{"id":100020,"date":"2021-04-25T10:22:40","date_gmt":"2021-04-25T08:22:40","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/komanda-iz-universiteta-minnesoty-poyasnila-motivy-eksperimentov-s-somnitelnymi-kommitami-v-yadro-linux"},"modified":"2021-04-25T10:22:40","modified_gmt":"2021-04-25T08:22:40","slug":"komanda-iz-universiteta-minnesoty-poyasnila-motivy-eksperimentov-s-somnitelnymi-kommitami-v-yadro-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/news\/komanda-iz-universiteta-minnesoty-poyasnila-motivy-eksperimentov-s-somnitelnymi-kommitami-v-yadro-linux","title":{"rendered":"Tim s Minnesotskog sveu\u010dili\u0161ta objasnio je motive eksperimenata s sumnjivim prijedlozima za kernel Linuxa","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Grupa istra\u017eiva\u010da sa Sveu\u010dili\u0161ta Minnesota, \u010diji je prijem promjena nedavno blokirao Greg Kroah-Hartman, objavila je otvoreno pismo u kojem se ispri\u010dava i obja\u0161njava motive svoje djelatnosti. Podsjetimo, grupa se bavila istra\u017eivanjem slabih to\u010daka recenziranja dolaznih zakrpa i procjenom mogu\u0107nosti za uklju\u010divanje promjena u jezgru s skrivenim ranjivostima. Nakon \u0161to je jedan od \u010dlanova grupe poslao sumnjivu zakrpu s besmislenim ispravkom, postavljeno je pitanje da li istra\u017eiva\u010di ponovno poku\u0161avaju provoditi eksperimente na programerima jezgre. S obzirom na to da takvi eksperimenti potencijalno predstavljaju sigurnosnu prijetnju i oduzimaju vrijeme komitentu, odlu\u010deno je blokirati prijem promjena i poslati sve ranije prihva\u0107ene zakrpe na ponovnu recenziju. <\/p>\n

U svom otvorenom pismu \u010dlanovi grupe izjavili su da je njihova djelatnost bila motivirana isklju\u010divo plemenitim namjerama i \u017eeljom za pobolj\u0161anjem procesa recenziranja promjena, putem prepoznavanja i uklanjanja slabih to\u010daka. Grupa ve\u0107 dugi niz godina prou\u010dava procese koji dovode do pojave ranjivosti i aktivno radi na prepoznavanju i uklanjanju ranjivosti u Linux jezgru. Navodi se da su sve zakrpe poslane na ponovnu recenziju legitimne, ispravljaju postoje\u0107e probleme i ne sadr\u017ee namjerne gre\u0161ke ili skrivene ranjivosti. <\/p>\n

Istra\u017eivanje koje je izazvalo zabrinutost u vezi s promicanjem skrivenih ranjivosti provedeno je u kolovozu pro\u0161le godine i ograni\u010dilo se na slanje triju zakrpa s gre\u0161kama, od kojih nijedna nije u\u0161la u bazu koda jezgre. Aktivnost vezana uz te zakrpe ograni\u010dila se samo na raspravu i promicanje zakrpa je zaustavljeno na fazi prije nego \u0161to su promjene dodane u Git. Kod tri problemati\u010dne zakrpe za sada nije naveden, jer bi to otkrilo identitet onih koji su provodili po\u010detnu recenziju (informacije \u0107e biti otkrivene nakon dobivanja pristanka od programera koji nisu prepoznali gre\u0161ke). <\/p>\n

Glavni izvor istra\u017eivanja nisu bili vlastiti zakrpe, ve\u0107 analiza tu\u0111ih zakrpa koje su ikada dodane u kernel, zbog kojih su se kasnije javile ranjivosti. Tim sa Sveu\u010dili\u0161ta Minnesota nije imao nikakve veze s dodavanjem tih zakrpa. Ukupno je prou\u010deno 138 problemati\u010dnih zakrpa koje su uzrokovale gre\u0161ke, a do trenutka objave rezultata istra\u017eivanja svi povezani problemi su ispravljeni, uklju\u010duju\u0107i i sudjelovanje tima koji je proveo istra\u017eivanje. <\/p>\n

Istra\u017eiva\u010di \u017eale \u0161to su koristili neprimjerenu metodu provo\u0111enja eksperimenata. Gre\u0161ka je bila u tome \u0161to je istra\u017eivanje provedeno bez odobrenja i bez obavje\u0161tavanja zajednice. Motiv skrivenih aktivnosti bila je \u017eelja za \u010disto\u0107om eksperimenta, jer bi obavje\u0161tavanje moglo privu\u0107i posebnu pa\u017enju na zakrpe i njihovu procjenu koja ne bi bila na op\u0107im osnovama. Iako je cilj bio pobolj\u0161anje sigurnosti kernela, istra\u017eiva\u010di su sada shvatili da je kori\u0161tenje zajednice kao zamoraca bilo neispravno i neeti\u010dno. Ipak, istra\u017eiva\u010di osiguravaju da nikada ne bi namjerno naudili zajednici i da ne bi dopustili uvo\u0111enje novih ranjivosti u radni kod kernela. <\/p>\n

\u0160to se ti\u010de besmislenog zakrpe koja je poslu\u017eila kao katalizator blokade, ona nema veze s prethodnim istra\u017eivanjem i povezana je s novim projektom usmjerenim na stvaranje alata za automatsko otkrivanje gre\u0161aka koje se pojavljuju kao rezultat dodavanja drugih zakrpa. <\/p>\n

Trenutno \u010dlanovi grupe poku\u0161avaju prona\u0107i na\u010dine za povratak u sudjelovanje u razvoju i namjeravaju uspostaviti svoje odnose s Linux Foundation i zajednicom programera, dokazuju\u0107i svoju korisnost u pobolj\u0161anju sigurnosti kernela i iskazuju\u0107i \u017eelju da intenzivno rade za op\u0107e dobro i povratak povjerenja.
\n
Izvor: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u041c\u0438\u043d\u043d\u0435\u0441\u043e\u0442\u044b, \u043f\u0440\u0438\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u043e\u0442 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0430 \u0434\u043d\u044f\u0445 \u0431\u044b\u043b \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d \u0413\u0440\u0435\u0433\u043e\u043c \u041a\u0440\u043e\u0430-\u0425\u0430\u0440\u0442\u043c\u0430\u043d\u043e\u043c, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0435 \u043f\u0438\u0441\u044c\u043c\u043e \u0441 \u0438\u0437\u0432\u0438\u043d\u0435\u043d\u0438\u044f\u043c\u0438 \u0438 \u043f\u043e\u044f\u0441\u043d\u0435\u043d\u0438\u0435\u043c \u043c\u043e\u0442\u0438\u0432\u043e\u0432 \u0441\u0432\u043e\u0435\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438. \u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u0447\u0442\u043e \u0433\u0440\u0443\u043f\u043f\u0430 \u0437\u0430\u043d\u0438\u043c\u0430\u043b\u0430\u0441\u044c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u043b\u0430\u0431\u044b\u0445 \u043c\u0435\u0441\u0442 \u0440\u0435\u0446\u0435\u043d\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u044e\u0449\u0438\u0445 \u043f\u0430\u0442\u0447\u0435\u0439 \u0438 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f \u0432 \u044f\u0434\u0440\u043e \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0441\u043e \u0441\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438. \u041f\u043e\u0441\u043b\u0435 \u043f\u043e\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u044f \u043e\u0442 \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u043e\u0432 \u0433\u0440\u0443\u043f\u043f\u044b \u0441\u043e\u043c\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0430\u0442\u0447\u0430 \u0441 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100020","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Tim sa Sveu\u010dili\u0161ta Minnesota objasnio je motive eksperimentiranja s sumnjivim unosa u kernel Linux | ProHoster","description":"Grupa istra\u017eiva\u010da sa Sveu\u010dili\u0161ta Minnesota, \u010dija je prijem promjena nedavno bio blokiran od strane Grega Kroah-Hartmana, objavila je otvoreno pismo s isprikama i obja\u0161njenjem motiva njihove aktivnosti.","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/news\/komanda-iz-universiteta-minnesoty-poyasnila-motivy-eksperimentov-s-somnitelnymi-kommitami-v-yadro-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u043c\u0430\u043d\u0434\u0430 \u0438\u0437 \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u041c\u0438\u043d\u043d\u0435\u0441\u043e\u0442\u044b \u043f\u043e\u044f\u0441\u043d\u0438\u043b\u0430 \u043c\u043e\u0442\u0438\u0432\u044b \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u043e\u0432 \u0441 \u0441\u043e\u043c\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u043a\u043e\u043c\u043c\u0438\u0442\u0430\u043c\u0438 \u0432 \u044f\u0434\u0440\u043e Linux | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u041c\u0438\u043d\u043d\u0435\u0441\u043e\u0442\u044b, \u043f\u0440\u0438\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u043e\u0442 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0430 \u0434\u043d\u044f\u0445 \u0431\u044b\u043b \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d \u0413\u0440\u0435\u0433\u043e\u043c \u041a\u0440\u043e\u0430-\u0425\u0430\u0440\u0442\u043c\u0430\u043d\u043e\u043c, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0435 \u043f\u0438\u0441\u044c\u043c\u043e \u0441 \u0438\u0437\u0432\u0438\u043d\u0435\u043d\u0438\u044f\u043c\u0438 \u0438 \u043f\u043e\u044f\u0441\u043d\u0435\u043d\u0438\u0435\u043c \u043c\u043e\u0442\u0438\u0432\u043e\u0432 \u0441\u0432\u043e\u0435\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438.","og:url":"https:\/\/prohoster.info\/hr\/blog\/news\/komanda-iz-universiteta-minnesoty-poyasnila-motivy-eksperimentov-s-somnitelnymi-kommitami-v-yadro-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-04-25T08:22:40+00:00","article:modified_time":"2021-04-25T08:22:40+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100020","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-04-25 08:48:48","updated":"2022-10-05 16:50:39","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/100020","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=100020"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/100020\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=100020"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=100020"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=100020"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}