{"id":100020,"date":"2021-04-25T10:22:40","date_gmt":"2021-04-25T08:22:40","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/komanda-iz-universiteta-minnesoty-poyasnila-motivy-eksperimentov-s-somnitelnymi-kommitami-v-yadro-linux"},"modified":"2021-04-25T10:22:40","modified_gmt":"2021-04-25T08:22:40","slug":"komanda-iz-universiteta-minnesoty-poyasnila-motivy-eksperimentov-s-somnitelnymi-kommitami-v-yadro-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/komanda-iz-universiteta-minnesoty-poyasnila-motivy-eksperimentov-s-somnitelnymi-kommitami-v-yadro-linux","title":{"rendered":"Minnesota \u00dclikooli meeskond selgitas kahtlaste commitide katsete motivatsiooni Linuxi tuumas.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Minnesota \u00dclikooli uurijate r\u00fchm, kelle muudatused blokeeriti hiljuti Greg Kroah-Hartmani poolt, avaldas vabandava kirja, milles selgitati oma tegevuse motiive. Tuletame meelde, et r\u00fchm uuris koodihindamise n\u00f5rkusi ja v\u00f5imalusi edastada tuuma muutusi, mis sisaldavad varjatud haavatavusi. P\u00e4rast saamast ei ole p\u00e4rit \u00fche r\u00fchma liikme poolt kahtlase plaastri koos m\u00f5ttetu parandusega, tekitas eitamine, et uurijad p\u00fc\u00fcavad taas eksperimentaalselt tegeda tuuma arendajatega. Kuna sellised eksperimendid kujutavad endast potentsiaalset turvariski ja v\u00f5tavad aega commitijadelt, otsustati blokeerida muudatuste vastuv\u00f5tmine ja saata k\u00f5ik eelnevalt heakskiidetud plaastrid uuesti \u00fclevaatamiseks. <\/p>\n

Oma vabandavas kirjas teatas r\u00fchma liikmed, et nende tegevus oli motiveeritud ainult heade kavatsuste ja sooviga parandada muudatuste \u00fclevaatamise protsessi, tuvastades ja k\u00f5rvaldades n\u00f5rkusi. R\u00fchm on juba aastaid uurinud protsesse, mis viivad haavatavuste tekkeni, ja t\u00f6\u00f6tab aktiivselt Linuxi tuumas haavatavuste tuvastamise ja k\u00f5rvaldamise nimel. Tal on v\u00e4idetud, et k\u00f5ik 190 uuesti \u00fclevaatamiseks saadetud plaastrit on legitiimsed, parandavad olemasolevaid probleeme ega sisalda tahtlikke vigu ega varjatud haavatavusi. <\/p>\n

Murettekitav uurimus varjatud haavatavuste edendamise kohta viidi l\u00e4bi eelmisel augustil ja see piirdus kolme vigase plaastri saatmisega, millest \u00fckski ei j\u00f5udnud tuuma koodibaasi. Seotud aktivitusega piirdus ainult arutelu ja plaastrite edendamine peatati enne muudatuste lisamist Git-i. Kolme probleemi plaastri kood pole veel esitatud, kuna see paljastaks nende isikud, kes viisid l\u00e4bi algse \u00fclevaatamise (teave avalikustatakse p\u00e4rast n\u00f5usoleku saamist arendajatelt, kes ei tuvastanud vigu). <\/p>\n

Peamine uurimiste allikas ei olnud mitte enda plaastrid, vaid anal\u00fc\u00fcs varasemalt tuuma lisatud v\u00e4liste plaastrite kohta, mille t\u00f5ttu ilmusid hiljem haavatavused. Minnesota \u00dclikooli meeskond ei olnud need plaastrid lisamas. Kokku oli uuritud 138 probleemset plaastrit, mis p\u00f5hjustasid vigu, ja uuringu tulemuste avaldamise ajaks olid k\u00f5ik sellega seotud vead parandatud, sealhulgas uurimust l\u00e4bi viinud meeskonna osalusel. <\/p>\n

Uurijad kahetsevad, et nad kasutasid sobimatut katseviisi. Eksitav oli see, et uuring viidi l\u00e4bi ilma loa saamiseta ja ilma kogukonda teavitamata. Varjatud tegevuse motiiviks oli soov saavutada eksperimentaalse puhtuse, kuna teavitamine oleks v\u00f5inud suunata erilist t\u00e4helepanu plaastritele ja nende hindamisele mittetavalistel alustel. Hoolimata sellest, et eesm\u00e4rk oli tuuma turvalisuse parandamine, on uurijad n\u00fc\u00fcd m\u00f5istnud, et kogukonna kasutamine katsealustena oli vale ja ebaeetiline. Samuti kinnitavad uurijad, et nad ei oleks kunagi tahtlikult kahjustanud kogukonda ega lubanud uute haavatavuste sisestamist t\u00f6\u00f6tuuma koodi. <\/p>\n

Mis puudutab m\u00f5ttetut plaasterd, mis sai blokaadi katal\u00fcsaatoriks, siis see ei ole seotud eelneva uuringuga ning seondub uuele projektile, mille eesm\u00e4rk on luua vahendeid automaatse vigade tuvastamiseks, mis tekivad teiste plaastrite lisamise tulemusena. <\/p>\n

Praegu p\u00fc\u00fcavad grupi liikmed leida viise tagasi arendusse naasmiseks ning kavatsevad taastada oma suhted Linux Foundationi ja arendajate kogukonnaga, t\u00f5estades oma kasulikkust tuuma turvalisuse t\u00f5stmisel ja v\u00e4ljendades soovi intensiivselt t\u00f6\u00f6tada \u00fcldise heaolu ja usalduse taastamise nimel.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u041c\u0438\u043d\u043d\u0435\u0441\u043e\u0442\u044b, \u043f\u0440\u0438\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u043e\u0442 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0430 \u0434\u043d\u044f\u0445 \u0431\u044b\u043b \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d \u0413\u0440\u0435\u0433\u043e\u043c \u041a\u0440\u043e\u0430-\u0425\u0430\u0440\u0442\u043c\u0430\u043d\u043e\u043c, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0435 \u043f\u0438\u0441\u044c\u043c\u043e \u0441 \u0438\u0437\u0432\u0438\u043d\u0435\u043d\u0438\u044f\u043c\u0438 \u0438 \u043f\u043e\u044f\u0441\u043d\u0435\u043d\u0438\u0435\u043c \u043c\u043e\u0442\u0438\u0432\u043e\u0432 \u0441\u0432\u043e\u0435\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438. \u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u0447\u0442\u043e \u0433\u0440\u0443\u043f\u043f\u0430 \u0437\u0430\u043d\u0438\u043c\u0430\u043b\u0430\u0441\u044c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u043b\u0430\u0431\u044b\u0445 \u043c\u0435\u0441\u0442 \u0440\u0435\u0446\u0435\u043d\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u044e\u0449\u0438\u0445 \u043f\u0430\u0442\u0447\u0435\u0439 \u0438 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f \u0432 \u044f\u0434\u0440\u043e \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0441\u043e \u0441\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438. \u041f\u043e\u0441\u043b\u0435 \u043f\u043e\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u044f \u043e\u0442 \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u043e\u0432 \u0433\u0440\u0443\u043f\u043f\u044b \u0441\u043e\u043c\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0430\u0442\u0447\u0430 \u0441 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100020","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Minnesota \u00dclikooli meeskond selgitas kahtlaste p\u00fchenduste katsete motiive Linuxi tuumas | ProHoster","description":"Minnesota \u00dclikooli teadlaste grupp, kelle muudatused blokeeriti hiljuti Greg Kroah-Hartmani poolt, avaldas vabanduskirja ja selgitused oma tegevuse motiividest.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/komanda-iz-universiteta-minnesoty-poyasnila-motivy-eksperimentov-s-somnitelnymi-kommitami-v-yadro-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u043c\u0430\u043d\u0434\u0430 \u0438\u0437 \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u041c\u0438\u043d\u043d\u0435\u0441\u043e\u0442\u044b \u043f\u043e\u044f\u0441\u043d\u0438\u043b\u0430 \u043c\u043e\u0442\u0438\u0432\u044b \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u043e\u0432 \u0441 \u0441\u043e\u043c\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u043a\u043e\u043c\u043c\u0438\u0442\u0430\u043c\u0438 \u0432 \u044f\u0434\u0440\u043e Linux | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u041c\u0438\u043d\u043d\u0435\u0441\u043e\u0442\u044b, \u043f\u0440\u0438\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u043e\u0442 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0430 \u0434\u043d\u044f\u0445 \u0431\u044b\u043b \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d \u0413\u0440\u0435\u0433\u043e\u043c \u041a\u0440\u043e\u0430-\u0425\u0430\u0440\u0442\u043c\u0430\u043d\u043e\u043c, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0435 \u043f\u0438\u0441\u044c\u043c\u043e \u0441 \u0438\u0437\u0432\u0438\u043d\u0435\u043d\u0438\u044f\u043c\u0438 \u0438 \u043f\u043e\u044f\u0441\u043d\u0435\u043d\u0438\u0435\u043c \u043c\u043e\u0442\u0438\u0432\u043e\u0432 \u0441\u0432\u043e\u0435\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/komanda-iz-universiteta-minnesoty-poyasnila-motivy-eksperimentov-s-somnitelnymi-kommitami-v-yadro-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-04-25T08:22:40+00:00","article:modified_time":"2021-04-25T08:22:40+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100020","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-04-25 08:48:48","updated":"2022-10-05 16:50:39","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/100020","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=100020"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/100020\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=100020"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=100020"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=100020"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}