{"id":80658,"date":"2020-05-07T19:42:15","date_gmt":"2020-05-07T17:42:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/microsoft-naznachil-premiyu-do-100000-za-vyyavlenie-uyazvimosti-v-linux-platforme-azure-sphere"},"modified":"2020-05-07T19:42:15","modified_gmt":"2020-05-07T17:42:15","slug":"microsoft-naznachil-premiyu-do-100000-za-vyyavlenie-uyazvimosti-v-linux-platforme-azure-sphere","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/microsoft-naznachil-premiyu-do-100000-za-vyyavlenie-uyazvimosti-v-linux-platforme-azure-sphere","title":{"rendered":"Microsoft on m\u00e4\u00e4ranud kuni 100 000 dollari suuruse auhinna Linux-p\u00f5hise Azure Sphere platvormi haavatavuse tuvastamise eest","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Microsoft teatas<\/a><\/noindex> valmiduse teavitamise auhinna<\/a><\/noindex>, ulatudes kuni saja tuhande dollarini, IoT platvormi turvaaugu avastamise eest Azure Sphere<\/a><\/noindex>, ehitatud<\/a><\/noindex> Linuxi tuumale ning kasutades rakenduste ja teenuste jaoks sandbox-isoleerimist. Auhind lubatakse haavatavuste demonstreerimise eest alaprogrammis Pluton<\/a><\/noindex> (usaldusjuure, mis on teostatud kiibis) v\u00f5i Secure World<\/a><\/noindex> (sandobox).<\/p>\n

Auhind on osa kolmekuulisest uurimisprogrammist<\/a><\/noindex>, mis kestab 1. juunist 31. augustini 2020. Initsiatiiv on suunatud just Azure Sphere OS-ile ning ei h\u00f5lma pilves\u00fcsteeme, mis on juba eraldi preemiate programmi alla kuuluvad. Auhinna saamiseks on vajalik demonstreerida haavatavust, mis kohaliku (rakenduse kompromiteerimine) v\u00f5i kaugpuurimise r\u00fcnnaku k\u00e4igus v\u00f5ib viia allkirjastamata kolmanda osapoole koodi t\u00e4itmise, autentimise parameetrite p\u00fc\u00fcdmiseks, privileegide t\u00f5stmiseks, seadete muutmiseks v\u00f5i tulem\u00fc\u00fcri piirangute \u00fcletamiseks. Uuringute l\u00e4biviimiseks on Microsoft v\u00e4ljendanud soovi anda osalejatele juurdep\u00e4\u00e4s toodetesse ja teenustesse, Azure Sphere SDK-le, tehnilisele dokumentatsioonile ning tagada sidekanal platvormi arendajatega.<\/p>\n

Azure Sphere platvorm on m\u00f5eldud IoT seadmete loomiseks, mis p\u00f5hinevad energiat\u00f5husatel mikrokontrolleritel (MCU, mikrokontrolleri \u00fcksus) koos integreeritud perifeersete s\u00fcsteemidega. Azure Sphere'i kasutatakse ka kaubandusseadmete, n\u00e4iteks Starbucks'i ettev\u00f5tete seas. \u00dcks platvormi erip\u00e4ra on Plutoni subsystem, mis on m\u00f5eldud riistvaraliste vahendite andmiseks kr\u00fcpteerimiseks, privaatsete v\u00f5tmete ladustamiseks ja keerukate kr\u00fcptograafiliste operatsioonide t\u00e4itmiseks. Pluton sisaldab spetsialiseeritud protsessorit, kr\u00fcptograafilist mootori, riistvaralise juhuslike arvude generaatori ja isoleeritud v\u00f5tmehoidlat.<\/p>\n

Lisaks v\u00f5ib m\u00e4rkida Linuxi tuuma ilmumist, n\u00e4eb see v\u00e4ga huvitav v\u00e4lja.<\/a><\/noindex> andmed<\/a><\/noindex> katse m\u00fc\u00fca teadmata isikute poolt Microsofti privaatsetest GitHubi hoidlatest leitud sisu. Teadmata isik v\u00e4itis, et suudab alla laadida umbes 500 GB andmeid Microsofti privaatsetest hoidlatest, mis on majutatud GitHubis, ja t\u00f5i t\u00f5endina v\u00e4lja ekraanipildid ning 1 GB andmeid. Enamik osalejaid pidas t\u00f5endeid ebapiisavaks, kuna ekraanipilte on kerge v\u00f5ltsida ja andmetes oli mingi m\u00f5ttetu failide kogum hiina keeles, testide ja koodil\u00f5ikude vormis. \u00dcks Microsofti inseneridest \u00fctles, et kommentaarid<\/a><\/noindex> lekke t\u00f5en\u00e4oliselt on vale, kuna Microsoftil on reegel, mis \u00fctleb, et privaatsetes hoidlates GitHubis on projektid, mis peavad 30 p\u00e4eva jooksul avalikuks saama.<\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0433\u043e\u0442\u043e\u0432\u043d\u043e\u0441\u0442\u0438 \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u0442\u044c \u043f\u0440\u0435\u043c\u0438\u044e, \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u043c \u0434\u043e \u0441\u0442\u0430 \u0442\u044b\u0441\u044f\u0447 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432, \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0440\u0435\u0448\u0438 \u0432 IoT-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Azure Sphere, \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 \u044f\u0434\u0440\u0430 Linux \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0449\u0435\u0439 sandbox-\u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u0434\u043b\u044f \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u041f\u0440\u0435\u043c\u0438\u044f \u043e\u0431\u0435\u0449\u0430\u043d\u0430 \u0437\u0430 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Pluton (\u043a\u043e\u0440\u0435\u043d\u044c \u0434\u043e\u0432\u0435\u0440\u0438\u044f, \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432 \u0447\u0438\u043f\u0435) \u0438\u043b\u0438 Secure World (sandbox). \u041f\u0440\u0435\u043c\u0438\u044f \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0430\u0441\u0442\u044c\u044e \u0442\u0440\u0451\u0445\u043c\u0435\u0441\u044f\u0447\u043d\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-80658","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Microsoft on v\u00e4lja pannud preemia kuni 100000 dollarit Linuxi platvormi Azure Sphere haavatavuste tuvastamise eest | ProHoster","description":"Microsoft teatas valmidusest maksta","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/microsoft-naznachil-premiyu-do-100000-za-vyyavlenie-uyazvimosti-v-linux-platforme-azure-sphere","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Microsoft \u043d\u0430\u0437\u043d\u0430\u0447\u0438\u043b \u043f\u0440\u0435\u043c\u0438\u044e \u0434\u043e $100000 \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Linux-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Azure Sphere | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0433\u043e\u0442\u043e\u0432\u043d\u043e\u0441\u0442\u0438 \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u0442\u044c","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/microsoft-naznachil-premiyu-do-100000-za-vyyavlenie-uyazvimosti-v-linux-platforme-azure-sphere","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-05-07T17:42:15+00:00","article:modified_time":"2020-05-07T17:42:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"80658","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 16:13:24","updated":"2022-10-04 18:24:34","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/80658","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=80658"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/80658\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=80658"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=80658"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=80658"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}