Matengero andakaita laptop yakakiiwa paBay uye ndikaedza kugadzira yangu AntiTheft yakavakirwa paIntelAMT

TL; DR

Absolute Computrace tekinoroji inobvumidza iwe kukiya mota yako (uye kwete chete), kunyange kana sisitimu yekushandisa yakadzoserwa pairi kana kunyange hard drive yakatsiviwa, yemadhora gumi nemashanu pagore. Ndakatenga laptop pa eBay yanga yakavharwa nechinhu ichi. Chinyorwa chinotsanangura chiitiko changu, kuti ndakanetsekana sei nacho uye ndikaedza kuita zvakafanana paIntel AMT, asi mahara.

Ngatibvumiranei nekukasika: handisi kupaza magonhi akavhurika uye kwete kunyora hurukuro pazvinhu izvi zviri kure, asi ndichitaura zvishoma kumashure uye nzira yekukurumidza kuwana kure kure kumushini wako pamabvi ako mune chero mamiriro (kana yakabatana kune network kuburikidza neRJ-45) kana, kana yakabatana neWi-Fi, ipapo muOS Windows chete. Zvakare, zvinogoneka kunyoresa iyo SSID, kupinda uye password yeimwe nzvimbo muIntel AMT pachayo, uyezve kuwana kuburikidza neWi-Fi kunogona kuwanikwa pasina kubhowa muhurongwa. Uye zvakare, kana iwe ukaisa madhiraivha eIntel ME paGNU/Linux, saka zvese izvi zvinofanirwa kushanda pazviri futi. Nekuda kweizvozvo, hazvizogone kukiya kure kure kure uye kuratidza meseji (handina kukwanisa kuona kana izvi zvichigoneka uchishandisa tekinoroji iyi), asi kuchave nekuwana kune kure desktop uye Chengetedza Erase, uye izvi ndicho chinhu chikuru.

Mutyairi wetaxi akabva aenda nelaptop yangu ndikafunga kutenga imwe pa eBay. Chii chinogona kukanganisa?

Kubva kune mutengi kusvika kune mbavha - mune imwe yekutanga

Ndaunza kumba laptop kubva kuhofisi yepositi, ndakagadzirira kupedzisa kuisirwa kweWindows 10, uye mushure mezvo ndakatokwanisa kurodha Firefox, apo kamwe kamwe:

Ndakanyatsonzwisisa kuti hapana aizogadzirisa kugoverwa kweWindows, uye kana vakadaro, saka zvese zvaisazotaridzika zvakanyanya uye kazhinji kuvharika kwaizoitika nekukurumidza. Uye, pakupedzisira, hapazovi nechikonzero chekuvharira chero chinhu, sezvo zvese zvaizopora nekuimisazve. Zvakanaka, ngatitangezve.

Reboot muBIOS, uye zvino zvese zvinova zvishoma kujeka:

Uye pakupedzisira, zvakajeka zvachose:

Ko sei laptop yangu irikundinetsa? Chii chinonzi Computrace?

Kunyatsotaura, Computrace seti yemamodule muEFI BIOS yako iyo, mushure mekurodha OS Windows, isa maTrojans avo mairi, ichigogodza pane iri kure Absolute software server uye kubvumira, kana zvichidikanwa, kuvharira sisitimu paInternet. Unogona kuverenga zvakawanda pano pano. Computrace haishande nemasisitimu anoshanda kunze kweWindows. Uyezve, kana tikabatanidza dhiraivha neWindows yakavharidzirwa neBitLocker, kana chero imwe software, ipapo Computrace haizoshande zvakare - iwo ma module haakwanise kukanda mafaera avo musystem yedu.

Kubva kure, matekinoroji akadaro anogona kuratidzika senge cosmic, asi kutozosvikira taziva kuti zvese izvi zvinoitwa kune yemuno UEFI uchishandisa imwe nehafu dubious modules.

Zvinoita sekunge chinhu ichi chinotonhora uye chine simba rose kudzamara taedza, semuenzaniso, kutanga muGNU/Linux:

Laptop iyi ine Computrace locking inogoneswa izvozvi.

Sekutaura kunoita,

Chii chandinofanira kuita?

Kune mana mavheji akajeka ekugadzirisa dambudziko:

1. Nyora kune mutengesi pa eBay
2. Nyora kune Absolute software, mugadziri uye muridzi weComputrace
3. Gadzira duru kubva kuBIOS chip, itumire kumhando dzine mumvuri kuitira kuti vadzosere marara ane chigamba chinodzima makiyi ese nemamenu ID yemudziyo.
4. Fonera Lazard

Ngatizviparadze muhurongwa:

1. Isu, sevanhu vose vanonzwisisa, kutanga tanyorera kune mutengesi akatitengesera chigadzirwa chakadaro uye kurukura dambudziko neuyo anonyanya kuita basa racho.

   Yakagadzirwa:

   

2. Sekureva kwechipangamazano chakawanikwa pakadzika peInternet,
   

   Iwe unofanirwa kubata absolute software. Ivo vanozoda muchina serial nhamba uye mamaboard serial nhamba. Iwe zvakare uchafanirwa kupa "umbowo hwekutenga", serisiti. Vanozobata muridzi wavanazvo pafaira votora OK kuti aibvise. Kufunga kuti haina kubiwa, ivo vanobva "vachiisa mureza kuti udzime". Mushure meizvozvo, nguva inotevera paunobatana neinternet kana kuve neyakavhurika internet yekubatanidza, chishamiso chichaitika uye chinenge chaenda. Tumira zvinhu zvandataura nezvazvo [email inodzivirirwa].

   tinogona kunyora zvakananga kuna Absolute uye kutaurirana zvakananga navo nezve kuvhura. Ndakatora nguva yangu ndikafunga kutendeukira kune iyi mhinduro kusvika kumagumo.

3. Sezvineiwo, mhinduro ine utsinye yechinetso yakanga yatovapo. Ava vakomana uye dzimwe dzakawanda nyanzvi dzekutsigira komputa pane imwecheteyo eBay uye kunyangwe maIndia paFacebook anotivimbisa kuvhura BIOS yedu kana tikavatumira dope uye kumirira maminetsi mashoma.

   Kuvhura nzira inotsanangurwa sezvizvi:

   Kuvhura mhinduro inowanikwa uye inoda SPEG programmer kuti ikwanise kupenya BIOS.

   Maitiro acho ndeaya:

   1. Kuverenga iyo BIOS uye gadzira yekurasa yakakodzera. MuFinkpad, iyo BIOS yakaroora kune yemukati TPM chip uye ine yakasarudzika siginecha yayo, saka zvakakosha kuti iyo yekutanga BIOS ive yechokwadi kuverenga kuti ibudirire kwese kushanda uye kudzoreredza BIOS mushure.
   2. Kubata mabhinari eBIOS uye jekiseni yese dikiservice.ro UEFI chirongwa. Ichi chirongwa chinoverenga yakachengeteka eeprom, reset TPM chitupa uye password, nyora yakachengeteka eeprom uye kuvakazve data rese.
   3. Nyora yakadhindwa BIOS dump (izvi zvinongoshanda mune iyo TP btw), tanga iyo laptop uye gadzira Hardware ID. Isu tichakutumira kiyi yakasarudzika iyo inomisa iyo Allservice BIOS, apo BIOS iri kuirodha ichaita yekuvhura maitiro uye kuvhura iyo SVP uye TPM.
   4. Chekupedzisira, nyora iyo yekutanga BIOS dump kumashure kune zvakajairika maoperation uye unakirwe nelaptop.

   Isu tinogona zvakare kudzima Computrace kana kushandura iyo SN/UUID uye kusetazve RFID checksum kukanganisa nekushandisa yedu UEFI chirongwa nenzira imwechete, kana zvichidikanwa.

   Mutengo wekuvhura sevhisi uri pamushini wega wega (sezvatinoita kuMacbook/iMac, HP, Acer, nezvimwewo) Nemutengo webasa uye kuwanikwa ndapota verenga chinotevera pazasi. Unogona kubata [email inodzivirirwa] kune chero mubvunzo.

   Zvinoita sezviri pamutemo! Asi izvi, zvakare, nekuda kwezvikonzero zviri pachena, isarudzo yemamiriro ekunyanya kupererwa, uye kunze kwekunakidzwa kwese kunodhura $80. Tinozvisiira mberi.

4. Kana Lazard akandiputsira zvese uye achindikumbira kuti ndikufonere, saka haufanirwe kuramba! Ngatidzikei kubhizinesi.

Isu tinodaidza Lazard aka "femu inotungamira pasi rose yezvemari uye manejimendi emidziyo, inopa zano nezvekubatana, kutora, kugadziridza, chimiro chemari uye zano"

Nepo mutengesi kubva kuBay achipindura, ndinokanda mari shoma pa zadarma uye ndinotarisira kutaurirana pamwe nemutauriri asina mweya pasi pano - kutsigirwa kwekambani hombe yemari kubva kuNew York. Musikana uya anokurumidza kutora runhare, oteerera muchirungu sahwira wangu achinditsanangurira kuti ndakatenga sei laptop iyi, onyora pasi serial number uye anovimbisa kuzopa maadmins avo vanozondifonera. Iyi nzira inodzokororwa kaviri, zuva rimwe chete. Kechitatu, ndakamirira nemaune kusvika 10 am manheru muNew York ndokufona, ndichikurumidza kuverenga pasita yakajairika nezvekutenga kwangu. Maawa maviri gare gare mukadzi mumwechete akandifonera ndokutanga kuverenga mirairo:
- Tinya kutiza.
Ndinodzvanya asi hapana chinoitika.
- Chimwe chinhu hachishande, hapana chinochinja.
- Press.
- Ndinodzvanya.
- Zvino pinda: 72406917
Ndiri kupinda. Hapana chinoitika.
- Unoziva, ndinotya kuti izvi hazvibatsiri ... Ingori miniti ...
Iyo laptop inongoerekana yatangazve, mabhutsu ehurongwa, chena inoshungurudza skrini yanyangarika kumwe kunhu. Kuti ndive nechokwadi, ini ndinopinda muBIOS, Computrace haina kuvhurwa. Zvinoita sekuti ndizvo. Ndinokutendai nerutsigiro rwenyu, ndinonyorera mutengesi kuti ndakagadzirisa nyaya dzose pachangu uye ndinozorora.

OpenMakeshift Computrace Intel AMT yakavakirwa

Zvakaitika zvakandiodza moyo, asi ndakafarira zano, kurwadziwa kwangu kwepantom pamusoro pezvaive zvarasika zvishoma kwaive kutsvaga imwe nzira yekubuda, ndaida kuchengetedza laptop yangu nyowani, sekunge yaizondidzosera yekare. Kana mumwe munhu ari kushandisa Computrace, saka ini ndinogona kuishandisawo, handiti? Mushure mezvose, kwaive neIntel Anti-Theft, maererano netsanangudzo - yakanakisa tekinoroji inoshanda sezvainofanirwa, asi yakaurayiwa neiyo inertia yemusika, asi panofanira kuve neimwe nzira. Zvakazoitika kuti imwe nzira iyi yakatanga munzvimbo imwechete iyo yakagumira - chete Absolute software yakakwanisa kuwana mukana mundima iyi.

Kutanga, ngatiyeukei kuti Intel AMT chii: iyi seti yemaraibhurari ari chikamu cheIntel ME, akavakirwa muEFI BIOS, kuitira kuti maneja mune imwe hofisi anogona, asina kusimuka kubva pachigaro chake, kushandisa michina pane network, kunyangwe vasina kubhutsura, kubatanidza kure maISO, kutonga kuburikidza nedesktop iri kure, nezvimwe.

Zvese izvi zvinomhanya paMinix uye padanho iri:

Zvisingaonekwi Zvinhu Lab yakakurudzira kudaidza mashandiro eIntel vPro / Intel AMT tekinoroji mhete yekudzivirira -3. Sechikamu cheiyi tekinoroji, machipset anotsigira vPro tekinoroji ane yakazvimirira microprocessor (ARC4 architecture), ine yakaparadzana interface kunetiweki kadhi, yakasarudzika yekuwana chikamu chakatsaurirwa che RAM (16 MB), uye DMA kuwana kune iyo huru RAM. Zvirongwa pairi zvinoitwa zvakazvimirira zvepakati processor; iyo firmware inochengetwa pamwe chete neBIOS macode kana pane yakafanana SPI flash memory (iyo kodhi ine cryptographic siginecha). Chikamu cheiyo firmware ndeye yakavakirwa-mukati sevha yewebhu. Nekutadza, AMT yakaremara, asi imwe kodhi ichiri kushanda mune iyi modhi kunyangwe AMT yakadzimwa. Mhete kodhi -3 inoshanda kunyangwe muS3 Sleep simba mode.

Izvi zvinonzwika kuyedza, nekuti zvinoita sekunge kana tikakwanisa kumisikidza reverse yekubatanidza kune imwe admin panel tichishandisa Intel AMT, isu tichakwanisa kuwana zvakanyanya kupfuura Computrace (muchokwadi, kwete).

Isu tinomisa Intel AMT pamushini wedu

Kutanga, vamwe vako vangangoda kubata iyi AMT nemaoko ako, uye pano iwo nuances anotanga. Kutanga: unoda processor inotsigira. Neraki, hapana matambudziko neizvi (kunze kwekunge uine AMD), nekuti vPro inowedzerwa kune angangoita ese Intel i5, i7 uye i9 processors (iwe unogona kuona. pano) kubvira 2006, uye yakajairika VNC yakaunzwa ikoko kare muna 2010. Chechipiri: kana iwe uine desktop, saka iwe unoda motherboard inotsigira basa iri, iyo ine Q chipset. Mumalaptops, tinoda chete kuziva processor model. Kana iwe ukawana rutsigiro rweIntel AMT, saka ichi chiratidzo chakanaka uye uchakwanisa kushandisa marongero akawanikwa pano. Kana zvisina kudaro, kana iwe wanga usina rombo rakanaka / wakasarudza nemaune processor kana chipset pasina tsigiro yeiyi tekinoroji, kana iwe wakabudirira kuchengetedza mari nekusarudza AMD, inovawo chikonzero chekufara.

Maererano nemagwaro

Mune isina-yakachengeteka modhi, Intel AMT zvishandiso zvinoteerera pachiteshi 16992.
Mune TLS modhi, Intel AMT zvishandiso zvinoteerera pachiteshi 16993.

Intel AMT inogamuchira zvisungo pazviteshi 16992 uye 16993. Ngatiendei ikoko.

Iwe unofanirwa kutarisa kuti Intel AMT inogoneswa muBIOS:

Tevere tinoda kutangazve uye tinya Ctrl + P tichirodha

Iyo standard password, semazuva ese, arun.

Chinja ipapo password muIntel ME General Settings. Tevere, muIntel AMT Configuration, ita kuti Activate Network Access. Ready. Iwe zvino wakavharirwa zviri pamutemo. Isu tiri kurodha musystem.

Iye zvino yakakosha nuance: zvine musoro, tinogona kuwana Intel AMT kubva localhost uye kure, asi kwete. Intel inotaura kuti iwe unogona kubatana munharaunda uye kuchinja marongero uchishandisa Intel AMT Configuration Utility, asi kwandiri zvakaramba zvachose kubatana, saka kubatana kwangu kwakangoshanda kure.

Isu tinotora imwe mudziyo uye tinobatanidza kuburikidza IP yako: 16992

Zvinoita seizvi:

Kugamuchirwa kune yakajairwa Intel AMT interface! Sei "standard"? Nokuti yakaderedzwa uye haina maturo zvachose kune zvinangwa zvedu, uye isu tichashandisa chimwe chinhu chakakomba.

Kusvika pakuziva MeshCommander

Semazuva ese, makambani makuru anoita chimwe chinhu, uye vashandisi vekupedzisira vanochigadzirisa kuti chienderane ivo pachavo. Ndizvo zvakaitikawo pano.

Uyu ane mwero (hapana kuwedzeredza: zita rake harisi pawebhusaiti yake, ndaifanira kuGoogle) murume anonzi Ylian Saint-Hilaire akagadzira maturusi anoshamisa ekushanda neIntel AMT.

Ndinoda kuti nekukasika kukwevera pfungwa dzako kwaari YouTube chiteshi, mumavhidhiyo ake anoratidza uye zvakajeka munguva chaiyo maitiro ekuita mamwe mabasa ane chekuita neIntel AMT uye software yayo.

Ngatitangei MeshCommander. Dhawunirodha, isa uye edza kubatanidza kumuchina wedu:

Maitiro acho haasi epakarepo, asi semhedzisiro tinowana iyi skrini:

Hakusi kuti ndiri paranoid, asi ndichadzima data rakadzama, ndiregerereiwo nekuda kwehushamwari hwakadai.

Musiyano, sezvavanotaura, uri pachena. Handizive kuti sei Intel Control Panel isina seti yemabasa, asi chokwadi ndechekuti Ylian Saint-Hilaire anowana zvakanyanya kubva muhupenyu. Uyezve, iwe unogona kuisa yayo yewebhu interface zvakananga muiyo firmware, ichakubvumidza iwe kushandisa ese mabasa pasina utility.

Zvinoitwa seizvi:

Ini ndinofanira kucherechedza kuti ini handina kushandisa mashandiro aya (Custom web interface) uye handigone kutaura chero chinhu nezvekubudirira kwayo uye kuita kwayo, sezvo isingadiwe pane zvandinoda.

Iwe unogona kutamba uchitenderedza nekushanda, hazvigoneke kuti iwe uchaparadza zvese, nekuti yekutanga uye yekupedzisira poindi yemutambo uyu ndeyeBIOS, umo iwe unogona kuzogadzirisa zvese nekudzima Intel AMT.

Shandisa MeshCentral uye shandisa BackConnect

Uye pano kuwa kwakakwana kwemusoro kunotanga. Sekuru vangu havana kungogadzira mutengi chete, asiwo admin yese panel yeTrojan yedu! Uye haana kungozviita, asi ndakaiunzira munhu wese paserver yangu.

Tanga nekuisa MeshCentral server yako kana kana usinga jairane neMeshCentral, unogona kuedza sevha yeruzhinji nenjodzi yako paMeshCentral.com.

Izvi zvinotaura zvakanaka nezve kuvimbika kwekodhi yayo, sezvo ini handina kuwana chero nhau nezve hacks kana kuvuza panguva yekushanda kwesevhisi.

Ini pachangu, ini ndinomhanyisa MeshCentral pane yangu sevha nekuti ini ndinotenda zvisina musoro kuti yakavimbika, asi hapana chinhu mairi kunze kwekusava nematuro uye kupera kwemweya. Kana iwe uchidawo, saka pano kune magwaro uye pano mudziyo une MeshCentral. Zvinyorwa zvinotsanangura maitiro ekuzvisunga zvose pamwe chete muNGINX, saka kushandiswa kunobatanidzwa nyore nyore mumaseva ako epamba.

Register on meshcentral.com, pinda ugadzire Boka reChishandiso nekusarudza iyo "hapana mumiririri" sarudzo:

Sei "pasina mumiririri"? Nokuti nei tichida kuti tiise chimwe chinhu chisingadikanwi, hazvisi pachena kuti chinozvibata sei uye kuti chichashanda sei.

Dzvanya "Wedzera CIRA":

Dhawunirodha cira_setup_test.mescript uye uishandise muMeshCommander yedu seizvi:

Voila! Mushure menguva yakati, muchina wedu uchabatana neMeshCentral uye isu tinogona kuita chimwe chinhu nawo.

Chekutanga: iwe unofanirwa kuziva kuti software yedu haigogodze pane iri kure server saizvozvo. Izvi zvinokonzerwa nekuti Intel AMT ine sarudzo mbiri dzekubatanidza - kuburikidza nesevha iri kure uye zvakananga munharaunda. Havashande panguva imwe chete. Yedu script yakatogadzirisa sisitimu yebasa riri kure, asi ungangoda kubatanidza munharaunda. Kuti iwe ubatanidze munharaunda, unofanirwa kuenda pano

nyora mutsara unova nzvimbo yako yemunharaunda (ona kuti script yedu YAKANGA yakaisa imwe mutsara wakasarudzika ipapo kuitira kuti kubatana kuitwe kure) kana kujekesa mitsara yese zvachose (asi ipapo kubatana kuri kure hakuzovepo). Semuenzaniso, nzvimbo yangu yenzvimbo muOpenWrt ndeye lan:

Saizvozvo, kana isu tikapinda lan ipapo, uye kana muchina wedu wakabatana kune network ine iyi dunhu renzvimbo, ipapo kubatana kuri kure hakuzovepo, asi madoko emunharaunda 16992 uye 16993 achavhura uye agamuchire kubatana. Muchidimbu, kana paine rudzi rwehupenzi husina hukama nedunhu rako, saka software iri kubhugi, kana zvisiri, saka iwe unofanirwa kuzvibatanidza iwe pachako kuburikidza newaya, ndizvo zvese.

Chipiri:

Zvese zvagadzirira!

Unogona kubvunza - kupi AntiTheft? Sezvandambotaura pakutanga, Intel AMT haina kunyatsokodzera kurwisa mbavha. Kutungamira hofisi network kunogamuchirwa, asi kurwa nevanhu vakatora zvinhu zvisiri pamutemo kuburikidza neInternet hakuna kunyanya kukosha. Ngatitarisei bhuku rekushandisa iro, mudzidziso, rinogona kutibatsira mukurwira pfuma yega.

1. Pachezvayo, zviri pachena kuti iwe unokwanisa kuwana muchina kana wakabatana netambo, kana, kana Windows yakaiswa pairi, ipapo kuburikidza neWiFi. Hongu, ndezvemwana, asi zvatove zvakaoma kuti munhuwo zvake ashandise laptop yakadaro, kunyange kana mumwe munhu akangoerekana atora kutonga. Uyezve, zvisinei nekuti ini handina kukwanisa kuverenga zvinyorwa, zvinogoneka kugadzira nekugadzira mamwe maitiro ekuvhara / kuratidza zviziviso pavari.
2. Remote Chengetedza Erase neIntel Active Management Technology

   
   
   Uchishandisa iyi sarudzo, unogona kudzima ruzivo rwese kubva muchina mumasekonzi. Hazvina kujeka kana inoshanda pane isiri-Intel SSDs. Here pano Unogona kuverenga zvakawanda nezve basa iri. Unogona kuyemura basa racho pano. Hunhu hunotyisa, asi megabytes gumi chete uye hunhu hwakajeka.

Dambudziko rekudzoserwa kuuraya rinoramba risati ragadziriswa, nemamwe mazwi: unofanirwa kutarisa kana muchina uchipinda munetiweki kuti ubatanidze kwairi. Ndinotenda kuti pane imwe mhinduro kune izvi zvakare.

Mukuita kwakaringana, iwe unofanirwa kuvharira iyo laptop uye kuratidza imwe mhando yekunyora, asi kwatiri isu tinongove nekuwana kusingadzivisike, uye zvekuita zvinotevera inyaya yekufungidzira.

Pamwe iwe neimwe nzira uchakwanisa kuvhara mota kana kuratidza meseji, nyora kana uchiziva. Ndatenda!

Usakanganwa kuseta password yeBIOS.

Thanks mushandisi berez kuitira kuongorora!

Source: www.habr.com