Ua hōʻoia ʻo Intel i ka ʻoiaʻiʻo o UEFI Code Leaks no Alder Lake Chips

Ua hōʻoia ʻo Intel i ka ʻoiaʻiʻo o ka firmware UEFI a me nā code kumu BIOS i paʻi ʻia e kahi mea ʻike ʻole ma GitHub. Ma ka huina, 5.8 GB o nā code, nā mea pono, nā palapala, nā blobs a me nā hoʻonohonoho e pili ana i ka hoʻokumu ʻana i ka firmware no nā ʻōnaehana me nā kaʻina hana e pili ana i ka microarchitecture ʻo Alder Lake, i hoʻokuʻu ʻia ma Nowemapa 2021. ʻO ka hoʻololi hou loa o ke code i paʻi ʻia i ka lā 30 Kepakemapa 2022.

Wahi a Intel, ua loaʻa ka leak ma muli o ka hewa o kahi ʻaoʻao ʻekolu, ʻaʻole ma muli o ka hoʻololi ʻana i ka ʻoihana ʻoihana. Ua ʻōlelo ʻia hoʻi ʻo ke code i komo i ka wehe ʻana e uhi ana i ka papahana Project Circuit Breaker, e hōʻike ana i ka uku ʻana i nā uku mai $ 500 a i $ 100000 no ka ʻike ʻana i nā pilikia palekana i ka firmware a me nā huahana Intel (ua hoʻomaopopo ʻia hiki i nā mea noiʻi ke loaʻa nā uku. no ka hōʻike ʻana i nā nāwaliwali i ʻike ʻia ma ka hoʻohana ʻana i nā mea o ka leak).

ʻAʻole i hōʻike ʻia ʻo wai ka mea i lilo i kumu o ka leak (OEM-manufacturers o nā lako a me nā ʻoihana e hoʻomohala ana i ka firmware maʻamau i loaʻa i nā mea hana no ka hui ʻana i ka firmware). I ka wā o ka nānā ʻana i nā ʻike o ka waihona i paʻi ʻia, ua ʻike ʻia kekahi mau hoʻokolohua a me nā lawelawe kikoʻī i nā huahana Lenovo ("Lenovo Feature Tag Test Information', 'Lenovo String Service', 'Lenovo Secure Suite', 'Lenovo Cloud Service'), akā. ʻAʻole i hōʻoia ʻia ke komo ʻana o Lenovo i ka leak. Ua hōʻike pū ka waihona i nā pono a me nā hale waihona puke mai Insyde Software, nāna e hoʻomohala i ka firmware no nā OEM, a ʻo ka git log kahi leka uila mai kekahi o nā limahana o LC Future Center, nāna e hana i nā kamepiula no nā OEM like ʻole. Ke hui pū nei nā hui ʻelua me Lenovo.

Wahi a Intel, ʻaʻole i loaʻa i ka code i komo i ka ʻike huna ʻikepili a i ʻole kekahi mea i hiki ke kōkua i ka hōʻike ʻana i nā mea nāwaliwali hou. Ma ka manawa like, ua hōʻike ʻo Mark Yermolov, ka mea loea i ka noiʻi ʻana i ka palekana o nā kahua Intel, i ka ʻike waihona i paʻi ʻia e pili ana i nā palapala MSR i kākau ʻole ʻia (Model Specific Registers, i hoʻohana ʻia, ma waena o nā mea ʻē aʻe, no ka mālama ʻana i ka microcode, tracing and debugging), ʻike e pili ana i e pili ana i ka ʻaelike hōʻike ʻole. Eia kekahi, ua loaʻa kahi kī pilikino i loko o ka waihona, kahi i hoʻohana ʻia e hoʻopaʻa inoa i ka firmware, hiki ke hoʻohana ʻia e kaohi i ka pale ʻana o Intel Boot Guard (ʻaʻole i hōʻoia ʻia ka hana o ke kī, hiki paha ke kī hōʻike).

Source: opennet.ru

Pākuʻi i ka manaʻo hoʻopuka