{"id":80658,"date":"2020-05-07T19:42:15","date_gmt":"2020-05-07T17:42:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/microsoft-naznachil-premiyu-do-100000-za-vyyavlenie-uyazvimosti-v-linux-platforme-azure-sphere"},"modified":"2020-05-07T19:42:15","modified_gmt":"2020-05-07T17:42:15","slug":"microsoft-naznachil-premiyu-do-100000-za-vyyavlenie-uyazvimosti-v-linux-platforme-azure-sphere","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/microsoft-naznachil-premiyu-do-100000-za-vyyavlenie-uyazvimosti-v-linux-platforme-azure-sphere","title":{"rendered":"Microsoft a acordat o recompens\u0103 de p\u00e2n\u0103 la 100000 de dolari pentru identificarea unei vulnerabilit\u0103\u021bi \u00een platforma Linux Azure Sphere","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Compania Microsoft a anun\u021bat<\/a><\/noindex> a anun\u021bat disponibilitatea de a pl\u0103ti o recompens\u0103<\/a><\/noindex>, \u00een valoare de p\u00e2n\u0103 la o sut\u0103 de mii de dolari, pentru identificarea unei bre\u0219e \u00een platforma IoT Azure Sphere<\/a><\/noindex>, construit\u0103<\/a><\/noindex> pe baza nucleului Linux \u0219i care folose\u0219te izolarea sandbox pentru serviciile \u0219i aplica\u021biile de baz\u0103. Recompensa este promis\u0103 pentru demonstrarea vulnerabilit\u0103\u021bilor \u00een subsistemul Pluton<\/a><\/noindex> (r\u0103d\u0103cin\u0103 de \u00eencredere implementat\u0103 \u00een cip) sau Secure World<\/a><\/noindex> (sandbox).<\/p>\n

Recompensa face parte dintr-un program de cercetare de trei luni , care se va desf\u0103\u0219ura \u00eentre 1 iunie \u0219i 31 august 2020. Ini\u021biativa este specific\u0103 sistemului de operare Azure Sphere \u0219i nu include subsistemele cloud, care sunt deja parte dintr-un alt program de recompens\u0103. Pentru a primi recompensa, este necesar\u0103 demonstrerea unei vulnerabilit\u0103\u021bi care, \u00een urma unei atacuri locale (compromiterea aplica\u021biei) sau la distan\u021b\u0103, ar putea duce la executarea unui cod ter\u021b cu semn\u0103tur\u0103 digital\u0103 neconfirmat\u0103, interceptarea parametrilor de autentificare, escaladarea privilegiilor, modificarea set\u0103rilor sau ocolirea restric\u021biilor firewall-ului. Pentru desf\u0103\u0219urarea cercet\u0103rii, compania Microsoft \u0219i-a exprimat disponibilitatea de a oferi participan\u021bilor acces la produsele \u0219i serviciile Azure Sphere SDK, documenta\u021bia tehnic\u0103, precum \u0219i un canal de comunicare cu dezvoltorii platformei.<\/a><\/noindex>Platforma Azure Sphere este destinat\u0103 construirii de dispozitive pentru internetul lucrurilor, bazate pe microcontrolere (MCU, microcontroller unit) eficiente din punct de vedere energetic, cu subsisteme periferice integrate. Azure Sphere este utilizat, printre altele, \u00een echipamente comerciale, cum ar fi cele ale companiilor Starbucks. Una dintre caracteristicile platformei este subsistemul Pluton, destinat furniz\u0103rii de resurse hardware pentru criptografie, stocarea cheilor private \u0219i efectuarea de opera\u021bii criptografice complexe. Pluton include un procesor specializat separat, un motor criptografic, un generator hardware de numere aleatorii \u0219i un depozit izolat pentru chei.<\/p>\n

\u00cen plus, se poate men\u021biona<\/p>\n

apari\u021bia informa\u021biilor<\/a><\/noindex> f\u0103r\u0103 alte detalii.<\/a><\/noindex> cu privire la \u00eencercarea de v\u00e2nzare a con\u021binutului necunoscut din repositoarele private GitHub ale Microsoft. Necunoscutul a declarat c\u0103 a reu\u0219it s\u0103 descarce aproximativ 500 GB de date din repositoarele private Microsoft, g\u0103zduite pe GitHub, \u0219i a oferit ca dovad\u0103 capturi de ecran \u0219i 1 GB de date. Majoritatea participan\u021bilor au considerat dovezile neconving\u0103toare, deoarece capturile de ecran sunt u\u0219or de falsificat, iar \u00een date apare un set lipsit de sens de fi\u0219iere cu texte \u00een limba chinez\u0103, teste \u0219i fragmente de cod. Un inginer Microsoft a comentarii<\/a><\/noindex> declarat c\u0103 scurgerea este probabil un fals, deoarece Microsoft are o regul\u0103 conform c\u0103reia \u00een repositoarele private de pe GitHub sunt g\u0103zduite proiecte care trebuie s\u0103 devin\u0103 publice \u00een termen de 30 de zile.<\/p>\n

<\/a><\/noindex><\/p>\n

Sursa: opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0433\u043e\u0442\u043e\u0432\u043d\u043e\u0441\u0442\u0438 \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u0442\u044c \u043f\u0440\u0435\u043c\u0438\u044e, \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u043c \u0434\u043e \u0441\u0442\u0430 \u0442\u044b\u0441\u044f\u0447 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432, \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0440\u0435\u0448\u0438 \u0432 IoT-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Azure Sphere, \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 \u044f\u0434\u0440\u0430 Linux \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0449\u0435\u0439 sandbox-\u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u0434\u043b\u044f \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u041f\u0440\u0435\u043c\u0438\u044f \u043e\u0431\u0435\u0449\u0430\u043d\u0430 \u0437\u0430 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Pluton (\u043a\u043e\u0440\u0435\u043d\u044c \u0434\u043e\u0432\u0435\u0440\u0438\u044f, \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432 \u0447\u0438\u043f\u0435) \u0438\u043b\u0438 Secure World (sandbox). \u041f\u0440\u0435\u043c\u0438\u044f \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0430\u0441\u0442\u044c\u044e \u0442\u0440\u0451\u0445\u043c\u0435\u0441\u044f\u0447\u043d\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-80658","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Microsoft a stabilit o recompens\u0103 de p\u00e2n\u0103 la 100000 USD pentru identificarea unei vulnerabilit\u0103\u021bi \u00een platforma Linux Azure Sphere | ProHoster","description":"Compania Microsoft a anun\u021bat c\u0103 este preg\u0103tit\u0103 s\u0103 ofere","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/microsoft-naznachil-premiyu-do-100000-za-vyyavlenie-uyazvimosti-v-linux-platforme-azure-sphere","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Microsoft \u043d\u0430\u0437\u043d\u0430\u0447\u0438\u043b \u043f\u0440\u0435\u043c\u0438\u044e \u0434\u043e $100000 \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Linux-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Azure Sphere | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0433\u043e\u0442\u043e\u0432\u043d\u043e\u0441\u0442\u0438 \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u0442\u044c","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/microsoft-naznachil-premiyu-do-100000-za-vyyavlenie-uyazvimosti-v-linux-platforme-azure-sphere","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-05-07T17:42:15+00:00","article:modified_time":"2020-05-07T17:42:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"80658","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 16:13:24","updated":"2022-10-04 18:24:34","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/80658","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=80658"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/80658\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=80658"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=80658"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=80658"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}