{"id":80658,"date":"2020-05-07T19:42:15","date_gmt":"2020-05-07T17:42:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/microsoft-naznachil-premiyu-do-100000-za-vyyavlenie-uyazvimosti-v-linux-platforme-azure-sphere"},"modified":"2020-05-07T19:42:15","modified_gmt":"2020-05-07T17:42:15","slug":"microsoft-naznachil-premiyu-do-100000-za-vyyavlenie-uyazvimosti-v-linux-platforme-azure-sphere","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/microsoft-naznachil-premiyu-do-100000-za-vyyavlenie-uyazvimosti-v-linux-platforme-azure-sphere","title":{"rendered":"Microsoft har utlyst en bel\u00f6ning p\u00e5 upp till $100000 f\u00f6r att uppt\u00e4cka s\u00e5rbarheter i Linux-plattformen Azure Sphere","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Microsoft F\u00f6retaget tillk\u00e4nnagav<\/a><\/noindex> om villigheten att betala ett pris<\/a><\/noindex>, upp till hundratusen dollar, f\u00f6r att identifiera en s\u00e5rbarhet i IoT-plattformen Azure Sphere<\/a><\/noindex>, byggd<\/a><\/noindex> p\u00e5 en Linux-k\u00e4rna och anv\u00e4nder sandbox-isolering f\u00f6r k\u00e4rntj\u00e4nster och applikationer. Priset lovas f\u00f6r att demonstrera svagheter i subsystemet Pluton<\/a><\/noindex> (rot f\u00f6rtroende, implementerat i chipet) eller Secure World<\/a><\/noindex> (sandbox).<\/p>\n

Priset \u00e4r en del av ett tre m\u00e5nader l\u00e5ngt forskningsprogram<\/a><\/noindex>, som kommer att p\u00e5g\u00e5 fr\u00e5n 1 juni till 31 augusti 2020. Initiativet riktar sig specifikt mot Azure Sphere OS och inkluderar inte molnsystem, som redan omfattas av ett separat bel\u00f6ningsprogram. F\u00f6r att f\u00e5 priset m\u00e5ste en s\u00e5rbarhet demonstreras som vid en lokal (kompromiss av applikationen) eller fj\u00e4rrattack kan leda till utf\u00f6rande av osignerad kod fr\u00e5n tredje part, avlyssning av autentiseringsparametrar, h\u00f6jning av privilegier, \u00e4ndring av inst\u00e4llningar eller kringg\u00e5 n\u00e4tverksbrandv\u00e4ggens begr\u00e4nsningar. F\u00f6r att genomf\u00f6ra forskningen har Microsoft uttryckt sin villighet att ge deltagarna tillg\u00e5ng till produkter och tj\u00e4nster, Azure Sphere SDK, teknisk dokumentation samt s\u00e4kerst\u00e4lla en kommunikationskanal med plattformsutvecklarna.<\/p>\n

Plattformen Azure Sphere \u00e4r avsedd f\u00f6r att skapa internet-of-things-enheter, byggda p\u00e5 energieffektiva mikrocontrollers (MCU, microcontroller unit) med integrerade perifera subsystem. Azure Sphere anv\u00e4nds bland annat inom handelsutrustning, till exempel av f\u00f6retag som Starbucks. En av plattformens funktioner \u00e4r subsystemet Pluton, som \u00e4r avsett att tillhandah\u00e5lla h\u00e5rdvaruresurser f\u00f6r kryptering, lagring av hemliga nycklar och utf\u00f6rande av komplexa kryptografiska operationer. Pluton inkluderar en separat specialprocessor, en kryptografisk motor, en h\u00e5rdvarugenerator f\u00f6r slumpm\u00e4ssiga tal och ett isolerat nyckellager.<\/p>\n

Dessutom kan det n\u00e4mnas framkomsten<\/a><\/noindex> av uppgifter<\/a><\/noindex> om f\u00f6rs\u00f6k att s\u00e4lja ok\u00e4nt inneh\u00e5ll fr\u00e5n privata GitHub-repositorier hos Microsoft. En ok\u00e4nd person uppgav att han lyckats ladda ner cirka 500 GB data fr\u00e5n Microsofts privata repositorier, som lagras p\u00e5 GitHub, och tillhandah\u00f6ll sk\u00e4rmdumpar och 1 GB data som bevis. De flesta deltagare ans\u00e5g bevisen vara otillr\u00e4ckliga, eftersom sk\u00e4rmdumpar l\u00e4tt kan f\u00f6rfalskas och att de data som presenterades bestod av en meningsl\u00f6s samling filer med kinesisk text, tester och kodavsnitt. En av Microsofts ingenj\u00f6rer i kommentarer<\/a><\/noindex> uttalade att l\u00e4ckan sannolikt \u00e4r en bluff, eftersom Microsoft har en regel som s\u00e4ger att projekt som finns i privata repositorier p\u00e5 GitHub ska bli offentliga inom 30 dagar.<\/p>\n

<\/a><\/noindex><\/p>\n

K\u00e4lla: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0433\u043e\u0442\u043e\u0432\u043d\u043e\u0441\u0442\u0438 \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u0442\u044c \u043f\u0440\u0435\u043c\u0438\u044e, \u0440\u0430\u0437\u043c\u0435\u0440\u043e\u043c \u0434\u043e \u0441\u0442\u0430 \u0442\u044b\u0441\u044f\u0447 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432, \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0431\u0440\u0435\u0448\u0438 \u0432 IoT-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Azure Sphere, \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 \u044f\u0434\u0440\u0430 Linux \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0449\u0435\u0439 sandbox-\u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u0434\u043b\u044f \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u041f\u0440\u0435\u043c\u0438\u044f \u043e\u0431\u0435\u0449\u0430\u043d\u0430 \u0437\u0430 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 Pluton (\u043a\u043e\u0440\u0435\u043d\u044c \u0434\u043e\u0432\u0435\u0440\u0438\u044f, \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0432 \u0447\u0438\u043f\u0435) \u0438\u043b\u0438 Secure World (sandbox). \u041f\u0440\u0435\u043c\u0438\u044f \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0430\u0441\u0442\u044c\u044e \u0442\u0440\u0451\u0445\u043c\u0435\u0441\u044f\u0447\u043d\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-80658","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Microsoft utlovar en bel\u00f6ning p\u00e5 upp till $100000 f\u00f6r att uppt\u00e4cka en s\u00e5rbarhet i Linux-plattformen Azure Sphere | ProHoster","description":"Microsoft har meddelat att de \u00e4r villiga att betala","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/microsoft-naznachil-premiyu-do-100000-za-vyyavlenie-uyazvimosti-v-linux-platforme-azure-sphere","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Microsoft \u043d\u0430\u0437\u043d\u0430\u0447\u0438\u043b \u043f\u0440\u0435\u043c\u0438\u044e \u0434\u043e $100000 \u0437\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Linux-\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Azure Sphere | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0433\u043e\u0442\u043e\u0432\u043d\u043e\u0441\u0442\u0438 \u0432\u044b\u043f\u043b\u0430\u0442\u0438\u0442\u044c","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/microsoft-naznachil-premiyu-do-100000-za-vyyavlenie-uyazvimosti-v-linux-platforme-azure-sphere","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-05-07T17:42:15+00:00","article:modified_time":"2020-05-07T17:42:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"80658","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 16:13:24","updated":"2022-10-04 18:24:34","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/80658","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=80658"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/80658\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=80658"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=80658"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=80658"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}