Yakaburitswa 20GB yemukati hunyanzvi zvinyorwa uye Intel source makodhi

Tilly Kottmann (Tillie Kottman), mugadziri weiyo Android chikuva kubva kuSwitzerland, inotungamira Telegraph chiteshi nezve data rekudonha, rakabudiswa 20 GB yezvinyorwa zvemukati zvehunyanzvi uye sosi kodhi yakawanikwa semhedzisiro yeruzivo rwakakura kubva kuIntel inowanikwa pachena. Iyi ndiyo seti yekutanga kubva muunganidzwa wakapihwa nemunhu asingazivikanwe. Mapepa mazhinji akanyorwa seakavanzika, zvakavanzika zvekambani, kana kugoverwa chete pasi pechibvumirano chekusaburitsa pachena.

Iwo achangoburwa magwaro ekutanga May uye anosanganisira ruzivo nezve itsva Cedar Island (Whitley) server platform. Kune zvakare magwaro kubva muna 2019, semuenzaniso anotsanangura iyo Tiger Lake chikuva, asi yakawanda yeruzivo ndeye 2014. Pamusoro pezvinyorwa, iyo seti zvakare ine kodhi, maturusi ekugadzirisa, madhayagiramu, vatyairi, uye mavhidhiyo ekudzidzisa.

Vamwe mashoko kubva pane seti:

• Intel ME (Manejimendi Injini) zvinyorwa, flash zvishandiso uye mienzaniso yemapuratifomu akasiyana.
• Reference BIOS kuita kweKabylake (Purley) chikuva, mienzaniso uye yekutanga kodhi (ine shanduko nhoroondo kubva git).
• Kwakabva zvinyorwa zveIntel CEFDK (Consumer Electronics Firmware Development Kit).
• Code yeFSP mapakeji (Firmware Support Package) uye zvirongwa zvekugadzira zvemapuratifomu akasiyana.
• Zvishandiso zvakasiyana-siyana zvekugadzirisa uye kusimudzira.
• Simics-simulator yeRocket Lake S chikuva.
• Zvirongwa zvakasiyana-siyana uye zvinyorwa.
• Binary drivers yeIntel kamera yakagadzirirwa SpaceX.
• Schematics, zvinyorwa, firmware uye maturusi eiyo isati yaburitswa Tiger Lake chikuva.
• Kabylake FDK yekudzidzisa mavhidhiyo.
• Intel Trace Hub uye mafaera ane decoder emhando dzakasiyana dzeIntel ME.
• Kuitwa kwereferenzi kwechikuva cheElkhart Lake uye mienzaniso yekodhi yekutsigira chikuva.
• Tsananguro dze Hardware blocks muVerilog mutauro kune akasiyana Xeon mapuratifomu.
• Debug BIOS/TXE inovaka mapuratifomu akasiyana.
• Bootguard SDK.
• Process simulator yeIntel Snowridge uye Snowfish.
• Zvirongwa zvakasiyana-siyana.
• Marketing materials templates.

Intel akati yakavhura kuferefeta pachiitiko ichi. Zvinoenderana neruzivo rwekutanga, iyo data yakawanikwa kuburikidza neruzivo system "Intel Resource uye Dhizaini Center", iyo ine ruzivo rushoma rwekuwana vatengi, vanobatana uye mamwe makambani anodyidzana nawo Intel. Zvingangodaro, ruzivo rwakaiswa uye rwakaburitswa nemunhu ane mukana kune iyi ruzivo system. Mumwe wevaimbove vashandi veIntel akaratidza tichikurukura nezve vhezheni yake paReddit, zvichiratidza kuti kuvuza kunogona kunge kuri mhedzisiro yekuparadza nemushandi kana kubira kweimwe yeOEM motherboard vagadziri.

Munhu asingazivikanwe akaendesa magwaro kuti abudiswe akanongedzakuti iyo data yakatorwa kubva kune isina kuchengetedzwa sevha inogarwa paAkamai CDN uye kwete kubva kuIntel Resource uye Dhizaini Center. Sevha yakawanikwa netsaona panguva yekuongorora kukuru kwevatenzi vachishandisa nmap uye yakabiwa kuburikidza nesevhisi isina njodzi.

Zvimwe zvinyorwa zvakataura nezvekugona kuonekwa kwemashure muIntel kodhi, asi zvirevo izvi hazvina musoro uye zvinongobva pa.
kuvapo mutsara "Chengetedza iyo RAS yekumashure yekukumbira pointer kuIOH SR 17" mune chirevo mune imwe yemafaira ekodhi. Muchirevo che ACPI RAS zvinoreva "Kuvimbika, Kuwanikwa, Kushanda". Iyo kodhi pachayo inobata kucherechedzwa nekugadzirisa zvikanganiso zvekurangarira, kuchengetedza mhedzisiro murejista 17 yeI / O hub, uye haina "backdoor" mupfungwa yekuchengetedzwa kwemashoko.

Iyo seti yakatogovewa paBitTorrent network uye inowanikwa kuburikidza magnet link. Iyo zip archive size inenge 17 GB (vhura mapassword "Intel123" uye "intel123").

Uyezve, zvinogona kucherechedzwa kuti pakupera kwaChikunguru Tilly Kottmann rakabudiswa paruzhinji zvemukati marepositori akawanikwa semhedzisiro yekudonha kwedata kubva kumakambani angangoita makumi mashanu. Rondedzero yacho ine makambani akadai
Microsoft, Adobe, Johnson Controls, GE, AMD, Lenovo, Motorola, Qualcomm, Mediatek, Disney, Daimler, Roblox naNintendo, pamwe chete nemabhangi akasiyana-siyana, mabasa emari, makambani emotokari uye ekufambisa.
Mhedzisiro huru yekuvuza kwaive kurongeka kwakashata kweiyo DevOps zvivakwa uye kusiya makiyi ekuwana munzvimbo dzeveruzhinji.
Mazhinji ezvinyorwa zvakakopwa kubva kunharaunda yeDevOps masisitimu zvichibva paSonarQube, GitLab uye Jenkins mapuratifomu, kupinda kwairi. akanga asiri zvakaganhurirwa zvakafanira (muWebhu-inowanikwa munharaunda zviitiko zveDevOps mapuratifomu dzakashandiswa default marongero, zvichireva mukana wekuwana veruzhinji kumapurojekiti).

Mukuwedzera, kutanga kwaJuly, semugumisiro compromise Sevhisi yeWaydev, yaishandiswa kugadzira mishumo yekuongorora nezvechiitiko muGit repositories, yaive nedhatabhesi yadeuka, kusanganisira imwe yaisanganisira maOAuth tokens ekuwana marepositori paGitHub neGitLab. Ma tokeni akadai anogona kushandiswa kubatanidza matura epachivande eWaydev vatengi. Iwo ma tokeni akabatwa akazoshandiswa kukanganisa zvivakwa dave.com и mafashamo.io.

Source: opennet.ru