I-Thunderspy-uthotho lohlaselo kwizixhobo ezinojongano lweThunderbolt

Ityhiliwe Ulwazi malunga Ubuthathaka obusixhenxe kwisixhobo esinonxibelelwano lweThunderbolt, edityaniswe phantsi kwegama lekhowudi Iindudumo kwaye udlule kuzo zonke iindawo zokhuseleko zeThunderbolt. Ngokusekelwe kwiingxaki ezichongiweyo, iimeko ezisithoba zokuhlaselwa zicetywayo, ziphunyezwe ukuba umhlaseli unokufikelela kwendawo kwinkqubo ngokudibanisa isixhobo esikhohlakeleyo okanye ngokuxhaphaza i-firmware.

Iimeko zohlaselo zibandakanya ukukwazi ukwenza izichazi zezixhobo ze-Thunderbolt ezingafanelekanga, izixhobo ezigunyazisiweyo ze-clone, ukufikelela ngokungaqhelekanga kwimemori yenkqubo nge-DMA kunye nokugqithisa imimiselo yeNqanaba loKhuseleko, kuquka ukukhubaza ngokupheleleyo zonke iindlela zokukhusela, ukuvala ukufakwa kohlaziyo lwe-firmware kunye nokuguqulelwa kojongano kwimowudi yeThunderbolt. iinkqubo ezilinganiselweyo kwi-USB okanye kwiDisplayPort ugqithiso.

I-Thunderbolt yi-interface yendalo yonke yokudibanisa izixhobo ze-peripheral ezidibanisa i-PCIe (PCI Express) kunye ne-DisplayPort interfaces kwintambo enye. I-Thunderbolt yaphuhliswa yi-Intel kunye ne-Apple kwaye isetyenziswa kwiilaptops ezininzi zanamhlanje kunye neePC. Izixhobo ezisekelwe kwi-PCIe ze-Thunderbolt zibonelelwa nge-DMA I / O, ebeka isoyikiso sokuhlaselwa kwe-DMA ukufunda nokubhala yonke imemori yenkqubo okanye ukubamba idatha kwizixhobo ezifihliweyo. Ukuthintela uhlaselo olunjalo, iThunderbolt iphakamise ingqikelelo yeNqanaba loKhuseleko, evumela ukusetyenziswa kwezixhobo ezigunyaziswe ngumsebenzisi kuphela kwaye isebenzise ukuqinisekiswa kwe-cryptographic yoqhagamshelo ukukhusela kwi-ID yomgunyathi.

Ubuthathaka obuchongiweyo bukwenza kube lula ukudlula olo bophelelo kwaye uqhagamshele isixhobo esikhohlakeleyo phantsi kwengubo yalowo ugunyazisiweyo. Ukongeza, kunokwenzeka ukuguqula i-firmware kwaye utshintshe i-SPI Flash kwimowudi yokufunda kuphela, enokuthi isetyenziswe ukukhubaza ngokupheleleyo amanqanaba okhuseleko kunye nokuthintela uhlaziyo lwe-firmware (izixhobo zilungiselelwe ukukhohlisa okunjalo. tcfp и i-spiblock). Lilonke, ulwazi malunga neengxaki ezisixhenxe luxeliwe:

  • Ukusetyenziswa kwenkqubo yokuqinisekisa i-firmware enganelanga;
  • Ukusebenzisa inkqubo yoqinisekiso lwesixhobo esibuthathaka;
  • Ilayisha imetadata kwisixhobo esingagunyaziswanga;
  • Ubukho beendlela zokuhambelana ngasemva ezivumela ukusetyenziswa kohlaselo lokubuyela emva iiteknoloji ezisengozini;
  • Ukusebenzisa iiparamitha zoqwalaselo lomlawuli ongagunyaziswanga;
  • Iingxaki kujongano lweSPI Flash;
  • Ukungabikho kwezixhobo zokukhusela kwinqanaba Ikhempu yebhuthi.

Ubuthathaka buchaphazela zonke izixhobo ezixhotyiswe nge-Thunderbolt 1 kunye ne-2 (i-Mini DisplayPort esekelwe) kunye ne-Thunderbolt 3 (esekelwe kwi-USB-C). Akukacaci ukuba ngaba iingxaki zivela kwizixhobo ezine-USB 4 kunye ne-Thunderbolt 4, kuba obu buchwepheshe busanda kubhengezwa kwaye akukho ndlela yokuvavanya ukuphunyezwa kwabo okwangoku. Ubuthathaka abunakupheliswa yisoftware kwaye ifuna ukuyilwa ngokutsha kwezixhobo zehardware. Nangona kunjalo, kwezinye izixhobo ezitsha kunokwenzeka ukuvala ezinye zeengxaki ezinxulumene ne-DMA usebenzisa umatshini Ukhuseleko lwe-Kernel DMA, inkxaso eyaqala ukuphunyezwa ukususela ngo-2019 (ixhaswe ngu kwi-Linux kernel, ukuqala ngokukhululwa kwe-5.0, unokujonga ukufakwa ngokusebenzisa "/sys/bus/thunderbolt/devices/domainX/iommu_dma_protection").

Iskripthi sePython sinikezelwe ukujonga izixhobo zakho Spycheck, efuna ukubaleka njengengcambu ukufikelela kwi-DMI, itafile ye-ACPI DMAR kunye ne-WMI. Ukukhusela iinkqubo ezisesichengeni, sicebisa ukuba ungayishiyi inkqubo ingajongwanga okanye ikwimowudi yokulinda, musa ukuqhagamshela izixhobo zeNdudumo yomnye umntu, musa ukushiya okanye unike abanye izixhobo zakho, kwaye uqinisekise ukuba izixhobo zakho zikhuselekile ngokwasemzimbeni. Ukuba iThunderbolt ayidingeki, kuyacetyiswa ukuba ukhubaze isilawuli seThunderbolt kwi-UEFI okanye kwiBIOS (oku kunokubangela ukuba i-USB kunye neDisplayPort izibuko zingasebenzi ukuba ziphunyezwe ngolawulo lweThunderbolt).

umthombo: opennet.ru

Yongeza izimvo