Az Intel meger\u0151s\u00edtette a GitHub-on ismeretlen \u00e1ltal k\u00f6zz\u00e9tett UEFI firmware \u00e9s BIOS forr\u00e1sk\u00f3dok hiteless\u00e9g\u00e9t. \u00d6sszesen 5,8 GB k\u00f3d, seg\u00e9dprogram, dokument\u00e1ci\u00f3, blobok \u00e9s be\u00e1ll\u00edt\u00e1sok ker\u00fcltek nyilv\u00e1noss\u00e1gra, amelyek a november 2021-ben megjelent Alder Lake mikroarchitekt\u00far\u00e1j\u00fa processzorokra vonatkoz\u00f3 firmware-ek l\u00e9trehoz\u00e1s\u00e1val kapcsolatosak. A k\u00f6zz\u00e9tett k\u00f3d legfrissebb m\u00f3dos\u00edt\u00e1sa 2022. szeptember 30-\u00e1n t\u00f6rt\u00e9nt. <\/p>\n
Az Intel nyilatkozata szerint a kisziv\u00e1rg\u00e1s egy harmadik f\u00e9l hib\u00e1j\u00e1b\u00f3l k\u00f6vetkezett be, nem a v\u00e1llalat infrastrukt\u00far\u00e1j\u00e1nak kompromitt\u00e1l\u00e1sa miatt. Ezenk\u00edv\u00fcl eml\u00edtik, hogy a nyilv\u00e1nosan el\u00e9rhet\u0151 k\u00f3d mag\u00e1ban foglalja a Project Circuit Breaker programot, amely jutalmakat k\u00edn\u00e1l 500 \u00e9s 100 000 doll\u00e1r k\u00f6z\u00f6tt a firmware-ek \u00e9s az Intel term\u00e9kek biztons\u00e1gi probl\u00e9m\u00e1inak felfedez\u00e9s\u00e9\u00e9rt (a kutat\u00f3k jutalmat kaphatnak a kisziv\u00e1rg\u00e1s tartalma alapj\u00e1n felfedezett sebezhet\u0151s\u00e9gek bejelent\u00e9s\u00e9\u00e9rt). <\/p>\n
Nem tiszt\u00e1zott, hogy pontosan ki volt a sziv\u00e1rg\u00e1s forr\u00e1sa (a firmware-k \u00f6sszeszerel\u00e9s\u00e9hez sz\u00fcks\u00e9ges eszk\u00f6z\u00f6kh\u00f6z OEM-gy\u00e1rt\u00f3k \u00e9s egyedi firmware-ket fejleszt\u0151 c\u00e9gek f\u00e9rhettek hozz\u00e1). Az k\u00f6zz\u00e9tett arch\u00edvum tartalm\u00e1nak elemz\u00e9se sor\u00e1n felfedeztek n\u00e9h\u00e1ny, a Lenovo term\u00e9keire jellemz\u0151 tesztet \u00e9s szolg\u00e1ltat\u00e1st (\"Lenovo Feature Tag Test Information\", \"Lenovo String Service\", \"Lenovo Secure Suite\", \"Lenovo Cloud Service\"), de a Lenovo v\u00e1llalat \u00e9rintetts\u00e9g\u00e9t a sziv\u00e1rg\u00e1sban eddig nem er\u0151s\u00edtett\u00e9k meg. Az arch\u00edvumban emellett Insyde Software c\u00e9gt\u0151l sz\u00e1rmaz\u00f3 seg\u00e9dprogramok \u00e9s k\u00f6nyvt\u00e1rak is felfedezhet\u0151k, amely a firmware-k OEM-gy\u00e1rt\u00f3k r\u00e9sz\u00e9re t\u00f6rt\u00e9n\u0151 fejleszt\u00e9s\u00e9vel foglalkozik, \u00e9s a git napl\u00f3ban szerepel egy LC Future Center alkalmazottj\u00e1nak e-mail c\u00edme, amely k\u00fcl\u00f6nb\u00f6z\u0151 OEM-gy\u00e1rt\u00f3k sz\u00e1m\u00e1ra k\u00e9sz\u00edt laptopokat. Mindk\u00e9t c\u00e9g egy\u00fcttm\u0171k\u00f6dik a Lenov\u00f3val. <\/p>\n
Az Intel v\u00e9lem\u00e9nye szerint a nyilv\u00e1noss\u00e1gra ker\u00fclt k\u00f3d nem tartalmaz bizalmas adatokat vagy olyan \u00f6sszetev\u0151ket, amelyek hozz\u00e1j\u00e1rulhatn\u00e1nak \u00faj sebezhet\u0151s\u00e9gek felfed\u00e9s\u00e9hez. Mark Jermolov, aki az Intel platformok biztons\u00e1g\u00e1nak kutat\u00e1s\u00e1ra specializ\u00e1l\u00f3dott, az k\u00f6zz\u00e9tett arch\u00edvumban nem dokument\u00e1lt MSR (Model Specific Registers, amelyek t\u00f6bbek k\u00f6z\u00f6tt a mikrok\u00f3d kezel\u00e9s\u00e9re, nyomk\u00f6vet\u00e9sre \u00e9s hibakeres\u00e9sre szolg\u00e1lnak) regiszterekr\u0151l tal\u00e1lt inform\u00e1ci\u00f3kat, amelyek titoktart\u00e1si meg\u00e1llapod\u00e1s al\u00e1 esnek. Tov\u00e1bb\u00e1, az arch\u00edvumban tal\u00e1ltak egy z\u00e1rt kulcsot, amelyet a firmware digit\u00e1lis al\u00e1\u00edr\u00e1s\u00e1nak al\u00e1t\u00e1maszt\u00e1s\u00e1ra haszn\u00e1lnak, \u00e9s amelyet potenci\u00e1lisan fel lehet haszn\u00e1lni az Intel Boot Guard v\u00e9delm\u00e9nek megker\u00fcl\u00e9s\u00e9re (a kulcs m\u0171k\u00f6d\u00e9se nincs meger\u0151s\u00edtve, nem z\u00e1rhat\u00f3 ki, hogy ez egy tesztkulcs). \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Intel \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0438 BIOS, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u043d\u0430 GitHub. \u0412\u0441\u0435\u0433\u043e \u0431\u044b\u043b\u043e \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043e 5.8 \u0413\u0411 \u043a\u043e\u0434\u0430, \u0443\u0442\u0438\u043b\u0438\u0442, \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438, \u0431\u043b\u043e\u0431\u043e\u0432 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u0441 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u043c\u0438 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b Alder Lake, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2021 \u0433\u043e\u0434\u0430. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0432\u0435\u0436\u0435\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0432 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043a\u043e\u0434\u0435 \u0434\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e 30 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430. \u041f\u043e \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105273","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Az Intel meger\u0151s\u00edtette az Alder Lake chipekhez kapcsol\u00f3d\u00f3 UEFI firmware k\u00f3dj\u00e1nak kisziv\u00e1rg\u00e1s\u00e1t | ProHoster","description":"Az Intel meger\u0151s\u00edtette az UEFI firmware \u00e9s BIOS forr\u00e1sk\u00f3dok hiteless\u00e9g\u00e9t, amelyeket ismeretlen szem\u00e9ly tett k\u00f6zz\u00e9 a GitHubon.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/intel-podtverdil-podlinnost-utechki-koda-uefi-proshivok-dlya-chipov-alder-lake","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Intel \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u044c \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u0434\u0430 UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0434\u043b\u044f \u0447\u0438\u043f\u043e\u0432 Alder Lake | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Intel \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0438 BIOS, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u043d\u0430 GitHub.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/intel-podtverdil-podlinnost-utechki-koda-uefi-proshivok-dlya-chipov-alder-lake","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-10-10T07:36:38+00:00","article:modified_time":"2022-10-10T07:36:38+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/105273","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=105273"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/105273\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=105273"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=105273"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=105273"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"