{"id":80658,"date":"2020-05-07T19:42:15","date_gmt":"2020-05-07T17:42:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/microsoft-naznachil-premiyu-do-100000-za-vyyavlenie-uyazvimosti-v-linux-platforme-azure-sphere"},"modified":"2020-05-07T19:42:15","modified_gmt":"2020-05-07T17:42:15","slug":"microsoft-naznachil-premiyu-do-100000-za-vyyavlenie-uyazvimosti-v-linux-platforme-azure-sphere","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/microsoft-naznachil-premiyu-do-100000-za-vyyavlenie-uyazvimosti-v-linux-platforme-azure-sphere","title":{"rendered":"Microsoft offers a reward of up to $100,000 for identifying vulnerabilities in the Linux platform Azure Sphere","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Microsoft announced<\/a><\/noindex> readiness to pay a reward<\/a><\/noindex>, up to one hundred thousand dollars, for discovering a vulnerability in the IoT platform Azure Sphere<\/a><\/noindex>, built<\/a><\/noindex> on a Linux kernel base and using sandbox isolation for core services and applications. The reward is promised for demonstrating vulnerabilities in the subsystem Pluton<\/a><\/noindex> (root of trust implemented in the chip) or Secure World<\/a><\/noindex> (sandbox).<\/p>\n

The reward is part of a three-month research program<\/a><\/noindex>, which will run from June 1 to August 31, 2020. The initiative specifically targets Azure Sphere OS and does not include cloud subsystems, which are already covered by a separate reward program. To be eligible for the reward, one must demonstrate a vulnerability that could lead to the execution of unsigned third-party code, interception of authentication parameters, privilege escalation, modification of settings, or bypassing firewall restrictions through local (application compromise) or remote attacks. To facilitate research, Microsoft has expressed its willingness to provide participants access to products and services, Azure Sphere SDK, technical documentation, and ensure communication channels with the platform developers.<\/p>\n

The Azure Sphere platform is designed for creating Internet of Things devices based on energy-efficient microcontrollers (MCU) with integrated peripheral subsystems. Azure Sphere is used in commercial equipment, including by companies like Starbucks. A key feature of the platform is the Pluton subsystem, which provides hardware resources for encryption, secure key storage, and performing complex cryptographic operations. Pluton includes a separate specialized processor, a cryptographic engine, a hardware random number generator, and an isolated key storage.<\/p>\n

Additionally, it can be noted the emergence of<\/a><\/noindex> information<\/a><\/noindex> on the attempted sale by an unknown individual of content from private Microsoft GitHub repositories. The unknown individual claimed to have downloaded about 500 GB of data from Microsoft\u2019s private repositories hosted on GitHub and provided screenshots and 1 GB of data as proof. Most participants found the evidence unconvincing, as screenshots can be easily fabricated, and the data contained some nonsensical set of files with text in Chinese, tests, and code snippets. One of Microsoft's engineers stated that comments<\/a><\/noindex> the leak is likely a hoax, as Microsoft has a policy that projects hosted in private GitHub repositories must become public within 30 days.<\/p>\n

<\/a><\/noindex><\/p>\n

Source: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0433\u043e\u0442\u043e\u0432\u043d\u043e\u0441\u0442\u0438 \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u0442\u044c \u043f\u0440\u0435\u043c\u0438\u044e, \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u043c \u0434\u043e \u0441\u0442\u0430 \u0442\u044b\u0441\u044f\u0447 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432, \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0440\u0435\u0448\u0438 \u0432 IoT-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Azure Sphere, \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 \u044f\u0434\u0440\u0430 Linux \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0449\u0435\u0439 sandbox-\u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u0434\u043b\u044f \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u041f\u0440\u0435\u043c\u0438\u044f \u043e\u0431\u0435\u0449\u0430\u043d\u0430 \u0437\u0430 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Pluton (\u043a\u043e\u0440\u0435\u043d\u044c \u0434\u043e\u0432\u0435\u0440\u0438\u044f, \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432 \u0447\u0438\u043f\u0435) \u0438\u043b\u0438 Secure World (sandbox). \u041f\u0440\u0435\u043c\u0438\u044f \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0430\u0441\u0442\u044c\u044e \u0442\u0440\u0451\u0445\u043c\u0435\u0441\u044f\u0447\u043d\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-80658","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Microsoft has set a reward of up to $100,000 for identifying vulnerabilities in the Linux-based Azure Sphere platform | ProHoster","description":"Microsoft has announced its readiness to pay","canonical_url":"https:\/\/prohoster.info\/en\/blog\/news\/microsoft-naznachil-premiyu-do-100000-za-vyyavlenie-uyazvimosti-v-linux-platforme-azure-sphere","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"en_US","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Microsoft \u043d\u0430\u0437\u043d\u0430\u0447\u0438\u043b \u043f\u0440\u0435\u043c\u0438\u044e \u0434\u043e $100000 \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Linux-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Azure Sphere | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0433\u043e\u0442\u043e\u0432\u043d\u043e\u0441\u0442\u0438 \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u0442\u044c","og:url":"https:\/\/prohoster.info\/en\/blog\/news\/microsoft-naznachil-premiyu-do-100000-za-vyyavlenie-uyazvimosti-v-linux-platforme-azure-sphere","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-05-07T17:42:15+00:00","article:modified_time":"2020-05-07T17:42:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"80658","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 16:13:24","updated":"2022-10-04 18:24:34","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/80658","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/comments?post=80658"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/80658\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media?parent=80658"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/categories?post=80658"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/tags?post=80658"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}