{"id":105273,"date":"2022-10-10T09:36:38","date_gmt":"2022-10-10T07:36:38","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/intel-podtverdil-podlinnost-utechki-koda-uefi-proshivok-dlya-chipov-alder-lake"},"modified":"2022-10-10T09:36:38","modified_gmt":"2022-10-10T07:36:38","slug":"intel-podtverdil-podlinnost-utechki-koda-uefi-proshivok-dlya-chipov-alder-lake","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/intel-podtverdil-podlinnost-utechki-koda-uefi-proshivok-dlya-chipov-alder-lake","title":{"rendered":"A Intel confirmou a autenticidade do vazamento do c\u00f3digo das UEFI firmwares para os chips Alder Lake","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A empresa Intel confirmou a autenticidade dos c\u00f3digos-fonte das atualiza\u00e7\u00f5es UEFI e BIOS, publicados por um desconhecido no GitHub. No total, foram publicados 5,8 GB de c\u00f3digo, utilit\u00e1rios, documenta\u00e7\u00e3o, blobs e configura\u00e7\u00f5es relacionadas \u00e0 forma\u00e7\u00e3o de atualiza\u00e7\u00f5es para sistemas com processadores da microarquitetura Alder Lake, lan\u00e7ada em novembro de 2021. A modifica\u00e7\u00e3o mais recente no c\u00f3digo publicado \u00e9 datada de 30 de setembro de 2022. <\/p>\n

Segundo a Intel, a fuga ocorreu por conta de um terceiro, e n\u00e3o por uma viola\u00e7\u00e3o da infraestrutura da empresa. Tamb\u00e9m \u00e9 mencionado que o c\u00f3digo que foi exposto publicamente abrange o programa Project Circuit Breaker, que oferece recompensas que variam de 500 a 100.000 d\u00f3lares por identificar problemas de seguran\u00e7a nas atualiza\u00e7\u00f5es e produtos da Intel (subentende-se que os pesquisadores podem receber recompensas por relatar vulnerabilidades descobertas utilizando o conte\u00fado da fuga). <\/p>\n

N\u00e3o est\u00e1 claro quem exatamente foi a fonte do vazamento (acesso \u00e0s ferramentas para a constru\u00e7\u00e3o de firmwares foi concedido a fabricantes de equipamentos OEM e empresas que desenvolvem firmware sob medida). Durante a an\u00e1lise do conte\u00fado do arquivo publicado, foram identificados alguns testes e servi\u00e7os espec\u00edficos para produtos da empresa Lenovo (\"Lenovo Feature Tag Test Information\", \"Lenovo String Service\", \"Lenovo Secure Suite\", \"Lenovo Cloud Service\"), mas a implica\u00e7\u00e3o da Lenovo no vazamento ainda n\u00e3o foi confirmada. No arquivo tamb\u00e9m foram encontrados utilit\u00e1rios e bibliotecas da Insyde Software, que se dedica ao desenvolvimento de firmwares para fabricantes OEM, e no log do git h\u00e1 o e-mail de um dos funcion\u00e1rios da LC Future Center, que fabrica laptops para v\u00e1rios fabricantes OEM. Ambas as empresas colaboram com a Lenovo. <\/p>\n

De acordo com a Intel, o c\u00f3digo que se tornou p\u00fablico n\u00e3o cont\u00e9m dados confidenciais ou componentes que poderiam facilitar a descoberta de novas vulnerabilidades. No entanto, Mark Ermolov, especialista em pesquisa de seguran\u00e7a nas plataformas da Intel, identificou no arquivo publicado informa\u00e7\u00f5es sobre registradores MSR (Model Specific Registers, utilizados, entre outras coisas, para gerenciar microc\u00f3digos, rastreamento e depura\u00e7\u00e3o), cuja informa\u00e7\u00e3o est\u00e1 sujeita a um acordo de n\u00e3o divulga\u00e7\u00e3o. Al\u00e9m disso, dentro do arquivo foi encontrado uma chave privada, utilizada para assinar digitalmente os firmwares, que potencialmente pode ser usada para contornar a prote\u00e7\u00e3o do Intel Boot Guard (a funcionalidade da chave n\u00e3o foi confirmada, e n\u00e3o se pode descartar a possibilidade de ser uma chave de teste).
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Intel \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0438 BIOS, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u043d\u0430 GitHub. \u0412\u0441\u0435\u0433\u043e \u0431\u044b\u043b\u043e \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043e 5.8 \u0413\u0411 \u043a\u043e\u0434\u0430, \u0443\u0442\u0438\u043b\u0438\u0442, \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438, \u0431\u043b\u043e\u0431\u043e\u0432 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u0441 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u043c\u0438 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b Alder Lake, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2021 \u0433\u043e\u0434\u0430. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0432\u0435\u0436\u0435\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0432 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043a\u043e\u0434\u0435 \u0434\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e 30 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430. \u041f\u043e \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105273","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47A Intel confirmou a autenticidade do vazamento do c\u00f3digo de firmware UEFI para chips Alder Lake | ProHoster","description":"A Intel confirmou a autenticidade dos c\u00f3digos-fonte de firmware UEFI e BIOS, publicados por um desconhecido no GitHub.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/intel-podtverdil-podlinnost-utechki-koda-uefi-proshivok-dlya-chipov-alder-lake","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Intel \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u044c \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u0434\u0430 UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0434\u043b\u044f \u0447\u0438\u043f\u043e\u0432 Alder Lake | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Intel \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0438 BIOS, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u043d\u0430 GitHub.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/intel-podtverdil-podlinnost-utechki-koda-uefi-proshivok-dlya-chipov-alder-lake","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-10-10T07:36:38+00:00","article:modified_time":"2022-10-10T07:36:38+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/105273","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=105273"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/105273\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=105273"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=105273"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=105273"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}