TL; DR
I-Absolute Computrace ubuchwepheshe obukuvumela ukuthi ukhiye imoto yakho (hhayi
Masivume ngokushesha: Angigqekezi iminyango evulekile futhi angibhali isifundo ngalezi zinto ezikude, kodwa ngikhuluma isizinda esincane nendlela yokuthola ngokushesha ukufinyelela okukude emshinini wakho emadolweni kunoma yisiphi isimo (uma ixhunywe ku- inethiwekhi nge-RJ-45) noma, uma ixhunywe nge-Wi-Fi, i-OS Windows kuphela. Futhi, kuzokwazi ukubhalisa i-SSID, ukungena ngemvume nephasiwedi yephuzu elithile ku-Intel AMT ngokwayo, bese ukufinyelela nge-Wi-Fi nakho kungatholakala ngaphandle kokuqalisa uhlelo. Futhi futhi, uma ufaka abashayeli be-Intel ME ku-GNU/Linux, konke lokhu kufanele kusebenze nakuyo. Ngenxa yalokho, ngeke kwenzeke ukukhiya ikhompuyutha ephathekayo ukude futhi ubonise umlayezo (angikwazanga ukuthola ukuthi lokhu kungenzeka yini ngokusebenzisa lobu buchwepheshe), kodwa kuzoba nokufinyelela kudeskithophu ekude kanye ne-Secure Erase, futhi lokhu into esemqoka.
Umshayeli wetekisi wahamba ne-laptop yami ngase nginquma ukuthenga entsha ku-eBay. Yini engase yonakale?
Kusukela kumthengi kuya kumasela - ngokuqaliswa okukodwa
Ngemva kokuletha ekhaya i-laptop evela eposini, ngaqala ukuqedela ukufakwa kwangaphambili kwe-Windows 10, futhi ngemva kwalokho ngakwazi ngisho nokukhipha iFirefox, lapho kungazelelwe:
Ngaqonda kahle ukuthi akekho owayezoshintsha ukusatshalaliswa kweWindows, futhi uma bekwenzile, konke bekungeke kubukeke kuxakile futhi ngokujwayelekile ukuvinjwa bekuzokwenzeka ngokushesha. Futhi, ekugcineni, bekungeke kube khona iphuzu ekuvimbeni noma yini, ngoba yonke into yayizolapheka ngokuyifaka kabusha. Kulungile, asiqalise kabusha.
Qalisa kabusha ku-BIOS, futhi manje konke kuya kucaca kancane:
Futhi ekugcineni, kucace ngokuphelele:
Kwenzeka kanjani ukuthi i-laptop yami ingihluphe? Yini iComputrace?
Uma sikhuluma nje, I-Computrace iyisethi yamamojula ku-EFI BIOS yakho okuthi, ngemva kokulayisha i-OS Windows, ifake ama-Trojan ayo kuyo, ingqongqoze kuseva ye-software ekude i-Absolute futhi ivumele, uma kunesidingo, ukuvimba uhlelo nge-inthanethi. Ungafunda imininingwane eyengeziwe lapha
Uma usuka kude, ubuchwepheshe obunjalo bungase bubonakale bubukeka njenge-cosmic, kodwa kuze kube yilapho sithola ukuthi konke lokhu kwenziwa ku-UEFI yomdabu kusetshenziswa amamojula asolisayo nengxenye.
Le nto ibonakala ibanda futhi inamandla kuze kube yilapho sizama, isibonelo, ukuqala ku-GNU/Linux:
Le laptop inokhiye weComputrace onikwe amandla njengamanje.
Njengoba isisho sithi,
Yini okufanele ngiyenze?
Kunama-vector amane asobala okuxazulula inkinga:
- Bhalela umdayisi ku-eBay
- Bhalela ku-Absolute software, umdali kanye nomnikazi weComputrace
- Yenza ukulahla kusuka ku-chip ye-BIOS, uyithumele ezinhlotsheni ezinomthunzi ukuze zibuyisele indawo yokulahla enepeshi evala wonke amalokhi namamenyu e-ID yedivayisi.
- Afonele uLazard
Ake sizibheke ngokulandelana:
- Thina, njengabo bonke abantu abanengqondo, siqale sibhalele umdayisi osithengisele umkhiqizo onjalo futhi sixoxe ngenkinga nalowo obhekene nayo ngokuyinhloko.
Kwenziwe:
- Ngokusho komeluleki otholwe ekujuleni kwe-Intanethi,
Udinga ukuxhumana nesofthiwe ephelele. Bazofuna inombolo ye-serial yomshini kanye nenombolo ye-serial yebhodi lomama. Uzodinga futhi ukuletha “ubufakazi bokuthenga”, njengerisidi. Bazoxhumana nomnikazi abanaye efayelini futhi bathole okuthi KULUNGILE ukuze balisuse. Ngokucabanga ukuthi ayintshontshiwe, bazobe sebeyihlaba umkhosi ukuze isuswe. Ngemuva kwalokho, ngokuzayo lapho uxhuma ku-inthanethi noma unoxhumano lwe-inthanethi oluvulekile, isimangaliso sizokwenzeka futhi sizobe singasekho. Thumela izinto engikhulume ngazo [i-imeyili ivikelwe].
singabhalela ngokuqondile ku-Absolute futhi sixhumane nabo ngokuqondile mayelana nokuvula. Ngathatha isikhathi sami futhi nganquma ukuphendukela kulesi sixazululo kuphela ngasekupheleni.
- Ngenhlanhla, isixazululo esinonya senkinga sase sikhona kakade. Lezi
Abafana kanye nabanye ochwepheshe abaningi bosekelo lwamakhompyutha ku-eBay efanayo ngisho namaNdiya ku-Facebook asithembisa ukuvula i-BIOS yethu uma sibathumelela indawo yokulahla imfucuza bese silinda imizuzu embalwa.Inqubo yokuvula ichazwa kanje:
Isixazululo sokuvula siyatholakala ekugcineni futhi sidinga umklami we-SPEG ukuthi akwazi ukukhanyisa i-BIOS.
Inqubo yile:
- Ukufunda i-BIOS bese udala indawo yokulahla evumelekile. Ku-Thinkpad, i-BIOS ishade ne-chip ye-TPM yangaphakathi futhi iqukethe isiginesha yayo ehlukile, ngakho-ke kubalulekile ukuthi i-BIOS yasekuqaleni ifundwe kahle ukuze kuphumelele wonke umsebenzi futhi kubuyiselwe i-BIOS kamuva.
- Ukunamathisela amabhanari we-BIOS bese ujova uhlelo lwe-UEFI yonke encane. Lolu hlelo luzofunda i-eeprom evikelekile, lusethe kabusha isitifiketi se-TPM nephasiwedi, lubhale i-eeprom evikelekile futhi yakhe kabusha yonke idatha.
- Bhala okulahlwayo kwe-BIOS okunamathiselwe (lokhu kuzosebenza kuphela kuleyo TP btw), qala ikhompuyutha ephathekayo bese ukhiqiza i-ID ye-Hardware. Sizokuthumelela ukhiye oyingqayizivele ozovula i-Allservice BIOS, ngenkathi i-BIOS ilayisha izosebenzisa inqubo yokuvula futhi ivule i-SVP ne-TPM.
- Ekugcineni, bhala ukulahlwa kwe-BIOS kwasekuqaleni ukuze uthole imisebenzi evamile futhi ujabulele ikhompuyutha ephathekayo.
Singase futhi sikhubaze i-Computrace noma sishintshe i-SN/UUID bese sisetha kabusha iphutha le-RFID checksum ngokusebenzisa uhlelo lwethu lwe-UEFI ngendlela efanayo, uma kunesidingo.
Intengo yesevisi yokuvula ingomshini ngamunye (njengoba senza ku-Macbook/iMac, HP, Acer, njll) Ngenani lesevisi nokutholakala sicela ufunde okuthunyelwe okulandelayo ngezansi. Ungaxhumana [i-imeyili ivikelwe] nganoma yimuphi uphenyo.
Kubonakala kungokoqobo! Kodwa lokhu, futhi, ngenxa yezizathu ezisobala, kuyinketho yesimo esibi kakhulu, futhi ngaphandle kwalokho, konke ukuzijabulisa kubiza i-$ 80. Siyishiyela kamuva.
- Uma uLazard engiphule yonke into futhi engicela ukuthi ngikubize futhi, akufanele wenqabe! Asingene emsebenzini.
I-Lazard sibiza igama layo ngokuthi “inkampani ehamba phambili emhlabeni yokweluleka ngezezimali nokuphathwa kwempahla, eyeluleka ngokuhlanganisa, ukuthengwa, ukuhlelwa kabusha, ukwakheka kwezimali kanye namasu”
Ngenkathi umthengisi ovela ku-eBay ephendula, ngiphonsa amarandi ambalwa ku-zadarma futhi ngibheke phambili ekukhulumeni mhlawumbe nomuntu ongenamphefumulo ophelele emhlabeni - ukusekelwa kwenkampani enkulu yezezimali evela eNew York. Intombazane isheshe ilubambe ucingo, ilalele ngesiNgisi sakwethu izincazelo ezinamahloni zokuthi ngiyithenge kanjani le laptop, ibhale inombolo yayo yocingo bese ithembisa ukuyinika abaphathi, abazongifonela. Le nqubo iphindwe kabili ncamashi, ngosuku olulodwa ngokuhlukana. Okwesithathu, ngalinda ngamabomu kwaze kwaba ngu-10 ekuseni eNew York futhi ngafona, ngifunda ngokushesha ipasta engiyijwayele mayelana nokuthenga kwami. Ngemva kwamahora amabili lona wesifazane ofanayo wangibiza futhi waqala ukufunda imiyalelo:
- Chofoza u-Escape.
Ngiyachofoza kodwa akwenzeki lutho.
- Okuthile akusebenzi, akukho okushintshayo.
- Cindezela.
- Ngiyacindezela.
- Manje faka: 72406917
ngiyangena. Akukho okwenzekayo.
- Uyazi, ngesaba ukuthi lokhu ngeke kusize... Umzuzu nje...
I-laptop iqala kabusha ngokuzumayo, amabhuzu esistimu, isikrini esimhlophe esicasulayo sinyamalele ndawana thize. Ukuze uqiniseke, ngiya ku-BIOS, i-Computrace ayicushiwe. Kubonakala sengathi kunjalo. Ngiyabonga ngokusekela kwakho, ngibhalela umdayisi ukuthi ngixazulule zonke izinkinga ngokwami futhi ngiphumule.
I-OpenMakeshift Computrace Intel AMT esekelwe
Okwenzekile kwangidumaza, kodwa ngawuthanda umqondo, ubuhlungu bami be-phantom ngalokho okwakulahlekele kancane babufuna indlela yokuphuma, ngangifuna ukuvikela i-laptop yami entsha, njengokungathi izongibuyisela endala. Uma othile esebenzisa iComputrace, nami ngingayisebenzisa, akunjalo? Phela, kwakukhona i-Intel Anti-Theft, ngokusho kwencazelo - ubuchwepheshe obuhle kakhulu obusebenza njengoba kufanele, kodwa babulawa yi-inertia yemakethe, kodwa kufanele kube khona okunye. Kwavela ukuthi le ndlela ehlukile iqale endaweni efanayo lapho iphele khona - isoftware ye-Absolute kuphela ekwazile ukuthola indawo kulo mkhakha.
Okokuqala, ake sikhumbule ukuthi iyini i-Intel AMT: lena iqoqo lemitapo yolwazi eyingxenye ye-Intel ME, eyakhelwe ku-EFI BIOS, ukuze umlawuli kwelinye ihhovisi akwazi, ngaphandle kokusukuma esihlalweni sakhe, asebenzise imishini kunethiwekhi, ngisho noma engaqalisi , ukuxhuma ama-ISO ukude, ukulawula ngedeskithophu ekude, njll.
Konke lokhu kusebenza ku-Minix futhi cishe kuleli zinga:
I-Invisible Things Lab ihlongozwa ukubiza ukusebenza kobuchwepheshe be-Intel vPro/Intel AMT ngokuthi indandatho yesivikelo -3. Njengengxenye yalobu buchwepheshe, ama-chipset asekela ubuchwepheshe be-vPro aqukethe i-microprocessor ezimele (i-Architecture ye-ARC4), anokuxhumana okuhlukile kwekhadi lenethiwekhi, ukufinyelela okukhethekile esigabeni esizinikele se-RAM (16 MB), kanye nokufinyelela kwe-DMA ku-RAM eyinhloko. Izinhlelo ezikuyo zenziwa ngokuzimela ngaphandle kwephrosesa emaphakathi; i-firmware igcinwa kanye namakhodi e-BIOS noma kumemori ye-flash ye-SPI efanayo (ikhodi inesiginesha ye-cryptographic). Ingxenye ye-firmware iyiseva yewebhu eyakhelwe ngaphakathi. Ngokuzenzakalelayo, i-AMT ivaliwe, kodwa enye ikhodi isasebenza kule modi ngisho nalapho i-AMT ivaliwe. Ikhodi yokukhala -3 iyasebenza ngisho nakumodi yamandla yokulala ye-S3.
Lokhu kuzwakala kulinga, ngoba kubonakala sengathi uma singakwazi ukusungula uxhumano oluhlanekezelwe kwenye iphaneli yokuphatha sisebenzisa i-Intel AMT, ngeke sikwazi ukufinyelela okubi kakhulu kuneComputrace (empeleni, cha).
Senza kusebenze i-Intel AMT emshinini wethu
Okokuqala, abanye benu bangathanda ukuthinta le AMT ngezandla zakho, futhi lapha ama-nuances aqala. Okokuqala: udinga iphrosesa eyisekelayo. Ngenhlanhla, azikho izinkinga ngalokhu (ngaphandle uma une-AMD), ngoba i-vPro yengezwa cishe kuwo wonke ama-Intel i5, i7 kanye ne-i9 processors (ungabona
Ngokusho imibhalo
Kumodi engavikelekile, amadivayisi we-Intel AMT alalela ku-port 16992.
Kumodi ye-TLS, amadivayisi we-Intel AMT alalela ku-port 16993.
I-Intel AMT yamukela ukuxhumeka kumachweba angu-16992 no-16993. Masiqhubeke lapho.
Udinga ukuhlola ukuthi i-Intel AMT inikwe amandla ku-BIOS:
Okulandelayo sidinga ukuqalisa kabusha bese ucindezela u-Ctrl + P ngenkathi ulayisha
Iphasiwedi ejwayelekile, njengenjwayelo, admin.
Shintsha ngokushesha iphasiwedi ku-Intel ME Izilungiselelo Ezijwayelekile. Okulandelayo, ku-Intel AMT Configuration, nika amandla okuthi Vuselela Ukufinyelela Kwenethiwekhi. Ilungile. Manje ubuyiselwe emuva ngokusemthethweni. Silayisha ohlelweni.
Manje i-nuance ebalulekile: ngokunengqondo, singakwazi ukufinyelela i-Intel AMT kusuka ku-localhost futhi ukude, kodwa cha. I-Intel ithi ungaxhuma endaweni futhi uguqule izilungiselelo usebenzisa
Sithatha idivayisi ethile bese sixhuma nge
Kubukeka kanjena:
Uyemukelwa esibonakalayo esijwayelekile se-Intel AMT! Kungani "standard"? Ngoba inqanyuliwe futhi ayinamsebenzi ngokuphelele ngezinjongo zethu, futhi sizosebenzisa okuthile okungathí sina.
Ukwazi u-MeshCommander
Njengenjwayelo, izinkampani ezinkulu zenza okuthile, futhi abasebenzisi bokugcina bayayilungisa ukuze ivumelane nabo. Yilokho okwenzeka nalapha.
Le ndoda enesizotha (ayikho ihaba: igama layo alikho kuwebhusayithi yayo, bekufanele ngiyifake ku-Google) indoda okuthiwa u-Ylian Saint-Hilaire ithuthukise amathuluzi amangalisayo okusebenza ne-Intel AMT.
Ngingathanda ukukudonsela ukunaka kwakho kuye ngokushesha
Qala ngokuthi
Inqubo ayisheshi, kodwa ngenxa yalokho sizothola lesi sikrini:
Akukhona ukuthi ngine-paranoid, kodwa ngizosusa idatha ebucayi, ngixolele nge-coquetry enjalo
Umehluko, njengoba besho, usobala. Angazi ukuthi kungani i-Intel Control Panel ingenalo isethi yemisebenzi enjalo, kodwa iqiniso liwukuthi u-Ylian Saint-Hilaire uthola okuningi kakhulu ekuphileni. Ngaphezu kwalokho, ungafaka isikhombimsebenzisi sayo sewebhu ngqo ku-firmware, izokuvumela ukuthi usebenzise yonke imisebenzi ngaphandle kosizo.
Lokhu kwenziwa kanje:
Kufanele ngiqaphele ukuthi angizange ngisebenzise lokhu kusebenza (Isixhumi esibonakalayo sewebhu ngokwezifiso) futhi angikwazi ukusho lutho mayelana nokusebenza kwayo nokusebenza kwayo, njengoba kungadingeki ezidingweni zami.
Ungadlala ngokusebenza, akunakwenzeka ukuthi uzolimaza yonke into, ngoba indawo yokuqala neyokugcina yalo mkhosi wonke yi-BIOS, lapho ungasetha kabusha yonke into ngokukhubaza i-Intel AMT.
Sebenzisa i-MeshCentral futhi usebenzise i-BackConnect
Futhi lapha ukuwa okuphelele kwekhanda kuqala. Umalume akagcinanga nje ngokwenza iklayenti, kodwa futhi nephaneli yokulawula yonke yeTrojan yethu! Futhi akazange nje akwenze, kodwa
Qalisa ngokufaka iseva ye-MeshCentral eyakho noma uma ungayazi i-MeshCentral, ungazama iseva yomphakathi ngokuzifaka engozini yakho ku-MeshCentral.com.
Lokhu kukhuluma kahle ngokuthembeka kwekhodi yayo, ngoba angikwazanga ukuthola izindaba mayelana nokugebenga nokuvuza ngesikhathi sokusebenza kwesevisi.
Ngokwami, ngisebenzisa i-MeshCentral kuseva yami ngoba ngikholelwa ngokungenangqondo ukuthi inokwethenjelwa kakhulu, kepha akukho lutho kuyo ngaphandle kokuyize nokuphelelwa umoya. Uma ufuna futhi, ke
Bhalisa ku
Kungani "kungekho ejenti"? Ngoba kungani siyidinga ukufaka into engenasidingo, akucaci ukuthi iziphatha kanjani futhi izosebenza kanjani.
Chofoza okuthi “Engeza i-CIRA”:
Landa i-cira_setup_test.mescript futhi uyisebenzise ku-MeshCommander yethu kanje:
Voila! Ngemva kwesikhathi esithile, umshini wethu uzoxhuma ku-MeshCentral futhi singenza okuthile ngawo.
Okokuqala: kufanele wazi ukuthi isoftware yethu ngeke ingqongqoze kuseva ekude kanjalo. Lokhu kungenxa yokuthi i-Intel AMT inezinketho ezimbili zokuxhuma - ngeseva eyihlane futhi ngqo endaweni. Azisebenzi kanyekanye. Umbhalo wethu usuvele ulungiselele isistimu ukuze usebenze kude, kodwa ungase udinge ukuxhuma endaweni. Ukuze ukwazi ukuxhuma endaweni, udinga ukuya lapha
bhala umugqa oyisizinda sakho sendawo (qaphela ukuthi iskripthi sethu SESIVELE sifake ulayini ongahleliwe lapho ukuze uxhumano lwenziwe ukude) noma sula yonke imigqa ngokuphelele (kodwa uxhumo olukude ngeke lutholakale). Isibonelo, isizinda sami sendawo ku-OpenWrt sithi lan:
Ngakho-ke, uma singena lapho, futhi uma umshini wethu uxhumeke kunethiwekhi enalesi sizinda sendawo, khona-ke ukuxhumeka okukude ngeke kutholakale, kodwa amachweba wendawo 16992 no-16993 azovula futhi amukele uxhumano. Ngamafuphi, uma kukhona uhlobo oluthile lombhedo olungahlobene nesizinda sakho sendawo, khona-ke isofthiwe iyaphazamisa, uma kungenjalo, khona-ke udinga ukuxhuma kuyo ngokwakho ngocingo, yilokho kuphela.
Okwesibili:
Konke sekulungile!
Ungase ubuze - iphi i-AntiTheft? Njengoba ngishilo ekuqaleni, i-Intel AMT ayifaneleki kakhulu ukulwa namasela. Ukuphatha inethiwekhi yamahhovisi kwamukelekile, kodwa ukulwa nabantu abadle impahla ngokungemthetho nge-inthanethi akukhethekile. Ake sicabangele ikhithi yamathuluzi, ngokombono, engasisiza ekulweleni impahla yangasese:
- Ngokwayo, kusobala ukuthi uyakwazi ukufinyelela umshini uma uxhumeke ngekhebula, noma, uma iWindows efakwe kuyo, bese nge-WiFi. Yebo, kuyingane, kodwa kakade kunzima kakhulu kumuntu ovamile ukusebenzisa i-laptop enjalo, ngisho noma othile evele elawula ngokuzumayo. Ngaphezu kwalokho, naphezu kweqiniso lokuthi angikwazanga ukuthola imibhalo, ngokuqinisekile kungenzeka ukuklama ngobuciko umsebenzi othile wokuvimba/ukubonisa izaziso kuzo.
- Ukusula Okuvikelekile Kukude nge-Intel Active Management Technology
Ngokusebenzisa le nketho, ungasusa lonke ulwazi emshinini ngemizuzwana. Akukacaci ukuthi iyasebenza yini kuma-non-Intel SSD. Laphalapha Ungafunda kabanzi mayelana nalo msebenzi. Ungawuthanda umsebenzilapha . Ikhwalithi iyesabeka, kodwa ama-megabytes ayi-10 kuphela futhi ingqikithi icacile.
Inkinga yokukhishwa okuhlehlisiwe ihlala ingaxazululiwe, ngamanye amazwi: udinga ukubuka lapho umshini ungena kunethiwekhi ukuze uxhumeke kuwo. Ngikholwa ukuthi likhona nekhambi lalokhu.
Ekusetshenzisweni okuhle, udinga ukuvimba i-laptop futhi ubonise uhlobo oluthile lombhalo, kodwa kithi sinokufinyelela okungenakugwemeka, futhi okumele ukwenze ngokulandelayo kuyindaba yokucabanga.
Mhlawumbe uzokwazi ngandlela thize ukuvimba imoto noma okungenani ubonise umlayezo, bhala uma wazi. Ngiyabonga!
Ungakhohlwa ukusetha iphasiwedi ye-BIOS.
Siyabonga kumsebenzisi
Source: www.habr.com