Abacwaningi abavela ku-Red Balloon babike ukuba sengozini okubili okutholwe kumarutha ochungechunge lwe-Cisco 1001-X. Ukuba sengozini kwemishini yenethiwekhi ye-Cisco akuzona izindaba, kodwa iqiniso lempilo. I-Cisco ingomunye wabakhiqizi abahamba phambili bamarutha namanye amadivaysi enethiwekhi, ngakho-ke kunentshisekelo eyengeziwe ekuthembekeni kwemikhiqizo yayo kokubili kusukela kochwepheshe bokuvikela idatha nangokombono wabahlaseli.
Uma sibheka phambili, siyaqaphela ukuthi ochwepheshe be-Red Balloon bazise i-Cisco mayelana nokuba sengozini okusha ezinyangeni ezimbalwa ezedlule, ngakho-ke inkinga isixazululiwe ngandlela thize, noma okungenani u-Cisco uyazi ukuthi ayixazululwa kanjani. Okukodwa kobungozi obubili bungavalwa kalula nje ngokubuyekeza i-firmware, futhi inkampani ikhiphe i-firmware izolo esizindeni somphakathi, kubika ukushicilelwa kwe-inthanethi. . Sikhuluma ngesiphazamisi esitholakala kusistimu yokusebenza ye-Cisco IOS enikeza umhlaseli ukufinyelela kwempande kumarutha ochungechunge olucacisiwe.
Ukuba sengozini kwesibili yinto ekhethekile futhi eyingozi kakhulu, kusho abacwaningi. Ithinta isisekelo sokuphepha samakhulu ezigidi zamadivayisi enethiwekhi yenkampani, ukusuka kuma-routers kuye kumaswishi kuya kuma-firewall. Ochwepheshe be-Red Balloon bakwazile ukweqa ukuvikelwa kwehadiwe okunjalo kwemishini ye-Cisco njenge-Trust Anchor. "I-Trust Anchor," njengoba leli gama lingahunyushwa, iwukuthuthukiswa kwamamojula okuqinisekisa ubuqotho bemishini yenkampani (owayekade eyi-ACT). Imojula ye-ACT yethulwa ukuvikela ekwenziweni komgunyathi futhi kamuva yaguqulwa yaba imojuli yokuqapha ubuqotho bengxenye yesofthiwe yamadivayisi enethiwekhi ye-Cisco. Namuhla, i-Trust Anchor ikhona kuyo yonke imishini yenethiwekhi esebenzayo yenkampani. Akunzima ukucabanga ukuthi ukuyekethisa kweTrust Anchor kungabandakanyani. Amanethiwekhi kumpahla ye-Cisco ngeke esathenjwa.
Abacwaningi bathole indlela yokukhohlisa i-Trust Anchor. Imishini entshontshiwe iqhubekile nokwazisa amaklayenti ngokungaphazamisi, kanti ochwepheshe benza noma yini abayifunayo ngayo. Lokhu, ngendlela, kusenza sicabange ngesiphetho sentuthuko efanayo yi-ARM (TrustZone), Intel (SGX) nezinye izindlela zehadiwe ezifanayo zokuvikela amapulatifomu ekhompyutha. Kubukeka sengathi lesi yisixazululo sokuvala izimbobo ekwakhiweni kweprosesa. I-chip ethenjwayo noma imojuli ku-chipset ingenza amakhompyutha avikeleke kakhulu ekugetshengeni. Empeleni, imbobo noma ithuba lokudlula isivikelo litholwe ngisho nakwisixazululo lapho ukungena kukhawulelwe kakhulu futhi kuvame ukutholakala kuphela endaweni yokukhiqiza yobunikazi.
Isimo sakamuva sizobaluleka ekuvaleni izimbobo ezihlobene nokuthotshiswa kwamamojula e-Trust Anchor. Nakuba i-Cisco ithembise ukukhulula ama-patches ukuze kulungiswe ukuba sengozini kwe-Trust Anchor kukho konke okokusebenza kwayo, ukulanda isibuyekezo kungase kungayixazululi le nkinga. UCisco uthi lokhu kuzodinga "ukuhlelwa kabusha kwendawo," okusho ukuthi ngeke kwenzeke ukubuyekeza ihadiwe ukude. Nokho, izinsuku ezimatasa zilindele abasebenzi abasebenza ngamanethiwekhi kusetshenziswa imishini yeCisco. Futhi ihlobo elisondelayo alihlangene nalokhu.
Source: 3dnews.ru