{"id":80658,"date":"2020-05-07T19:42:15","date_gmt":"2020-05-07T17:42:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/microsoft-naznachil-premiyu-do-100000-za-vyyavlenie-uyazvimosti-v-linux-platforme-azure-sphere"},"modified":"2020-05-07T19:42:15","modified_gmt":"2020-05-07T17:42:15","slug":"microsoft-naznachil-premiyu-do-100000-za-vyyavlenie-uyazvimosti-v-linux-platforme-azure-sphere","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/microsoft-naznachil-premiyu-do-100000-za-vyyavlenie-uyazvimosti-v-linux-platforme-azure-sphere","title":{"rendered":"Microsoft a annonc\u00e9 un prix allant jusqu'\u00e0 100 000 $ pour la d\u00e9couverte d'une vuln\u00e9rabilit\u00e9 sur la plateforme Linux Azure Sphere","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

La soci\u00e9t\u00e9 Microsoft a annonc\u00e9<\/a><\/noindex> disponibilit\u00e9 \u00e0 verser une prime<\/a><\/noindex>, d'un montant allant jusqu'\u00e0 cent mille dollars, pour la d\u00e9couverte d'une faille dans la plateforme IoT Azure Sphere<\/a><\/noindex>, construite<\/a><\/noindex> sur la base d'un noyau Linux et utilisant une isolation sandbox pour les services et applications principaux. La prime est promise pour la d\u00e9monstration de vuln\u00e9rabilit\u00e9s dans le sous-syst\u00e8me Pluton<\/a><\/noindex> (racine de confiance impl\u00e9ment\u00e9e dans la puce) ou Secure World<\/a><\/noindex> (sandbox).<\/p>\n

La prime fait partie d'un programme de recherche de trois mois , qui se d\u00e9roulera du 1er juin au 31 ao\u00fbt 2020. L'initiative cible sp\u00e9cifiquement Azure Sphere OS et n'inclut pas les sous-syst\u00e8mes cloud, qui sont d\u00e9j\u00e0 inclus dans un programme de r\u00e9compense distinct. Pour recevoir la prime, il est n\u00e9cessaire de d\u00e9montrer une vuln\u00e9rabilit\u00e9 qui, lors d'une attaque locale (compromission de l'application) ou \u00e0 distance, pourrait mener \u00e0 l'ex\u00e9cution de code tiers non sign\u00e9, \u00e0 l'interception de param\u00e8tres d'authentification, \u00e0 l'\u00e9l\u00e9vation des privil\u00e8ges, \u00e0 des modifications des param\u00e8tres ou \u00e0 une contournement des restrictions du pare-feu. Pour mener les recherches, Microsoft a exprim\u00e9 sa volont\u00e9 de fournir aux participants un acc\u00e8s aux produits et services, au SDK Azure Sphere, \u00e0 la documentation technique, ainsi qu'un canal de communication avec les d\u00e9veloppeurs de la plateforme.<\/a><\/noindex>La plateforme Azure Sphere est destin\u00e9e \u00e0 la cr\u00e9ation d'appareils IoT, construits sur la base de microcontr\u00f4leurs \u00e9co\u00e9nerg\u00e9tiques (MCU, microcontroller unit) avec des sous-syst\u00e8mes p\u00e9riph\u00e9riques int\u00e9gr\u00e9s. Azure Sphere est notamment utilis\u00e9 dans des \u00e9quipements de vente, comme ceux de Starbucks. L'une des caract\u00e9ristiques de la plateforme est le sous-syst\u00e8me Pluton, con\u00e7u pour fournir des capacit\u00e9s mat\u00e9rielles pour le chiffrement, le stockage de cl\u00e9s priv\u00e9es et l'ex\u00e9cution d'op\u00e9rations cryptographiques complexes. Pluton comprend un processeur sp\u00e9cialis\u00e9 distinct, un moteur cryptographique, un g\u00e9n\u00e9rateur de nombres al\u00e9atoires mat\u00e9riel et un stockage isol\u00e9 de cl\u00e9s.<\/p>\n

informations<\/p>\n

Il convient \u00e9galement de noter l'apparition<\/a><\/noindex> informations<\/a><\/noindex> concernant la tentative de vente de contenus inconnus issus de d\u00e9p\u00f4ts priv\u00e9s GitHub de Microsoft. Un individu a d\u00e9clar\u00e9 avoir pu t\u00e9l\u00e9charger environ 500 Go de donn\u00e9es provenant de d\u00e9p\u00f4ts priv\u00e9s de Microsoft h\u00e9berg\u00e9s sur GitHub et a fourni comme preuve des captures d'\u00e9cran ainsi que 1 Go de donn\u00e9es. La plupart des participants ont jug\u00e9 les preuves peu convaincantes, car les captures d'\u00e9cran peuvent facilement \u00eatre falsifi\u00e9es et les donn\u00e9es comprenaient un ensemble de fichiers apparemment sans signification, avec des textes en chinois, des tests et des extraits de code. Un ing\u00e9nieur de Microsoft a les commentaires<\/a><\/noindex> d\u00e9clar\u00e9 que la fuite est probablement un canular, car Microsoft a une politique stipulant que dans les d\u00e9p\u00f4ts priv\u00e9s sur GitHub, des projets devant devenir publics sont h\u00e9berg\u00e9s pendant une p\u00e9riode de 30 jours.<\/p>\n

<\/a><\/noindex><\/p>\n

Source : opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0433\u043e\u0442\u043e\u0432\u043d\u043e\u0441\u0442\u0438 \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u0442\u044c \u043f\u0440\u0435\u043c\u0438\u044e, \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u043c \u0434\u043e \u0441\u0442\u0430 \u0442\u044b\u0441\u044f\u0447 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432, \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0440\u0435\u0448\u0438 \u0432 IoT-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Azure Sphere, \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 \u044f\u0434\u0440\u0430 Linux \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0449\u0435\u0439 sandbox-\u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u0434\u043b\u044f \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u041f\u0440\u0435\u043c\u0438\u044f \u043e\u0431\u0435\u0449\u0430\u043d\u0430 \u0437\u0430 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Pluton (\u043a\u043e\u0440\u0435\u043d\u044c \u0434\u043e\u0432\u0435\u0440\u0438\u044f, \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432 \u0447\u0438\u043f\u0435) \u0438\u043b\u0438 Secure World (sandbox). \u041f\u0440\u0435\u043c\u0438\u044f \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0430\u0441\u0442\u044c\u044e \u0442\u0440\u0451\u0445\u043c\u0435\u0441\u044f\u0447\u043d\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-80658","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Microsoft a fix\u00e9 une prime allant jusqu'\u00e0 100000 $ pour la d\u00e9tection d'une vuln\u00e9rabilit\u00e9 sur la plateforme Linux Azure Sphere | ProHoster","description":"Microsoft a annonc\u00e9 sa pr\u00eat \u00e0 verser","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/microsoft-naznachil-premiyu-do-100000-za-vyyavlenie-uyazvimosti-v-linux-platforme-azure-sphere","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Microsoft \u043d\u0430\u0437\u043d\u0430\u0447\u0438\u043b \u043f\u0440\u0435\u043c\u0438\u044e \u0434\u043e $100000 \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Linux-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Azure Sphere | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0433\u043e\u0442\u043e\u0432\u043d\u043e\u0441\u0442\u0438 \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u0442\u044c","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/microsoft-naznachil-premiyu-do-100000-za-vyyavlenie-uyazvimosti-v-linux-platforme-azure-sphere","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-05-07T17:42:15+00:00","article:modified_time":"2020-05-07T17:42:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"80658","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 16:13:24","updated":"2022-10-04 18:24:34","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/80658","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=80658"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/80658\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=80658"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=80658"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=80658"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}