Abacwaningi bezokuphepha benkampani yaseChina iTencent () ikilasi elisha lokuhlasela kwe-BadPower okuhloswe ngalo ukunqoba amashaja ama-smartphone namakhompyutha aphathekayo asekelayo . Ukuhlasela kuvumela ishaja ukuthi idlulisele amandla eqile isisetshenziswa esingaklanyelwe ukuphatha, okungaholela ekuhlulekeni, ekuncibilikeni kwezingxenye, noma ngisho nomlilo wedivayisi.
Ukuhlasela kwenziwa nge-smartphone yesisulu, elawulwa ohlaselwa umhlaseli, ngokwesibonelo, ngokusebenzisa ubungozi noma ukwethulwa kohlelo olungayilungele ikhompuyutha (idivayisi ngesikhathi esisodwa isebenza njengomthombo kanye nenhloso yokuhlasela). Indlela ingase isetshenziselwe ukulimaza ngokomzimba idivayisi evele isengozini futhi wenze ukucekela phansi okungase kubangele umlilo. Lokhu kuhlasela kusebenza kumashaja asekela izibuyekezo ze-firmware futhi angasebenzisi ukuqinisekiswa kwekhodi yokulanda kusetshenziswa isiginesha yedijithali. Amashaja angakusekeli ukubanika awakwazi ukuhlaselwa. Ubukhulu bokulimala okungenzeka buncike kumodeli yeshaja, amandla aphumayo kanye nokuba khona kwezindlela zokuvikela ukugcwala kakhulu kumadivayisi ashajwayo.
Iphrothokholi yokushaja ngokushesha ye-USB isho inqubo yokufanisa amapharamitha wokushaja nedivayisi eshajwayo. Idivayisi eshajwayo idlulisela ulwazi kushaja mayelana namamodi asekelwe namandla kagesi avumelekile (isibonelo, esikhundleni samavolthi angu-5, kubikwa ukuthi ingamukela ama-volts angu-9, 12 noma angu-20). Ishaja ingakwazi ukuqapha amapharamitha ngesikhathi sokushaja, ishintshe izinga lokushaja futhi ilungise i-voltage kuye ngezinga lokushisa.
Uma ishaja ibona ngokusobala amapharamitha aphezulu kakhulu noma izinguquko zenziwa kukhodi yokulawula ukushaja, ishaja ingase ikhiqize amapharamitha wokushaja ucingo olungaklanyelwe wona. Indlela yokuhlasela ye-BadPower ihlanganisa ukulimaza i-firmware noma ukulayisha i-firmware eguquliwe eshajani, okusetha umkhawulo wevolthi ongakhona. Amandla amashaja akhula ngokushesha futhi, isibonelo, i-Xiaomi ngenyanga ezayo ukukhipha amadivayisi asekela ubuchwepheshe bokushaja obungu-100W kanye no-125W.
Kuma-adaptha ashajayo angu-35 namabhethri angaphandle (Amabhange Amandla) ahlolwe abacwaningi, akhethwe kumamodeli angu-234 atholakala emakethe, ukuhlasela kwakusebenza kumadivayisi angu-18 akhiqizwa abakhiqizi abangu-8. Ukuhlaselwa kwemishini eyi-11 kwezingu-18 eziyinkinga kungenzeka ngemodi ezenzakalelayo ngokuphelele. Ukushintsha i-firmware kumadivayisi angu-7 kwakudinga ukukhohlisa ngokomzimba kweshaja. Abacwaningi bafinyelele esiphethweni sokuthi izinga lokuvikeleka alincikile kuphrothokholi yokushaja okusheshayo esetshenzisiwe, kodwa lihlotshaniswa kuphela nekhono lokuvuselela i-firmware nge-USB kanye nokusetshenziswa kwezinqubo ze-cryptographic zokuqinisekisa ukusebenza nge-firmware.
Amanye amashaja akhanyiswa ngembobo evamile ye-USB futhi akuvumela ukuthi uguqule i-firmware ku-smartphone ehlaselwe noma i-laptop ngaphandle kokusebenzisa imishini ekhethekile futhi ifihlwe kumnikazi wedivayisi. Ngokusho kwabacwaningi, cishe u-60% wama-chips ashaja ngokushesha emakethe avumela ukubuyekezwa kwe-firmware ngembobo ye-USB emikhiqizweni yokugcina.
Iningi lezinkinga ezihambisana nobuchwepheshe bokuhlasela be-BadPower zingalungiswa ezingeni le-firmware. Ukuze uvimbele ukuhlasela, abakhiqizi bamashaja ayinkinga bacelwe ukuthi baqinise ukuvikeleka ekuguqulweni okungagunyaziwe kwe-firmware, futhi abakhiqizi bamadivayisi wabathengi bengeze izindlela ezengeziwe zokulawula ukugcwala ngokweqile. Abasebenzisi abanconywa ukuthi basebenzise ama-adaptha ano-Type-C ukuze baxhume amadivayisi ashaja ngokushesha kuma-smartphones angayisekeli le modi, njengoba amamodeli anjalo avikeleke kancane ekulayisheni okungase kube khona.
Source: opennet.ru