{"id":105273,"date":"2022-10-10T09:36:38","date_gmt":"2022-10-10T07:36:38","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/intel-podtverdil-podlinnost-utechki-koda-uefi-proshivok-dlya-chipov-alder-lake"},"modified":"2022-10-10T09:36:38","modified_gmt":"2022-10-10T07:36:38","slug":"intel-podtverdil-podlinnost-utechki-koda-uefi-proshivok-dlya-chipov-alder-lake","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/intel-podtverdil-podlinnost-utechki-koda-uefi-proshivok-dlya-chipov-alder-lake","title":{"rendered":"Intel a confirmat autenticitatea scurgerii de coduri UEFI pentru cipurile Alder Lake","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Compania Intel a confirmat autenticitatea codului surs\u0103 al firmware-urilor UEFI \u0219i BIOS, publicate de un necunoscut pe GitHub. \u00cen total, au fost publicate 5,8 GB de cod, utilitare, documenta\u021bie, bloburi \u0219i set\u0103ri legate de crearea firmware-urilor pentru sisteme cu procesoare bazate pe microarhitectura Alder Lake, lansat\u0103 \u00een noiembrie 2021. Cea mai recent\u0103 modificare a codului publicat este datat\u0103 30 septembrie 2022. <\/p>\n

Potrivit Intel, scurgerea a avut loc din vina unei ter\u021be p\u0103r\u021bi, nu ca urmare a compromiterii infrastructurii companiei. Se men\u021bioneaz\u0103, de asemenea, c\u0103 codul devenit public acoper\u0103 programul Project Circuit Breaker, care implic\u0103 pl\u0103\u021bi de recompense cuprinse \u00eentre 500 \u0219i 100.000 de dolari pentru identificarea problemelor de securitate \u00een firmware-uri \u0219i produsele Intel (se sub\u00een\u021belege c\u0103 cercet\u0103torii pot primi recompense pentru rapoartele de vulnerabilitate descoperite utiliz\u00e2nd con\u021binutul scurgerii). <\/p>\n

Nu este clar cine anume a fost sursa scurgerii (accesul la instrumentele pentru asamblarea firmware-ului a fost avut de produc\u0103torii OEM de echipamente \u0219i de companiile care dezvolt\u0103 firmware pe baz\u0103 de comenzi). \u00cen timpul analizei con\u021binutului arhivei publicate, au fost identificate unele teste \u0219i servicii specifice produselor companiei Lenovo (\u201eLenovo Feature Tag Test Information\u201d, \u201eLenovo String Service\u201d, \u201eLenovo Secure Suite\u201d, \u201eLenovo Cloud Service\u201d), dar implicarea companiei Lenovo \u00een scurgere nu a fost confirmat\u0103 p\u00e2n\u0103 acum. \u00cen arhiv\u0103 au fost descoperite \u0219i utilitare \u0219i biblioteci ale companiei Insyde Software, care se ocup\u0103 cu dezvoltarea firmware-ului pentru produc\u0103torii OEM, iar \u00een logul git se afl\u0103 e-mailul unuia dintre angaja\u021bii companiei LC Future Center, care produce laptopuri pentru diferi\u021bi produc\u0103tori OEM. Ambele companii colaboreaz\u0103 cu Lenovo. <\/p>\n

Conform opiniei companiei Intel, codul ajuns \u00een domeniul public nu con\u021bine date confiden\u021biale sau componente care ar putea facilita descoperirea de noi vulnerabilit\u0103\u021bi. Totu\u0219i, Mark Yermolov, specialist \u00een cercetarea securit\u0103\u021bii platformelor Intel, a identificat \u00een arhiva publicat\u0103 informa\u021bii despre registrele MSR (Model Specific Registers, utilizate \u0219i pentru gestionarea microcodului, trasarea \u0219i depanarea), a c\u0103ror informa\u021bie este supus\u0103 unui acord de confiden\u021bialitate. Mai mult, \u00een arhiv\u0103 a fost g\u0103sit\u0103 o cheie privat\u0103, utilizat\u0103 pentru semnarea digital\u0103 a firmware-urilor, care ar putea fi utilizat\u0103 poten\u021bial pentru a ocoli protec\u021bia Intel Boot Guard (func\u021bionalitatea cheii nu este confirmat\u0103, este posibil s\u0103 fie o cheie de test).
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Intel \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0438 BIOS, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u043d\u0430 GitHub. \u0412\u0441\u0435\u0433\u043e \u0431\u044b\u043b\u043e \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043e 5.8 \u0413\u0411 \u043a\u043e\u0434\u0430, \u0443\u0442\u0438\u043b\u0438\u0442, \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438, \u0431\u043b\u043e\u0431\u043e\u0432 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u0441 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u043c\u0438 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b Alder Lake, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2021 \u0433\u043e\u0434\u0430. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0432\u0435\u0436\u0435\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0432 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043a\u043e\u0434\u0435 \u0434\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e 30 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430. \u041f\u043e \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105273","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Intel a confirmat autenticitatea scurgerii codului UEFI firmware pentru cipurile Alder Lake | ProHoster","description":"Compania Intel a confirmat autenticitatea codurilor surs\u0103 UEFI firmware \u0219i BIOS, publicate de un utilizator necunoscut pe GitHub.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/intel-podtverdil-podlinnost-utechki-koda-uefi-proshivok-dlya-chipov-alder-lake","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Intel \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u044c \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u0434\u0430 UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0434\u043b\u044f \u0447\u0438\u043f\u043e\u0432 Alder Lake | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Intel \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0438 BIOS, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u043d\u0430 GitHub.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/intel-podtverdil-podlinnost-utechki-koda-uefi-proshivok-dlya-chipov-alder-lake","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-10-10T07:36:38+00:00","article:modified_time":"2022-10-10T07:36:38+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/105273","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=105273"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/105273\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=105273"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=105273"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=105273"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}