Thunderspy - nhevedzano yekurwiswa pamidziyo ine Thunderbolt interface

Zvakazarurwa Information about kusakwana kunomwe mumidziyo ine Thunderbolt interface, yakabatana pasi pezita rekodhi Kutinhira uye bypass ese makuru eThunderbolt kuchengetedza zvikamu. Zvichienderana nezvinetso zvakaonekwa, zviitiko zvipfumbamwe zvekurwisa zvinorongwa, zvinoitwa kana munhu anorwisa aine nzvimbo yekuwana sisitimu kuburikidza nekubatanidza mudziyo wakashata kana kushandura firmware.

Mamiriro ekurwiswa anosanganisira kugona kugadzira zviziviso zveanopokana eTunderbolt zvishandiso, kutevedzera zvakatenderwa zvigadziriso, kuwana zvisina tsarukano kune system memory kuburikidza neDMA uye nekupfuura Chengetedzo Level marongero, kusanganisira kudzima zvachose nzira dzese dzekudzivirira, kuvharira kuisirwa kwe firmware zvigadziriso uye shanduro yekushandura kune Thunderbolt mode pa. masisitimu anogumira ku USB kana DisplayPort kutumira.

Thunderbolt iratidziro yepasirese yekubatanidza zvishandiso zvepamhepo zvinosanganisa PCIe (PCI Express) uye DisplayPort inopindirana mune imwe tambo. Thunderbolt yakagadzirwa neIntel neApple uye inoshandiswa mumalaptops mazhinji emazuva ano nemaPC. PCIe-based Thunderbolt zvishandiso zvinopihwa neDMA I/O, izvo zvinokonzeresa kutyisidzira kweDMA kurwiswa kuverenga nekunyora yese ndangariro yehurongwa kana kutora data kubva kumidziyo yakavharidzirwa. Kudzivirira kurwiswa kwakadaro, Thunderbolt yakaronga pfungwa yeSecurity Levels, iyo inobvumira kushandiswa kwezvishandiso zvakatenderwa nemushandisi chete uye inoshandisa cryptographic kusimbiswa kwezvekubatanidza kudzivirira kubva kune ID yekunyepedzera.

Kusagadzikana kwakaonekwa kunoita kuti zvikwanise kunzvenga chinosunga chakadaro uye kubatanidza mudziyo une hutsinye pasi pechiratidziro chewakatenderwa. Uye zvakare, zvinokwanisika kugadzirisa iyo firmware uye kushandura iyo SPI Flash kuti iverenge-chete modhi, iyo inogona kushandiswa kudzima zvachose mazinga ekuchengetedza uye kurambidza firmware zvigadziriso (zvishandiso zvakagadzirirwa manipulations akadaro. tcfp и spiblock) Pakazara, ruzivo nezvematambudziko manomwe akaburitswa:

• Kushandiswa kweisina kukwana firmware verification schemes;
• Kushandisa isina simba mudziyo wekusimbisa chirongwa;
• Kurodha metadata kubva kune isina kutenderwa mudziyo;
• Kuvepo kwemaitiro ekudzokera kumashure anobvumira kushandiswa kwekurwiswa kwekudzokera kumashure michina isina njodzi;
• Kushandisa isina kutenderwa controller configuration parameters;
• Glitches mune interface yeSPI Flash;
• Kushaikwa kwemidziyo yekudzivirira padanho Boot Camp.

Kusagadzikana kunobata zvese zvishandiso zvine Thunderbolt 1 uye 2 (Mini DisplayPort yakavakirwa) uye Thunderbolt 3 (USB-C yakavakirwa). Hazvisati zvanyatsojeka kana matambudziko anoonekwa mumidziyo ine USB 4 uye Thunderbolt 4, sezvo matekinoroji aya achangobva kuziviswa uye hapana nzira yekuyedza kuita kwavo. Kusagadzikana hakugone kubviswa nesoftware uye inoda kugadziridzwazve kwezvikamu zvehardware. Nekudaro, kune mamwe maturusi matsva zvinokwanisika kuvharira mamwe ematambudziko ane chekuita neDMA uchishandisa michina Kernel DMA Dziviriro, rutsigiro rwakatanga kushandiswa kutanga muna 2019 (inotsigirwa ne muLinux kernel, kutanga nekuburitswa 5.0, unogona kutarisa kuisirwa kuburikidza ne "/sys/bhazi/ thunderbolt/devices/domainX/iommu_dma_protection").

A Python script inopihwa kuti utarise zvishandiso zvako Spycheck, izvo zvinoda kumhanya semudzi kuti uwane DMI, ACPI DMAR tafura uye WMI. Kuti uchengetedze masisitimu ari munjodzi, tinokurudzira kuti usasiye sisitimu isina kutariswa kana iri mumodhi yekumira, usabatanidza maThunderbolt emumwe munhu, usasiye kana kupa zvishandiso zvako kune vamwe, uye ive nechokwadi chekuti zvishandiso zvako zvakachengetedzwa. Kana Kutinhira kusingade, zvinokurudzirwa kudzima iyo Thunderbolt controller muEFI kana BIOS (izvi zvinogona kuita kuti USB neDisplayPort ports dzisashande kana dzikaiswa kuburikidza neThunderbolt controller).

Source: opennet.ru