Bafuputsi ba Red Balloon ba tlalehile likotsi tse peli tse fumanoeng ho li-routers tsa Cisco 1001-X. Bofokoli ba lisebelisoa tsa marang-rang tsa Cisco ha se litaba, empa ke 'nete ea bophelo. Cisco ke e mong oa baetsi ba ka sehloohong ba li-routers le lisebelisoa tse ling tsa marang-rang, kahoo ho na le thahasello e eketsehileng ea ho tšepahala ha lihlahisoa tsa eona ho tsoa ho litsebi tsa ts'ireletso ea data le ponong ea bahlaseli.
Ha re sheba pele, rea hlokomela hore litsebi tsa Balloon e khubelu li tsebisitse Cisco ka bofokoli bo bocha likhoeling tse 'maloa tse fetileng, kahoo bothata bo rarollotsoe ka tsela e itseng, kapa bonyane Cisco e tseba ho bo rarolla. E 'ngoe ea likotsi tse peli e ka koaloa habonolo feela ka ho ntlafatsa firmware,' me k'hamphani e lokolitse firmware e joalo maobane sebakeng sa sechaba, litlaleho tsa khatiso ea inthaneteng. . Re bua ka kokoanyana e fumanehang ho Cisco IOS sistimi e fanang ka phihlello ea metso ea mohlaseli ho li-routers tsa letoto le boletsoeng.
Bofokoli ba bobeli ke ntho e ikhethang le e kotsi haholo, bafuputsi ba re. E ama motheo oa ts'ireletso bakeng sa lisebelisoa tsa marang-rang tsa lik'hamphani tse limilione tse makholo, ho tloha ho li-routers ho isa ho li-firewall. Litsebi tsa Red Balloon li ile tsa khona ho qoba tšireletso e joalo ea lisebelisoa tsa Cisco e le Trust Anchor. "Trust Anchor," joalo ka ha lentsoe lena le ka fetoleloa, ke nts'etsopele ea li-module tsa netefatso ea thepa ea thepa ea k'hamphani (eo pele e neng e le ACT). Mojule oa ACT o ile oa hlahisoa ho sireletsa khahlanong le thepa ea maiketsetso 'me hamorao ea fetoloa mojule bakeng sa ho lekola botšepehi ba karolo ea software ea lisebelisoa tsa marang-rang tsa Cisco. Kajeno, Trust Anchor e teng lisebelisoa tsohle tse sebetsang tsa marang-rang tsa k'hamphani. Ha ho thata ho nahana hore na ho sekisetsa ha Trust Anchor ho tla kenyelletsa eng. Marang-rang a lisebelisoa tsa Cisco ha a sa tla hlola a tšeptjoa.
Bafuputsi ba fumane mokhoa oa ho qhekella Trust Anchor. Thepa e tsoileng matsoho e ile ea tsoela pele ho tsebisa bareki ka ho se sitisoe, athe litsebi li etsa eng kapa eng eo li e batlang ka eona. Sena, ka tsela, se etsa hore re nahane ka qetello ea tsoelo-pele e tšoanang ea ARM (TrustZone), Intel (SGX) le mekhoa e meng e tšoanang ea hardware bakeng sa ho sireletsa liforomo tsa k'homphieutha. Ho ka bonahala eka ena ke tharollo ea ho koala masoba ho meralo ea li-processor. Chip kapa module e tšeptjoang ka har'a chipset e ka etsa hore likhomphutha li sireletsehe haholoanyane khahlano le bosholu. Ha e le hantle, sekoti kapa monyetla oa ho qoba tšireletso o ile oa fumanoa esita le ka tharollo moo ho kena ho fokolang haholo 'me hangata ho khoneha feela sebakeng sa tlhahiso ea thepa.
Maemo a ho qetela a tla ba a bohlokoa bakeng sa ho koala masoba a amanang le ho sekisetsa li-module tsa Trust Anchor. Leha Cisco e ts'episitse ho lokolla li-patches ho lokisa ts'oaetso ea Trust Anchor bakeng sa lisebelisoa tsohle tsa eona, ho jarolla ntjhafatso ho kanna ha se rarolle bothata bona. Cisco e re sena se tla hloka "reprogramming ea lehae," ho bolelang hore ho ke ke ha khonahala ho nchafatsa thepa ea hau u le hole. Matsatsi a maphathaphathe a emetse basebetsi ba sebeletsang marang-rang ba sebelisa lisebelisoa tsa Cisco. 'Me lehlabula le ntseng le atamela ha le amane le sena.
Source: 3dnews.ru