{"id":124557,"date":"2025-05-08T03:05:06","date_gmt":"2025-05-08T01:05:06","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-iventoy-vyyavlena-podstanovka-kornevogo-sertifikata-pri-zapuske-windows"},"modified":"2025-05-08T03:05:06","modified_gmt":"2025-05-08T01:05:06","slug":"v-iventoy-vyyavlena-podstanovka-kornevogo-sertifikata-pri-zapuske-windows","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/v-iventoy-vyyavlena-podstanovka-kornevogo-sertifikata-pri-zapuske-windows","title":{"rendered":"V iVentoy byla zji\u0161t\u011bna substituce ko\u0159enov\u00e9ho certifik\u00e1tu p\u0159i spu\u0161t\u011bn\u00ed Windows.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

V n\u00e1stroji iVentoy, kter\u00fd se pou\u017e\u00edv\u00e1 pro bootov\u00e1n\u00ed a instalaci r\u016fzn\u00fdch opera\u010dn\u00edch syst\u00e9m\u016f p\u0159es s\u00ed\u0165, byla zji\u0161t\u011bna podez\u0159el\u00e1 aktivita. P\u0159i bootov\u00e1n\u00ed opera\u010dn\u00edho syst\u00e9mu Windows n\u00e1stroj prov\u00e1d\u011bl substituci bin\u00e1rn\u00edho ovlada\u010de httpdisk.sys do syst\u00e9mu a instalaci sv\u00e9ho vlastn\u00edho podepsan\u00e9ho certifik\u00e1tu do syst\u00e9mov\u00e9ho \u00falo\u017ei\u0161t\u011b ko\u0159enov\u00fdch certifik\u00e1t\u016f, kter\u00fd slou\u017e\u00ed k podepisov\u00e1n\u00ed ovlada\u010de digit\u00e1ln\u00edm podpisem. 31 z 70 antivirov\u00fdch bal\u00ed\u010dk\u016f, ve kter\u00fdch byl soubor httpdisk.sys zkontrolov\u00e1n, vy\u0161lo s varov\u00e1n\u00edm o p\u0159\u00edtomnosti malwaru. <\/p>\n

Takov\u00e1 aktivita byla vn\u00edm\u00e1na jako potenci\u00e1ln\u00ed pokus o zaveden\u00ed backdooru a vyvolala ot\u00e1zku d\u016fv\u011bry v otev\u0159en\u00fd projekt Ventoy. Situaci zhor\u0161ovalo, \u017ee v minul\u00e9m roce po incidentu s backdoorem v projektu XZ komunita ji\u017e upozornila na dod\u00e1n\u00ed podez\u0159el\u00fdch blob\u016f ve stromu zdrojov\u00fdch text\u016f Ventoy. <\/p>\n

V\u00fdvoj\u00e1\u0159i NixOS navrhli nahradit Ventoy v repozit\u00e1\u0159i nixpkgs forkem fnr1r (alternativn\u011b by mohl b\u00fdt zv\u00e1\u017een i glim). Projekty Ventoy a iVentoy se vyv\u00edjej\u00ed jedn\u00edm autorem a maj\u00ed podobn\u00e9 ur\u010den\u00ed. Rozd\u00edly spo\u010d\u00edvaj\u00ed v tom, \u017ee Ventoy je zcela otev\u0159en\u00fd a zam\u011b\u0159uje se na bootov\u00e1n\u00ed opera\u010dn\u00edch syst\u00e9m\u016f z USB za\u0159\u00edzen\u00ed, zat\u00edmco iVentoy je pouze \u010d\u00e1ste\u010dn\u011b otev\u0159en\u00fd a ur\u010den\u00fd pro bootov\u00e1n\u00ed p\u0159es s\u00ed\u0165 pomoc\u00ed technologie PXE. <\/p>\n

Diskusi o probl\u00e9mu se z\u00fa\u010dastnil autor projekt\u016f Ventoy a iVentoy, kter\u00fd vysv\u011btlil, \u017ee k\u00f3d ovlada\u010de httpdisk.sys je otev\u0159en\u00fd a samotn\u00fd ovlada\u010d je ur\u010den pro p\u0159ipojen\u00ed diskov\u00fdch obraz\u016f Windows p\u0159es s\u00ed\u0165 pomoc\u00ed protokolu HTTP, kter\u00fd se v iVentoy pou\u017e\u00edv\u00e1 pro z\u00edsk\u00e1n\u00ed z serveru<\/a> instala\u010dn\u00edch dat Windows. Substituce ovlada\u010d\u016f a skript\u016f do syst\u00e9mu po bootov\u00e1n\u00ed je zdokumentovan\u00e9 chov\u00e1n\u00ed. <\/p>\n

Vlastn\u00ed certifik\u00e1t, kter\u00fdm byl tento ovlada\u010d podeps\u00e1n, byl p\u0159id\u00e1n do \u00falo\u017ei\u0161t\u011b ko\u0159enov\u00fdch certifik\u00e1t\u016f, aby se zajistilo na\u010d\u00edt\u00e1n\u00ed ovlada\u010de obch\u00e1zej\u00edc\u00edho aktu\u00e1ln\u00ed ov\u011b\u0159ov\u00e1n\u00ed digit\u00e1ln\u00edch podpis\u016f prov\u00e1d\u011bn\u00e9 syst\u00e9mem Windows. Certifik\u00e1t byl pou\u017eit pouze v jednor\u00e1zov\u00e9m prost\u0159ed\u00ed WinPE (Windows Preinstallation Environment), kter\u00e9 bylo vytvo\u0159eno v opera\u010dn\u00ed pam\u011bti. V nainstalovan\u00fdch verz\u00edch Windows na disku nebyly prov\u00e1d\u011bny \u017e\u00e1dn\u00e9 zm\u011bny. Bylo ozn\u00e1meno, \u017ee v p\u0159\u00ed\u0161t\u00ed verzi iVentoy bude pou\u017e\u00edv\u00e1n\u00ed vlastn\u00edho certifik\u00e1tu ukon\u010deno, proto\u017ee pro zaji\u0161t\u011bn\u00ed na\u010d\u00edt\u00e1n\u00ed ovlada\u010de bude pou\u017eit testovac\u00ed re\u017eim WinPE. <\/p>\n

Pokud jde o dod\u00e1vku blob\u016f (1, 2, 3) do Ventoy, v\u00fdvoj\u00e1\u0159 uvedl, \u017ee tyto bin\u00e1rn\u00ed soubory byly p\u0159\u00edmo z\u00edsk\u00e1ny z jin\u00fdch otev\u0159en\u00fdch projekt\u016f a Ventoy je pou\u017e\u00edv\u00e1 bez jak\u00fdchkoli zm\u011bn. Hotov\u00e9 spustiteln\u00e9 soubory se pou\u017e\u00edvaj\u00ed b\u011bhem nastavov\u00e1n\u00ed spou\u0161t\u011bc\u00edch syst\u00e9m\u016f. Jako alternativu se doporu\u010duje nevz\u00edt hotov\u00e9 sestavy, ale sestavit je pro vyd\u00e1n\u00ed Ventoy samostatn\u011b pomoc\u00ed GitHub CI.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 iVentoy, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u043c \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u043e \u0441\u0435\u0442\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c. \u041f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u043f\u043e \u0441\u0435\u0442\u0438 \u041e\u0421 Windows \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u043b \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0431\u0438\u043d\u0430\u0440\u043d\u043e\u0433\u043e \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 httpdisk.sys \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0435 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0441\u0432\u043e\u0435\u0433\u043e \u0441\u0430\u043c\u043e\u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u0437\u0430\u0432\u0435\u0440\u0435\u043d\u0438\u044f \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u044c\u044e. 31 \u0438\u0437 70 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b \u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-124557","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Bylo zji\u0161t\u011bno podv\u00e1d\u011bn\u00ed s ko\u0159enov\u00fdm certifik\u00e1tem p\u0159i spu\u0161t\u011bn\u00ed Windows v iVentoy | ProHoster","description":"V n\u00e1stroji iVentoy, kter\u00fd se pou\u017e\u00edv\u00e1 k na\u010d\u00edt\u00e1n\u00ed a instalaci r\u016fzn\u00fdch opera\u010dn\u00edch syst\u00e9m\u016f p\u0159es s\u00ed\u0165, byla zji\u0161t\u011bna podez\u0159el\u00e1 aktivita.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/v-iventoy-vyyavlena-podstanovka-kornevogo-sertifikata-pri-zapuske-windows","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 iVentoy \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 Windows | ProHoster","og:description":"\u0412 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 iVentoy, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u043c \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u043e \u0441\u0435\u0442\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/v-iventoy-vyyavlena-podstanovka-kornevogo-sertifikata-pri-zapuske-windows","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-05-08T01:05:06+00:00","article:modified_time":"2025-05-08T01:05:06+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"124557","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-22 15:51:24","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 12:41:21","updated":"2026-02-22 15:51:24","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/124557","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=124557"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/124557\/revisions"}],"predecessor-version":[{"id":162495,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/124557\/revisions\/162495"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=124557"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=124557"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=124557"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}