Microsoft yakabatana neIntel, Qualcomm uye AMD nharembozha dzine kuchengetedzwa kwehardware pakurwiswa kuburikidza ne firmware. Iyo kambani yakamanikidzwa kugadzira mapuratifomu emakomputa akadaro nekuwedzera kwenhamba yekurwiswa kwevashandisi nevanonzi "white hackers" - mapoka enyanzvi dzekubira ari pasi pemasangano ehurumende. Kunyanya, nyanzvi dzekuchengetedza ESET dzinoti zviito zvakadaro kuboka reRussia hackers APT28 (Fancy Bear). Boka reAPT28 rinonzi rakaedza software yaimhanyisa kodhi ine hutsinye panguva yekurodha firmware kubva kuBIOS.
Pamwe chete, nyanzvi dzeMicrosoft cybersecurity uye vanogadzira processor vakaunza mhinduro yesilicon muchimiro chemudzi wehardware wekuvimba. Iyo kambani yakadana maPC akadaro Secured-core PC (PC ine yakachengeteka musimboti). Parizvino, Secured-core PCs dzinosanganisira nhamba dzemalaptops kubva kuDell, Lenovo nePanasonic uye piritsi reMicrosoft Surface Pro X. Aya uye maPC anotevera ane musimboti wakachengeteka anofanirwa kupa vashandisi chivimbo chakakwana chekuti kuverenga kwese kuchavimbwa uye hakuzotungamira kune. data compromise .
Kusvika ikozvino, dambudziko neakaomeswa maPC raive rekuti firmware microcode yakagadzirwa neiyo mamaboard uye system OEMs. Muchokwadi, yaive iyo isina kusimba chinongedzo muMicrosoft's supply chain. Iyo Xbox yemitambo console, semuenzaniso, yanga ichishanda seSecured-core platform kwemakore, sezvo kuchengetedzwa kwepuratifomu pamatanho ese - kubva kune Hardware kuenda kune software - inotariswa neMicrosoft pachayo. Izvi zvaisakwanisika nePC kusvika zvino.
Microsoft yakaita sarudzo yakapusa yekubvisa iyo firmware kubva kuaccounting list panguva yekutanga kusimbiswa kwesimba regweta. Kunyanya chaizvo, ivo vakaburitsa nzira yekusimbisa kune processor uye yakakosha chip. Izvi zvinoita sekushandisa kiyi yehardware inonyorerwa processor panguva yekugadzira. Kana iyo firmware inotakurwa paPC, processor inoitarisa kuti ichengetedze uye kana inogona kuvimbwa nayo. Kana iyo processor isina kudzivirira iyo firmware kubva pakurodha (yakagamuchira seyakavimbika), kutonga pamusoro pePC kunoendeswa kune inoshanda sisitimu. Iyo sisitimu inotanga kufunga nezvepuratifomu inovimbwa, uye ipapo chete, kuburikidza neWindows Hello maitiro, inobvumira mushandisi kuiwana, ichipawo yakachengeteka login, asi padanho repamusoro.
Pamusoro peiyo processor, iyo System Guard Chengetedza Launch chip uye inoshanda sisitimu loader inobatanidzwa mukudzivirira kwehardware yemudzi wekuvimba (uye firmware kutendeseka). Maitiro aya anosanganisirawo virtualization tekinoroji, iyo inoparadzanisa ndangariro mune inoshanda sisitimu kudzivirira kurwiswa kweOS kernel uye maapplication. Zvese izvi zvakaomarara zvakagadzirirwa kuchengetedza, kutanga kune zvese, mushandisi wekambani, asi nekukurumidza kana gare gare chimwe chinhu chakafanana chingangoonekwa mumaPC evatengi.
Source: 3dnews.ru