NSA zata yi aiki akan Coreboot, madaidaiciyar hanyar buɗewa zuwa BIOS da UEFI

Wasu makonnin da suka gabata ɗaya daga cikin abokan aikinmu nan a kan shafin yanar gizo yayi magana game da aikin Slimbook don aiwatar da Coreboot a kan kwamfutocin su, inda sakamakon cewa yawancin masu amfani da su sun yi buƙatun hakan, Slimbook ya saurari kiran su (zaka iya karanta cikakken bayanin a cikin wannan haɗin).

Ga waɗanda har yanzu ba su san game da Coreboot ba, ya kamata su san wannan shine tushen buɗaɗɗen tushe zuwa Tsarin I / O na gargajiya (BIOS) wanda ya riga ya kasance akan PC-MS-DOS 80s kuma ya maye gurbinsa da UEFI (Unayataccen ensari). Firmware interface) wanda aka fitar a 2007. Y yanzu NSA ta fara sanya masu haɓakawa zuwa aikin Coreboot.

Eugene Myers na NSA ya fara samar da lambar aiwatarwa don Kulawar Canja wurin SMI (STM) mai niyya x86 CPUs.

Eugene Myers na aiki ne ga kungiyar NSA ta Trusted Systems Research Group, kungiyar da, a cewar shafin intanet na hukumar, da nufin "jagorantar da daukar nauyin bincike kan fasahohi da fasahohin da za su tabbatar da tsarin bayanan Amurka."

STM babban mai dubawa ne wanda ke farawa a cikin yanayin "Tsarin Gudanar da Tsarin" (SMM), keɓance "zobe -2" muhallin da ake katse aiwatar da al'ada na yau da kullun don tsarin lambar (ikon sarrafawa, sarrafa kayan aiki, da dai sauransu) ana iya gudana tare da manyan dama.

Kamfanin ya fitar da bayanin STM (nau'in VMM wanda ke amfani da injunan kama-da-wane wanda ke dauke da lambar SMM) da takaddara don yanayin tsaro na STM firmware a cikin 2015.

Da farko, yakamata STM yayi aiki tare da sakin Intel TXT, amma sabon bayani dalla-dalla yana bawa STM damar aiki kawai tare da Intel Virtualization Technology (VT). TXT bai isa ba don kare waɗannan ayyukan daga hare-hare kuma STM yayi niyyar yin hakan.

NSA tana aiki akan ayyukan buɗe ido?

NSA ta riga ta yi aiki a kan ayyukan tsaro da aka bude wa jama'a, ciki har da Tsaro Ingantaccen Linux, tsarin tsaro na Linux.

Sukan sukar aikin NSA suna da yawa kuma akai. Saboda haka, da wuya ka ga Hukumar Tsaro ta yi godiya da gudummawar da take bayarwa ga al'umma.

Koyaya, game da ɗayan ayyukan buɗe tushen jama'a, za'ayi amfani dashi don taimakawa ma'aikatan Coreboot.

Kasancewa dan takamaiman bayani, NSA ta fito da Ghidra kayan aikin injiniyan baya a matsayin tushe kuma masu haɓaka Coreboot sun karɓe shi.

Manufar ita ce cewa software na NSA za ta taimaka wa Aikin Coreboot. Musamman, a cikin firmware don Injiniyan baya.

Ghidra tsarin tsarin injiniyan baya ne ci gaba ta NSA Research Division don Ofishin Jakadancin Tsaro na NSA. Yana ba da damar bincika muguwar cuta da kuma ɓarna, kamar ƙwayoyin cuta kuma yana ba wa ƙwararru damar fahimtar ƙwarewar hanyoyin sadarwa da tsarin su.

Duk lambar Coreboot, gami da duk gudummawar STM daga NSA, tushen buɗewa ne. A ka'idar, kowa na iya tabbatar da cewa babu kofofin baya.

Tunda wannan aikin bai fito daga NSA ba, amma daga aikin da suka zaɓi bayarwa. Saboda haka, mawallafin Coreboot ne ke da alhakin karɓa ko rashin karɓar gudummawar NSA.

Amma a aikace, NSA na iya rubuta lambar ta ƙasa da amintacce tare da wahalar gano rauni tare da ƙwararrun masu bincike na tsaro. A madadin, zaku iya amfani da wannan aiwatarwar bayan shekaru, bayan sa ido ya ragu.

Tunda ba abin mamaki bane ganin irin wannan aikin yana fitowa daga hukuma kamar NSA.

Tunda NSA kwanan nan tayi yunƙurin matsar da algorithms guda biyu a cikin tsarin daidaitaccen tsarin ISO, masu bita sun ƙi yarda da algorithms saboda rashin amincewa da gazawar NSA na amsa wasu tambayoyin fasaha.

A ƙarshe, waɗanda ke da sha'awar sanin ci gaban aikin, na iya tuntuɓar wannan A cikin mahaɗin mai zuwa.