Thunderspy - letoto la litlhaselo ho lisebelisoa tse nang le sebopeho sa Thunderbolt

Senotswe Boitsebiso ka bofokoli tse supileng ka thepa e nang le sebopeho sa Thunderbolt, se kopantsoeng tlas'a lebitso la khoutu sealuma le ho feta likarolo tsohle tse kholo tsa ts'ireletso ea Thunderbolt. Ho ipapisitsoe le mathata a boletsoeng, ho hlahisoa maemo a robong a tlhaselo, a kengoang ts'ebetsong haeba mohlaseli a na le phihlello ea lehae ho sistimi ka ho hokahanya sesebelisoa se kotsi kapa ho sebelisa firmware.

Maemo a tlhaselo a kenyelletsa bokhoni ba ho theha li-identifiers tsa lisebelisoa tsa Thunderbolt, lisebelisoa tse lumelletsoeng, phihlello e sa reroang ea memori ea sistimi ka DMA le ho feta litlhophiso tsa Ts'ireletso ea Ts'ireletso, ho kenyelletsa ho thibela ka botlalo mekhoa eohle ea ts'ireletso, ho thibela ho kengoa ha liapdeite tsa firmware le liphetolelo tsa sehokelo ho mokhoa oa Thunderbolt. Sistimi e lekanyelitsoeng ho fetisa USB kapa DisplayPort.

Thunderbolt ke sebopeho sa bokahohleng sa ho hokahanya lisebelisoa tsa peripheral tse kopanyang PCIe (PCI Express) le DisplayPort interface ka thapo e le 'ngoe. Thunderbolt e entsoe ke Intel le Apple mme e sebelisoa ho lilaptop le li-PC tse ngata tsa sejoale-joale. Lisebelisoa tsa Thunderbolt tse thehiloeng ho PCIe li fanoa ka DMA I/O, e behang tšokelo ea litlhaselo tsa DMA ho bala le ho ngola mohopolo o felletseng oa sistimi kapa ho hapa data ho tsoa lisebelisoa tse patiloeng. Ho thibela litlhaselo tse joalo, Thunderbolt e hlahisitse mohopolo oa Maemo a Ts'ireletso, a lumellang ts'ebeliso ea lisebelisoa tse lumelletsoeng ke basebelisi feela mme e sebelisa netefatso ea li-cryptographic tsa likhokahano ho sireletsa khahlano le bosholu ba ID.

Bofokoli bo khethiloeng bo etsa hore ho khonehe ho qoba ho tlama ho joalo le ho hokela sesebelisoa se kotsi ka boikaketsi ba se lumelletsoeng. Ho feta moo, hoa khoneha ho fetola firmware le ho fetola SPI Flash ho mokhoa oa ho bala feela, o ka sebelisoang ho thibela ka ho feletseng maemo a ts'ireletso le ho thibela lisebelisoa tsa firmware (lisebelisoa li lokiselitsoe bakeng sa maqheka a joalo. tcfp и spiblock). Ka kakaretso, lintlha tse mabapi le mathata a supileng li ile tsa senoloa:

  • Tšebeliso ea merero e sa lekaneng ea netefatso ea firmware;
  • Ho sebelisa sekema sa netefatso ea sesebelisoa se fokolang;
  • Ho kenya metadata ho tsoa sesebelisoa se sa netefatsoang;
  • Ho fumaneha ha mekhoa e lumellanang le morao e lumellang tšebeliso ea litlhaselo tsa rollback on mahlale a tlokotsing;
  • Ho sebelisa li-parameter tsa tlhophiso ea taolo e sa netefatsoang;
  • Litšitiso ho sebopeho sa SPI Flash;
  • Khaello ea lisebelisoa tsa ts'ireletso boemong Boot Camp.

Kotsi e ama lisebelisoa tsohle tse nang le Thunderbolt 1 le 2 (Mini DisplayPort based) le Thunderbolt 3 (USB-C based). Ha e e-s'o hlake hore na mathata a hlaha lisebelisoa tse nang le USB 4 le Thunderbolt 4, kaha theknoloji ena e sa tsoa phatlalatsoa 'me ha ho na mokhoa oa ho leka ts'ebetsong ea bona. Bofokoli bo ke ke ba felisoa ke software mme bo hloka hore likarolo tsa hardware li lokisoe bocha. Leha ho le joalo, bakeng sa lisebelisoa tse ling tse ncha hoa khoneha ho thibela mathata a mang a amanang le DMA ho sebelisa mochine Tšireletso ea Kernel DMA, tšehetso e qalileng ho kenngoa ts'ebetsong ho qala ka 2019 (tšehetsoa ke ho Linux kernel, ho qala ka tokollo ea 5.0, o ka hlahloba ho kenyelletsoa ka "/sys/bus/thunderbolt/devices/domainX/iommu_dma_protection").

Ho fanoe ka script ea Python ho hlahloba lisebelisoa tsa hau Spycheck, e hlokang ho sebetsa joalo ka motso ho fihlella DMI, tafole ea ACPI DMAR le WMI. Ho sireletsa lits'ebetso tse tlokotsing, re khothaletsa hore o se tlohele sistimi e sa lebelloa kapa e le maemong a standby, o seke oa hokela lisebelisoa tsa motho e mong oa Thunderbolt, o se ke oa siea kapa oa fa ba bang lisebelisoa tsa hau, 'me u netefatse hore lisebelisoa tsa hau li sirelelitsoe 'meleng. Haeba Thunderbolt e sa hlokehe, ho kgothaletswa ho tima molaoli oa Thunderbolt ho UEFI kapa BIOS (sena se ka etsa hore likou tsa USB le DisplayPort li se ke tsa sebetsa haeba li sebelisoa ka molaoli oa Thunderbolt).

Source: opennet.ru

Eketsa ka tlhaloso