{"id":124557,"date":"2025-05-08T03:05:06","date_gmt":"2025-05-08T01:05:06","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-iventoy-vyyavlena-podstanovka-kornevogo-sertifikata-pri-zapuske-windows"},"modified":"2025-05-08T03:05:06","modified_gmt":"2025-05-08T01:05:06","slug":"v-iventoy-vyyavlena-podstanovka-kornevogo-sertifikata-pri-zapuske-windows","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/v-iventoy-vyyavlena-podstanovka-kornevogo-sertifikata-pri-zapuske-windows","title":{"rendered":"V iVentoy bola zisten\u00e1 substit\u00facia kore\u0148ov\u00e9ho certifik\u00e1tu pri spusten\u00ed Windows","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

V n\u00e1stroji iVentoy, ktor\u00fd sa pou\u017e\u00edva na zav\u00e1dzanie a in\u0161tal\u00e1ciu r\u00f4znych opera\u010dn\u00fdch syst\u00e9mov cez sie\u0165, bola zisten\u00e1 podozriv\u00e1 aktivita. Pri zav\u00e1dzan\u00ed OS Windows n\u00e1stroj realizoval substit\u00faciu bin\u00e1rneho ovl\u00e1da\u010da httpdisk.sys do syst\u00e9mu a in\u0161tal\u00e1ciu svojho samopodp\u00edsan\u00e9ho certifik\u00e1tu do syst\u00e9mov\u00e9ho \u00falo\u017eiska kore\u0148ov\u00fdch certifik\u00e1tov, ktor\u00fd sa pou\u017e\u00edva na podpisovanie ovl\u00e1da\u010da digit\u00e1lnym podpisom. 31 z 70 antiv\u00edrusov\u00fdch bal\u00edkov, v ktor\u00fdch bol s\u00fabor httpdisk.sys overen\u00fd, upozornilo na pr\u00edtomnos\u0165 \u0161kodliv\u00e9ho softv\u00e9ru. <\/p>\n

Tak\u00e1to aktivita bola vn\u00edman\u00e1 ako potenci\u00e1lny pokus o nasadenie backdooru a vyvolala ot\u00e1zku d\u00f4very v otvoren\u00fd projekt Ventoy. Situ\u00e1ciu zhor\u0161ovalo, \u017ee vlani po incidente s backdoorom v projekte XZ komunita u\u017e upozor\u0148ovala na distrib\u00faciu podozriv\u00fdch blobov v zdrojovom k\u00f3de Ventoy. <\/p>\n

V\u00fdvoj\u00e1ri NixOS navrhli nahradi\u0165 Ventoy v repozit\u00e1ri nixpkgs forkom fnr1r (aj glim m\u00f4\u017ee by\u0165 pova\u017eovan\u00fd za alternat\u00edvu). Projekty Ventoy a iVentoy sa vyv\u00edjaj\u00fa jedn\u00fdm autorom a maj\u00fa podobn\u00e9 zameranie. Rozdiely spo\u010d\u00edvaj\u00fa v tom, \u017ee Ventoy je plne otvoren\u00fd a zameran\u00fd na zav\u00e1dzanie opera\u010dn\u00fdch syst\u00e9mov z USB d\u00e1tov\u00fdch nosi\u010dov, zatia\u013e \u010do iVentoy je len \u010diasto\u010dne otvoren\u00fd a ur\u010den\u00fd na zav\u00e1dzanie cez sie\u0165 pomocou technol\u00f3gie PXE. <\/p>\n

Do diskusie o probl\u00e9me sa zapojil autor projektov Ventoy a iVentoy, ktor\u00fd objasnil, \u017ee k\u00f3d ovl\u00e1da\u010da httpdisk.sys je otvoren\u00fd a samotn\u00fd ovl\u00e1da\u010d sl\u00fa\u017ei na montovanie diskov\u00fdch obrazov Windows cez sie\u0165 pomocou protokolu HTTP, \u010do sa pou\u017e\u00edva v iVentoy na z\u00edskavanie in\u0161tala\u010dn\u00fdch d\u00e1t Windows. servera<\/a> Substit\u00facia ovl\u00e1da\u010dov a skriptov do syst\u00e9mu po zaveden\u00ed je zdokumentovan\u00e9 spr\u00e1vanie. <\/p>\n

Vydan\u00fd certifik\u00e1t, ktor\u00fd bol pou\u017eit\u00fd na podp\u00edsanie tohto ovl\u00e1da\u010da, bol pridan\u00fd do \u00falo\u017eiska kore\u0148ov\u00fdch certifik\u00e1tov, aby sa umo\u017enilo na\u010d\u00edtanie ovl\u00e1da\u010da ob\u00edden\u00edm overovania digit\u00e1lnych podpisov v syst\u00e9me Windows. Certifik\u00e1t bol pou\u017eit\u00fd iba v jednorazovom prostred\u00ed WinPE (Windows Preinstallation Environment), vytvoren\u00e9ho v opera\u010dnej pam\u00e4ti. Do stacion\u00e1rnych in\u0161tal\u00e1ci\u00ed Windows na disku neboli vykonan\u00e9 \u017eiadne zmeny. Tvrd\u00ed sa, \u017ee v nasleduj\u00facej verzii iVentoy bude pou\u017e\u00edvanie vlastn\u00e9ho certifik\u00e1tu ukon\u010den\u00e9, preto\u017ee pre zabezpe\u010denie na\u010d\u00edtania ovl\u00e1da\u010da sa pou\u017eije spustenie WinPE v testovacom re\u017eime. <\/p>\n

Pokia\u013e ide o dod\u00e1vku blobov (1, 2, 3) do Ventoy, v\u00fdvoj\u00e1r uviedol, \u017ee tieto bin\u00e1rne s\u00fabory boli priamo z\u00edskan\u00e9 z in\u00fdch otvoren\u00fdch projektov a Ventoy ich pou\u017e\u00edva bez ak\u00fdchko\u013evek zmien. Hotov\u00e9 spustite\u013en\u00e9 s\u00fabory sa pou\u017e\u00edvaj\u00fa po\u010das konfigur\u00e1cie sp\u00fa\u0161\u0165ac\u00edch syst\u00e9mov. Ako alternat\u00edvu sa navrhuje nebra\u0165 hotov\u00e9 zostavy, ale zostavova\u0165 ich pre vydania Ventoy samostatne pomocou GitHub CI.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 iVentoy, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u043c \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u043e \u0441\u0435\u0442\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c. \u041f\u0440\u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 \u043f\u043e \u0441\u0435\u0442\u0438 \u041e\u0421 Windows \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u043b \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0431\u0438\u043d\u0430\u0440\u043d\u043e\u0433\u043e \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 httpdisk.sys \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0435 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u043a\u043e\u0440\u043d\u0435\u0432\u044b\u0445 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432 \u0441\u0432\u043e\u0435\u0433\u043e \u0441\u0430\u043c\u043e\u043f\u043e\u0434\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f \u0437\u0430\u0432\u0435\u0440\u0435\u043d\u0438\u044f \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u044c\u044e. 31 \u0438\u0437 70 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b \u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-124557","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47V iVentoy bola zisten\u00e1 podstr\u010denie kore\u0148ov\u00e9ho certifik\u00e1tu pri spusten\u00ed Windows | ProHoster","description":"V n\u00e1strojoch iVentoy, pou\u017e\u00edvan\u00fdch na zav\u00e1dzanie a in\u0161tal\u00e1ciu r\u00f4znych opera\u010dn\u00fdch syst\u00e9mov cez sie\u0165, bola zisten\u00e1 podozriv\u00e1 aktivita.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/v-iventoy-vyyavlena-podstanovka-kornevogo-sertifikata-pri-zapuske-windows","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 iVentoy \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u043a\u043e\u0440\u043d\u0435\u0432\u043e\u0433\u043e \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u043f\u0440\u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0435 Windows | ProHoster","og:description":"\u0412 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0438 iVentoy, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u043c \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043f\u043e \u0441\u0435\u0442\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/v-iventoy-vyyavlena-podstanovka-kornevogo-sertifikata-pri-zapuske-windows","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-05-08T01:05:06+00:00","article:modified_time":"2025-05-08T01:05:06+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"124557","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-22 15:51:24","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 12:41:21","updated":"2026-02-22 15:51:24","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/124557","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=124557"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/124557\/revisions"}],"predecessor-version":[{"id":162495,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/124557\/revisions\/162495"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=124557"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=124557"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=124557"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}