{"id":105273,"date":"2022-10-10T09:36:38","date_gmt":"2022-10-10T07:36:38","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/intel-podtverdil-podlinnost-utechki-koda-uefi-proshivok-dlya-chipov-alder-lake"},"modified":"2022-10-10T09:36:38","modified_gmt":"2022-10-10T07:36:38","slug":"intel-podtverdil-podlinnost-utechki-koda-uefi-proshivok-dlya-chipov-alder-lake","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/intel-podtverdil-podlinnost-utechki-koda-uefi-proshivok-dlya-chipov-alder-lake","title":{"rendered":"Intel kinnitas Alder Lake'i kiipide UEFI-firmware'i koodi lekke autentsust","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Intel kinnitas, et teadmata autor on avalikustanud UEFI-firmware ja BIOS-i allikakoode, mis on postitatud GitHubi. Kokku avalikustati 5,8 GB koodi, utiliite, dokumentatsiooni, blob'e ja seadistusi, mis on seotud firmware'ide genereerimisega Alder Lake mikroarhitektuuri alusel t\u00f6\u00f6tavatele s\u00fcsteemidele, mis ilmusid novembris 2021. Viimase avaldatud koodi muudatus on kuup\u00e4evaga 30. september 2022. <\/p>\n

Intel teatas, et lekke p\u00f5hjustas kolmas osapool, mitte ettev\u00f5tte infrastruktuuri kompromiteerimine. Samuti mainitakse, et avalikustatav kood h\u00f5lmab Project Circuit Breaker programmi, mis pakub preemiaid vahemikus 500 kuni 100000 dollarit, et tuvastada turvaprobleeme Intel'i firmware'ides ja toodetes (ennek\u00f5ike v\u00f5ivad teadlased saada preemiaid haavatavuste teeteatamise eest, mis on avastatud lekke sisuga). <\/p>\n

Ei ole t\u00e4psustatud, kes t\u00e4pselt lekke allikaks sai (juurdep\u00e4\u00e4s tihenduskoodide koostamise t\u00f6\u00f6riistadele oli OEM-seadme tootjatel ja kohandatud tihendeid arendavatel ettev\u00f5tetel). Avaldatud arhiivi sisu anal\u00fc\u00fcsimisel leiti m\u00f5ned ettev\u00f5ttest Lenovo spetsiifilised testid ja teenused (\"Lenovo Feature Tag Test Information\", \"Lenovo String Service\", \"Lenovo Secure Suite\", \"Lenovo Cloud Service\"), kuid Lenovo osalust lekke puhul ei ole veel kinnitatud. Arhiivist leiti ka utiliite ja raamatukogusid ettev\u00f5ttelt Insyde Software, mis arendab tihendeid OEM-tootjate tellimisel, ning git-logis on \u00fche LC Future Centeri t\u00f6\u00f6taja e-posti aadress, kes toodab s\u00fclearvuteid erinevate OEM-tootjate jaoks. M\u00f5lemad ettev\u00f5tted teevad koost\u00f6\u00f6d Lenovo'ga. <\/p>\n

Intel'i arvates ei sisalda avalikult saadaval olev kood konfidentsiaalseid andmeid ega komponente, mis v\u00f5iksid aidata uute haavatavuste avastamisel. Samuti on Mark Ermolov, kes on spetsialiseerunud Intel'i platvormide turvauuringutele, tuvastanud avaldatud arhiivis teavet dokumenteerimata MSR (mudelispetsiifilised registrid, mida kasutatakse ka mikrokoodi haldamiseks, j\u00e4lgimiseks ja silumiseks) registrite kohta, mille kohta info kuulub konfidentsiaalsuse kokkuleppe alla. Lisaks leiti arhiivist salajane v\u00f5ti, mida kasutatakse firmware digitaalsete allkirjade kinnitamiseks ja mida v\u00f5iks potentsiaalselt kasutada Intel Boot Guard'i kaitse \u00fcmpert\u00f6\u00f6tlemiseks (v\u00f5ti ei ole kinnitatud, ei v\u00e4listata, et tegemist on testv\u00f5tmega).
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Intel \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0438 BIOS, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u043d\u0430 GitHub. \u0412\u0441\u0435\u0433\u043e \u0431\u044b\u043b\u043e \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043e 5.8 \u0413\u0411 \u043a\u043e\u0434\u0430, \u0443\u0442\u0438\u043b\u0438\u0442, \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438, \u0431\u043b\u043e\u0431\u043e\u0432 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u0441 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u043c\u0438 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b Alder Lake, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2021 \u0433\u043e\u0434\u0430. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0432\u0435\u0436\u0435\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0432 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043a\u043e\u0434\u0435 \u0434\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e 30 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430. \u041f\u043e \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105273","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Intel kinnitas Alder Lake'i kiipide UEFI-firmware koodi lekke autentsust | ProHoster","description":"Intel kinnitas UEFI-firmware ja BIOS allikakoode autentsust, mis on avaldatud tundmatu isiku poolt GitHubis.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/intel-podtverdil-podlinnost-utechki-koda-uefi-proshivok-dlya-chipov-alder-lake","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Intel \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u044c \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u0434\u0430 UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0434\u043b\u044f \u0447\u0438\u043f\u043e\u0432 Alder Lake | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Intel \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0438 BIOS, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u043d\u0430 GitHub.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/intel-podtverdil-podlinnost-utechki-koda-uefi-proshivok-dlya-chipov-alder-lake","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-10-10T07:36:38+00:00","article:modified_time":"2022-10-10T07:36:38+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/105273","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=105273"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/105273\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=105273"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=105273"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=105273"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}