Iyo NSA ichashanda paCoreboot, iyo yakavhurwa sosi nzira kune BIOS uye UEFI

Mamwe mavhiki apfuura mumwe wevatinoshanda navo pano pane blog akataura nezve basa raSlimbook rekushandisa Coreboot pamakomputa avo, uko semhedzisiro yekuti vazhinji vevashandisi vavo vaikumbira, Slimbook akateerera kudaidzira kwavo (unogona kuverenga chizere chizere mune iyi link).

Kune avo vachiri kuziva nezveCoreboot, vanofanirwa kuziva kuti izvi yakavhurwa sosi imwe nzira kune yechinyakare Basic I / O System (BIOS) iyo yaive yatove paMS-DOS 80s PC uye ichitsiva neEFI (Yakabatanidzwa Yakawedzerwa). Firmware interface) yakaburitswa muna 2007. Y ikozvino iyo NSA yatanga kupa vagadziri kune iyo Coreboot chirongwa.

Eugene Myers weNSA akatanga kupa kodhi yekushandisa ye SMI Transfer Monitor (STM) inotarisa x86 CPUs.

Eugene Myers anoshandira NSA's Trusted Systems Research Group, boka iro, maererano newebsite yewebsite, rinotarisira "kutungamira uye kutsigira kutsvagisa matekinoroji nemaitiro anozochengetedza hurongwa hweruzivo rweAmerica."

Iyo STM ndeye hypervisor iyo inotanga mu "System Management" (SMM) modhi, yakasarudzika "mhete -2" nharaunda umo iko kwakajairwa kuitiswa kweiyo inoshanda sisitimu inokanganiswa kuitira kuti iyo system kodhi (simba manejimendi, Hardware kudzora, nezvimwe .) inogona kumhanya neropafadzo dzakakwirira.

Iyo femu yakaburitsa yakatarwa STM (mhando yeVMM inobata chaiyo michina ine SMM kodhi) uye zvinyorwa zvechengetedzo ficha ye STM firmware muna 2015.

Pakutanga, STM yaifanirwa kushanda neIntel TXT kuburitswa, asi iyo yazvino kutaurwa inobvumira STM kushanda chete neIntel Virtualization Technology (VT). TXT yanga isina kukwana kuchengetedza masevhisi aya pakurwiswa uye STM inotarisira kuzviita.

NSA iri kushanda pane yakavhurwa sosi mapurojekiti?

Iyo NSA yakato shanda pazvirongwa zvekuchengetedza zvakavhurwa veruzhinji, kusanganisira Security Enhanced Linux, module yekuchengetedza yeLinux.

Kutsoropodzwa kwekuita kweNSA kwakawanda uye kunogara kuripo. Naizvozvo, kashoma kuti National Security Agency itende nemipiro yayo kunzanga.

Nekudaro, mune imwe yemapurojekiti ako akavhurwa pachena, ichashandiswa kubatsira vashandi veCoreboot.

Kuve zvakanyatsojeka, iyo NSA yakaburitsa iyo Ghidra reverse engineering chishandiso sosi uye yakagamuchirwa neveCoreboot vanogadzira.

Pfungwa ndeyekuti iyo NSA software ichabatsira iyo Coreboot Project. Kunyanya, mune iyo firmware yeReverse Injiniya.

Ghidra inodzosera mainjiniya dhizaini yakagadzirwa neNSA Research Division yeiyo NSA Cybersecurity Mission. Inobatsira kuongororwa kwekodhi yakaipa uye malware, senge mavhairasi, uye zvinogonesa nyanzvi kuti vanzwisise zvirinani kushomeka mumasaiti avo nemaitiro.

Yese Koreji kodhi, kusanganisira zvese STM mipiro kubva kuNSA, yakavhurika sosi. Mune dzidziso, munhu wese anogona kuongorora kuti hakuna madhoo ekumashure.

Sezvo chirongwa ichi chisingauyi kubva kuNSA, asi kubva kuchirongwa chavakasarudza kupa. Naizvozvo, ndivo vanyori veCoreboot vane basa rekugamuchira kana kusatambira mipiro kubva kuNSA.

Asi mukuita, iyo NSA ingadai yakanyora kodhi iri zvakachengetedzeka neyakaomarara-kuona-kusagadzikana vasina ruzivo rwekuchengetedza. Neimwe nzira, iwe unogona kushandisa izvi kuita makore gare gare, mushure mekuongororwa kwadzikira.

Sezvo zvaisazoshamisika kuona urwu rudzi rwechiito uchiuya kubva kune agency senge NSA.

Sezvo iyo NSA ichangobva kuyedza kufambisa mbiri cryptographic algorithms muiyo ISO yekumisikidza maitiro, maalgorithms akarambwa zvakanyanya nevanoongorora nekuda kwekushomeka kwekuvimba uye kutadza kweNSA kupindura mimwe mibvunzo yehunyanzvi.

Chekupedzisira, avo vanofarira kuziva kufambira mberi kweprojekti, vanogona kubvunza izvi Mune inotevera chinongedzo. 


Izvo zviri muchinyorwa zvinoomerera pamisimboti yedu ye tsika dzekunyora. Kuti utaure chikanganiso tinya pano.

Makomendi gumi, siya zvako

Siya yako yekutaura

Your kero e havazobvumirwi ichibudiswa.

*

*

  1. Inotarisira data: AB Internet Networks 2008 SL
  2. Chinangwa cheiyo data: Kudzora SPAM, manejimendi manejimendi.
  3. Legitimation: Kubvuma kwako
  4. Kutaurirana kwedata
  5. Dhata yekuchengetedza: Dhatabhesi inobatwa neOccentus Networks (EU)
  6. Kodzero: Panguva ipi neipi iwe unogona kudzora, kupora uye kudzima ruzivo rwako

  1.   kumira akadaro

    Ndiri kureva, chaizvo? uye vari kuzovimba nayo?

  2.   Miguel Ngirozi akadaro

    Chinhu chekupedzisira chaaizoita muhupenyu kuve kuvimba NSA software uye "zvakanaka vavariro" dzayo. Masangano evasori akadaro anofanirwa kurambidzwa kupa mahara software nekuti vanoishatisa.