ื ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ ื™ื ื˜ืขืœ ื˜ืฉื™ืคึผืกืขืฅ ืึทื– ืึทืœืึทื•ื– ื“ื™ ืคึผืœืึทื˜ืคืึธืจืžืข ื•ื•ืึธืจืฆืœ ืฉืœื™ืกืœ ืฆื• ื–ื™ื™ืŸ ื™ืงืกื˜ืจืึทืงื˜ื™ื“

ืจืขืกืขืึทืจื˜ืฉืขืจืก ืคื•ืŸ positive ื˜ืขื˜ืฉื ืึธืœืึธื’ื™ืขืก ืื ื˜ืคืœืขืงื˜ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ (CVE-2019-0090), ื•ื•ืึธืก ืึทืœืึทื•ื–, ืื•ื™ื‘ ืื™ืจ ื”ืึธื‘ืŸ ืคื™ื–ื™ืฉ ืึทืงืกืขืก ืฆื• ื“ื™ ืขืงื•ื•ื™ืคึผืžืขื ื˜, ืฆื• ืขืงืกื˜ืจืึทืงื˜ ื“ื™ ืคึผืœืึทื˜ืคืึธืจืžืข ื•ื•ืึธืจืฆืœ ืฉืœื™ืกืœ (ื˜ืฉื™ืคึผืกืขื˜ ืฉืœื™ืกืœ), ื•ื•ืึธืก ืื™ื– ื’ืขื ื™ืฆื˜ ื•ื•ื™ ืึท ื•ื•ืึธืจืฆืœ ืคื•ืŸ ืฆื•ื˜ืจื•ื™ ื•ื•ืขืŸ ื•ื•ืขืจืึทืคื™ื™ื™ื ื’ ื“ื™ ืึธื˜ืึทื ื˜ื™ืกื™ื˜ื™ ืคื•ืŸ ืคืึทืจืฉื™ื“ืŸ ืคึผืœืึทื˜ืคืึธืจืžืข ืงืึทืžืคึผืึธื•ื ืึทื ืฅ, ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ TPM (Trusted Platform Module) ืื•ืŸ UEFI ืคื™ืจืžื•ื•ืึทืจืข.

ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ื’ืขืคึฟื™ืจื˜ ื“ื•ืจืš ืึท ื–ืฉื•ืง ืื™ืŸ ื“ื™ ื™ื™ึทื–ื ื•ื•ืึทืจื’ ืื•ืŸ Intel CSME ืคื™ืจืžื•ื•ืึทืจืข, ื•ื•ืึธืก ืื™ื– ืœื™ื’ืŸ ืื™ืŸ ื“ื™ ืฉื˜ื™ื•ื•ืœ ืจืึทื, ื•ื•ืึธืก ืคึผืจื™ื•ื•ืขื ืฅ ื“ื™ ืคึผืจืึธื‘ืœืขื ืคื•ืŸ ืคืึทืจืคืขืกื˜ื™ืงื˜ ืื™ืŸ ื“ืขื•ื•ื™ืกืขืก ืฉื•ื™ืŸ ืื™ืŸ ื ื•ืฆืŸ. ืจืขื›ื˜ ืฆื• ื“ืขื ื‘ื™ื™ึทื–ื™ื™ึทืŸ ืคื•ืŸ ืึท ืคึฟืขื ืฆื˜ืขืจ ื‘ืขืฉืึทืก ืึทืŸ Intel CSME ืจื™ืกื˜ืึทืจื˜ (ืคึฟืึทืจ ื‘ื™ื™ึทืฉืคึผื™ืœ, ื•ื•ืขืŸ ืจื™ืกื•ืžื™ื ื’ ืคื•ืŸ ืฉืœืึธืคืŸ ืžืึธื“ืข), ื“ื•ืจืš DMA ืžืึทื ื™ืคึผื™ืึทืœื™ื™ืฉืึทืŸ, ืขืก ืื™ื– ืžืขื’ืœืขืš ืฆื• ืฉืจื™ื™ึทื‘ืŸ ื“ืึทื˜ืŸ ืฆื• Intel CSME ืกื˜ืึทื˜ื™ืง ื–ื›ึผืจื•ืŸ ืื•ืŸ ืžืึธื“ื™ืคื™ืฆื™ืจืŸ ืฉื•ื™ืŸ ื™ื ื™ื˜ื™ืึทืœื™ื™ื–ื“ Intel CSME ื–ื›ึผืจื•ืŸ ื‘ืœืึทื˜ ื˜ื™ืฉืŸ ืฆื• ื™ื ื˜ืขืจืกืขืคึผื˜ ื“ื•ืจื›ืคื™ืจื•ื ื’, ืฆื•ืจื™ืงืงืจื™ื’ืŸ ื“ื™ ืคึผืœืึทื˜ืคืึธืจืžืข ืฉืœื™ืกืœ ืื•ืŸ ื‘ืึทืงื•ืžืขืŸ ืงืึธื ื˜ืจืึธืœ ืื™ื‘ืขืจ ื“ื™ ื“ื•ืจ ืคื•ืŸ ืขื ืงืจื™ืคึผืฉืึทืŸ ืฉืœื™ืกืœืขืŸ ืคึฟืึทืจ Intel CSME ืžืึทื“ื–ืฉื•ืœื–. ื“ืขื˜ืึทื™ืœืก ืคื•ืŸ ืขืงืกืคึผืœื•ื™ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ื–ืขื ืขืŸ ืคึผืœืึทื ื ืขื“ ืฆื• ื–ื™ื™ืŸ ืืจื•ื™ืก ืฉืคึผืขื˜ืขืจ.

ืื™ืŸ ืึทื“ื™ืฉืึทืŸ ืฆื• ื™ืงืกื˜ืจืึทืงื˜ื™ื ื’ ื“ื™ ืฉืœื™ืกืœ, ื“ืขืจ ื˜ืขื•ืช ืื•ื™ืš ืึทืœืึทื•ื– ืงืึธื“ ืฆื• ื–ื™ื™ืŸ ืขืงืกืึทืงื™ื•ื˜ืึทื“ ืื•ื™ืฃ ื ื•ืœ ืคึผืจื™ื•ื•ื™ืœืขื’ื™ืข ืžื“ืจื’ื” Intel CSME (ืงืึธื ื•ื•ืขืจื“ื–ืฉื“ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืื•ืŸ ืžืึทื ืึทื’ืขืึทื‘ื™ืœื™ื˜ื™ ืขื ื’ื™ื ืข). ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืึทืคืขืงืฅ ืจื•ื‘ึฟ ื™ื ื˜ืขืœ ื˜ืฉื™ืคึผืกืขืฅ ืจืขืœืขืึทืกืขื“ ืื™ืŸ ื“ื™ ืœืขืฆื˜ืข ืคื™ื ืฃ ื™ืึธืจ, ืึธื‘ืขืจ ืื™ืŸ ื“ื™ 10 ื“ื•ืจ ืคื•ืŸ ืคึผืจืึทืกืขืกืขืจื– (ืื™ื™ื– ืคึผื•ื™ื ื˜) ื“ื™ ืคึผืจืึธื‘ืœืขื ืื™ื– ื ื™ื˜ ืžืขืจ ืื•ื™ืก. ื™ื ื˜ืขืœ ื’ืขื•ื•ืืจืŸ ืึทื•ื•ืขืจ ืคื•ืŸ ื“ืขื ืคึผืจืึธื‘ืœืขื ื•ื•ืขื’ืŸ ืึท ื™ืึธืจ ืฆื•ืจื™ืง ืื•ืŸ ื‘ืืคืจื™ื™ื˜ ืคื™ืจืžื•ื•ืึทืจืข ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ, ื•ื•ืึธืก, ื›ืึธื˜ืฉ ื–ื™ื™ ืงืขื ืขืŸ ื ื™ืฉื˜ ื˜ื•ื™ืฉืŸ ื“ื™ ืฉืคึผื™ืจืขื•ื•ื“ื™ืง ืงืึธื“ ืื™ืŸ ื“ื™ ืจืึทื, ืคึผืจื•ื‘ื™ืจืŸ ืฆื• ืคืึทืจืฉืคึผืึทืจืŸ ืžืขื’ืœืขืš ืขืงืกืคึผืœื•ื™ื˜ื™ื™ืฉืึทืŸ ืคึผืึทื˜ืก ืื•ื™ืฃ ื“ื™ ืžื“ืจื’ื” ืคื•ืŸ ื™ื—ื™ื“ Intel CSME ืžืึทื“ื–ืฉื•ืœื–.

ืžืขื’ืœืขืš ืงืึทื ืกืึทืงื•ื•ืขื ืกืึทื– ืคื•ืŸ ื‘ืืงื•ืžืขืŸ ื“ื™ ืคึผืœืึทื˜ืคืึธืจืžืข ื•ื•ืึธืจืฆืœ ืฉืœื™ืกืœ ืึทืจื™ื™ึทื ื ืขืžืขืŸ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ืคื™ืจืžื•ื•ืึทืจืข ืคื•ืŸ โ€‹โ€‹Intel CSME ืงืึทืžืคึผืึธื•ื ืึทื ืฅ, ืงืึธืžืคึผืจืึธืžื™ืก ืคื•ืŸ ืžื™ื“ื™ืึท ืขื ืงืจื™ืคึผืฉืึทืŸ ืกื™ืกื˜ืขืžืขืŸ ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ Intel CSME, ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ ื“ื™ ืžืขื’ืœืขื›ืงื™ื™ื˜ ืคื•ืŸ ืคืึธืจื’ื™ื ื’ EPID ื™ื“ืขื ื˜ื™ืคื™ืขืจืก (ื™ืžืคึผืจื•ื•ื•ื“ ืคึผืจื™ื•ื•ืึทื˜ืงื™ื™ื˜ ืฉื™ื™ึทืŸ) ืฆื• ืคืึธืจืŸ ืึทื•ื•ืขืง ื“ื™ื™ืŸ ืงืึธืžืคึผื™ื•ื˜ืขืจ ื•ื•ื™ ืื ื“ืขืจืŸ ืฆื• ื‘ื™ื™ืคึผืึทืก DRM ืฉื•ืฅ. ืื•ื™ื‘ ื™ื—ื™ื“ CSME ืžืึทื“ื–ืฉื•ืœื– ื–ืขื ืขืŸ ืงืึทืžืคึผืจืึทืžื™ื™ื–ื“, Intel ื”ืื˜ ืฆื•ื’ืขืฉื˜ืขืœื˜ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ืจื™ื“ื–ืฉืขื ืขืจื™ื™ื˜ ื“ื™ ืคึฟืึทืจื‘ื•ื ื“ืŸ ืฉืœื™ืกืœืขืŸ ืžื™ื˜ ื“ื™ SVN (Security Version Number) ืžืขืงืึทื ื™ื–ืึทื. ืื™ืŸ ืคืึทืœ ืคื•ืŸ ืึทืงืกืขืก ืฆื• ื“ืขืจ ืคึผืœืึทื˜ืคืึธืจืžืข ื•ื•ืึธืจืฆืœ ืฉืœื™ืกืœ, ื“ืขืจ ืžืขืงืึทื ื™ื–ืึทื ืื™ื– ื ื™ืฉื˜ ืขืคืขืงื˜ื™ื•ื• ื–ื™ื ื˜ ื“ืขืจ ืคึผืœืึทื˜ืคืึธืจืžืข ื•ื•ืึธืจืฆืœ ืฉืœื™ืกืœ ืื™ื– ื’ืขื ื™ืฆื˜ ืฆื• ื“ื–ืฉืขื ืขืจื™ื™ื˜ ืึท ืฉืœื™ืกืœ ืคึฟืึทืจ ืขื ืงืจื™ืคึผื˜ื™ื ื’ ื“ื™ ืึธืจื ื˜ืœืขื›ืงื™ื™ึทื˜ ืงืึธื ื˜ืจืึธืœ ื‘ืœืึธืง (ICVB, Integrity Control Value Blob), ื•ื•ืึธืก, ืื™ืŸ ืงืขืจ, ืึทืœืึทื•ื– ืื™ืจ ืฆื• ืคืึธืจื’ืข ื“ื™ ืงืึธื“ ืคื•ืŸ ืงื™ื™ืŸ ืคื•ืŸ ื“ื™ Intel CSME ืคื™ืจืžื•ื•ืึทืจืข ืžืึทื“ื–ืฉื•ืœื–.

ืขืก ืื™ื– ื‘ืืžืขืจืงื˜ ืึทื– ื“ืขืจ ื•ื•ืึธืจืฆืœ ืฉืœื™ืกืœ ืคื•ืŸ ื“ืขืจ ืคึผืœืึทื˜ืคืึธืจืžืข ืื™ื– ืกื˜ืึธืจื“ ืื™ืŸ ื™ื ืงืจื™ืคึผื˜ื™ื“ ืคืึธืจืขื ืื•ืŸ ืคึฟืึทืจ ื’ืึทื ืฅ ืงืึธืžืคึผืจืึธืžื™ืก ืขืก ืื™ื– ืื•ื™ืš ื ื™ื™ื˜ื™ืง ืฆื• ื‘ืึทืฉื˜ื™ืžืขืŸ ื“ื™ ื™ื™ึทื–ื ื•ื•ืึทืจื’ ืฉืœื™ืกืœ ืกื˜ืึธืจื“ ืื™ืŸ SKS (Secure Key Storage). ื“ืขืจ ืกืคึผืขืกื™ืคื™ืขื“ ืฉืœื™ืกืœ ืื™ื– ื ื™ืฉื˜ ื™ื™ื ืฆื™ืง ืื•ืŸ ืื™ื– ื“ื™ ื–ืขืœื‘ืข ืคึฟืึทืจ ื™ืขื“ืขืจ ื“ื•ืจ ืคื•ืŸ ื™ื ื˜ืขืœ ื˜ืฉื™ืคึผืกืขืฅ. ื–ื™ื ื˜ ื“ืขืจ ื–ืฉื•ืง ืึทืœืึทื•ื– ืงืึธื“ ืฆื• ื–ื™ื™ืŸ ืขืงืกืึทืงื™ื•ื˜ืึทื“ ืื™ืŸ ืึท ื‘ื™ื ืข ืื™ื™ื“ืขืจ ื“ื™ ืฉืœื™ืกืœ ื“ื•ืจ ืžืขืงืึทื ื™ื–ืึทื ืื™ืŸ SKS ืื™ื– ืืคื’ืขืฉื˜ืขืœื˜, ืขืก ืื™ื– ืคึผืจืขื“ื™ืงื˜ืขื“ ืึทื– ื’ื™ื›ืขืจ ืึธื“ืขืจ ืฉืคึผืขื˜ืขืจ ื“ืขื ื™ื™ึทื–ื ื•ื•ืึทืจื’ ืฉืœื™ืกืœ ื•ื•ืขื˜ ื–ื™ื™ืŸ ื‘ืืฉืœืืกืŸ.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’