Intel har bekr\u00e4ftat \u00e4ktheten av de publicerade UEFI-firmware och BIOS-k\u00e4llkoderna av en ok\u00e4nd akt\u00f6r p\u00e5 GitHub. Totalt publicerades 5,8 GB kod, verktyg, dokumentation, blobs och inst\u00e4llningar relaterade till skapandet av firmware f\u00f6r system med processorer baserade p\u00e5 mikroarkitekturen Alder Lake, som sl\u00e4pptes i november 2021. Den senaste \u00e4ndringen i den publicerade koden \u00e4r daterad den 30 september 2022. <\/p>\n
Enligt Intel intr\u00e4ffade l\u00e4ckan p\u00e5 grund av en tredje part och inte som ett resultat av en kompromettering av f\u00f6retagets infrastruktur. Det n\u00e4mns ocks\u00e5 att den offentliggjorda koden omfattar Project Circuit Breaker-programmet, som inneb\u00e4r bel\u00f6ningar om mellan 500 och 100 000 dollar f\u00f6r att identifiera s\u00e4kerhetsproblem i firmwaren och produkterna fr\u00e5n Intel (det antas att forskare kan f\u00e5 bel\u00f6ningar f\u00f6r rapporter om s\u00e5rbarheter uppt\u00e4ckta med hj\u00e4lp av inneh\u00e5llet i l\u00e4ckan). <\/p>\n
Det framg\u00e5r inte vem som exakt var k\u00e4llan till l\u00e4ckan (OEM-tillverkare hade tillg\u00e5ng till verktygen f\u00f6r att bygga firmware och f\u00f6retag som utvecklar skr\u00e4ddarsydd firmware). Under analysen av inneh\u00e5llet i det publicerade arkivet identifierades vissa specifika tester och tj\u00e4nster f\u00f6r produkter fr\u00e5n f\u00f6retaget Lenovo (\"Lenovo Feature Tag Test Information\", \"Lenovo String Service\", \"Lenovo Secure Suite\", \"Lenovo Cloud Service\"), men Lenovo:s involvering i l\u00e4ckan har \u00e4nnu inte bekr\u00e4ftats. Arkivet inneh\u00f6ll ocks\u00e5 verktyg och bibliotek fr\u00e5n Insyde Software, som utvecklar firmware p\u00e5 uppdrag av OEM-tillverkare, och i git-loggen finns en e-postadress till en anst\u00e4lld vid f\u00f6retaget LC Future Center, som tillverkar b\u00e4rbara datorer f\u00f6r olika OEM-tillverkare. B\u00e5da f\u00f6retagen samarbetar med Lenovo. <\/p>\n
Enligt Intel inneh\u00e5ller den offentligt tillg\u00e4ngliga koden inga konfidentiella data eller komponenter som kan bidra till avsl\u00f6jandet av nya s\u00e5rbarheter. Samtidigt uppt\u00e4ckte Mark Yermolov, expert p\u00e5 s\u00e4kerhetsforskning kring Intel-plattformar, information om odokumenterade MSR-register (Model Specific Registers, som anv\u00e4nds f\u00f6r att hantera mikrokod, sp\u00e5rning och fels\u00f6kning) i det publicerade arkivet, vars information omfattas av en sekretess\u00f6verenskommelse. Dessutom \u00e5terfanns en privat nyckel i paketet, som anv\u00e4nds f\u00f6r att signera firmware digitalt, vilket potentiellt kan anv\u00e4ndas f\u00f6r att kringg\u00e5 Intel Boot Guard (funktionaliteten av nyckeln har inte bekr\u00e4ftats, det \u00e4r m\u00f6jligt att det \u00e4r en testnyckel). \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Intel \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0438 BIOS, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u043d\u0430 GitHub. \u0412\u0441\u0435\u0433\u043e \u0431\u044b\u043b\u043e \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043e 5.8 \u0413\u0411 \u043a\u043e\u0434\u0430, \u0443\u0442\u0438\u043b\u0438\u0442, \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438, \u0431\u043b\u043e\u0431\u043e\u0432 \u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0435\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c \u0441 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u043c\u0438 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b Alder Lake, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0439 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2021 \u0433\u043e\u0434\u0430. \u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0441\u0432\u0435\u0436\u0435\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0432 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043a\u043e\u0434\u0435 \u0434\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e 30 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430. \u041f\u043e \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0438\u044e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105273","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Intel bekr\u00e4ftade \u00e4ktheten av koden f\u00f6r UEFI-firmwarel\u00e4ckan f\u00f6r Alder Lake-chip | ProHoster","description":"Intel har bekr\u00e4ftat \u00e4ktheten av k\u00e4llkoden f\u00f6r UEFI-firmware och BIOS som offentliggjordes av en ok\u00e4nd akt\u00f6r p\u00e5 GitHub.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/intel-podtverdil-podlinnost-utechki-koda-uefi-proshivok-dlya-chipov-alder-lake","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Intel \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u044c \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u0434\u0430 UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0434\u043b\u044f \u0447\u0438\u043f\u043e\u0432 Alder Lake | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Intel \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 UEFI-\u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0438 BIOS, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c \u043d\u0430 GitHub.","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/intel-podtverdil-podlinnost-utechki-koda-uefi-proshivok-dlya-chipov-alder-lake","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-10-10T07:36:38+00:00","article:modified_time":"2022-10-10T07:36:38+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/105273","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=105273"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/105273\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=105273"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=105273"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=105273"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
K\u00e4lla: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"