Tilly Kottmann (), wopanga nsanja ya Android kuchokera ku Switzerland, akutsogolera njira ya Telegraph yokhudza kutayikira kwa data, 20 GB ya zolemba zamkati zaukadaulo ndi ma code source omwe adapezeka chifukwa cha kutayikira kwakukulu kwa Intel akupezeka poyera. Izi zanenedwa kukhala zoyamba kuchokera m'zopereka zoperekedwa ndi gwero losadziwika. Zolemba zambiri zimalembedwa kuti zinsinsi, zinsinsi zamakampani, kapena zimagawidwa pokhapokha pa mgwirizano wosaulula.
Zolemba zaposachedwa kwambiri zidalembedwa koyambirira kwa Meyi ndikuphatikiza zambiri za nsanja yatsopano ya seva ya Cedar Island (Whitley). Palinso zolemba za 2019, mwachitsanzo zofotokozera nsanja ya Tiger Lake, koma zambiri zalembedwa mu 2014. Kuphatikiza pa zolemba, setiyi ilinso ndi ma code, zida zosinthira, zithunzi, madalaivala, ndi makanema ophunzitsira.
Ena kuchokera pa seti:
- Zolemba za Intel ME (Management Engine), zida zowunikira ndi zitsanzo zamapulatifomu osiyanasiyana.
- Reference BIOS kukhazikitsa nsanja ya Kabylake (Purley), zitsanzo ndi kachidindo koyambitsa (ndi mbiri yosintha kuchokera ku git).
- Zolemba zochokera ku Intel CEFDK (Consumer Electronics Firmware Development Kit).
- Code of FSP phukusi (Firmware Support Package) ndi ziwembu zopanga zamapulatifomu osiyanasiyana.
- Zothandizira zosiyanasiyana zowongolera ndi chitukuko.
- -simulator ya nsanja ya Rocket Lake S.
- Mapulani osiyanasiyana ndi zolemba.
- Madalaivala a Binary a kamera ya Intel yopangidwira SpaceX.
- Schematics, zolemba, firmware ndi zida za nsanja yomwe sinatulutsidwebe ya Tiger Lake.
- Kabylake FDK mavidiyo ophunzitsira.
- Intel Trace Hub ndi mafayilo okhala ndi ma decoder amitundu yosiyanasiyana ya Intel ME.
- Kukhazikitsidwa kwatsatanetsatane kwa nsanja ya Elkhart Lake ndi zitsanzo zamakhodi kuti zithandizire nsanja.
- Mafotokozedwe a midadada ya Hardware muchilankhulo cha Verilog pamapulatifomu osiyanasiyana a Xeon.
- Debug BIOS/TXE imamanga pamapulatifomu osiyanasiyana.
- Bootguard SDK.
- Njira yoyeserera ya Intel Snowridge ndi Snowfish.
- Machitidwe osiyanasiyana.
- Ma templates azinthu zotsatsa.
Intel adati yatsegula kafukufuku pazochitikazo. Malinga ndi chidziwitso choyambirira, deta idapezedwa kudzera mu chidziwitso "", yomwe ili ndi chidziwitso chochepa cha makasitomala, othandizana nawo ndi makampani ena omwe Intel amalumikizana nawo. Mwachidziwikire, zambiri zidakwezedwa ndikusindikizidwa ndi munthu yemwe ali ndi mwayi wopeza chidziwitsochi. M'modzi mwa omwe kale anali ogwira ntchito ku Intel pokambirana za mtundu wake wa Reddit, kuwonetsa kuti kutayikirako kungakhale chifukwa cha kuwonongeka kwa wogwira ntchito kapena kubera m'modzi mwa opanga ma boardboard a OEM.
Munthu wosadziwika yemwe adapereka zikalata kuti zifalitsidwe kuti deta idatsitsidwa kuchokera pa seva yosatetezedwa yomwe imakhala pa Akamai CDN osati kuchokera ku Intel Resource and Design Center. Seva idapezedwa mwangozi pakuwunika kochulukirapo kwa omwe adakhala nawo pogwiritsa ntchito nmap ndipo adabedwa ndi ntchito yomwe ili pachiwopsezo.
Zofalitsa zina zanenapo za kupezeka kwa ma backdoors mu code ya Intel, koma mawu awa alibe maziko ndipo amangotengera
mawu oti "Sungani cholozera chakumbuyo kwa RAS ku IOH SR 17" mu ndemanga mu imodzi mwamafayilo. Pankhani ya ACPI RAS "Kudalirika, kupezeka, Serviceability". Khodiyo yokha imayang'anira kuzindikira ndi kukonza zolakwika za kukumbukira, kusunga zotsatira mu kaundula 17 ya I / O hub, ndipo ilibe "backdoor" m'lingaliro la chitetezo cha chidziwitso.
Setiyi idagawidwa kale pamanetiweki a BitTorrent ndipo ikupezeka kudzera . Kukula kwa zip archive ndi pafupifupi 17 GB (tsegulani mawu achinsinsi "Intel123" ndi "intel123").
Kuphatikiza apo, zitha kudziwika kuti kumapeto kwa Julayi Tilly Kottmann pagulu la anthu nkhokwe zopezeka chifukwa cha kutayikira kwa data kuchokera kumakampani pafupifupi 50. Mndandandawu uli ndi makampani monga
Microsoft, Adobe, Johnson Controls, GE, AMD, Lenovo, Motorola, Qualcomm, Mediatek, Disney, Daimler, Roblox ndi Nintendo, komanso mabanki osiyanasiyana, ntchito zachuma, makampani oyendetsa magalimoto ndi maulendo.
Gwero lalikulu la kutayikirako linali kusanjidwa kolakwika kwa zomangamanga za DevOps ndikusiya makiyi olowera m'malo osungira anthu.
Zambiri mwazosungira zidakopera kuchokera kumakina a DevOps akumaloko kutengera nsanja za SonarQube, GitLab ndi Jenkins, komwe mungapezeko. zocheperako (munthawi zopezeka pa intaneti zamasamba a DevOps makonda osasintha, kutanthauza mwayi wopezeka ndi anthu kuma projekiti).
Komanso, kumayambiriro July, chifukwa Utumiki wa Waydev, womwe unkagwiritsidwa ntchito popanga malipoti owunikira zochitika m'malo osungirako a Git, unali ndi nkhokwe ya database, kuphatikizapo yomwe imaphatikizapo zizindikiro za OAuth zopezera nkhokwe pa GitHub ndi GitLab. Zizindikiro zotere zitha kugwiritsidwa ntchito kufananiza nkhokwe zachinsinsi zamakasitomala a Waydev. Ma tokeni omwe adagwidwa adagwiritsidwa ntchito kuti awononge zomangamanga ΠΈ .
Source: opennet.ru