Microsoft tare da haɗin gwiwar Intel, Qualcomm da AMD tsarin wayar hannu tare da kariyar hardware daga hare-hare ta hanyar firmware. An tilasta wa kamfanin samar da irin wadannan manhajojin kwamfuta ne sakamakon karuwar hare-haren da ake kaiwa masu amfani da su daga wadanda ake kira "farar hula hackers" - kungiyoyin kwararrun masu satar bayanai da ke karkashin hukumomin gwamnati. Musamman ƙwararrun tsaro na ESET suna danganta irin waɗannan ayyukan ga ƙungiyar masu satar bayanan Rasha APT28 (Fancy Bear). Kungiyar APT28 ta yi zargin cewa ta gwada software da ke gudanar da muggan code yayin loda firmware daga BIOS.
Tare, ƙwararrun tsaro na yanar gizo na Microsoft da masu haɓakawa sun gabatar da maganin silicon a cikin hanyar tushen aminci na hardware. Kamfanin ya kira irin waɗannan PCs Secured-core PC (PC tare da amintaccen core). A halin yanzu, Secured-core PCs sun haɗa da adadin kwamfyutocin Dell, Lenovo da Panasonic da kwamfutar hannu na Microsoft Surface Pro X. data daidaita .
Har ya zuwa yanzu, matsalar da PCs masu karko shine cewa ƙirar ƙirar ƙirar firmware ta uwa da tsarin OEMs. A haƙiƙa, ita ce hanya mafi rauni a cikin sarkar samar da kayayyaki ta Microsoft. Na'urar wasan bidiyo ta Xbox, alal misali, tana aiki azaman dandamali mai aminci na tsawon shekaru, tunda tsaron dandamali a kowane matakai - daga kayan masarufi zuwa software - Microsoft da kanta ke kulawa. Wannan bai yiwu ba tare da PC har yanzu.
Microsoft ya yanke shawara mai sauƙi don cire firmware daga lissafin lissafin lokacin farkon tabbatar da ikon lauya. Fiye da daidai, sun fitar da tsarin tabbatarwa zuwa mai sarrafawa da guntu na musamman. Wannan yana bayyana yana amfani da maɓallin kayan masarufi wanda aka rubuta zuwa ga mai sarrafawa yayin ƙira. Lokacin da aka ɗora firmware akan PC, mai sarrafawa yana duba shi don tsaro da ko za a iya amincewa da shi. Idan mai sarrafawa bai hana firmware daga lodawa ba (an yarda da shi azaman amintacce), ana canja wurin sarrafa PC zuwa tsarin aiki. Tsarin ya fara yin la'akari da amintaccen dandamali, sannan kawai, ta hanyar tsarin Windows Hello, yana ba mai amfani damar shiga shi, yana ba da amintaccen shiga, amma a matakin mafi girma.
Baya ga na'ura mai sarrafawa, guntu na Ƙaddamar da Tsaron Tsaron Tsaro da mai ɗaukar nauyin tsarin aiki suna da hannu a cikin kariyar kayan aikin tushen aminci (da amincin firmware). Har ila yau, tsarin ya haɗa da fasaha mai mahimmanci, wanda ke keɓance ƙwaƙwalwar ajiya a cikin tsarin aiki don hana kai hare-hare a kan kwaya da aikace-aikacen OS. Duk wannan rikitarwa an yi niyya don kare, da farko, mai amfani da kamfani, amma ba dade ko ba dade wani abu makamancin haka zai iya bayyana a cikin kwamfutocin mabukaci.
source: 3dnews.ru