TL; DR
Absolute Computrace ndiukadaulo womwe umakupatsani mwayi wotseka galimoto yanu (osati ), ngakhale makina ogwiritsira ntchito adayikidwanso pa izo kapena ngakhale hard drive idasinthidwa, kwa $ 15 pachaka. Ndinagula laputopu pa eBay yomwe inali yotsekedwa ndi chinthu ichi. Nkhaniyi ikufotokoza zomwe ndinakumana nazo, momwe ndinavutikira ndikuyesera kuchita zomwezo pogwiritsa ntchito Intel AMT, koma kwaulere.
Tiyeni tigwirizane nthawi yomweyo: Sindikuthyola zitseko zotseguka ndipo sindikulemba nkhani pazinthu zakutali, koma ndikuwuza maziko pang'ono komanso momwe mungapezere mwayi wakutali pamakina anu pabondo zilizonse (ngati zikugwirizana ndi netiweki kudzera pa RJ-45) kapena, ngati ilumikizidwa kudzera pa Wi-Fi, ndiye mu OS Windows yokha. Komanso, kutha kulembetsa SSID, kulowa ndi mawu achinsinsi pa Intel AMT palokha, ndiyeno mwayi wopezeka kudzera pa Wi-Fi utha kupezekanso popanda kulowa mudongosolo. Komanso, ngati muyika madalaivala a Intel ME pa GNU/Linux, ndiye kuti zonsezi ziyenera kugwiranso ntchito. Zotsatira zake, sizingatheke kutseka laputopu patali ndikuwonetsa uthenga (sindinathe kudziwa ngati izi zingatheke pogwiritsa ntchito ukadaulo uwu), koma padzakhala mwayi wofikira pakompyuta yakutali ndi Kufufutira Kotetezedwa, ndipo izi. ndicho chinthu chachikulu.
Oyendetsa taxi adachoka ndi laptop yanga ndipo ndidaganiza zogula ina pa eBay. Kodi chingachitike nβchiyani?
Kuchokera kwa wogula kupita kwa akuba - pakuyambitsa kumodzi
Nditabweretsa kunyumba laputopu kuchokera ku positi, ndidayamba kumaliza kuyika Windows 10, ndipo pambuyo pake ndidakwanitsa kutsitsa Firefox, mwadzidzidzi:
Ndinamvetsetsa bwino kuti palibe amene angasinthe kugawa kwa Windows, ndipo ngati akanatero, ndiye kuti zonse sizingawoneke zovuta kwambiri ndipo kutsekereza kukanachitika mwachangu. Ndipo, pamapeto pake, sipangakhale chifukwa chotsekereza chilichonse, chifukwa chilichonse chingachiritsidwe pochiyikanso. Chabwino, tiyeni tiyambitsenso.
Yambitsaninso mu BIOS, ndipo tsopano zonse zimamveka bwino:
Ndipo potsiriza, zikuwonekeratu:
Nanga laputopu yanga ikundivutitsa bwanji? Kodi Computrace ndi chiyani?
Kunena zoona, Computrace ndi seti ya ma modules mu EFI BIOS yanu kuti, mutatsegula OS Windows, amaika Trojans awo mmenemo, akugogoda pa seva yakutali ya Absolute software ndikulola, ngati kuli kofunikira, kuletsa dongosolo pa intaneti. Mutha kuwerenga zambiri apa . Computrace sagwira ntchito ndi machitidwe ena kupatula Windows. Komanso, ngati tigwirizanitsa galimoto ndi Windows encrypted ndi BitLocker, kapena pulogalamu ina iliyonse, ndiye kuti Computrace sidzagwiranso ntchito - ma modules sangathe kutaya mafayilo awo mu dongosolo lathu.
Kuchokera patali, umisiri woterewu ungawoneke ngati wachilengedwe, koma mpaka titapeza kuti zonsezi zachitika pa UEFI wamba pogwiritsa ntchito magawo okayikitsa ndi theka.
Chinthuchi chikuwoneka chozizira komanso champhamvu mpaka titayesa, mwachitsanzo, kulowa mu GNU/Linux:
Laputopu iyi ili ndi kutseka kwa Computrace komwe kumayatsidwa pakali pano.
Mwambiwu umati,
Chochita?
Pali ma vector anayi owoneka bwino othetsera vutoli:
- Lembani kwa wogulitsa pa eBay
- Lemberani ku pulogalamu ya Absolute, wopanga komanso mwini wake wa Computrace
- Pangani zotayira kuchokera ku chipangizo cha BIOS, tumizani ku mitundu yamthunzi kuti atumizenso tayira ndi chigamba chomwe chimalepheretsa maloko onse ndikusankha ID ya chipangizocho.
- Itanani Lazard
Tiyeni tiwone iwo mwadongosolo:
- Ife, monga anthu onse oganiza bwino, choyamba tilembera kwa wogulitsa amene anatigulitsira chinthu choterocho ndikukambirana vuto ndi amene ali ndi udindo waukulu pa izo.
Zopangidwa:
- Malinga ndi mlangizi wopezeka mkati mwa intaneti,
Muyenera kulumikizana ndi mapulogalamu athunthu. Adzafuna nambala ya serial ya makina ndi nambala ya serial ya boardboard. Muyeneranso kupereka "umboni wa kugula", monga risiti. Adzalumikizana ndi eni ake omwe ali nawo pafayilo ndikupeza OK kuti achotse. Poganiza kuti sizinabedwe, ndiye kuti "adzaziyika kuti zichotsedwe". Pambuyo pake, nthawi ina mukadzalumikizana ndi intaneti kapena kukhala ndi intaneti yotseguka, chozizwitsa chidzachitika ndipo chidzapita. Tumizani zomwe ndatchulazo [imelo ndiotetezedwa].
titha kulemba mwachindunji kwa Absolute ndikulankhulana nawo mwachindunji za kutsegula. Ndinatenga nthawi yanga ndikusankha njira yothetsera vutoli mpaka kumapeto.
- Mwamwayi, njira yothetsera vutoli inalipo kale. Izi ndi akatswiri ena ambiri othandizira makompyuta pa eBay yemweyo komanso Amwenye pa Facebook amatilonjeza kuti titsegula BIOS yathu ngati titumiza tayi ndikudikirira mphindi zingapo.
Njira yotsegulira ikufotokozedwa motere:
Kutsegula njira potsiriza likupezeka ndipo amafuna SPEG mapulogalamu kuti athe kung'anima BIOS.
Njirayi ndi:
- Kuwerenga BIOS ndikupanga dambo loyenera. Mu Thinkpad, BIOS idakwatiwa ndi chipangizo chamkati cha TPM ndipo chimakhala ndi siginecha yake yapadera, kotero ndikofunikira kuti BIOS yoyambirira ikhale yowerengedwa bwino kuti ntchito yonse igwire bwino ndikubwezeretsa BIOS pambuyo pake.
- Kuyika ma binaries a BIOS ndikulowetsa pulogalamu ya UEFI yaing'ono. Pulogalamuyi iwerenga eeprom yotetezeka, sinthaninso satifiketi ya TPM ndi mawu achinsinsi, lembani eeprom yotetezeka ndikumanganso deta yonse.
- Lembani zotayidwa za BIOS (izi zizingogwira ntchito mu TP btw), yambitsani laputopu ndikupanga ID ya Hardware. Tikutumizirani kiyi yapadera yomwe idzatsegule BIOS ya Allservice, pamene BIOS ikukweza idzatsegula ndondomeko yotsegula ndikutsegula SVP ndi TPM.
- Pomaliza, lembani zoyambira zotayira za BIOS kuti mugwire bwino ntchito ndikusangalala ndi laputopu.
Titha kuletsanso Computrace kapena kusintha SN/UUID ndikukhazikitsanso zolakwika za RFID checksum pogwiritsa ntchito pulogalamu yathu ya UEFI mwanjira yomweyo, ngati kuli kofunikira.
Mtengo wautumiki wotsegula uli pamakina (monga momwe timachitira Macbook/iMac, HP, Acer, ndi zina) Pa mtengo wautumiki ndi kupezeka chonde werengani positi yotsatira pansipa. Mutha kulumikizana [imelo ndiotetezedwa] pakufunsa kulikonse.
Zikuwoneka zachilungamo! Koma izi, nazonso, pazifukwa zodziwikiratu, ndizosankha pazovuta kwambiri, ndipo pambali pake, zosangalatsa zonse zimawononga $ 80. Timazisiya mtsogolo.
- Ngati Lazard wandiswa chilichonse ndikundifunsa kuti ndikuyimbireni, ndiye kuti musakane! Tiyeni tigwire ntchito.
Timatcha Lazard aka "kampani yotsogola kwambiri padziko lonse lapansi yopereka upangiri wazachuma ndi kasamalidwe ka chuma, imalangiza za kuphatikiza, kugula, kukonzanso, kupanga ndalama ndi njira"
Ngakhale wogulitsa kuchokera ku eBay akuyankha, ndimaponya ndalama zochepa pa zadarma ndipo ndikuyembekeza kulankhulana ndi mwina interlocutor wopanda mzimu padziko lapansi - thandizo la bungwe lalikulu lazachuma ku New York. Mtsikanayo mwachangu adatenga foni, kumvetsera mchingerezi cha comrade kuti andifotokozere mwamantha momwe ndidagulira laputopu iyi, ndikulemba nambala yake ndikulonjeza kuti adzapereka kwa ma admin, omwe adzandiyimbiranso. Izi zimabwerezedwa ndendende kawiri, tsiku limodzi losiyana. Kachitatu, ndinadikirira dala mpaka 10 am madzulo ku New York ndikuyimba, ndikuwerenga pasitala wodziwika bwino za kugula kwanga. Patatha maola awiri mayi yemweyo adandiyimbiranso ndikuyamba kuwerenga malangizo:
- Dinani kuthawa.
Ndikudina koma palibe chomwe chimachitika.
- Chinachake sichigwira ntchito, palibe chomwe chimasintha.
- Press.
- Ndikusindikiza.
- Tsopano lowetsani: 72406917
ndikulowa. Palibe chimachitika.
- Mukudziwa, ndikuwopa kuti izi sizingathandize ... Mphindi chabe ...
Laputopu imayambanso mwadzidzidzi, ma boot a system, chophimba choyera chosasangalatsa chasowa kwinakwake. Kunena zowona, ndimapita ku BIOS, Computrace sinatsegulidwe. Zikuoneka kuti ndi choncho. Zikomo chifukwa cha thandizo lanu, ndikulembera wogulitsa kuti ndinathetsa nkhani zonse ndekha ndikupumula.
OpenMakeshift Computrace Intel AMT yochokera
Zomwe zidachitika zidandikhumudwitsa, koma ndidakonda lingalirolo, kuwawa kwanga kwapang'onopang'ono pazomwe zidatayika kunali kufunafuna njira yotulukira, ndimafuna kuteteza laputopu yanga yatsopano, ngati ingandibwezeretse yakaleyo. Ngati wina akugwiritsa ntchito Computrace, ndiye kuti nanenso nditha kugwiritsa ntchito, sichoncho? Pambuyo pake, panali Intel Anti-Theft, malinga ndi kufotokozera - teknoloji yabwino kwambiri yomwe imagwira ntchito momwe iyenera kukhalira, koma inaphedwa ndi inertia ya msika, koma payenera kukhala njira ina. Zinapezeka kuti njira iyi idayambira pomwe idathera - pulogalamu yokhayo ya Absolute idakwanitsa kuchita nawo gawo ili.
Choyamba, tiyeni tikumbukire zomwe Intel AMT ili: iyi ndi gulu la malaibulale omwe ali mbali ya Intel ME, yomangidwa mu EFI BIOS, kotero kuti woyang'anira mu ofesi ina akhoza, popanda kudzuka pampando wake, kugwiritsa ntchito makina pa intaneti, ngakhale sakuyamba, kulumikiza ma ISO akutali, kuwongolera kudzera pakompyuta yakutali, ndi zina.
Zonsezi zimayenda pa Minix ndipo pafupifupi mulingo uwu:
Invisible Things Lab akufuna kutcha magwiridwe antchito aukadaulo wa Intel vPro / Intel AMT ngati mphete yachitetezo -3. Monga gawo laukadaulo uwu, ma chipsets omwe amathandizira ukadaulo wa vPro ali ndi microprocessor yodziyimira pawokha (zomanga za ARC4), ali ndi mawonekedwe osiyana ndi netiweki khadi, mwayi wopezeka ku gawo lodzipereka la RAM (16 MB), ndi mwayi wa DMA ku RAM yayikulu. Mapulogalamu omwe ali pamenepo amachitidwa mopanda purosesa yapakati; firmware imasungidwa pamodzi ndi ma code a BIOS kapena pamtima wofanana wa SPI flash (code ili ndi siginecha ya cryptographic). Gawo la firmware ndi seva yomangidwa mkati. Mwachikhazikitso, AMT imayimitsidwa, koma code ina imagwirabe ntchito ngakhale AMT itayimitsidwa. Khodi ya mphete -3 imagwira ntchito ngakhale mu mphamvu ya S3 Sleep.
Izi zikuwoneka ngati zokopa, chifukwa zikuwoneka kuti ngati titha kukhazikitsa kulumikizana kobwerera ku gulu lina la admin pogwiritsa ntchito Intel AMT, sitingathe kukhala ndi mwayi wopambana kuposa Computrace (kwenikweni, ayi).
Timayatsa Intel AMT pamakina athu
Choyamba, ena a inu mungafune kukhudza AMT iyi ndi manja anu, ndipo apa ma nuances akuyamba. Choyamba: muyenera purosesa yomwe imathandizira. Mwamwayi, palibe vuto ndi izi (pokhapokha mutakhala ndi AMD), chifukwa vPro imawonjezedwa pafupifupi mapurosesa onse a Intel i5, i7 ndi i9 (mutha kuwona). ) kuyambira 2006, ndipo VNC yachibadwa idabweretsedwa kale mu 2010. Chachiwiri: ngati muli ndi kompyuta, ndiye kuti mukusowa bolodi la amayi lomwe limathandizira ntchitoyi, yomwe ndi chipset Q. Mu laptops, timangofunika kudziwa chitsanzo cha purosesa. Ngati mutapeza chithandizo cha Intel AMT, ndiye kuti ichi ndi chizindikiro chabwino ndipo mudzatha kugwiritsa ntchito zomwe mwapeza pano. Ngati sichoncho, ndiye kuti mwina munalibe mwayi / munasankha dala purosesa kapena chipset popanda chithandizo chaukadaulo uwu, kapena mwasunga bwino ndalama posankha AMD, chomwe ndi chifukwa chosangalalira.
Malinga ndi zikalata
Munjira yopanda chitetezo, zida za Intel AMT zimamvera padoko 16992.
Mu mawonekedwe a TLS, zida za Intel AMT zimamvera pa doko 16993.
Intel AMT imavomereza kugwirizana pa madoko 16992 ndi 16993. Tiyeni tisunthire kumeneko.
Muyenera kuwona kuti Intel AMT yayatsidwa mu BIOS:
Kenako tiyenera kuyambiransoko ndikusindikiza Ctrl + P pamene tikutsitsa
The standard password, monga mwachizolowezi, boma.
Nthawi yomweyo sinthani mawu achinsinsi mu Intel ME General Settings. Kenako, mu Intel AMT Configuration, yambitsani Activate Network Access. Okonzeka. Tsopano mwasiyanitsidwa. Tikutsitsa mudongosolo.
Tsopano chofunikira kwambiri: momveka, titha kupeza Intel AMT kuchokera ku localhost komanso kutali, koma ayi. Intel akuti mutha kulumikiza kwanuko ndikusintha makonda pogwiritsa ntchito , koma kwa ine idakana kwathunthu kulumikizidwa, kotero kulumikizana kwanga kumangogwira ntchito patali.
Timatenga chipangizo ndikulumikiza kudzera : 16992
Zikuwoneka motere:
Takulandilani ku mawonekedwe wamba a Intel AMT! Chifukwa chiyani "standard"? Chifukwa ndizochepa komanso zopanda ntchito pazolinga zathu, ndipo tidzagwiritsa ntchito chinthu china chachikulu.
Kudziwana ndi MeshCommander
Monga mwachizolowezi, makampani akuluakulu amachita zinazake, ndipo ogwiritsa ntchito amatha kusintha kuti zigwirizane ndi iwo okha. Ndi zimene zinachitikanso pano.
Wodzichepetsa uyu (palibe kukokomeza: dzina lake siliri patsamba lake, ndidachita Google) bambo wina dzina lake Ylian Saint-Hilaire wapanga zida zabwino kwambiri zogwirira ntchito ndi Intel AMT.
Ndikufuna nthawi yomweyo kukopa chidwi chanu kwa iye , m'mavidiyo ake amangowonetsa momveka bwino mu nthawi yeniyeni momwe angagwirire ntchito zina zokhudzana ndi Intel AMT ndi mapulogalamu ake.
Yambani ndi . Koperani, kukhazikitsa ndi kuyesa kulumikiza makina athu:
Njirayi si nthawi yomweyo, koma zotsatira zake tipeza skrini iyi:
Sikuti ndine wonyada, koma ndichotsa zidziwitso zanga, ndikhululukireni pazotsatira zotere.
Kusiyana kwake, monga akunena, ndi koonekeratu. Sindikudziwa chifukwa chake Intel Control Panel ilibe magawo otere, koma chowonadi ndichakuti Ylian Saint-Hilaire amapeza zambiri pamoyo. Komanso, mutha kuyika mawonekedwe ake pa intaneti mwachindunji mu firmware, imakulolani kugwiritsa ntchito ntchito zonse popanda zofunikira.
Izi zimachitika motere:
Ndiyenera kuzindikira kuti sindinagwiritse ntchito izi (Mawonekedwe a intaneti) ndipo sindingathe kunena chilichonse chokhudza momwe zimagwirira ntchito, chifukwa sizofunikira pa zosowa zanga.
Mutha kusewera mozungulira ndi magwiridwe antchito, sizingatheke kuti muwononge chilichonse, chifukwa poyambira komanso pomaliza pa chikondwererochi chonsechi ndi BIOS, momwe mungakhazikitsirenso chilichonse mwa kuletsa Intel AMT.
Ikani MeshCentral ndikukhazikitsa BackConnect
Ndipo apa kugwa kwathunthu kwa mutu kumayamba. Amalume anga sanangopanga kasitomala, komanso gulu lonse la admin la Trojan yathu! Ndipo osati kokha kuti anachita izo, komanso .
Yambani ndikuyika seva ya MeshCentral yanu kapena ngati simukuidziwa bwino MeshCentral, mutha kuyesa seva yapagulu mwakufuna kwanu pa MeshCentral.com.
Izi zimalankhula bwino za kudalirika kwa code yake, popeza sindinapeze nkhani za ma hacks ndi kutayikira panthawi ya ntchitoyo.
Payekha, ndimathamanga MeshCentral pa seva yanga chifukwa ndimakhulupirira mopanda nzeru kuti ndi yodalirika, koma mulibe kanthu koma zopanda pake ndi kufooka kwa mzimu. Ngati inunso mukufuna, ndiye pali zikalata ndi Chidebe chokhala ndi MeshCentral. Ma docs amafotokoza momwe mungagwirizanitse zonse pamodzi mu NGINX, kotero kuti kukhazikitsidwa kudzaphatikizana mosavuta ndi ma seva anu apakhomo.
Register pa , lowetsani ndikupanga Gulu la Chipangizo posankha "palibe wothandizira":
Chifukwa chiyani "palibe wothandizira"? Chifukwa chiyani timafunikira kuti tiyike china chake chosafunika, sichidziwika bwino momwe chimakhalira komanso momwe chidzagwirira ntchito.
Dinani "Onjezani CIRA":
Tsitsani cira_setup_test.mescript ndikugwiritseni ntchito mu MeshCommander yathu motere:
Voila! Patapita nthawi, makina athu adzalumikizana ndi MeshCentral ndipo titha kuchita nawo kanthu.
Choyamba: muyenera kudziwa kuti mapulogalamu athu sangagogomeze pa seva yakutali monga choncho. Izi ndichifukwa choti Intel AMT ili ndi njira ziwiri zolumikizira - kudzera pa seva yakutali komanso mwachindunji kwanuko. Sagwira ntchito nthawi imodzi. Zolemba zathu zakonza kale dongosolo la ntchito zakutali, koma mungafunike kulumikiza kwanuko. Kuti mulumikizane kwanuko, muyenera kupita apa
lembani mzere womwe ndi dera lanu lanu (zindikirani kuti script yathu YAKHALITSA WOYERA mzere wina wachisawawa pamenepo kuti kulumikizana kutheke patali) kapena tsegulani mizere yonse palimodzi (koma ndiye kuti kulumikizana kwakutali sikupezeka). Mwachitsanzo, malo anga aku OpenWrt ndi lan:
Choncho, ngati tilowa lan kumeneko, ndipo ngati makina athu chikugwirizana ndi maukonde ndi ankalamulira m'deralo, kugwirizana kutali sadzakhalapo, koma madoko m'deralo 16992 ndi 16993 adzatsegula ndi kuvomereza kugwirizana. Mwachidule, ngati pali zachabechabe zamtundu wina zomwe sizikugwirizana ndi dera lanu, ndiye kuti pulogalamuyo ikugwedeza, ngati sichoncho, ndiye kuti muyenera kudzigwirizanitsa nokha kudzera pa waya, ndizo zonse.
Kachiwiri:
Zonse zakonzeka!
Mutha kufunsa - AntiTheft ili kuti? Monga ndidanenera poyamba, Intel AMT siyoyenera kulimbana ndi akuba. Kuyang'anira ma ofesi ndi kolandirika, koma kumenyana ndi anthu omwe alanda katundu mosaloledwa ndi intaneti sikwapadera. Tiyeni tilingalire zida zomwe, mwamalingaliro, zingatithandize pomenyera chuma chaumwini:
- Payokha, zikuwonekeratu kuti mumatha kupeza makinawo ngati alumikizidwa ndi chingwe, kapena, ngati Windows idayikidwapo, ndiye kudzera pa WiFi. Inde, ndi zachibwana, koma zimakhala zovuta kuti munthu wamba agwiritse ntchito laputopu yotereyi, ngakhale ngati wina atangoyamba kulamulira mwadzidzidzi. Komanso, ngakhale sindinathe kudziwa zolembedwazo, ndizotheka kupanga mwaluso ntchito zina zotsekereza / kuwonetsa zidziwitso pa iwo.
- Kufufuta Kutali Kwambiri ndi Intel Active Management Technology
Pogwiritsa ntchito njirayi, mutha kuchotsa zidziwitso zonse pamakina mumasekondi. Sizikudziwika ngati imagwira ntchito pa non-Intel SSDs. Pano Mukhoza kuwerenga zambiri za ntchitoyi. Mutha kusirira ntchitoyo . Ubwino wake ndi woyipa, koma ma megabytes 10 okha ndipo tanthauzo lake ndi lomveka.
Vuto la kuphedwa kwachedwetsedwe silinathetsedwe, mwa kuyankhula kwina: muyenera kuyang'ana pamene makina akulowa pa intaneti kuti agwirizane nawo. Ndikukhulupirira kuti palinso njira yothetsera izi.
Pakukhazikitsa koyenera, muyenera kuletsa laputopu ndikuwonetsa zolembedwa zamtundu wina, koma kwa ife timangokhala ndi mwayi wosapeΕ΅eka, ndipo chotsatira ndi nkhani yongoganizira.
Mwina mwanjira ina mutha kuletsa galimoto kapena kuwonetsa uthenga, lembani ngati mukudziwa. Zikomo!
Musaiwale kukhazikitsa achinsinsi kwa BIOS.
Zikomo kwa wogwiritsa ntchito za kuwerengera!
Source: www.habr.com