Abaphandi abavela kwi-Binarly bachonge uthotho lobuthathaka kwikhowudi yokwahlulahlula umfanekiso esetyenziswa kwi-firmware ye-UEFI evela kubavelisi abohlukeneyo. Ubuthathaka buvumela umntu ukuba afezekise ukwenziwa kwekhowudi ngexesha lokuqalisa ngokubeka umfanekiso owenziwe ngokukodwa kwicandelo le-ESP (EFI System Partition) okanye kwinxalenye yohlaziyo lwe-firmware olungasayinwanga ngokwedijithali. Indlela yohlaselo ecetywayo ingasetyenziselwa ukugqitha i-UEFI eKhuselekileyo ye-Boot eqinisekisiweyo yendlela yokuqalisa kunye neendlela zokukhusela izixhobo ezifana ne-Intel Boot Guard, i-AMD Hardware-Validated Boot kunye ne-ARM TrustZone Secure Boot.
Ingxaki ibangelwa kukuba i-firmware ikuvumela ukuba ubonise iilogo ezichazwe ngumsebenzisi kwaye usebenzise iilayibrari zokwahlula umfanekiso kule nto, eyenziwa kwinqanaba le-firmware ngaphandle kokusetha kwakhona amalungelo. Kuqatshelwe ukuba i-firmware yanamhlanje ibandakanya ikhowudi yokwahlulahlula i-BMP, i-GIF, i-JPEG, i-PCX kunye neefomathi ze-TGA, eziqulathe ubuthathaka obukhokelela ekuphuphumeni kwe-buffer xa kusahlulwa idatha engachanekanga.
Ubuthathaka buchongiwe kwi-firmware ebonelelwa ngabathengisi bezinto ezahlukeneyo (Intel, Acer, Lenovo) kunye nabavelisi be-firmware (AMI, Insyde, Phoenix). Ngenxa yokuba ikhowudi yengxaki ikhona kumacandelo ereferensi anikezelwe ngabathengisi be-firmware abazimeleyo kwaye isetyenziswe njengesiseko sabenzi behardware abahlukeneyo ukwakha i-firmware yabo, ubuthathaka abukho ngokuthe ngqo kumthengisi kwaye buchaphazela yonke i-ecosystem.
Iinkcukacha malunga nobuthathaka obuchongiweyo zithenjiswe ukuba ziya kutyhilwa ngoDisemba 6 kwinkomfa ye-Black Hat Europe 2023. Inkcazo kwinkomfa iya kubonisa kwakhona ukuxhaphazwa okukuvumela ukuba wenze ikhowudi yakho ngamalungelo e-firmware kwiinkqubo kunye ne-x86 kunye ne-ARM architecture. Ekuqaleni, ubuthathaka bachongwa ngexesha lokuhlalutya i-firmware ye-Lenovo eyakhelwe kumaqonga avela kwi-Insyde, AMI kunye ne-Phoenix, kodwa i-firmware evela kwi-Intel kunye ne-Acer nayo yakhankanywa njengento enokuba sengozini.
umthombo: opennet.ru