{"id":54851,"date":"2020-01-05T00:00:00","date_gmt":"2020-01-04T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/kak-ya-kupil-zablokirovannyj-noutbuk-na-ebay-i-poproboval-sdelat-svoj-antitheft-na-baze-intelamt"},"modified":"2020-02-18T14:02:54","modified_gmt":"2020-02-18T11:02:54","slug":"kak-ya-kupil-zablokirovannyj-noutbuk-na-ebay-i-poproboval-sdelat-svoj-antitheft-na-baze-intelamt","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/kak-ya-kupil-zablokirovannyj-noutbuk-na-ebay-i-poproboval-sdelat-svoj-antitheft-na-baze-intelamt","title":{"rendered":"Ako som k\u00fapil zablokovan\u00fd notebook na eBay a pok\u00fasil som sa vytvori\u0165 svoj anti-kr\u00e1de\u017eov\u00fd syst\u00e9m na z\u00e1klade IntelAMT.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Ako
\n<\/p>\n

TL;DR<\/h3>\n

\nAbsolute Computrace \u2014 technol\u00f3gia, ktor\u00e1 umo\u017e\u0148uje zablokova\u0165 stroj (a nie), aj ke\u010f bol prein\u0161talovan\u00fd opera\u010dn\u00fd syst\u00e9m alebo dokonca bol vymenen\u00fd pevn\u00fd disk, za 15 dol\u00e1rov ro\u010dne. K\u00fapil som si notebook na eBay, ktor\u00fd bol touto vecou uzamknut\u00fd. V \u010dl\u00e1nku popisujem svoju sk\u00fasenos\u0165, ako som sa s \u0148ou vyrovn\u00e1val a sna\u017eil sa to ist\u00e9 urobi\u0165 na z\u00e1klade Intel AMT, ale zadarmo. iba<\/a><\/noindex>Dohodnime sa hne\u010f: neprenik\u00e1m do otvoren\u00fdch dver\u00ed a nep\u00ed\u0161em predn\u00e1\u0161ku o t\u00fdchto vzdialen\u00fdch veciach, ale rozpr\u00e1vam mal\u00fd pr\u00edbeh a o tom, ako r\u00fdchlo spusti\u0165 vzdialen\u00fd pr\u00edstup k svojmu zariadeniu v akejko\u013evek situ\u00e1cii (ak je pripojen\u00e9 k sieti cez RJ-45) alebo, ak je pripojen\u00e9 cez Wi-Fi, tak len v OS Windows. Taktie\u017e je mo\u017en\u00e9 zada\u0165 SSID, meno a heslo konkr\u00e9tneho bodu priamo v Intel AMT a t\u00fdm z\u00edska\u0165 pr\u00edstup cez Wi-Fi bez na\u010d\u00edtania syst\u00e9mu. A ak nain\u0161talujete ovl\u00e1da\u010de pre Intel ME na GNU\/Linux, malo by to fungova\u0165 aj tam. V\u00fdsledkom je, \u017ee nebude mo\u017en\u00e9 vzdialene zablokova\u0165 notebook a zobrazi\u0165 spr\u00e1vu o mo\u017enosti (nemohol som zisti\u0165, \u010di je to v\u00f4bec mo\u017en\u00e9 s vyu\u017eit\u00edm tejto technol\u00f3gie), ale pr\u00edstup k vzdialenej pracovnej ploche a Secure Erase bude k dispoz\u00edcii, a to je hlavn\u00e9.
\n<\/a><\/noindex>
\nTaxik\u00e1r odi\u0161iel s moj\u00edm notebookom a rozhodol som sa k\u00fapi\u0165 nov\u00fd na eBay. \u010co sa mohlo pokazi\u0165?<\/p>\n

Z kupuj\u00faceho na zlodeja \u2014 za jedno spustenie<\/p>\n

Ke\u010f som pri\u0161iel domov s notebookom z po\u0161ty, za\u010dal som dokon\u010dova\u0165 predin\u0161tal\u00e1ciu Windows 10 a dokonca som stihol nain\u0161talova\u0165 Firefox, ke\u010f zrazu:<\/h3>\n

\nV\u00fdborne som ch\u00e1pal, \u017ee nikto by nemodifikoval distrib\u00faciu Windows, a ak by aj, v\u0161etko by vyzeralo inak a blokovanie by sa ur\u010dite udialo r\u00fdchlej\u0161ie. A nakoniec, nemalo by zmysel nie\u010do blokova\u0165, preto\u017ee v\u0161etko by sa dalo opravi\u0165 prein\u0161talovan\u00edm. Dobre, re\u0161tartujeme.<\/p>\n

\"Ako
\n
\nRe\u0161tartovanie do BIOS-u, a u\u017e je v\u0161etko o nie\u010do jasnej\u0161ie:<\/p>\n

A nakoniec je to jasn\u00e9:<\/p>\n

\"Ako
\n
\nAko je mo\u017en\u00e9, \u017ee ma obmedzuje vlastn\u00fd notebook? \u010co je to Computrace?<\/p>\n

\"Ako
\n<\/p>\n

Presne povedan\u00e9, Computrace je s\u00fabor modulov vo va\u0161ej EFI BIOS, ktor\u00e9 po na\u010d\u00edtan\u00ed OS Windows vkladaj\u00fa do nej svoje tr\u00f3jske kone, ktor\u00e9 sa prip\u00e1jaj\u00fa na vzdialen\u00fd server Absolute Software a umo\u017e\u0148uj\u00fa, ak je potrebn\u00e9, zablokova\u0165 syst\u00e9m cez internet. Viac podrobnost\u00ed n\u00e1jdete tu.<\/h3>\n

\nPr\u00edsne vzat\u00e9, Computrace je s\u00fabor modulov vo va\u0161ej EFI BIOS, ktor\u00e9, po na\u010d\u00edtan\u00ed OS Windows, vklad\u00e1 do nej svoje tr\u00f3jske kone, ktor\u00e9 komunikuj\u00fa s vzdialen\u00fdm serverom Absolute Software a umo\u017e\u0148uj\u00fa, ak je to potrebn\u00e9, zablokova\u0165 syst\u00e9m cez internet. Viac podrobnost\u00ed si m\u00f4\u017eete pre\u010d\u00edta\u0165 tu tu<\/a><\/noindex>. S opera\u010dn\u00fdmi syst\u00e9mami, ktor\u00e9 nie s\u00fa Windows, Computrace nefunguje. Navy\u0161e, ak pripoj\u00edme m\u00e9dium s Windows, \u0161ifrovan\u00e9 BitLocker alebo ak\u00fdmko\u013evek in\u00fdm softv\u00e9rom, Computrace op\u00e4\u0165 nebude fungova\u0165 \u2014 moduly jednoducho nebud\u00fa m\u00f4c\u0165 skontrolova\u0165 na\u0161e s\u00fabory v syst\u00e9me.<\/p>\n

Na prv\u00fd poh\u013ead sa tieto technol\u00f3gie m\u00f4\u017eu javi\u0165 ako vesm\u00edrne, ale to je len do chv\u00edle, k\u00fdm nezist\u00edme, \u017ee v\u0161etko to be\u017e\u00ed na native UEFI s pou\u017eit\u00edm nieko\u013ek\u00fdch pochybn\u00fdch modulov. <\/p>\n

Zd\u00e1 sa, \u017ee t\u00e1to vec je mocn\u00e1 a studen\u00e1, k\u00fdm sa nepok\u00fasime napr\u00edklad spusti\u0165 GNU\/Linux:<\/p>\n

\"Ako
\nNa tomto notebooku je pr\u00e1ve teraz aktivovan\u00e1 blok\u00e1cia v Computrace.<\/i><\/p>\n

Ako sa hovor\u00ed,<\/p>\n

\"Ako
\n<\/p>\n

\u010co robi\u0165?<\/h3>\n

\nExistuj\u00fa \u0161tyri o\u010dividn\u00e9 vektory pre vyrie\u0161enie vzniknutej probl\u00e9mu:<\/p>\n

    \n
  1. Nap\u00edsa\u0165 predajcovi na eBay<\/li>\n
  2. Nap\u00edsa\u0165 do Absolute software, tvorcovi a vlastn\u00edkovi Computrace<\/li>\n
  3. Urobi\u0165 dump z \u010dipu BIOS, posla\u0165 ho pochybn\u00fdm typom, aby n\u00e1m poslali dump s patchom, ktor\u00fd deakt\u00edvuje v\u0161etky z\u00e1mky a men\u00ed ID zariadenia<\/li>\n
  4. Zavola\u0165 do Lazard<\/li>\n<\/ol>\n

    \nRozoberieme ich po porad\u00ed:<\/p>\n

      \n
    1. My, ako v\u0161etci rozumn\u00ed \u013eudia, najprv p\u00ed\u0161eme predajcovi, ktor\u00fd n\u00e1m predal tak\u00fdto tovar a diskutujeme o probl\u00e9me s t\u00fdm, kto je za to zodpovedn\u00fd v prvom rade.\n

      Hotovo:<\/p>\n

      \"Ako<\/li>\n

    2. Pod\u013ea rady objavenej v hlbin\u00e1ch internetu,
      \n

      Mus\u00edte kontaktova\u0165 Absolute software. Bud\u00fa chcie\u0165 s\u00e9riov\u00e9 \u010d\u00edslo stroja a s\u00e9riov\u00e9 \u010d\u00edslo z\u00e1kladnej dosky. Taktie\u017e budete potrebova\u0165 poskytn\u00fa\u0165 \u201edoklad o k\u00fape\u201c, ako je pr\u00edjmov\u00fd doklad. Kontakuj\u00fa vlastn\u00edka, ktor\u00e9ho maj\u00fa v s\u00faboroch a z\u00edskaj\u00fa povolenie na jeho odstr\u00e1nenie. Pokia\u013e to nie je ukradnut\u00e9, potom ho \u201eozna\u010dia na vymazanie\u201c. Potom, pri \u010fal\u0161om pripojen\u00ed na internet alebo pri otvorenom internetovom spojen\u00ed, nastane z\u00e1zrak a bude to pre\u010d. Posielajte veci, ktor\u00e9 som spomenul, na TechSupport@absolute.com.<\/p><\/blockquote>\n

      \nm\u00f4\u017eeme okam\u017eite nap\u00edsa\u0165 do Absolute a komunikova\u0165 s nimi priamo o odblokovan\u00ed. Nepon\u00e1h\u013eal som sa a rozhodol som sa prist\u00fapi\u0165 k tomuto rie\u0161eniu len na konci.<\/li>\n

    3. Brut\u00e1lne rie\u0161enie probl\u00e9mu u\u017e, na\u0161\u0165astie, bolo dostupn\u00e9. T\u00edto chlapci<\/a><\/noindex> a mnoh\u00ed \u010fal\u0161\u00ed odborn\u00edci na po\u010d\u00edta\u010dov\u00fa podporu na tom istom eBay a dokonca aj odborn\u00edci z Facebooku n\u00e1m s\u013eubuj\u00fa, \u017ee odblokuj\u00fa n\u00e1\u0161 BIOS, ak im po\u0161leme dump a po\u010dk\u00e1me p\u00e1r min\u00fat.\n

      Proces odblokovania sa popisuje takto:<\/p>\n

      Rie\u0161enie odblokovania je kone\u010dne dostupn\u00e9 a vy\u017eaduje SPEG program\u00e1tor na prep\u00edsanie BIOS.<\/p>\n

      Proces je:<\/p>\n

        \n
      1. \u010c\u00edtanie BIOS-u a vytvorenie platn\u00e9ho dumpu. V Thinkpade je BIOS spojen\u00fd s intern\u00fdm TPM \u010dipom a obsahuje jeho jedine\u010dn\u00fd podpis, tak\u017ee je d\u00f4le\u017eit\u00e9, aby p\u00f4vodn\u00fd BIOS bol spr\u00e1vne pre\u010d\u00edtan\u00fd pre \u00faspech celej oper\u00e1cie a na obnovenie BIOS nesk\u00f4r.<\/li>\n
      2. Patchovanie bin\u00e1rnych s\u00faborov BIOS a injekcia mal\u00e9ho UEFI programu allservice.ro. Tento program pre\u010d\u00edta bezpe\u010dn\u00fa eeprom, resetuje certifik\u00e1t a heslo TPM, nap\u00ed\u0161e bezpe\u010dn\u00fa eeprom a rekon\u0161truuje v\u0161etky \u00fadaje.<\/li>\n
      3. Nap\u00ed\u0161te opraven\u00fd BIOS dump (toto bude fungova\u0165 len v tej TP, mimochodom), zapnite notebook a vygenerujte Hardware ID. Po\u0161leme v\u00e1m jedine\u010dn\u00fd k\u013e\u00fa\u010d, ktor\u00fd aktivuje Allservice BIOS, zatia\u013e \u010do sa BIOS na\u010d\u00edtava, vykon\u00e1 routine pre odomknutie a odomkne SVP a TPM.<\/li>\n
      4. Nakoniec nap\u00ed\u0161te p\u00f4vodn\u00fd BIOS dump sp\u00e4\u0165 pre norm\u00e1lne fungovanie a u\u017e\u00edvajte si notebook.<\/li>\n<\/ol>\n

        \n M\u00f4\u017eeme tie\u017e zak\u00e1za\u0165 Computrace alebo zmeni\u0165 SN\/UUID a resetova\u0165 chybu RFID checksum pomocou n\u00e1\u0161ho programu UEFI rovnak\u00fdm sp\u00f4sobom, ak je to potrebn\u00e9.<\/p>\n

        Cena slu\u017eby na odomknutie je za stroj (ako to rob\u00edme pre Macbook\/iMac, HP, Acer at\u010f.) Pre cenu a dostupnos\u0165 slu\u017eby si pros\u00edm pre\u010d\u00edtajte nasleduj\u00faci pr\u00edspevok ni\u017e\u0161ie. M\u00f4\u017eete kontaktova\u0165 support@allservice.ro s akouko\u013evek ot\u00e1zkou.\n<\/p><\/blockquote>\n

        \n Vyzer\u00e1 to legit\u00edmne! No, to je tie\u017e, ako ch\u00e1pete, mo\u017enos\u0165 pre ve\u013emi z\u00fafal\u00fa situ\u00e1ciu, navy\u0161e v\u0161etka z\u00e1bava stoj\u00ed $80. Nech\u00e1vame to na nesk\u00f4r.<\/li>\n

      5. Ak mi Lazard v\u0161etko pokazil a \u017eiadaj\u00fa, aby ste sa ozvali, netreba odmieta\u0165! V\u0161etko je na ceste.<\/li>\n<\/ol>\n

        <\/p>\n

        Zavolajme do Lazard aka \"ved\u00faca svetov\u00e1 poradensk\u00e1 a spr\u00e1vcovsk\u00e1 spolo\u010dnos\u0165, ktor\u00e1 rad\u00ed v oblasti f\u00fazi\u00ed, akviz\u00edci\u00ed, re\u0161trukturaliz\u00e1ci\u00ed, kapit\u00e1lovej \u0161trukt\u00fary a strat\u00e9gie\"<\/h3>\n

        \nk\u00fdm predajca z eBay odpoved\u00e1, p\u00e1r dol\u00e1rov posielam na zadarma a te\u0161\u00edm sa na rozhovor s, pravdepodobne, najnecitlivej\u0161\u00edm partnerom na plan\u00e9te \u2014 podporou obrovskej finan\u010dnej korpor\u00e1cie z New Yorku. Diev\u010da r\u00fdchlo zdvihne telef\u00f3n, vypo\u010duje si moje skromn\u00e9 vysvetlenie, ako som k\u00fapil tento notebook, zaznamen\u00e1 jeho s\u00e9riov\u00e9 \u010d\u00edslo a pris\u013e\u00fabi, \u017ee to odovzd\u00e1 adminom, ktor\u00ed mi zavolaj\u00fa. Tento proces presne zopakujem dvakr\u00e1t s rozdielom v jeden de\u0148. Na tret\u00edkr\u00e1t som sa \u0161peci\u00e1lne do\u010dkal ve\u010dera, k\u00fdm v New Yorku bude 10 r\u00e1no a zavolal, r\u00fdchlo pre\u010d\u00edtal moju u\u017e obvykl\u00fa re\u010d o k\u00fape. O dve hodiny mi znovu zavolala to ist\u00e9 diev\u010da a za\u010dala diktova\u0165 in\u0161trukcie:
        \n \u2014 Stla\u010dte escape.
        \nStla\u010d\u00edm, ale ni\u010d sa nedeje.
        \n \u2014 Nie\u010do nefunguje, ni\u010d sa nemen\u00ed.
        \n \u2014 Stl\u00e1\u010dajte.
        \n \u2014 Stl\u00e1\u010dam.
        \n \u2014 Teraz zadajte: 72406917
        \nZad\u00e1m. Ni\u010d sa nedeje.
        \n \u2014 Viete, ob\u00e1vam sa, \u017ee to nem\u00f4\u017eem... Po\u010dkajte...
        \nNotebook sa n\u00e1hle re\u0161tartuje, syst\u00e9m sa na\u010d\u00edtava, otravn\u00fd biely obrazovka niekam zmizla. Pre istotu vst\u00fapim do BIOSu, Computrace nie je akt\u00edvny. Zd\u00e1 sa, \u017ee je to v\u0161etko. \u010eakujem za podporu, p\u00ed\u0161em predajcovi, \u017ee som si v\u0161etky probl\u00e9my vyrie\u0161il s\u00e1m a uvo\u013e\u0148ujem sa.<\/p>\n

        OpenMakeshift Computrace Intel AMT based<\/h3>\n

        \nTo, \u010do sa stalo, ma zasko\u010dilo, ale my\u0161lienka sa mi zap\u00e1\u010dila. Moja phantomov\u00e1 boles\u0165 z bezn\u00e1dejne straten\u00e9ho ma h\u013eadala nejak\u00fd sp\u00f4sob, ako chr\u00e1ni\u0165 svoj nov\u00fd laptop, ako by mi to vr\u00e1tilo ten star\u00fd. Ak niekto pou\u017e\u00edva Computrace, tak ho m\u00f4\u017eem pou\u017ei\u0165 aj ja, v\u0161ak? Ve\u010f tu bol Intel Anti-Theft, pod\u013ea popisu \u2014 skvel\u00e1 technol\u00f3gia, ktor\u00e1 fungovala tak, ako mala, ale zabila ju inertnos\u0165 trhu. No predsa by mala existova\u0165 alternat\u00edva. Uk\u00e1zalo sa, \u017ee t\u00e1to alternat\u00edva za\u010d\u00ednala tam, kde aj kon\u010dila \u2014 na tejto \u00farovni sa usadila len Absolute Software.<\/p>\n

        Na za\u010diatok si pripome\u0148me, \u010do je to Intel AMT: ide o s\u00fabor kni\u017en\u00edc, ktor\u00fd je s\u00fa\u010das\u0165ou Intel ME, zabudovan\u00fd v EFI BIOS, aby administr\u00e1tor v nejakej kancel\u00e1rii mohol bez toho, aby vstal zo stoli\u010dky, manipulova\u0165 s po\u010d\u00edta\u010dmi v sieti, aj ke\u010f sa nena\u010d\u00edtavaj\u00fa, pripojil vzdialene ISO obrazy, spravoval cez vzdialen\u00fa plochu at\u010f.<\/p>\n

        V\u0161etko toto be\u017e\u00ed na Minix a zhruba na takejto \u00farovni:<\/p>\n

        Invisible Things Lab navrhla naz\u00fdva\u0165 funk\u010dnos\u0165 technol\u00f3gie Intel vPro \/ Intel AMT ochrann\u00fdm kr\u00fa\u017ekom -3. V r\u00e1mci tejto technol\u00f3gie \u010dipsety, ktor\u00e9 podporuj\u00fa technol\u00f3giu vPro, obsahuj\u00fa nez\u00e1visl\u00fd mikroprocesor (architekt\u00fara ARC4), maj\u00fa samostatn\u00e9 rozhranie k sie\u0165ovej karte, v\u00fdlu\u010dn\u00fd pr\u00edstup k vyhraden\u00e9mu \u00faseku RAM (16 MB), DMA pr\u00edstup k hlavnej RAM. Programy na \u0148om sa vykon\u00e1vaj\u00fa nez\u00e1visle od centr\u00e1lnych procesorov, firmware sa uchov\u00e1va spolu s k\u00f3dmi BIOS alebo na podobnej SPI flash pam\u00e4ti (k\u00f3d m\u00e1 kryptografick\u00fd podpis). S\u00fa\u010das\u0165ou firmv\u00e9ru je zabudovan\u00fd webov\u00fd server. Predvolene je AMT vypnut\u00e9, ale \u010das\u0165 k\u00f3du st\u00e1le funguje v tomto re\u017eime, aj ke\u010f je AMT vypnut\u00e9. K\u00f3d kr\u00fa\u017eku -3 je akt\u00edvny aj v re\u017eime S3 Sleep.<\/p><\/blockquote>\n

        Znie to l\u00e1kavo, ve\u010f sa zd\u00e1, \u017ee ak dok\u00e1\u017eeme nastavi\u0165 sp\u00e4tn\u00e9 pripojenie k nejakej administrat\u00edvnej panele prostredn\u00edctvom Intel AMT, z\u00edskame pr\u00edstup, ktor\u00fd nie je hor\u0161\u00ed ako u Computrace (v skuto\u010dnosti nie).<\/p>\n

        Aktivujeme Intel AMT na na\u0161om zariaden\u00ed.<\/h3>\n

        \nNajprv, niektor\u00fdm z v\u00e1s sa ur\u010dite chce s t\u00fdmto AMT obozn\u00e1mi\u0165 osobne, a tu sa za\u010d\u00ednaj\u00fa odli\u0161nosti. Po prv\u00e9, potrebujete procesor s jeho podporou. S t\u00fdm, na\u0161\u0165astie, nie s\u00fa probl\u00e9my (ak nem\u00e1te AMD), preto\u017ee vPro je pridan\u00fd takmer do v\u0161etk\u00fdch procesorov Intel i5, i7 a i9 (m\u00f4\u017eete si to skontrolova\u0165. tu<\/a><\/noindex>) od roku 2006, ale norm\u00e1lny VNC bol zaveden\u00fd a\u017e od roku 2010. Po druh\u00e9: ak m\u00e1te desktop, potrebujete z\u00e1kladn\u00fa dosku, ktor\u00e1 podporuje t\u00fato funkciu, konkr\u00e9tne s \u010dipsetom Q. V notebookoch sta\u010d\u00ed pozna\u0165 len model procesora. Ak ste zistili, \u017ee podporujete Intel AMT, je to dobr\u00e9 znamenie a m\u00f4\u017eete aplikova\u0165 nastavenia poskytnut\u00e9 tu. Ak nie, mali ste bu\u010f smolu \/ zvolili ste \u00famyselne procesor alebo \u010dipset bez podpory tejto technol\u00f3gie, alebo ste \u00faspe\u0161ne u\u0161etrili v\u00fdberom AMD, \u010do je tie\u017e d\u00f4vod na rados\u0165. <\/p>\n

        Pod\u013ea dokumentov<\/p>\n

        V nesecure re\u017eime zariadenia Intel AMT po\u010d\u00favaj\u00fa na porte 16992.
        \n V re\u017eime TLS zariadenia Intel AMT po\u010d\u00favaj\u00fa na porte 16993.<\/p><\/blockquote>\n

        \nIntel AMT prij\u00edma pripojenia na portoch 16992 a 16993. Tam sa vyberieme. <\/p>\n

        Je potrebn\u00e9 skontrolova\u0165, \u010di je Intel AMT zapnut\u00e9 v BIOS-e:<\/p>\n

        \"Ako
        \n
        \n\u010ealej sa mus\u00edme re\u0161tartova\u0165 a po\u010das zav\u00e1dzania stla\u010di\u0165 Ctrl + P<\/p>\n

        \"Ako
        \n
        \n\u0160tandardn\u00e9 heslo, ako zvy\u010dajne, admin<\/i>.<\/p>\n

        Ihne\u010f men\u00edme heslo v Intel ME General Settings. Potom v Intel AMT Configuration zapneme Activate Network Access. Hotovo. Teraz ste ofici\u00e1lne prekonali zabezpe\u010denie. Na\u010d\u00edtame syst\u00e9m. <\/p>\n

        Teraz d\u00f4le\u017eit\u00fd nuans: logicky m\u00f4\u017eeme z\u00edska\u0165 pr\u00edstup k Intel AMT z localhost aj vzdialene, ale nie. Intel hovor\u00ed, \u017ee miestne pripojenie a zmena nastaven\u00ed je mo\u017en\u00e9 pomocou Intel AMT Configuration Utility<\/a><\/noindex>, ale t\u00e1 sa mi vzpierala pripoji\u0165, tak\u017ee mi pripojenie fungovalo len vzdialene. <\/p>\n

        Zoberieme nejak\u00e9 zariadenie a pripoj\u00edme sa cez yourIP<\/a><\/noindex>:16992<\/p>\n

        Vyzer\u00e1 to takto:<\/p>\n

        \"Ako
        \n
        \n\"Ako
        \n
        \nVitajte v \u0161tandardnom rozhran\u00ed Intel AMT! Pre\u010do \"\u0161tandardn\u00e9\"? Preto\u017ee je obmedzen\u00e9 a na na\u0161e \u00fa\u010dely \u00faplne zbyto\u010dn\u00e9, a budeme pou\u017e\u00edva\u0165 nie\u010do v\u00e1\u017enej\u0161ie.<\/p>\n

        Zozn\u00e1menie sa s MeshCommander<\/h3>\n

        \nAko zvy\u010dajne \u2014 ve\u013ek\u00e9 firmy nie\u010do robia, a koncov\u00ed pou\u017e\u00edvatelia to prisp\u00f4sobuj\u00fa pre seba. Tak sa to stalo aj tu. <\/p>\n

        \"Ako
        \n
        \nTento skromn\u00fd (nie preh\u00e1\u0148am: jeho meno na jeho str\u00e1nke ch\u00fdba, musel som vyh\u013eada\u0165) mu\u017e menom Ylian Saint-Hilaire vyvinul skvel\u00e9 n\u00e1stroje na pr\u00e1cu s Intel AMT.<\/p>\n

        Ihne\u010f chcem upriami\u0165 pozornos\u0165 na jeho YouTube kan\u00e1l<\/a><\/noindex>, vo svojich vide\u00e1ch jednoducho a jasne ukazuje v re\u00e1lnom \u010dase, ako vykon\u00e1va\u0165 r\u00f4zne \u00falohy s\u00favisiace s Intel AMT a jeho softv\u00e9rom.<\/p>\n

        Za\u010dneme s MeshCommander<\/a><\/noindex>. Stiahneme, nain\u0161talujeme a pok\u00fasime sa pripoji\u0165 k na\u0161ej ma\u0161ine:<\/p>\n

        \"Ako
        \n
        \nProces nie je okam\u017eit\u00fd, ale nakoniec dostaneme tak\u00fato obrazovku:<\/p>\n

        \"Ako
        \nNie \u017ee by som bol paranoidn\u00fd, ale sensitive data zamie\u0148am, prep\u00e1\u010dte mi toto koketovanie.<\/i><\/p>\n

        Rozdiel, ako sa hovor\u00ed, je zjavn\u00fd. Neviem, pre\u010do v ovl\u00e1dacom paneli Intel nie je tak\u00fd s\u00fabor funkci\u00ed, ale fakt je fakt: Ylian Saint-Hilaire si u\u017e\u00edva \u017eivot znate\u013ene viac. Navy\u0161e, m\u00f4\u017eete nain\u0161talova\u0165 jeho webov\u00e9 rozhranie priamo do firmv\u00e9ru, ktor\u00e9 v\u00e1m umo\u017en\u00ed vyu\u017e\u00edva\u0165 v\u0161etky funkcie bez n\u00e1stroja.<\/p>\n

        Rob\u00ed sa to takto:<\/p>\n

        \"Ako
        \n
        \nMus\u00edm poznamena\u0165, \u017ee t\u00fato funk\u010dnos\u0165 (Custom web interface) som nepou\u017e\u00edval a nem\u00f4\u017eem poveda\u0165 ni\u010d o jej efekt\u00edvnosti a funk\u010dnosti, preto\u017ee pre moje potreby nie je potrebn\u00e1.<\/p>\n

        M\u00f4\u017eete si pohra\u0165 s funkciami, \u0165a\u017eko by ste to mohli pokazi\u0165, preto\u017ee po\u010diato\u010dn\u00fdm a kone\u010dn\u00fdm v\u00fdchodiskov\u00fdm bodom cel\u00e9ho tohto festivalu je BIOS, v ktorom m\u00f4\u017eete v\u0161etko vr\u00e1ti\u0165, ak budete chcie\u0165 vypn\u00fa\u0165 Intel AMT.<\/p>\n

        Rozbiehame MeshCentral a implementujeme BackConnect.<\/h3>\n

        \nA tu to u\u017e za\u010d\u00edna by\u0165 \u00fapln\u00e1 bomba. Ujo nielen\u017ee vytvoril klienta, ale aj cel\u00fa admin panel k n\u00e1\u0161mu tr\u00f3jansk\u00e9mu koni! A nielen to, ale aj spustil ju pre v\u0161etk\u00fdch na svojom serveri.<\/a><\/noindex>.<\/p>\n

        Za\u010dnite in\u0161tal\u00e1ciou vlastn\u00e9ho servera MeshCentral, alebo ak nie ste obozn\u00e1men\u00ed s MeshCentral, m\u00f4\u017eete riskova\u0165 a vysk\u00fa\u0161a\u0165 verejn\u00fd server na MeshCentral.com. <\/p><\/blockquote>\n

        \nTo pozit\u00edvne hovor\u00ed o spo\u013eahlivosti jeho k\u00f3du, preto\u017ee sa mi nepodarilo n\u00e1js\u0165 \u017eiadne spr\u00e1vy o hackoch a \u00fanikoch po\u010das prev\u00e1dzky slu\u017eby.<\/p>\n

        Osobne pou\u017e\u00edvam MeshCentral na svojom serveri, preto\u017ee neopodstatnene pova\u017eujem, \u017ee je to bezpe\u010dnej\u0161ie, ale v tom nie je ni\u010d okrem zhonu a tr\u00e1penia du\u0161e. Ak to chcete aj vy, tu<\/a><\/noindex> s\u00fa tam dokumenty, a tu<\/a><\/noindex> kontajner s MeshCentral. V dokumentoch sa p\u00ed\u0161e, ako to v\u0161etko prepoji\u0165 s NGINX, tak\u017ee implement\u00e1cia sa \u013eahko integruje do va\u0161ich dom\u00e1cich serverov.<\/p>\n

        Zaregistrujeme sa na meshcentral.com<\/a><\/noindex>, prihl\u00e1sime sa a vytvor\u00edme Device Group, vyberieme mo\u017enos\u0165 \u201eno agent\u201c:<\/p>\n

        \"Ako
        \n
        \nPre\u010do \u201eno agent\u201c? Preto\u017ee pre\u010do by mal in\u0161talova\u0165 nie\u010do navy\u0161e, nejasn\u00e9, ako to funguje a ak\u00e9 to bude ma\u0165 spr\u00e1vanie.<\/p>\n

        Klikneme na \u201eAdd CIRA\u201c:<\/p>\n

        \"Ako
        \n
        \nStiahneme cira_setup_test.mescript a pou\u017eijeme ho v na\u0161om MeshCommander takto:<\/p>\n

        \"Ako
        \n
        \nVoil\u00e0! O chv\u00ed\u013eu sa n\u00e1\u0161 stroj pripoj\u00ed k MeshCentral a m\u00f4\u017eeme s n\u00edm nie\u010do urobi\u0165.<\/p>\n

        Po prv\u00e9: mali by ste vedie\u0165, \u017ee n\u00e1\u0161 softv\u00e9r sa s\u00e1m neprepoj\u00ed na vzdialen\u00fd server. Je to sp\u00f4soben\u00e9 t\u00fdm, \u017ee Intel AMT m\u00e1 dve mo\u017enosti pripojenia - cez vzdialen\u00fd server a priamo lok\u00e1lne. Tieto mo\u017enosti nefunguj\u00fa s\u00fa\u010dasne. N\u00e1\u0161 skript u\u017e nastavil syst\u00e9m na vzdialen\u00fa pr\u00e1cu, ale mo\u017eno sa budete musie\u0165 pripoji\u0165 lok\u00e1lne. Aby ste sa mohli pripoji\u0165 lok\u00e1lne, mus\u00edte sem<\/p>\n

        \"Ako
        \n
        \nnap\u00edsa\u0165 riadok, ktor\u00fd predstavuje va\u0161u lok\u00e1lnu dom\u00e9nu (vezmite na vedomie, \u017ee n\u00e1\u0161 skript tam U\u017d vlo\u017eil nejak\u00fd n\u00e1hodn\u00fd riadok, aby vzdialen\u00e9 pripojenie fungovalo) alebo \u00faplne vymaza\u0165 v\u0161etky riadky (ale potom nebude mo\u017en\u00e9 vzdialen\u00e9 pripojenie). Napr\u00edklad, v OpenWrt je moja lok\u00e1lna dom\u00e9na lan:<\/p>\n

        \"Ako
        \n
        \nTak\u017ee, ak tam nap\u00ed\u0161eme lan a ak je n\u00e1\u0161 po\u010d\u00edta\u010d pripojen\u00fd k sieti s touto lok\u00e1lnou dom\u00e9nou, vzdialen\u00e9 pripojenie nebude dostupn\u00e9 a lok\u00e1lne porty 16992 a 16993 sa otvoria a bud\u00fa prij\u00edma\u0165 pripojenia. Skr\u00e1tka, ak tam je nie\u010do nezmyseln\u00e9, \u010do nem\u00e1 s\u00favislos\u0165 s va\u0161ou lok\u00e1lnou dom\u00e9nou, softv\u00e9r sa pripoj\u00ed, ak nie, budete sa musie\u0165 pripoji\u0165 k nemu sami cez k\u00e1bel, a to je v\u0161etko.<\/p>\n

        Po druh\u00e9:<\/p>\n

        \"Ako
        \n
        \nV\u0161etko je pripraven\u00e9!<\/p>\n

        Sp\u00fdtate sa - a kde je tu AntiTheft? Ako som u\u017e povedal na za\u010diatku - Intel AMT nie je pr\u00edli\u0161 prisp\u00f4soben\u00fd na boj s zlodejmi. Spravova\u0165 kancel\u00e1rsku sie\u0165 - to pros\u00edm, ale bojova\u0165 proti neleg\u00e1lnemu obohateniu cez internet - to nie je ve\u013emi efekt\u00edvne. Pozrime sa na n\u00e1stroje, ktor\u00e9 by n\u00e1m teoreticky mohli pom\u00f4c\u0165 v boji za s\u00fakromn\u00e9 vlastn\u00edctvo: <\/p>\n

          \n
        1. Samotn\u00e9 pripojenie k po\u010d\u00edta\u010du, ak je pripojen\u00fd cez k\u00e1bel, alebo ak je na \u0148om nain\u0161talovan\u00fd Windows, tak aj cez WiFi. \u00c1no, je to detinsk\u00e9, ale be\u017en\u00fd \u010dlovek u\u017e m\u00e1 probl\u00e9m pou\u017e\u00edva\u0165 tak\u00fdto notebook, aj ke\u010f niekto len n\u00e1hle prevezme kontrolu. A pritom, hoci som sa nepodarilo porozumie\u0165 skriptom, ur\u010dite existuje mo\u017enos\u0165 graficky odstr\u00e1ni\u0165 nejak\u00fa funk\u010dnos\u0165 pre blokovanie\/vykazovanie upozornen\u00ed.<\/li>\n
        2. Remote Secure Erase with Intel Active Management Technology\n

          \"Ako
          \n
          \nS pomocou tejto mo\u017enosti m\u00f4\u017eete zmaza\u0165 v\u0161etky inform\u00e1cie z po\u010d\u00edta\u010da za sekundy. Nie je potvrden\u00e9, \u010di to funguje na SSD in\u00fdch v\u00fdrobcov ako Intel. Tu           tu<\/a><\/noindex> si m\u00f4\u017eete pre\u010d\u00edta\u0165 viac o tejto funkcii. M\u00f4\u017eete si pozrie\u0165, ako to funguje. tu<\/a><\/noindex>Kvalita je hrozn\u00e1, no m\u00e1 len 10 megabajtov a podstata je jasn\u00e1.<\/li>\n<\/ol>\n

          \nProbl\u00e9m odlo\u017een\u00e9ho vykon\u00e1vania zost\u00e1va nevyrie\u0161en\u00fd, in\u00fdmi slovami: je potrebn\u00e9 sledova\u0165, kedy sa stroj pripoj\u00ed na sie\u0165, aby sa k nemu pripojil. Predpoklad\u00e1m, \u017ee aj na to existuje nejak\u00e9 rie\u0161enie.<\/p>\n

          V ide\u00e1lnom pr\u00edpade by sa mal blokova\u0165 notebook a zobrazi\u0165 nejak\u00fd n\u00e1pis, ale v na\u0161om pr\u00edpade m\u00e1me len neodvr\u00e1tite\u013en\u00fd pr\u00edstup a ako \u010falej postupova\u0165 \u2014 to je ot\u00e1zka fant\u00e1zie. <\/p>\n

          Mo\u017eno by sa v\u00e1m podarilo nejak\u00fdm sp\u00f4sobom zablokova\u0165 stroj alebo aspo\u0148 zobrazi\u0165 spr\u00e1vu, nap\u00ed\u0161te, ak to viete. \u010eakujem!<\/p>\n

          Nezabudnite nastavi\u0165 heslo na BIOS.<\/p>\n

          \u010eakujem pou\u017e\u00edvate\u013eovi berez<\/a><\/noindex> za korekt\u00faru!<\/i>
          \n
          Zdroj:           habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

          TL;DR Absolute Computrace \u2014 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043c\u0430\u0448\u0438\u043d\u0443(\u0438 \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e), \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u043d\u0430 \u043d\u0435\u0439 \u043f\u0435\u0440\u0435\u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438\u043b\u0438 \u0434\u0430\u0436\u0435 \u0437\u0430\u043c\u0435\u043d\u0438\u043b\u0438 \u0436\u0435\u0441\u0442\u043a\u0438\u0439 \u0434\u0438\u0441\u043a, \u0437\u0430 $15 \u0432 \u0433\u043e\u0434. \u042f \u043a\u0443\u043f\u0438\u043b \u043d\u043e\u0443\u0442\u0431\u0443\u043a \u043d\u0430 eBay, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u044b\u043b \u0437\u0430\u043b\u043e\u0447\u0435\u043d \u044d\u0442\u043e\u0439 \u0448\u0442\u0443\u043a\u043e\u0439. \u0412 \u0441\u0442\u0430\u0442\u044c\u0435 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043c\u043e\u0439 \u043e\u043f\u044b\u0442, \u043a\u0430\u043a \u044f \u0441 \u043d\u0435\u0439 \u0431\u043e\u0440\u043e\u043b\u0441\u044f \u0438 \u043f\u044b\u0442\u0430\u043b\u0441\u044f \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0442\u043e \u0436\u0435 \u0441\u0430\u043c\u043e\u0435 \u043d\u0430 \u0431\u0430\u0437\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-54851","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ako som k\u00fapil zablokovan\u00fd notebook na eBay a pok\u00fasil sa vytvori\u0165 svoj AntiTheft na b\u00e1ze IntelAMT | ProHoster","description":".","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/kak-ya-kupil-zablokirovannyj-noutbuk-na-ebay-i-poproboval-sdelat-svoj-antitheft-na-baze-intelamt","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u044f \u043a\u0443\u043f\u0438\u043b \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u043e\u0443\u0442\u0431\u0443\u043a \u043d\u0430 eBay \u0438 \u043f\u043e\u043f\u0440\u043e\u0431\u043e\u0432\u0430\u043b \u0441\u0434\u0435\u043b\u0430\u0442\u044c \u0441\u0432\u043e\u0439 AntiTheft \u043d\u0430 \u0431\u0430\u0437\u0435 IntelAMT | ProHoster","og:description":".","og:url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/kak-ya-kupil-zablokirovannyj-noutbuk-na-ebay-i-poproboval-sdelat-svoj-antitheft-na-baze-intelamt","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-04T21:00:00+00:00","article:modified_time":"2020-02-18T11:02:54+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"54851","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 12:57:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:56:25","updated":"2026-01-24 12:57:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/54851","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=54851"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/54851\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=54851"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=54851"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=54851"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}