{"id":105273,"date":"2022-10-10T09:36:38","date_gmt":"2022-10-10T07:36:38","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/intel-podtverdil-podlinnost-utechki-koda-uefi-proshivok-dlya-chipov-alder-lake"},"modified":"2022-10-10T09:36:38","modified_gmt":"2022-10-10T07:36:38","slug":"intel-podtverdil-podlinnost-utechki-koda-uefi-proshivok-dlya-chipov-alder-lake","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/intel-podtverdil-podlinnost-utechki-koda-uefi-proshivok-dlya-chipov-alder-lake","title":{"rendered":"Intel on kinnitanud Alder Lake'i kiipide UEFI-firmware'i koodi lekke autentsuse.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Intel kinnitas, et GitHubis on avaldatud tundmatute isikute poolt UEFI-firmware'i ja BIOS-i l\u00e4htekoodide autentsus. Kokku on avaldatud 5,8 GB koodi, utiliite, dokumentatsiooni, bloobe ning seadistusi, mis on seotud firmware'ide loomisega Alder Lake'i mikroarhitektuuril p\u00f5hinevatele s\u00fcsteemidele, mis ilmusid novembris 2021. Avaldatud koodi k\u00f5ige uuem muudatus on dateeritud 30. septembriga 2022. <\/p>\n

Inteli v\u00e4itel lekib teave kolmanda osapoole t\u00f5ttu, mitte ettev\u00f5tte infrastruktuuri kompromeerimise t\u00f5ttu. Samuti mainitakse, et avalikustatud kood h\u00f5lmab Project Circuit Breaker programmis, mille eesm\u00e4rk on maksta preemiaid vahemikus 500 kuni 100 000 dollarit, turvaprobleemide tuvastamise eest Inteli firmware'ides ja toodetes (t\u00e4hendab, et uurijad v\u00f5ivad saada preemiaid haavatavuste eest, mis on avastatud lekete sisu kasutades). <\/p>\n

Ei ole t\u00e4psustatud, kes t\u00e4pselt on lekke allikas (OEM-tootjatel ja eritellimusel tarkvara arendavatel ettev\u00f5tetel oli juurdep\u00e4\u00e4s t\u00f6\u00f6riistadele firmware'ide koostamiseks). Avaldatud arhiivi sisu anal\u00fc\u00fcsi k\u00e4igus on tuvastatud mitmeid Lenovo toodete spetsiifilisi teste ja teenuseid («Lenovo Feature Tag Test Information’, «Lenovo String Service», «Lenovo Secure Suite», «Lenovo Cloud Service»), kuid Lenovo osalus lekke t\u00f5ttu ei ole veel kinnitatud. Arhiivist leiti ka Insyde Software'i utiliidid ja teegid, mis tegeleb OEM-tootjate eritellimusel tarkvara arendamisega, ning git-logis on \u00fche LC Future Centeri t\u00f6\u00f6taja e-post, kes toodab s\u00fclearvuteid erinevatele OEM-tootjatele. M\u00f5lemad ettev\u00f5tted teevad koost\u00f6\u00f6d Lenovo'ga. <\/p>\n

Intel'i arvates ei sisalda avalikuks saanud kood konfidentsiaalset teavet ega komponente, mis v\u00f5iksid aidata kaasa uute haavatavuste avastamisele. Samas on Mark Ermilov, kes keskendub Intel'i platvormide turvalisuse uurimisele, leidnud avaldatud arhiivist teavet dokumenteerimata MSR (Model Specific Registers) registrite kohta, mida kasutatakse muu hulgas mikrokoodi juhtimiseks, j\u00e4lgimiseks ja t\u00f5rkeotsinguks; selle teabe kohta kehtib konfidentsiaalsuse leping. Veelgi enam, arhiiv sisaldab suletud v\u00f5tmeid, mida kasutatakse p\u00fcsivara digitaalsete allkirjade allkirjastamiseks ja mis v\u00f5ivad potentsiaalselt aidata Intel Boot Guardi kaitse \u00fcletamisel (v\u00f5tme t\u00f5husust ei ole kinnitatud, on v\u00f5imalik, et see on testv\u00f5ti).
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Intel \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0438 BIOS, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u043d\u0430 GitHub. \u0412\u0441\u0435\u0433\u043e \u0431\u044b\u043b\u043e \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043e 5.8 \u0413\u0411 \u043a\u043e\u0434\u0430, \u0443\u0442\u0438\u043b\u0438\u0442, \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438, \u0431\u043b\u043e\u0431\u043e\u0432 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u0441 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u043c\u0438 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b Alder Lake, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2021 \u0433\u043e\u0434\u0430. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0432\u0435\u0436\u0435\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0432 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043a\u043e\u0434\u0435 \u0434\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e 30 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430. \u041f\u043e \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105273","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Intel on kinnitanud Alder Lake'i kiipide UEFI-firmware'i koodi lekke autentsust | ProHoster","description":"Intel kinnitas UEFI-firmware ja BIOSi l\u00e4htekoodide autentsuse, mille avaldasid tundmatud isikud GitHubis.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/intel-podtverdil-podlinnost-utechki-koda-uefi-proshivok-dlya-chipov-alder-lake","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Intel \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u044c \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u0434\u0430 UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0434\u043b\u044f \u0447\u0438\u043f\u043e\u0432 Alder Lake | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Intel \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0438 BIOS, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u043d\u0430 GitHub.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/intel-podtverdil-podlinnost-utechki-koda-uefi-proshivok-dlya-chipov-alder-lake","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-10-10T07:36:38+00:00","article:modified_time":"2022-10-10T07:36:38+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/105273","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=105273"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/105273\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=105273"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=105273"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=105273"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}