{"id":100020,"date":"2021-04-25T10:22:40","date_gmt":"2021-04-25T08:22:40","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/komanda-iz-universiteta-minnesoty-poyasnila-motivy-eksperimentov-s-somnitelnymi-kommitami-v-yadro-linux"},"modified":"2021-04-25T10:22:40","modified_gmt":"2021-04-25T08:22:40","slug":"komanda-iz-universiteta-minnesoty-poyasnila-motivy-eksperimentov-s-somnitelnymi-kommitami-v-yadro-linux","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/komanda-iz-universiteta-minnesoty-poyasnila-motivy-eksperimentov-s-somnitelnymi-kommitami-v-yadro-linux","title":{"rendered":"Echipa de la Universitatea Minnesota a explicat motivele experimentelor cu comitente dubioase \u00een nucleul Linux.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Un grup de cercet\u0103tori de la Universitatea Minnesota, a c\u0103rei acceptare a modific\u0103rilor a fost recent blocat\u0103 de Greg Kroah-Hartman, a publicat o scrisoare deschis\u0103 de scuze \u0219i explica\u021bii cu privire la motivele activit\u0103\u021bii lor. Reamintim c\u0103 grupul se ocupa cu cercetarea punctelor slabe \u00een revizuirea patch-urilor primite \u0219i evaluarea posibilit\u0103\u021bii de promovare \u00een nucleul modific\u0103rilor cu vulnerabilit\u0103\u021bi ascunse. Dup\u0103 primirea unui patch dubios din partea unuia dintre participan\u021bii grupului, cu o corectare f\u0103r\u0103 sens, s-a f\u0103cut presupunerea c\u0103 cercet\u0103torii \u00eencearc\u0103 din nou s\u0103 efectueze experimente pe dezvoltatorii nucleului. Deoarece astfel de experimente reprezint\u0103 o amenin\u021bare poten\u021bial\u0103 la adresa securit\u0103\u021bii \u0219i consum\u0103 timpul comite\u021bilor, s-a decis blocarea accept\u0103rii modific\u0103rilor \u0219i retrimiterea tuturor patch-urilor acceptate anterior pentru revizuire. <\/p>\n

\u00cen scrisoarea lor deschis\u0103, participan\u021bii grupului au declarat c\u0103 activitatea lor a fost motivat\u0103 exclusiv de inten\u021bii bune \u0219i de dorin\u021ba de a \u00eembun\u0103t\u0103\u021bi procesul de revizuire a modific\u0103rilor, prin identificarea \u0219i eliminarea punctelor slabe. Grupul studiaz\u0103 de mul\u021bi ani procesele care conduc la apari\u021bia vulnerabilit\u0103\u021bilor \u0219i lucreaz\u0103 activ la identificarea \u0219i eliminarea vulnerabilit\u0103\u021bilor din nucleul Linux. Se afirm\u0103 c\u0103 toate cele 190 de patch-uri trimise pentru revizuire sunt legitime, corecteaz\u0103 probleme existente \u0219i nu con\u021bin erori inten\u021bionate sau vulnerabilit\u0103\u021bi ascunse. <\/p>\n

Studiul care a ridicat semne de \u00eentrebare asupra promov\u0103rii vulnerabilit\u0103\u021bilor ascunse a fost efectuat \u00een august anul trecut \u0219i s-a limitat la trimiterea a trei patch-uri cu erori, niciunul dintre acestea nefiind inclus \u00een baza de cod a nucleului. Activitatea legat\u0103 de aceste patch-uri s-a limitat doar la discu\u021bii, iar promovarea patch-urilor a fost oprit\u0103 \u00eenainte de a ad\u0103uga modific\u0103rile \u00een Git. Codul celor trei patch-uri problematice nu este prezentat momentan, deoarece acest lucru ar dezv\u0103lui identitatea celor care au efectuat revizuirea ini\u021bial\u0103 (informa\u021biile vor fi dezv\u0103luite dup\u0103 ob\u021binerea consim\u021b\u0103m\u00e2ntului dezvoltatorilor care nu au recunoscut erorile). <\/p>\n

Principala surs\u0103 de cercetare nu au fost propriile patch-uri, ci analiza patch-urilor externe care au fost ad\u0103ugate vreodat\u0103 \u00een nucleu, cauz\u00e2nd ulterior apari\u021bia de vulnerabilit\u0103\u021bi. Echipa Universit\u0103\u021bii Minnesota nu are nicio leg\u0103tur\u0103 cu ad\u0103ugarea acestor patch-uri. Au fost studiate \u00een total 138 de patch-uri problematice care au dus la erori, iar p\u00e2n\u0103 la momentul public\u0103rii rezultatelor cercet\u0103rii, toate erorile asociate au fost corectate, inclusiv cu participarea echipei care a efectuat cercetarea. <\/p>\n

Cercet\u0103torii regret\u0103 c\u0103 au folosit o metod\u0103 inadecvat\u0103 pentru desf\u0103\u0219urarea experimentului. Gre\u0219eala a fost c\u0103 cercetarea a fost realizat\u0103 f\u0103r\u0103 ob\u021binerea permisiunii \u0219i f\u0103r\u0103 a informa comunitatea. Motivul activit\u0103\u021bii ascunse a fost dorin\u021ba de a ob\u021bine puritatea experimentului, deoarece informarea ar fi putut atrage o aten\u021bie deosebit\u0103 asupra patch-urilor \u0219i evalu\u0103rii lor, nu pe criterii generale. De\u0219i scopul a fost \u00eembun\u0103t\u0103\u021birea securit\u0103\u021bii nucleului, cercet\u0103torii \u0219i-au dat seama acum c\u0103 utilizarea comunit\u0103\u021bii ca pe un iepure de testare a fost incorect\u0103 \u0219i neetic\u0103. Totu\u0219i, cercet\u0103torii asigur\u0103 c\u0103 nu ar fi inten\u021bionat niciodat\u0103 s\u0103 fac\u0103 r\u0103u comunit\u0103\u021bii sau s\u0103 permit\u0103 introducerea de noi vulnerabilit\u0103\u021bi \u00een codul func\u021bional al nucleului. <\/p>\n

\u00cen ceea ce prive\u0219te patch-ul lipsit de sens care a servit drept catalizator pentru blocare, acesta nu are leg\u0103tur\u0103 cu cercetarea anterioar\u0103 \u0219i este asociat cu un nou proiect destinat s\u0103 creeze un instrument pentru identificarea automat\u0103 a erorilor ap\u0103rute \u00een urma ad\u0103ug\u0103rii altor patch-uri. <\/p>\n

\u00cen prezent, participan\u021bii grupului \u00eencearc\u0103 s\u0103 g\u0103seasc\u0103 modalit\u0103\u021bi de a reveni la participarea \u00een dezvoltare \u0219i inten\u021bioneaz\u0103 s\u0103 \u00eembun\u0103t\u0103\u021beasc\u0103 rela\u021biile cu Linux Foundation \u0219i comunitatea dezvoltatorilor, demonstr\u00e2ndu-\u0219i utilitatea \u00een cre\u0219terea securit\u0103\u021bii nucleului \u0219i exprim\u00e2nd dorin\u021ba de a munci asiduously pentru binele comun \u0219i pentru restabilirea \u00eencrederii.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u041c\u0438\u043d\u043d\u0435\u0441\u043e\u0442\u044b, \u043f\u0440\u0438\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u043e\u0442 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0430 \u0434\u043d\u044f\u0445 \u0431\u044b\u043b \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d \u0413\u0440\u0435\u0433\u043e\u043c \u041a\u0440\u043e\u0430-\u0425\u0430\u0440\u0442\u043c\u0430\u043d\u043e\u043c, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0435 \u043f\u0438\u0441\u044c\u043c\u043e \u0441 \u0438\u0437\u0432\u0438\u043d\u0435\u043d\u0438\u044f\u043c\u0438 \u0438 \u043f\u043e\u044f\u0441\u043d\u0435\u043d\u0438\u0435\u043c \u043c\u043e\u0442\u0438\u0432\u043e\u0432 \u0441\u0432\u043e\u0435\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438. \u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u0447\u0442\u043e \u0433\u0440\u0443\u043f\u043f\u0430 \u0437\u0430\u043d\u0438\u043c\u0430\u043b\u0430\u0441\u044c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u043b\u0430\u0431\u044b\u0445 \u043c\u0435\u0441\u0442 \u0440\u0435\u0446\u0435\u043d\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0441\u0442\u0443\u043f\u0430\u044e\u0449\u0438\u0445 \u043f\u0430\u0442\u0447\u0435\u0439 \u0438 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u044f \u0432 \u044f\u0434\u0440\u043e \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0441\u043e \u0441\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438. \u041f\u043e\u0441\u043b\u0435 \u043f\u043e\u0441\u0442\u0443\u043f\u043b\u0435\u043d\u0438\u044f \u043e\u0442 \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u043e\u0432 \u0433\u0440\u0443\u043f\u043f\u044b \u0441\u043e\u043c\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0430\u0442\u0447\u0430 \u0441 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100020","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Echipa de la Universitatea Minnesota a explicat motivele experimentelor cu comituri dubioase \u00een nucleul Linux | ProHoster","description":"Un grup de cercet\u0103tori de la Universitatea Minnesota, ai c\u0103ror modific\u0103ri au fost blocate recent de Greg Kroah-Hartman, a publicat o scrisoare deschis\u0103 cu scuze \u0219i explica\u021bii privind motivele activit\u0103\u021bii lor.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/komanda-iz-universiteta-minnesoty-poyasnila-motivy-eksperimentov-s-somnitelnymi-kommitami-v-yadro-linux","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u043c\u0430\u043d\u0434\u0430 \u0438\u0437 \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u041c\u0438\u043d\u043d\u0435\u0441\u043e\u0442\u044b \u043f\u043e\u044f\u0441\u043d\u0438\u043b\u0430 \u043c\u043e\u0442\u0438\u0432\u044b \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u043e\u0432 \u0441 \u0441\u043e\u043c\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u043a\u043e\u043c\u043c\u0438\u0442\u0430\u043c\u0438 \u0432 \u044f\u0434\u0440\u043e Linux | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0423\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u041c\u0438\u043d\u043d\u0435\u0441\u043e\u0442\u044b, \u043f\u0440\u0438\u0451\u043c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u043e\u0442 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0430 \u0434\u043d\u044f\u0445 \u0431\u044b\u043b \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d \u0413\u0440\u0435\u0433\u043e\u043c \u041a\u0440\u043e\u0430-\u0425\u0430\u0440\u0442\u043c\u0430\u043d\u043e\u043c, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0435 \u043f\u0438\u0441\u044c\u043c\u043e \u0441 \u0438\u0437\u0432\u0438\u043d\u0435\u043d\u0438\u044f\u043c\u0438 \u0438 \u043f\u043e\u044f\u0441\u043d\u0435\u043d\u0438\u0435\u043c \u043c\u043e\u0442\u0438\u0432\u043e\u0432 \u0441\u0432\u043e\u0435\u0439 \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/komanda-iz-universiteta-minnesoty-poyasnila-motivy-eksperimentov-s-somnitelnymi-kommitami-v-yadro-linux","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-04-25T08:22:40+00:00","article:modified_time":"2021-04-25T08:22:40+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100020","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-04-25 08:48:48","updated":"2022-10-05 16:50:39","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/100020","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=100020"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/100020\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=100020"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=100020"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=100020"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}