Mhedzisiro yemazuva matatu emakwikwi ePwn2Own 2021, anoitwa gore negore sechikamu chemusangano weCanSecWest, akapfupikiswa. Sezvakaita gore rapfuura, makwikwi akaitwa zvakangoita uye kurwiswa kwakaratidzwa online. Pakati pezvakanangwa makumi maviri nenhatu, nzira dzekushanda dzekushandisa zvisina njodzi kare dzaisazivikanwa dzakaratidzwa Ubuntu Desktop, Windows 23, Chrome, Safari, Parallels Desktop, Microsoft Exchange, Microsoft Teams uye Zoom. Muzviitiko zvese, shanduro dzichangoburwa dzezvirongwa zvakaedzwa, kusanganisira zvese zviripo. Mari yese yekubhadhara yaive miriyoni imwe nemazana maviri ezviuru zvemadhora ekuUS (homwe yese yemubairo yaive miriyoni nehafu yemadhora).
Pamakwikwi, kuyedza katatu kwakaitwa kushandisa kusagadzikana muUbuntu Desktop. Kuedza kwekutanga nekwechipiri kwaive kwakakodzera uye vapambi vakakwanisa kuratidza kukwidziridzwa kwenzvimbo kwenzvimbo nekushandisa kusazivikanwa kwaimbove kusingazivikanwe zvine chekuita nekufashukira kwebuffer uye kaviri yemahara memory (izvo zvikamu zvedambudziko zvisati zvaziviswa; vagadziri vanopihwa mazuva makumi mapfumbamwe ekugadzirisa. zvikanganiso usati waburitsa data). Mabhonasi e$90 akabhadharwa nekuda kwekusagadzikana uku.
Kuedza kwechitatu, kwakaitwa nechimwe timu muchikamu chenzvimbo yekushandiswa kwekodzero, kwakangobudirira zvishoma - kushandiswa kwakashanda uye kwakaita kuti zvikwanisike kuwana midzi, asi kurwiswa hakuna kunyatsozivikanwa, sezvo kukanganisa kwakabatana nekusagadzikana kwanga kwatozivikanwa. kune vanogadzira Ubuntu uye gadziriso ine gadziriso yaive mukugadzirira.
Kurwiswa kwakabudirira kwakaratidzwa zvakare kune mabhurawuza akavakirwa pane Chromium injini - Google Chrome uye Microsoft Edge. Nekugadzira chiitiko chinokutendera kuti uite kodhi yako paunenge uchivhura peji rakagadzirwa muChrome neEdge (imwe yepasirese yekushandisa yakagadzirirwa mabhurawuza maviri), mubairo we100 zviuru zvemadhora wakabhadharwa. Iyo gadziriso yakarongwa kuti ibudiswe mumaawa anouya, kusvika parizvino zvese zvinozivikanwa ndezvekuti kusagadzikana kuripo mukuita basa rekugadzirisa zvemukati zvewebhu (renderer).
Kumwe kurwiswa kwakabudirira:
- $200 zviuru zvekubira Zoom application (akakwanisa kuita kodhi yake nekutumira meseji kune mumwe mushandisi, pasina kudiwa kwechero chiito kune anogamuchira). Kurwiswa uku kwakashandisa kusakwana kutatu muZoom uye imwe muWindows inoshanda system.
- $200 zviuru zvekubira Microsoft Exchange (kupfuura kutendeseka uye ropafadzo dzemunharaunda dziri kuwedzera pane sevha kuti uwane kodzero dzemaneja). Kumwe kushanda kwakabudirira kwakaratidzwa kune rimwe boka, asi mubairo wechipiri hauna kubhadharwa, sezvo zvikanganiso zvakafanana zvakanga zvatoshandiswa neboka rokutanga.
- $200 zviuru zvekubira Microsoft Teams (kuita kodhi pane server).
- $100 zviuru zvekushandisa Apple Safari (integer kufashukira muSafari uye buffer kufashukira mu macOS kernel kunzvenga sandbox uye kuita kodhi padanho re kernel).
- $140 zviuru zvekubira Parallels Desktop (kubuda muchina chaiwo uye kuita kodhi pane huru system). Kurwiswa kwacho kwakaitwa kuburikidza nekushandiswa kwehutatu hwakasiyana husina kunaka - uninitialized memory leak, stack mafashama uye kuwanda kwehuwandu.
- Mibairo miviri yezviuru makumi mana zvemadhora imwe neimwe yekubira Parallels Desktop (chikanganiso chine musoro uye buffer mafashama iyo yakabvumira kodhi kuti iitwe mune yekunze OS kuburikidza nezviito mukati memuchina chaiwo).
- Mibairo mitatu yemakumi mana ezviuru zvemadhora pamabasa matatu akabudirira e Windows 40 (huwandu hwekufashukira, kuwana kune yakatosunungurwa ndangariro uye mamiriro emujaho akabvumira kuti SYSTEM maropafadzo awanikwe).
Kuedza kwakaitwa, asi hakuna kubudirira, kubaya Oracle VirtualBox. Mazita ekubira Firefox, VMware ESXi, Hyper-V mutengi, MS Office 365, MS SharePoint, MS RDP uye Adobe Reader haana kutorwa. Pakanga pasina zvakare munhu aida kuratidza kubirwa kweiyo ruzivo system yemotokari yeTesla, zvisinei nemubairo we600 zviuru zvemadhora pamwe neTesla Model 3 mota.
Source: opennet.ru