u016f za odhalen\u00ed bezpe\u010dnostn\u00edch probl\u00e9m\u016f ve firmwaru a produktech Intelu (p\u0159edpokl\u00e1d\u00e1 se, \u017ee v\u00fdzkumn\u00edci mohou z\u00edskat odm\u011bny za ozn\u00e1men\u00ed o zranitelnostech, kter\u00e9 byly odhaleny pomoc\u00ed obsahu unikl\u00e9ho k\u00f3du). <\/p>\n
Nen\u00ed jasn\u00e9, kdo p\u0159esn\u011b byl zdrojem \u00faniku (p\u0159\u00edstup k n\u00e1stroj\u016fm pro sestaven\u00ed firmwaru m\u011bli OEM v\u00fdrobci za\u0159\u00edzen\u00ed a spole\u010dnosti vyv\u00edjej\u00edc\u00ed firmware na objedn\u00e1vku). B\u011bhem anal\u00fdzy obsahu zve\u0159ejn\u011bn\u00e9ho archivu byly identifikov\u00e1ny n\u011bkter\u00e9 specifick\u00e9 testy a slu\u017eby spole\u010dnosti Lenovo («Lenovo Feature Tag Test Information’, «Lenovo String Service», «Lenovo Secure Suite», «Lenovo Cloud Service»), av\u0161ak \u00fa\u010dast spole\u010dnosti Lenovo na \u00faniku zat\u00edm nebyla potvrzena. V archivu byly tak\u00e9 nalezeny utilit a knihovny spole\u010dnosti Insyde Software, kter\u00e1 se zab\u00fdv\u00e1 v\u00fdvojem firmwaru na zak\u00e1zku pro OEM v\u00fdrobce, a v git logu se nach\u00e1z\u00ed e-mail jednoho ze zam\u011bstnanc\u016f spole\u010dnosti LC Future Center, kter\u00e1 vyr\u00e1b\u00ed notebooky pro r\u016fzn\u00e9 OEM v\u00fdrobce. Ob\u011b spole\u010dnosti spolupracuj\u00ed se spole\u010dnost\u00ed Lenovo. <\/p>\n
Podle spole\u010dnosti Intel k\u00f3d, kter\u00fd se dostal do ve\u0159ejn\u00e9ho p\u0159\u00edstupu, neobsahuje d\u016fv\u011brn\u00e9 informace ani komponenty, kter\u00e9 by mohly p\u0159isp\u011bt k odhalen\u00ed nov\u00fdch zranitelnost\u00ed. Mark Ermolov, specialista na v\u00fdzkum bezpe\u010dnosti platforem Intel, v\u0161ak v publikovan\u00e9m archivu na\u0161el informace o nedokumentovan\u00fdch registrech MSR (Model Specific Registers, kter\u00e9 se pou\u017e\u00edvaj\u00ed tak\u00e9 pro \u0159\u00edzen\u00ed mikrok\u00f3du, sledov\u00e1n\u00ed a lad\u011bn\u00ed), jejich\u017e informace podl\u00e9haj\u00ed dohod\u011b o ml\u010denlivosti. Nav\u00edc v archivu byl nalezen priv\u00e1tn\u00ed kl\u00ed\u010d, kter\u00fd se pou\u017e\u00edv\u00e1 k podepisov\u00e1n\u00ed firmwaru digit\u00e1ln\u00edm podpisem, a kter\u00fd by potenci\u00e1ln\u011b mohl b\u00fdt pou\u017eit k obch\u00e1zen\u00ed ochrany Intel Boot Guard (funk\u010dnost kl\u00ed\u010de nebyla potvrzena, nen\u00ed vylou\u010deno, \u017ee se jedn\u00e1 o testovac\u00ed kl\u00ed\u010d). \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Intel \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0438 BIOS, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u043d\u0430 GitHub. \u0412\u0441\u0435\u0433\u043e \u0431\u044b\u043b\u043e \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043e 5.8 \u0413\u0411 \u043a\u043e\u0434\u0430, \u0443\u0442\u0438\u043b\u0438\u0442, \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438, \u0431\u043b\u043e\u0431\u043e\u0432 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u0441 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u043c\u0438 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b Alder Lake, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2021 \u0433\u043e\u0434\u0430. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0432\u0435\u0436\u0435\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0432 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043a\u043e\u0434\u0435 \u0434\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e 30 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430. \u041f\u043e \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105273","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Intel potvrdil pravost \u00faniku k\u00f3du UEFI firmwaru pro \u010dipy Alder Lake | ProHoster","description":"Spole\u010dnost Intel potvrdila pravost zdrojov\u00fdch text\u016f UEFI firmwaru a BIOSu, kter\u00e9 byly publikov\u00e1ny nezn\u00e1m\u00fdm u\u017eivatelsk\u00fdm \u00fa\u010dtem na GitHubu.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/intel-podtverdil-podlinnost-utechki-koda-uefi-proshivok-dlya-chipov-alder-lake","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Intel \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u044c \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u0434\u0430 UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0434\u043b\u044f \u0447\u0438\u043f\u043e\u0432 Alder Lake | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Intel \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0438 BIOS, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u043d\u0430 GitHub.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/intel-podtverdil-podlinnost-utechki-koda-uefi-proshivok-dlya-chipov-alder-lake","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-10-10T07:36:38+00:00","article:modified_time":"2022-10-10T07:36:38+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/105273","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=105273"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/105273\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=105273"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=105273"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=105273"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"