cov ntaub ntawv ntawm hauv cov khoom siv nrog Thunderbolt interface, koom ua ke hauv qab lub npe code thiab hla txhua qhov loj Thunderbolt kev ruaj ntseg Cheebtsam. Raws li cov teeb meem tau txheeb xyuas, cuaj qhov xwm txheej tawm tsam tau thov, siv yog tias tus neeg tawm tsam muaj kev nkag mus rau hauv cheeb tsam los ntawm kev sib txuas cov cuab yeej tsis zoo lossis tswj hwm lub firmware.
Attack scenarios suav nrog lub peev xwm los tsim cov cim ntawm cov khoom siv tsis raug Thunderbolt, clone cov cuab yeej tso cai, nkag mus rau hauv lub cim xeeb ntawm DMA thiab hla kev ruaj ntseg Qib, suav nrog kev cuam tshuam tag nrho cov txheej txheem tiv thaiv, thaiv kev teeb tsa ntawm firmware hloov tshiab thiab cuam tshuam kev txhais lus rau Thunderbolt hom ntawm systems txwv rau USB lossis DisplayPort xa mus.
Thunderbolt yog ib qho kev sib txuas thoob ntiaj teb rau kev txuas cov khoom siv peripheral uas sib txuas nrog PCIe (PCI Express) thiab DisplayPort interfaces hauv ib lub cable. Thunderbolt yog tsim los ntawm Intel thiab Apple thiab siv ntau lub laptops niaj hnub thiab PCs. PCIe-based Thunderbolt li yog muab nrog DMA I/O, uas ua rau muaj kev hem thawj ntawm DMA kev tawm tsam los nyeem thiab sau tag nrho lub cim xeeb lossis ntes cov ntaub ntawv los ntawm cov khoom siv encrypted. Txhawm rau tiv thaiv cov kev tawm tsam zoo li no, Thunderbolt tau npaj lub tswv yim ntawm Kev Ruaj Ntseg Qib, uas tso cai rau kev siv cov cuab yeej siv tau tso cai nkaus xwb thiab siv cryptographic authentication ntawm kev sib txuas los tiv thaiv tus ID cuav.
Cov teeb meem uas tau txheeb xyuas ua rau nws muaj peev xwm hla dhau qhov kev khi thiab txuas lub cuab yeej tsis zoo raws li kev pom zoo ntawm ib qho kev tso cai. Tsis tas li ntawd, nws tuaj yeem hloov kho lub firmware thiab hloov SPI Flash rau hom nyeem nkaus xwb, uas tuaj yeem siv los ua kom tsis txhob muaj kev ruaj ntseg thiab txwv tsis pub hloov kho firmware (tshwj xeeb tau npaj rau cov kev tswj hwm zoo li no. и ). Hauv tag nrho, cov ntaub ntawv hais txog xya qhov teeb meem tau nthuav tawm:
- Kev siv cov firmware pov thawj tsis txaus;
- Siv cov cuab yeej tsis muaj zog authentication tswvyim;
- Loading metadata los ntawm ib qho khoom siv uas tsis muaj pov thawj;
- Muaj cov txheej txheem rov qab sib raug zoo uas tso cai rau kev siv rollback tawm tsam rau ;
- Siv cov kev tswj xyuas tsis raug cai tsis raug cai;
- Glitches hauv interface rau SPI Flash;
- Tsis muaj cov cuab yeej tiv thaiv ntawm qib .
Qhov tsis zoo cuam tshuam rau txhua yam khoom siv nrog Thunderbolt 1 thiab 2 (Mini DisplayPort raws) thiab Thunderbolt 3 (USB-C raws li). Nws tseem tsis tau paub meej tias cov teeb meem tshwm sim hauv cov khoom siv nrog USB 4 thiab Thunderbolt 4, txij li cov thev naus laus zis no tsuas yog tau tshaj tawm thiab tseem tsis muaj txoj hauv kev los sim lawv cov kev siv. Qhov tsis zoo tsis tuaj yeem raug tshem tawm los ntawm software thiab yuav tsum tau kho dua tshiab ntawm cov khoom siv kho vajtse. Txawm li cas los xij, rau qee cov khoom siv tshiab nws tuaj yeem thaiv qee qhov teeb meem cuam tshuam nrog DMA siv lub tshuab , kev txhawb nqa uas tau pib siv txij li xyoo 2019 ( hauv Linux ntsiav, pib nrog tso tawm 5.0, koj tuaj yeem tshawb xyuas qhov suav nrog ntawm "/sys/bus/thunderbolt/devices/domainX/iommu_dma_protection").
Python tsab ntawv yog muab los xyuas koj cov khoom siv , uas yuav tsum tau khiav raws li hauv paus rau nkag mus rau DMI, ACPI DMAR rooj thiab WMI. Txhawm rau tiv thaiv cov kab mob tsis zoo, peb xav kom koj tsis txhob tso lub kaw lus tsis nyob hauv lossis hauv hom standby, tsis txhob txuas lwm tus Thunderbolt li, tsis txhob tso lossis muab koj cov cuab yeej rau lwm tus, thiab xyuas kom meej tias koj cov cuab yeej muaj kev nyab xeeb. Yog tias tsis xav tau Thunderbolt, nws raug nquahu kom lov tes taw Thunderbolt maub los hauv UEFI lossis BIOS (qhov no yuav ua rau USB thiab DisplayPort ports tsis ua haujlwm yog tias lawv tau siv los ntawm Thunderbolt maub los).
Tau qhov twg los: opennet.ru