{"id":119276,"date":"2024-08-10T03:43:09","date_gmt":"2024-08-10T01:43:09","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-sinkclose-v-chipah-amd-mozhet-sdelat-milliony-kompyuterov-ne-podlezhashhimi-vosstanovleniyu"},"modified":"2024-08-10T03:43:09","modified_gmt":"2024-08-10T01:43:09","slug":"uyazvimost-sinkclose-v-chipah-amd-mozhet-sdelat-milliony-kompyuterov-ne-podlezhashhimi-vosstanovleniyu","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-sinkclose-v-chipah-amd-mozhet-sdelat-milliony-kompyuterov-ne-podlezhashhimi-vosstanovleniyu","title":{"rendered":"Vulnerabiliteti Sinkclose n\u00eb \u00e7ipat AMD mund t\u00eb b\u00ebj\u00eb miliona kompjuter\u00eb t\u00eb pap\u00ebrshtatsh\u00ebm p\u00ebr rikuperim","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

K\u00ebrkuesit nga kompania IOActive zbuluan nj\u00eb vulnerabilitet kritik n\u00eb procesor\u00ebt AMD, q\u00eb lejon hakerat t\u00eb fusin nj\u00eb malware gati t\u00eb pakthyesh\u00ebm. Problemi ndikon miliona kompjuter\u00eb dhe servers n\u00eb t\u00eb gjith\u00eb bot\u00ebn, raporton<\/a><\/noindex> publikimi Wired.<\/p>\n

<\/center> \t\t\t\t \"Vulnerabiliteti <\/p>\n

Vulnerabiliteti, i quajtur Sinkclose, \u00ebsht\u00eb zbuluar n\u00eb m\u00ebnyr\u00ebn e menaxhimit t\u00eb sistemit (SMM) t\u00eb procesor\u00ebve AMD. Ky mod ka privilegje t\u00eb larta dhe \u00ebsht\u00eb projektuar p\u00ebr t\u00eb ekzekutuar funksione kritike t\u00eb sistemit. Keqb\u00ebr\u00ebsit mund t\u00eb p\u00ebrdorin Sinkclose p\u00ebr t\u00eb infiltruar kodin malician n\u00eb shtresa shum\u00eb t\u00eb thella t\u00eb firmuerit, duke ndryshuar konfigurimin e SMM, \u00e7ka e b\u00ebn praktikisht t\u00eb pamundur zbulimin dhe eliminimin e tij.<\/p>\n

Enrique Nissim dhe Krzysztof Okupski nga IOActive, q\u00eb zbuluan vulnerabilitetin, planifikojn\u00eb t\u00eb flasin holl\u00ebsisht rreth tij n\u00eb konferenc\u00ebn e hakerave Defcon q\u00eb do t\u00eb mbahet nes\u00ebr. Sipas tyre, Sinkclose ndikon praktikisht t\u00eb gjith\u00eb procesor\u00ebt AMD q\u00eb jan\u00eb l\u00ebshuar q\u00eb nga viti 2006, dhe ndoshta edhe m\u00eb her\u00ebt. <\/p>\n

<\/center> <\/p>\n

K\u00ebrkuesit paralajm\u00ebrojn\u00eb se p\u00ebr t\u00eb shfryt\u00ebzuar vulnerabilitetin, hakerat kan\u00eb nevoj\u00eb p\u00ebr nj\u00eb nivel t\u00eb caktuar akses n\u00eb kompjuterin ose serverin e bazuar n\u00eb AMD, por pastaj Sinkclose do t'i lejoj\u00eb ata t\u00eb fusin malware edhe m\u00eb thell\u00eb. N\u00eb shumic\u00ebn e sistemeve t\u00eb testuara, ku funksioni i siguris\u00eb Platform Secure Boot \u00ebsht\u00eb implementuar gabimisht, virusi i instaluar p\u00ebrmes Sinkclose do t\u00eb jet\u00eb praktikisht i pamundur p\u00ebr t'u zbuluar dhe eliminuar, madje edhe pas riinstalimit t\u00eb sistemit operativ.<\/p>\n

«Imagine that hackers from the intelligence services or someone else wants to establish a foothold in your system. Even if you completely clean the hard drive, the virus will still remain,» says Okupski. According to him, the only way to remove such a virus is to physically connect to the computer's memory using an SPI Flash programmer and thoroughly scan it. «In the worst-case scenario, you will simply have to throw away the computer,» concludes Nissim.<\/p>\n

N\u00eb nj\u00eb deklarat\u00eb p\u00ebr Wired, kompania AMD konfirmoi<\/a><\/noindex> e vler\u00ebsimin e IOActive, fal\u00ebnderoi k\u00ebrkuesit dhe njoftoi se ka l\u00ebshuar tashm\u00eb t\u00eb gjitha rregullimet p\u00ebr procesor\u00ebt EPYC dhe Ryzen, dhe p\u00ebr sistemet e integruara patches do t\u00eb dalin n\u00eb koh\u00ebn e af\u00ebrt. Megjithat\u00eb, AMD nuk zbuloi detaje n\u00eb lidhje me m\u00ebnyr\u00ebn se si do t\u00eb eliminohet vulnerabiliteti Sinkclose dhe p\u00ebr cilat pajisje.<\/p>\n

N\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb, AMD thekson kompleksitetin e shfryt\u00ebzimit t\u00eb k\u00ebsaj dob\u00ebsie, pasi p\u00ebr t\u00eb p\u00ebrdorur at\u00eb, nj\u00eb sulmues duhet t\u00eb ket\u00eb qasje n\u00eb b\u00ebrtham\u00ebn e sistemit operativ. Sidoqoft\u00eb, Nissim dhe Okupski kund\u00ebrshtojn\u00eb duke th\u00ebn\u00eb se p\u00ebr haker\u00ebt e p\u00ebrvojsh\u00ebm, marrja e nj\u00eb qasjeje t\u00eb till\u00eb nuk \u00ebsht\u00eb problem, fal\u00eb gjendjeve q\u00eb shfaqen rregullisht n\u00eb Windows dhe Linux.<\/p>\n

K\u00ebrkuesit paralajm\u00ebrojn\u00eb se pas prezantimit n\u00eb Defcon, p\u00ebrkund\u00ebr faktit se detajet e shfryt\u00ebzimit nuk do t\u00eb publikohen, haker\u00ebt e p\u00ebrvojsh\u00ebm mund t\u00eb hamend\u00ebsojn\u00eb se si funksionon teknologjia, prandaj p\u00ebrdoruesve rekomandohet t\u00eb instalojn\u00eb patches t\u00eb AMD, sapo ato t\u00eb jen\u00eb t\u00eb disponueshme.<\/p>\n

Burimet:<\/strong><\/p>\n