Spolo\u010dnos\u0165 Intel potvrdila pravos\u0165 p\u00f4vodn\u00fdch textov UEFI firmv\u00e9rov a BIOSu, ktor\u00e9 zverejnila nezn\u00e1ma osoba na GitHub. Celkovo bolo zverejnen\u00fdch 5,8 GB k\u00f3du, util\u00edt, dokument\u00e1cie, blobov a nastaven\u00ed s\u00favisiacich s vytv\u00e1ran\u00edm firmv\u00e9rov pre syst\u00e9my s procesormi zalo\u017een\u00fdmi na mikroarchitekt\u00fare Alder Lake, ktor\u00e1 bola vydan\u00e1 v novembri 2021. Najnov\u0161ia zmena v zverejnenom k\u00f3de m\u00e1 d\u00e1tum 30. septembra 2022. <\/p>\n
Pod\u013ea vyhl\u00e1senia spolo\u010dnosti Intel do \u00faniku do\u0161lo z viny tretej strany, nie v d\u00f4sledku kompromitovania infra\u0161trukt\u00fary spolo\u010dnosti. Uv\u00e1dza sa tie\u017e, \u017ee zverejnen\u00fd k\u00f3d sa t\u00fdka programu Project Circuit Breaker, ktor\u00fd zah\u0155\u0148a odmeny vo v\u00fd\u0161ke od 500 do 100000 dol\u00e1rov za hl\u00e1senie probl\u00e9mov s bezpe\u010dnos\u0165ou vo firmv\u00e9roch a produktoch Intel (predpoklad\u00e1 sa, \u017ee v\u00fdskumn\u00edci m\u00f4\u017eu z\u00edska\u0165 odmenu za hl\u00e1senia o zranite\u013enostiach objaven\u00fdch pomocou obsahu \u00faniku). <\/p>\n
Nie je presne uveden\u00e9, kto sa stal zdrojom \u00faniku (pr\u00edstup k n\u00e1strojom na zostavovanie firmv\u00e9ru mali OEM v\u00fdrobcovia hardv\u00e9ru a spolo\u010dnosti vyv\u00edjaj\u00face firmv\u00e9r na objedn\u00e1vku). Po anal\u00fdze obsahu zverejnen\u00e9ho arch\u00edvu boli identifikovan\u00e9 niektor\u00e9 \u0161pecifick\u00e9 testy a slu\u017eby spolo\u010dnosti Lenovo (\u201eLenovo Feature Tag Test Information\u201c, \u201eLenovo String Service\u201c, \u201eLenovo Secure Suite\u201c, \u201eLenovo Cloud Service\u201c), av\u0161ak zapojenie spolo\u010dnosti Lenovo do \u00faniku zatia\u013e nebolo potvrden\u00e9. V arch\u00edve boli taktie\u017e zisten\u00e9 utilitky a kni\u017enice spolo\u010dnosti Insyde Software, ktor\u00e1 sa zaober\u00e1 v\u00fdvojom firmv\u00e9ru na objedn\u00e1vku OEM v\u00fdrobcov, a v git logu sa nach\u00e1dza email jedn\u00e9ho zo zamestnancov spolo\u010dnosti LC Future Center, ktor\u00e1 vyr\u00e1ba notebooky pre r\u00f4znych OEM v\u00fdrobcov. Obe spolo\u010dnosti spolupracuj\u00fa so spolo\u010dnos\u0165ou Lenovo. <\/p>\n
Pod\u013ea n\u00e1zoru spolo\u010dnosti Intel k\u00f3d, ktor\u00fd sa dostal do verejn\u00e9ho priestoru, neobsahuje \u017eiadne citliv\u00e9 \u00fadaje ani komponenty, ktor\u00e9 by mohli prispie\u0165 k odhaleniu nov\u00fdch zranite\u013enost\u00ed. Mark Jermolov, ktor\u00fd sa \u0161pecializuje na v\u00fdskum bezpe\u010dnosti platforiem Intel, v\u0161ak identifikoval v zverejnenom arch\u00edve inform\u00e1cie o nedokladovan\u00fdch registroch MSR (Model Specific Registers, ktor\u00e9 sa pou\u017e\u00edvaj\u00fa aj na riadenie mikrok\u00f3du, sledovanie a ladenie), ktor\u00fdch inform\u00e1cie spadaj\u00fa pod dohodu o ml\u010danlivosti. \u010ealej sa v arch\u00edve na\u0161iel s\u00fakromn\u00fd k\u013e\u00fa\u010d, ktor\u00fd sa pou\u017e\u00edva na overovanie digit\u00e1lnych podpisov firmv\u00e9ru, ktor\u00fd by sa potenci\u00e1lne mohol pou\u017ei\u0165 na ob\u00eddenie ochrany Intel Boot Guard (fungovanie k\u013e\u00fa\u010da nebolo potvrden\u00e9, nie je vyl\u00fa\u010den\u00e9, \u017ee ide o testovac\u00ed k\u013e\u00fa\u010d). \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Intel \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0438 BIOS, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u043d\u0430 GitHub. \u0412\u0441\u0435\u0433\u043e \u0431\u044b\u043b\u043e \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043e 5.8 \u0413\u0411 \u043a\u043e\u0434\u0430, \u0443\u0442\u0438\u043b\u0438\u0442, \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438, \u0431\u043b\u043e\u0431\u043e\u0432 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u0441 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u043c\u0438 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b Alder Lake, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2021 \u0433\u043e\u0434\u0430. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0432\u0435\u0436\u0435\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0432 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043a\u043e\u0434\u0435 \u0434\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e 30 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430. \u041f\u043e \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105273","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Intel potvrdil autenticitu \u00faniku k\u00f3du UEFI firmv\u00e9ru pre \u010dipy Alder Lake | ProHoster","description":"Spolo\u010dnos\u0165 Intel potvrdila autenticitu zdrojov\u00fdch k\u00f3dov UEFI firmv\u00e9ru a BIOSu, ktor\u00e9 zverejnil nezn\u00e1my pou\u017e\u00edvate\u013e na GitHub.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/intel-podtverdil-podlinnost-utechki-koda-uefi-proshivok-dlya-chipov-alder-lake","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Intel \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u044c \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u0434\u0430 UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0434\u043b\u044f \u0447\u0438\u043f\u043e\u0432 Alder Lake | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Intel \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0438 BIOS, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u043d\u0430 GitHub.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/intel-podtverdil-podlinnost-utechki-koda-uefi-proshivok-dlya-chipov-alder-lake","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-10-10T07:36:38+00:00","article:modified_time":"2022-10-10T07:36:38+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/105273","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=105273"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/105273\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=105273"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=105273"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=105273"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"