Izvo zvakare zvakaratidza kuti hapana yakachengeteka system: Linux, macOS uye Windows kuwira paPwn2Own 2020

Pwn2Own 2020

Iko hakuna yakakwana inoshanda sisitimu. Zvagara zvichitaurwa. Muchokwadi, ichi chinyorwa chinouya maminetsi mashoma mushure meimwe umo isu takataura ye zero-zuva kunetseka kwavakaita pachena maawa mashoma apfuura. Izvo zvatinofanira kutaura nezvazvo ikozvino chimwe chinhu chisina kunyanya kukosha, sezvo chave chiri mu Pwn2Own 2020 uko kwazvino mabugs akawanikwa muWindows 10, macOS, uye Ubuntu. Zvishoma zvakakomba mune dzidziso, nekuti ikozvino makambani anofanirwa kugadzirisa zvikanganiso zvakawanikwa.

El Pwn2Own 2020 yanga iri yegore rino edition ye kukwikwidzana nevanoba imwe yeaya anoshanda zvirinani zvinhu zviviri: chekutanga kutora mubairo mari, uye chechipiri ndechekuzvizivisa pasi rose, zvinova zvichavatendera kuti vawane basa iro dzimwe nguva rinovaita kuti vapedzisire vari mukambani hombe. vakadai saVanongo "bvaruka."

Ubuntu yakashandisirwa kernel yayo muPwn2Own 2020

Kana iri yeLinux, yaive yekushandisa system Ubuntu iyo yakawa takabatana neRedRocket CTF timu. Chikwata ichi chakawana LPE (Yemunharaunda Ropafadzo Kukwirisa) kushandisa izvo zvakavatendera kuwana midzi yekuwana. Chikwata chekubira chakatora madhora zviuru makumi matatu nekuda kwekushandisa kwavo. Asi zvimwe zvikwata zvakatora mari yakati wandei,, mukufunga, kuwana zvakakosha kana zvipembenene zvakawanda.

Mubairo wekutanga wakaenda kuchikwata chakawana kushandisa muSafari neimwe LPE mune macOS kernel iyo yakakanganisa browser yako. Chikwata chakachiwana, Georgia Tech Systems Software & Security Lab, chakatora madhora zviuru makumi manomwe kubva zvavakawana, kunyanya nekuti kushandisa kwacho kwaisanganisira zvipembenene zvitanhatu. Chikwata chakakwanisawo kuremadza iyo SIP (System Kuvimbika Kudzivirirwa) yeiyo inoshanda sisitimu.

Zvishoma zvishoma akawana mushandisi anozivikanwa seFluorescence, Pwn2Own veteran uyo akashandisa UAF yake (shandisa-mushure-yemahara) bug kuti awane masystem ekuyera muWindows. Fluorescence yakatora madhora zviuru makumi mana. Dzimwe software dzakatyorwa panguva yemakwikwi yaive VirtualBox, Adobe Reader paWindows uye VMWare Workstation, kunyangwe iyo yekupedzisira yaisagona kuratidzwa uye isina kuhwina chero mibairo. Ivo varongi vakakwanisa kushandisa iyo VMWare Workstation bug mukuona kumashure, saka zvirinani ivo vakataura nezve timu yakaiwana.

Makwikwi egore rino anga akasiyana nemakore apfuura: inobatwa pamhepo nekuda kweCoronavirus. Chero zvazvingaitika, zvakaratidzwazve kuti hapana mashandiro akachengeteka, sezvo zvisina kuchengetedzeka kuti chero munhu abude mumugwagwa panguva ino. Saka, zvakare zvakare, isu tichataura zvinhu zviviri: kugara pamba uye chengetedza yako yekushandisa system inogara ichigadziriswa.


Izvo zviri muchinyorwa zvinoomerera pamisimboti yedu ye tsika dzekunyora. Kuti utaure chikanganiso tinya pano.

Makomendi gumi, siya zvako

Siya yako yekutaura

Your kero e havazobvumirwi ichibudiswa.

*

*

  1. Inotarisira data: AB Internet Networks 2008 SL
  2. Chinangwa cheiyo data: Kudzora SPAM, manejimendi manejimendi.
  3. Legitimation: Kubvuma kwako
  4. Kutaurirana kwedata
  5. Dhata yekuchengetedza: Dhatabhesi inobatwa neOccentus Networks (EU)
  6. Kodzero: Panguva ipi neipi iwe unogona kudzora, kupora uye kudzima ruzivo rwako

  1.   01101001b akadaro

    Ubuntu hwakafanana neMhepo * ws. Q yakabiwa chakavanzika chakavanzika (ingori google musoro wenyaya). Pfungwa yake yekuchengeteka ndeyekuisa kukiya kwakakwirira kuitira kuti mapfupi arege kusvika kwaari. Sezvo zita racho rakati "Linux" ndakafungidzira Linux chaiyo.

    Chinyorwa chinonakidza.

  2.   anonymous akadaro

    Chero distro inoshandisa Sudo ... yakaparadzwa ... kuita midzi uchishandisa password yemushandisi haisi bhizinesi rakanaka, chero chavanotaura uye nezvavanofunga.