{"id":124557,"date":"2025-05-08T03:05:06","date_gmt":"2025-05-08T01:05:06","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-iventoy-vyyavlena-podstanovka-kornevogo-sertifikata-pri-zapuske-windows"},"modified":"2025-05-08T03:05:06","modified_gmt":"2025-05-08T01:05:06","slug":"v-iventoy-vyyavlena-podstanovka-kornevogo-sertifikata-pri-zapuske-windows","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/v-iventoy-vyyavlena-podstanovka-kornevogo-sertifikata-pri-zapuske-windows","title":{"rendered":"\u00cen iVentoy a fost identificat\u0103 substitu\u021bia certificatului de r\u0103d\u0103cin\u0103 la pornirea Windows.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00cen instrumentarul iVentoy, utilizat pentru \u00eenc\u0103rcarea \u0219i instalarea prin re\u021bea a sistemelor de operare diverse, a fost detectat\u0103 o activitate suspect\u0103. La \u00eenc\u0103rcarea prin re\u021bea a sistemului de operare Windows, instrumentul efectua substitu\u021bia \u00een sistem a driverului binar httpdisk.sys \u0219i instala \u00een depozitul sistemic de certificate r\u0103d\u0103cin\u0103 certificatul s\u0103u auto-semnat, utilizat pentru a semna digital driverul. 31 din cele 70 de pachete antivirus care au scanat fi\u0219ierul httpdisk.sys au emis o alert\u0103 cu privire la prezen\u021ba malware-ului. <\/p>\n

O astfel de activitate a fost perceput\u0103 ca o tentativ\u0103 poten\u021bial\u0103 de promovare a unui backdoor \u0219i a ridicat probleme de \u00eencredere \u00een proiectul deschis Ventoy. Situa\u021bia a fost agravat\u0103 de faptul c\u0103 anul trecut, dup\u0103 incidentul cu backdoor-ul \u00een proiectul XZ, comunitatea a atras deja aten\u021bia asupra furniz\u0103rii de bloburi suspecte \u00een arborele codului surs\u0103 Ventoy. <\/p>\n

Dezvoltatorii NixOS au propus \u00eenlocuirea Ventoy din depozitul nixpkgs cu fork-ul fnr1r (ca alternativ\u0103 poate fi considerat \u0219i glim). Proiectele Ventoy \u0219i iVentoy sunt dezvoltate de acela\u0219i autor \u0219i au destina\u021bii similar. Diferen\u021bele constau \u00een faptul c\u0103 Ventoy este complet deschis \u0219i destinat \u00eenc\u0103rc\u0103rii sistemelor de operare de pe suporturi USB, \u00een timp ce iVentoy este doar par\u021bial deschis \u0219i destinat \u00eenc\u0103rc\u0103rii prin re\u021bea utiliz\u00e2nd tehnologia PXE. <\/p>\n

\u00cen discu\u021bia problemei s-a al\u0103turat autorul proiectelor Ventoy \u0219i iVentoy, care a explicat c\u0103 codul driverului httpdisk.sys este deschis, iar driverul \u00eensu\u0219i este destinat mont\u0103rii imaginilor de disc Windows prin re\u021bea peste protocolul HTTP, ceea ce este utilizat \u00een iVentoy pentru a ob\u021bine din server<\/a> datele de instalare Windows. Substituirea driverelor \u0219i scripturilor \u00een sistem dup\u0103 \u00eenc\u0103rcare este un comportament documentat. <\/p>\n

Certificatul propriu, cu ajutorul c\u0103ruia a fost semnat acest driver, a fost ad\u0103ugat \u00een magazinul de certificate r\u0103d\u0103cin\u0103 pentru a permite \u00eenc\u0103rcarea driverului \u00een ocolirea verific\u0103rii semn\u0103turilor digitale aplicate de sistemul Windows. Certificatul a fost introdus doar \u00eentr-un mediu temporar WinPE (Windows Preinstallation Environment), creat \u00een memorie. Nu s-au adus modific\u0103ri la instal\u0103rile Windows stocate pe disc. S-a anun\u021bat c\u0103 \u00een urm\u0103toarea versiune a iVentoy introducerea propriului certificat va fi oprit\u0103, deoarece pentru a permite \u00eenc\u0103rcarea driverului va fi folosit\u0103 lansarea WinPE \u00een modul de testare. <\/p>\n

\u00cen leg\u0103tur\u0103 cu livrarea bloburilor (1, 2, 3) \u00een Ventoy, dezvoltatorul a declarat c\u0103 aceste fi\u0219iere binare sunt ob\u021binute direct din alte proiecte open-source \u0219i Ventoy le utilizeaz\u0103 f\u0103r\u0103 modific\u0103ri. Executabilele gata f\u0103cute sunt folosite \u00een procesul de configurare a sistemelor bootabile. Ca alternativ\u0103, se sugereaz\u0103 s\u0103 nu se ia construiri gata, ci s\u0103 se compileze propriile versiuni pentru raulturile Ventoy cu ajutorul GitHub CI.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 iVentoy, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u043c \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u043e \u0441\u0435\u0442\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c. \u041f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u043f\u043e \u0441\u0435\u0442\u0438 \u041e\u0421 Windows \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u043b \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0431\u0438\u043d\u0430\u0440\u043d\u043e\u0433\u043e \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 httpdisk.sys \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0435 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0441\u0432\u043e\u0435\u0433\u043e \u0441\u0430\u043c\u043e\u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u0437\u0430\u0432\u0435\u0440\u0435\u043d\u0438\u044f \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u044c\u044e. 31 \u0438\u0437 70 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b \u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-124557","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u00cen iVentoy s-a descoperit introducerea unui certificat r\u0103d\u0103cin\u0103 la lansarea Windows | ProHoster","description":"\u00cen instrumentarul iVentoy, utilizat pentru \u00eenc\u0103rcarea \u0219i instalarea prin re\u021bea a diverselor sisteme de operare, a fost identificat\u0103 o activitate suspect\u0103.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/v-iventoy-vyyavlena-podstanovka-kornevogo-sertifikata-pri-zapuske-windows","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 iVentoy \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 Windows | ProHoster","og:description":"\u0412 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 iVentoy, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u043c \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u043e \u0441\u0435\u0442\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/v-iventoy-vyyavlena-podstanovka-kornevogo-sertifikata-pri-zapuske-windows","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-05-08T01:05:06+00:00","article:modified_time":"2025-05-08T01:05:06+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"124557","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-22 15:51:24","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 12:41:21","updated":"2026-02-22 15:51:24","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/124557","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=124557"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/124557\/revisions"}],"predecessor-version":[{"id":162495,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/124557\/revisions\/162495"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=124557"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=124557"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=124557"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}