{"id":119276,"date":"2024-08-10T03:43:09","date_gmt":"2024-08-10T01:43:09","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-sinkclose-v-chipah-amd-mozhet-sdelat-milliony-kompyuterov-ne-podlezhashhimi-vosstanovleniyu"},"modified":"2024-08-10T03:43:09","modified_gmt":"2024-08-10T01:43:09","slug":"uyazvimost-sinkclose-v-chipah-amd-mozhet-sdelat-milliony-kompyuterov-ne-podlezhashhimi-vosstanovleniyu","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-sinkclose-v-chipah-amd-mozhet-sdelat-milliony-kompyuterov-ne-podlezhashhimi-vosstanovleniyu","title":{"rendered":"Dob\u00ebsia Sinkclose n\u00eb \u00e7ipat AMD mund t'i b\u00ebj\u00eb miliona kompjuter\u00eb t\u00eb pa rikuperuesh\u00ebm","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

K\u00ebrkuesit e kompanis\u00eb IOActive zbuluan nj\u00eb dob\u00ebsi kritike n\u00eb procesor\u00ebt AMD, e cila lejon haker\u00ebt t\u00eb injektojn\u00eb softuer t\u00eb d\u00ebmsh\u00ebm q\u00eb \u00ebsht\u00eb praktikisht i pakthyesh\u00ebm. Problemi preku miliona kompjuter\u00eb dhe server\u00eb n\u00eb t\u00eb gjith\u00eb bot\u00ebn, raporton<\/a><\/noindex> revista Wired.<\/p>\n

<\/center> \t\t\t\t \"Dob\u00ebsia <\/p>\n

Dob\u00ebsia, e njohur si Sinkclose, \u00ebsht\u00eb zbuluar n\u00eb m\u00ebnyr\u00ebn e menaxhimit t\u00eb sistemit (SMM) t\u00eb procesor\u00ebve AMD. Kjo m\u00ebnyr\u00eb ka privilegje t\u00eb larta dhe \u00ebsht\u00eb e destinuar p\u00ebr t\u00eb kryer funksione kritike t\u00eb sistemit. Sulmuesit mund t\u00eb p\u00ebrdorin Sinkclose p\u00ebr t\u00eb injektuar kod t\u00eb d\u00ebmsh\u00ebm n\u00eb nivelin m\u00eb t\u00eb thell\u00eb t\u00eb firmware-it, duke ndryshuar konfigurimin e SMM, duke e b\u00ebr\u00eb at\u00eb praktikisht t\u00eb pamundur p\u00ebr t'u zbuluar dhe fshir\u00eb.<\/p>\n

Enrike Nissim dhe Krzysztof Okupski nga IOActive, t\u00eb cil\u00ebt zbuluan dob\u00ebsin\u00eb, planifikojn\u00eb t\u00eb flasin n\u00eb detaje p\u00ebr t\u00eb n\u00eb konferenc\u00ebn e haker\u00ebve Defcon q\u00eb do t\u00eb mbahet nes\u00ebr. Sipas tyre, Sinkclose preku praktikisht t\u00eb gjith\u00eb procesor\u00ebt AMD t\u00eb l\u00ebshuar q\u00eb nga viti 2006, ndoshta edhe m\u00eb her\u00ebt. <\/p>\n

<\/center> <\/p>\n

K\u00ebrkuesit paralajm\u00ebrojn\u00eb se p\u00ebr t\u00eb shfryt\u00ebzuar dob\u00ebsin\u00eb, haker\u00ebt kan\u00eb nevoj\u00eb p\u00ebr nj\u00eb nivel t\u00eb caktuar akses n\u00eb kompjuterin ose serverin e bazuar n\u00eb AMD, por m\u00eb pas Sinkclose do t'u mund\u00ebsoj\u00eb atyre t\u00eb integrojn\u00eb kodin e d\u00ebmsh\u00ebm edhe m\u00eb thell\u00eb. N\u00eb shumic\u00ebn e sistemeve t\u00eb testuara, ku funksioni i siguris\u00eb Platform Secure Boot \u00ebsht\u00eb implementuar gabimisht, virusi i instaluar p\u00ebrmes Sinkclose do t\u00eb jet\u00eb praktikisht i pamundsh\u00ebm p\u00ebr t'u zbuluar dhe eliminuar, madje edhe pas rivendosjes s\u00eb sistemit operativ.<\/p>\n

«Imagjinoni se hacker\u00ebt nga sh\u00ebrbimet sekrete ose dikush tjet\u00ebr d\u00ebshiron t\u00eb vendoset n\u00eb sistemin tuaj. Edhe n\u00ebse e pastroni plot\u00ebsisht hard diskun, virusi do t\u00eb mbetet», thot\u00eb Okupski. Sipas tij, m\u00ebnyra e vetme p\u00ebr t\u00eb fshir\u00eb nj\u00eb virus t\u00eb till\u00eb \u00ebsht\u00eb t\u00eb lidhen fizikisht me memorjen e kompjuterit duke p\u00ebrdorur nj\u00eb programues SPI Flash dhe ta skanoni at\u00eb me kujdes. «N\u00eb rastin m\u00eb t\u00eb keq, do t'ju duhet thjesht ta hidhni kompjuterin», p\u00ebrfundon Nissim.<\/p>\n

N\u00eb deklarat\u00ebn p\u00ebr Wired, kompania AMD ka konfirmuar<\/a><\/noindex> gjetjen e IOActive, fal\u00ebnderoi k\u00ebrkuesit dhe njoftoi se tashm\u00eb jan\u00eb l\u00ebshuar p\u00ebrmir\u00ebsime p\u00ebr procesor\u00ebt EPYC dhe Ryzen, nd\u00ebrsa p\u00ebr sistemet e integruara, patch-et do t\u00eb l\u00ebshohen s\u00eb shpejti. Megjithat\u00eb, AMD nuk zbuloi detaje se si do t\u00eb eliminohet s\u00ebr\u00ebll\u00ebku Sinkclose dhe p\u00ebr cilat pajisje.<\/p>\n

N\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb, AMD thekson kompleksitetin e shfryt\u00ebzimit t\u00eb k\u00ebsaj t\u00eb met\u00eb, pasi q\u00eb p\u00ebr ta shfryt\u00ebzuar, sulmuesi duhet t\u00eb ket\u00eb qasje n\u00eb b\u00ebrtham\u00ebn e sistemit operativ. Sidoqoft\u00eb, Nissim dhe Okupski kund\u00ebrshtojn\u00eb, duke th\u00ebn\u00eb se p\u00ebr haker\u00ebt e p\u00ebrvojsh\u00ebm, marrja e nj\u00eb qasjeje t\u00eb till\u00eb nuk \u00ebsht\u00eb problem fal\u00eb p\u00ebrgjith\u00ebsisht daljes s\u00eb gabimeve n\u00eb Windows dhe Linux.<\/p>\n

K\u00ebrkuesit paralajm\u00ebrojn\u00eb se pas prezantimit n\u00eb Defcon, megjith\u00ebse detajet e shfryt\u00ebzimit nuk do t\u00eb publikohen, haker\u00ebt e p\u00ebrvojsh\u00ebm mund t\u00eb kuptojn\u00eb se si funksionon teknologjia, prandaj p\u00ebrdoruesve u rekomandohet t\u00eb instalojn\u00eb patch-et nga AMD sapo ato b\u00ebhen t\u00eb disponueshme.<\/p>\n

Burimet:<\/strong><\/p>\n