Ua hōʻike nā mea noiʻi mai Red Balloon i ʻelua mau mea nāwaliwali i ʻike ʻia ma Cisco 1001-X series routers. ʻAʻole nūhou nā mea nāwaliwali i nā lako ʻoihana Cisco ikaika, akā he ʻoiaʻiʻo o ke ola. ʻO Cisco kekahi o nā mea hana nui o nā mea hoʻokele a me nā ʻenehana pūnaewele ʻē aʻe, no laila ua hoʻonui ʻia ka hoihoi i ka hilinaʻi o kāna mau huahana mai nā loea palekana data a mai ka manaʻo o nā mea hoʻouka.
Ke nānā nei mākou i mua, ʻike mākou ua haʻi aku nā loea Red Balloon iā Cisco e pili ana i nā nāwaliwali hou i kekahi mau mahina i hala aku nei, no laila ua hoʻoholo ʻia ka pilikia, a i ʻole ʻike ʻo Cisco pehea e hoʻoponopono ai. Hiki ke pani ʻia kekahi o nā nāwaliwali ʻelua ma o ka hoʻonui ʻana i ka firmware, a ua hoʻokuʻu ka ʻoihana i kēlā firmware i nehinei i loko o ka lehulehu, e hōʻike ana ka hoʻolaha pūnaewele. . Ke kamaʻilio nei mākou e pili ana i kahi pōpoki i loaʻa i ka ʻōnaehana hana Cisco IOS e hāʻawi i kahi mea hoʻouka i ke aʻa i ke ala i nā mea ala o ka moʻo i kuhikuhi ʻia.
ʻO ka lua o ka nāwaliwali he mea kūikawā a weliweli loa, wahi a nā mea noiʻi. Hoʻopili ʻo ia i ke kumu o ka palekana no nā haneli miliona o nā ʻoihana pūnaewele, mai nā mea ala a hiki i ka hoʻololi ʻana i nā pā ahi. Ua hiki i nā mea loea Red Balloon ke kāʻalo i ka pale ʻana i nā lako lako Cisco e like me Trust Anchor. "Trust Anchor," i hiki ke unuhi ʻia kēia huaʻōlelo, he hoʻomohala ʻana i nā modules hōʻoia pono pono o ka ʻoihana (ʻo ACT ma mua). Ua hoʻokomo ʻia ka module ACT e pale aku i ka hoʻopunipuni ʻana a ua hoʻololi ʻia ma hope i module no ka nānā ʻana i ka pono o ka ʻāpana polokalamu o nā ʻoihana pūnaewele Cisco. I kēia lā, aia ʻo Trust Anchor i loko o nā lako pūnaewele ikaika a pau o ka hui. ʻAʻole paʻakikī ke noʻonoʻo i ka mea a ka Trust Anchor e komo ai. ʻAʻole hilinaʻi hou ʻia nā pūnaewele ma nā lako Cisco.
Ua loaʻa i nā mea noiʻi kahi ala e hoʻopunipuni ai iā Trust Anchor. Ua hoʻomau nā mea hana hacked i ka hoʻomaopopo ʻana i nā mea kūʻai aku e pili ana i ke keakea ʻole, ʻoiai ua hana nā loea i nā mea a lākou e makemake ai me ia. ʻO kēia, ma ke ala, e noʻonoʻo ai mākou e pili ana i ka hopena o nā hoʻomohala like e ARM (TrustZone), Intel (SGX) a me nā ʻano ʻenehana like ʻole no ka pale ʻana i nā platform computing. Me he mea lā ʻo ia ka hopena no ka pani ʻana i nā puka i loko o nā hale hana kaʻina hana. Hiki i kahi chip hilinaʻi a i ʻole module i loko o kahi chipset ke hoʻoikaika i nā kamepiula mai ka hacking. I ka hoʻomaʻamaʻa, ʻike ʻia kahi lua a i ʻole ka manawa kūpono e kāpae i ka pale ʻana i loko o kahi hopena kahi i kaupalena ʻia ai ke komo ʻana a hiki ke loaʻa wale i loko o kahi ʻenehana hana ponoʻī.
He mea nui ka hopena hope no ka pani ʻana i nā lua e pili ana i ka ʻae ʻana o nā modules Trust Anchor. ʻOiai ua hoʻohiki ʻo Cisco e hoʻokuʻu i nā patch e hoʻoponopono i ka nāwaliwali o Trust Anchor i ʻike ʻia no kāna mau lako āpau, ʻaʻole hiki i ka hoʻoiho ʻana i kahi mea hou ke hoʻoponopono i kēia pilikia. Ua ʻōlelo ʻo Cisco e koi ana kēia i ka "reprogramming kūloko," ʻo ia hoʻi ʻaʻole hiki ke hoʻonui i ka lako lako mamao. ʻAe, ke kali nei nā lā luhi i nā ʻoihana lawelawe limahana me ka hoʻohana ʻana i nā lako Cisco. A ʻaʻohe mea pili i ke kauwela e hiki mai ana.
Source: 3dnews.ru