{"id":120977,"date":"2024-12-13T21:46:00","date_gmt":"2024-12-13T19:46:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-badram-pozvolyayushhaya-obojti-mehanizm-attestaczii-sev-snp-v-cpu-amd"},"modified":"2024-12-13T21:46:00","modified_gmt":"2024-12-13T19:46:02","slug":"ataka-badram-pozvolyayushhaya-obojti-mehanizm-attestaczii-sev-snp-v-cpu-amd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/ataka-badram-pozvolyayushhaya-obojti-mehanizm-attestaczii-sev-snp-v-cpu-amd","title":{"rendered":"\u00datok BadRAM, kter\u00fd umo\u017e\u0148uje obej\u00edt mechanismus certifikace SEV-SNP v CPU AMD","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Skupina v\u00fdzkumn\u00edk\u016f z univerzit v Leuven, L\u00fcbecku a Birminghamu vyvinula metodu \u00fatoku BadRAM (CVE-2024-21944), kter\u00e1 umo\u017e\u0148uje obch\u00e1zet mechanismy autentizace a kompromitovat prost\u0159ed\u00ed chr\u00e1n\u011bn\u00e1 pomoc\u00ed roz\u0161\u00ed\u0159en\u00ed SEV-SNP v procesorech AMD. K proveden\u00ed \u00fatoku mus\u00ed \u00fato\u010dn\u00edk, s v\u00fdjimkou vz\u00e1cn\u00fdch p\u0159\u00edpad\u016f, z\u00edskat fyzick\u00fd p\u0159\u00edstup k pam\u011b\u0165ov\u00fdm modul\u016fm a m\u00edt mo\u017enost spou\u0161t\u011bt k\u00f3d na \u00farovni nult\u00e9ho privilegovan\u00e9ho re\u017eimu (ring0) na serveru, kter\u00fd provozuje chr\u00e1n\u011bn\u00e1 hostitelsk\u00e1 prost\u0159ed\u00ed. <\/p>\n

Roz\u0161\u00ed\u0159en\u00ed AMD SEV (Secure Encrypted Virtualization) maj\u00ed za c\u00edl poskytovat z\u00e1ruky integrity pam\u011bti virtu\u00e1ln\u00edch stroj\u016f a chr\u00e1nit je p\u0159ed z\u00e1sahy a anal\u00fdzou ze strany administr\u00e1tora hostitelsk\u00e9ho syst\u00e9mu, kter\u00fd m\u00e1 mo\u017enost vykon\u00e1vat k\u00f3d na \u00farovni hypervisoru. P\u016fvodn\u00ed ochrana AMD SEV spo\u010d\u00edvala v \u0161ifrov\u00e1n\u00ed obsahu pam\u011bti hostitelsk\u00e9ho syst\u00e9mu a izolaci registr\u016f, ale pozd\u011bji byly v procesorech AMD EPYC implementov\u00e1ny dal\u0161\u00ed roz\u0161\u00ed\u0159en\u00ed SEV-SNP (Secure Nested Paging) pro bezpe\u010dn\u00e9 zpracov\u00e1n\u00ed vno\u0159en\u00fdch str\u00e1nek pam\u011bti, zaji\u0161\u0165uj\u00edc\u00ed integritu pam\u011bti a zabra\u0148uj\u00edc\u00ed \u00faprav\u00e1m pam\u011bti hostitelsk\u00e9ho syst\u00e9mu ze strany hypervisoru. <\/p>\n

Mechanismus AMD SEV-SNP byl navr\u017een tak, aby agenti nebo person\u00e1l datov\u00fdch center a cloudov\u00fdch poskytovatel\u016f, ve kter\u00fdch b\u011b\u017e\u00ed chr\u00e1n\u011bn\u00e9 hostitelsk\u00e9 syst\u00e9my, nemohli zasahovat do jejich \u010dinnosti. Navr\u017een\u00e1 metoda \u00fatoku BadRAM umo\u017e\u0148uje obch\u00e1zet poskytovan\u00e9 z\u00e1ruky prost\u0159ednictv\u00edm zm\u011bny metadat SPD (Serial Presence Detect) v pam\u011b\u0165ov\u00fdch modulech DDR4 nebo DDR5. P\u0159i \u00fasp\u011b\u0161n\u00e9m \u00fatoku m\u016f\u017ee \u00fato\u010dn\u00edk p\u0159epsat \u0161ifrovan\u00e1 data v pam\u011bti hostitelsk\u00e9ho syst\u00e9mu (na \u00farovni \u0161ifrovan\u00e9ho textu, bez mo\u017enosti de\u0161ifrov\u00e1n\u00ed) a obej\u00edt mechanismus attestace, nap\u0159\u00edklad k skryt\u00ed implantace backdooru do virtu\u00e1ln\u00edho stroje, chr\u00e1n\u011bn\u00e9ho pomoc\u00ed technologie SEV-SNP. <\/p>\n

\u00datok spo\u010d\u00edv\u00e1 v nastaven\u00ed fale\u0161n\u00fdch parametr\u016f modulu pam\u011bti ve SPD, kter\u00e9 nut\u00ed procesor p\u0159istupovat k neexistuj\u00edc\u00edm adres\u00e1m, je\u017e jsou mapov\u00e1ny na existuj\u00edc\u00ed oblasti pam\u011bti. \u00dato\u010dn\u00edk m\u016f\u017ee upravit SPD tak, \u017ee modul pam\u011bti vr\u00e1t\u00ed procesoru velikost p\u0159evy\u0161uj\u00edc\u00ed skute\u010dn\u00e9 vlastnosti modulu. Pot\u00e9 m\u016f\u017ee \u00fato\u010dn\u00edk prov\u00e9st mapov\u00e1n\u00ed vymy\u0161len\u00e9 neexistuj\u00edc\u00ed pam\u011bti na skute\u010dnou oblast v DRAM, kter\u00e1 je ji\u017e pou\u017e\u00edv\u00e1na za\u0161ifrovan\u00fdm zp\u016fsobem v zabezpe\u010den\u00fdch hostitelsk\u00fdch syst\u00e9mech. Vznik\u00e1 tak situace, kdy r\u016fzn\u00e9 adresy ukazuj\u00ed na stejnou fyzickou pam\u011b\u0165 (dv\u011b oblasti jsou mapov\u00e1ny na jednu oblast v \u010dipu DRAM), tj. na adresu fale\u0161n\u00e9 mapovan\u00e9 oblasti pam\u011bti lze z\u00edskat p\u0159\u00edstup k ji\u017e pou\u017e\u00edvan\u00e9 skute\u010dn\u00e9 pam\u011bti a obej\u00edt mechanismy ochrany pam\u011bti v CPU.

\"\u00datok<\/center> <\/p>\n

K proveden\u00ed \u00fatoku sta\u010d\u00ed sestavit jednoduch\u00fd program\u00e1tor za cenu kolem 10 dolar\u016f, skl\u00e1daj\u00edc\u00ed se z mikrokontrol\u00e9ru Raspberry Pi Pico, konektoru pro moduly DDR4\/DD5 a zdroje nap\u00e1jen\u00ed. N\u00e1stroje pou\u017eit\u00e9 k proveden\u00ed \u00fatoku, j\u00e1drov\u00fd modul a prototypy exploit\u016f jsou um\u00edst\u011bny na GitHubu.

\"\u00datok<\/center> <\/p>\n

Pro \u010dipy n\u011bkter\u00fdch v\u00fdrobc\u016f, u nich\u017e nen\u00ed zablokov\u00e1no p\u0159episov\u00e1n\u00ed SPD, je proveden\u00ed \u00fatoku mo\u017en\u00e9 softwarov\u011b bez fyzick\u00e9ho p\u0159\u00edstupu k serveru. Nap\u0159\u00edklad lze softwarov\u011b zm\u011bnit parametry pam\u011b\u0165ov\u00fdch modul\u016f spole\u010dnosti Corsair s RGB podsv\u00edcen\u00edm. V p\u0159\u00edpad\u011b pln\u011b softwarov\u00e9ho \u00fatoku m\u016f\u017ee b\u00fdt syst\u00e9m kompromitov\u00e1n nap\u0159\u00edklad prost\u0159ednictv\u00edm \u0161kodliv\u00e9ho aktualizace BIOSu nebo skrze diverzi ze strany administr\u00e1tor\u016f. servery<\/a> v cloudov\u00fdch slu\u017eb\u00e1ch.

\"\u00datok<\/center> <\/p>\n

Jako potvrzen\u00ed \u00fa\u010dinnosti metody jsou p\u0159edvedeny dv\u011b \u00fatoky. V prvn\u00edm \u00fatoku je uk\u00e1z\u00e1na mo\u017enost op\u011btovn\u00e9ho zobrazen\u00ed \u0161ifrovan\u00e9ho textu \u2014 p\u0159i pou\u017eit\u00ed AMD SEV jsou data v pam\u011bti ukl\u00e1d\u00e1na za\u0161ifrovan\u011b a \u00fato\u010dn\u00edk nem\u016f\u017ee ur\u010dit obsah, ale m\u00e1 mo\u017enost p\u0159e\u010d\u00edst za\u0161ifrovan\u00e1 data a pot\u00e9 je vlo\u017eit m\u00edsto jin\u00e9ho za\u0161ifrovan\u00e9ho obsahu. <\/p>\n

Ve druh\u00e9m \u00fatoku byla demonstrov\u00e1na mo\u017enost obch\u00e1zen\u00ed mechanismu attestace SEV-SNP, kter\u00fd poskytuje kryptografick\u00e9 ov\u011b\u0159en\u00ed integrity virtu\u00e1ln\u00edho stroje spu\u0161t\u011bn\u00e9ho v zabezpe\u010den\u00e9m prost\u0159ed\u00ed. \u00dato\u010dn\u00edk m\u016f\u017ee zachytit zpr\u00e1vu o attestaci spr\u00e1vn\u00e9ho virtu\u00e1ln\u00edho stroje a pot\u00e9 ji pou\u017e\u00edt pro kompromitovan\u00fd virtu\u00e1ln\u00ed stroj, nap\u0159\u00edklad skryt\u00edm stop po implantaci backdooru. <\/p>\n

Probl\u00e9m se t\u00fdk\u00e1 3. a 4. generace procesor\u016f AMD s\u00e9rie EPYC, dod\u00e1van\u00fdch pod k\u00f3dov\u00fdmi jm\u00e9ny Milan, Milan-X, Genoa, Bergamo, Genoa-X a Siena. Aby zablokovala zranitelnost, spole\u010dnost AMD ji\u017e vydala aktualizaci firmwaru SEV, v n\u00ed\u017e je implementov\u00e1na kontrola ALIAS_CHECK, kter\u00e1 zabra\u0148uje manipulaci s pam\u011b\u0165mi, jak\u00fdmi je doty\u010dn\u00fd \u00fatok. <\/p>\n

Navrhovan\u00e9 technologie spole\u010dnosti Intel Scalable SGX a TDX nejsou \u00fatoku vystaveny, nebo\u0165 pot\u0159ebn\u00e9 kontroly jsou zahrnuty ji\u017e od po\u010d\u00e1tku. Klasick\u00e1 technologie Intel SGX, kter\u00e1 byla v roce 2021 p\u0159evedena na seznam zastaral\u00fdch, je \u010d\u00e1ste\u010dn\u011b n\u00e1chyln\u00e1 k \u00fatoku (analogicky k d\u0159\u00edve zn\u00e1m\u00e9mu \u00fatoku MemBuster, \u00fato\u010dn\u00edk m\u016f\u017ee analyzovat p\u0159\u00edstupy k \u0161ifrovan\u00e9 pam\u011bti, tedy je mo\u017en\u00e9 pouze \u010dten\u00ed \u0161ifrovan\u00e9ho textu, ale ne jeho p\u0159eps\u00e1n\u00ed). Testov\u00e1n\u00ed roz\u0161\u00ed\u0159en\u00ed CCA (Confidential Compute Architecture) v procesorech spole\u010dnosti ARM nebylo provedeno. <\/p>\n

D\u00e1le je hl\u00e1\u0161ena dal\u0161\u00ed zranitelnost souvisej\u00edc\u00ed s AMD SEV-SNP. Zranitelnost byla identifikov\u00e1na ve vyv\u00edjen\u00e9 AMD fork emul\u00e1toru QEMU, ur\u010den\u00e9ho pro spu\u0161t\u011bn\u00ed virtu\u00e1ln\u00edch stroj\u016f<\/a> s SEV-SNP. Probl\u00e9m umo\u017e\u0148uje spr\u00e1vci hostitelsk\u00e9ho prost\u0159ed\u00ed z\u00edskat root p\u0159\u00edstup ke \u0433\u043e\u0441\u0442ev\u00fdm syst\u00e9m\u016fm prost\u0159ednictv\u00edm manipulace s ACPI tabulkami. Zranitelnost je zp\u016fsobena t\u00edm, \u017ee p\u0159i na\u010d\u00edt\u00e1n\u00ed \u0433\u043e\u0441\u0442\u0435\u0432\u00e9ho syst\u00e9mu prob\u00edh\u00e1 ov\u011b\u0159en\u00ed integrity j\u00e1dra Linuxu, po\u010d\u00e1te\u010dn\u00edho RAM disku a parametr\u016f j\u00e1dra, ale nezohled\u0148uj\u00ed se ACPI tabulky, prost\u0159ednictv\u00edm kter\u00fdch m\u016f\u017ee hypervizor vystavit speci\u00e1ln\u011b upraven\u00fd k\u00f3d AML (ACPI Machine Language), ur\u010den\u00fd pro vykon\u00e1v\u00e1n\u00ed v \u0433\u043e\u0441\u0442\u0435\u0432\u00e9m prost\u0159ed\u00ed. Je uvedeno, \u017ee probl\u00e9m nen\u00ed specifick\u00fd pro QEMU a projevuje se v jak\u00fdchkoliv hypervizorech a emul\u00e1torech, nebo\u0165 j\u00e1dro Linuxu d\u016fv\u011b\u0159uje jak\u00fdmkoliv dat\u016fm ACPI p\u0159ich\u00e1zej\u00edc\u00edm od hypervizora.

\r\n \"P\u0159ehr\u00e1t\r\n
<\/div>\r\n <\/div><\/center>
\r\n \"P\u0159ehr\u00e1t\r\n
<\/div>\r\n <\/div><\/center>
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041b\u0451\u0432\u0435\u043d\u0441\u043a\u043e\u0433\u043e, \u041b\u044e\u0431\u0435\u043a\u0441\u043a\u043e\u0433\u043e \u0438 \u0411\u0438\u0440\u043c\u0438\u043d\u0433\u0435\u043c\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 BadRAM (CVE-2024-21944), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f, \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u044f SEV-SNP \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u0445 AMD. \u0414\u043b\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0437\u0430 \u0440\u0435\u0434\u043a\u0438\u043c \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c, \u0434\u043e\u043b\u0436\u0435\u043d \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043c\u043e\u0434\u0443\u043b\u044f\u043c \u043f\u0430\u043c\u044f\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043c\u0435\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u043a\u043e\u043b\u044c\u0446\u0430 \u0437\u0430\u0449\u0438\u0442\u044b (ring0) […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":120978,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-120977","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u00datok BadRAM, kter\u00fd umo\u017e\u0148uje obej\u00edt mechanismus certifikace SEV-SNP v procesorech AMD | ProHoster","description":"Skupina v\u00fdzkumn\u00edk\u016f z univerzit v Louvainu, L\u00fcbecku a Birminghamu vyvinula metodu \u00fatoku BadRAM (CVE-2024-21944), kter\u00e1 umo\u017e\u0148uje obej\u00edt mechanismus ov\u011b\u0159ov\u00e1n\u00ed a kompromitovat prost\u0159ed\u00ed.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/ataka-badram-pozvolyayushhaya-obojti-mehanizm-attestaczii-sev-snp-v-cpu-amd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 BadRAM, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0430\u0442\u0442\u0435\u0441\u0442\u0430\u0446\u0438\u0438 SEV-SNP \u0432 CPU AMD | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041b\u0451\u0432\u0435\u043d\u0441\u043a\u043e\u0433\u043e, \u041b\u044e\u0431\u0435\u043a\u0441\u043a\u043e\u0433\u043e \u0438 \u0411\u0438\u0440\u043c\u0438\u043d\u0433\u0435\u043c\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 BadRAM (CVE-2024-21944), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/ataka-badram-pozvolyayushhaya-obojti-mehanizm-attestaczii-sev-snp-v-cpu-amd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-12-13T19:46:02+00:00","article:modified_time":"2024-12-13T19:46:02+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"120977","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:38:18","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 08:53:19","updated":"2026-02-09 17:38:18","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/120977","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=120977"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/120977\/revisions"}],"predecessor-version":[{"id":159437,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/120977\/revisions\/159437"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/120978"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=120977"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=120977"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=120977"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}