Vatsvakurudzi veEset vaona musiyano mutsva we kusagadzikana Kr00k, iyo inobata Qualcomm uye MediaTek machipisi. Iyo nyowani yekushushikana pinobvumira kudonhedzwa kweWi-Fi traffic akabatwa protected uchishandisa WPA2 protocol.
Iyo Kr00k kunetsekana inokonzerwa nekukanganisa kunyorera kiyi kugadzira kana chishandiso chakadamburwa kubva kunzvimbo yekuwana. Mune musiyano wekutanga wekushupika, kana uchidimbura, kiyi yechikamu (PTK) yakachengetwa mundangariro yechip inogadziriswazve, nekuti hapasisina dhata rinotumirwa muchikamu chazvino.
Mune ino kesi, iyo yakasara dhata mune yekufambisa (TX) buffer yakavharidzirwa nekiyi yatobviswa kiyi ine mazero chete uye nekudaro inogona kubviswa nyore nyore panguva yekubatira. Kiyi isina chinhu inoshanda chete kune yakasara dhata mune buffer iyo yakati wandei kilobytes muhukuru.
Nezve dambudziko
Musiyano wakakosha pakati pekusiyana kwechipiri kwekushupika, kunozviratidza muQualcomm neMediaTek machipisi, ndeyekuti panzvimbo pekunyorera nekiyi zero, dhata mushure mekubvongodzwa kwekupfuudzwa haina kunyorwa zvachose. a kunyangwe kunyorwa kwakagadzirirwa.
Pamidziyo Qualcomm-yakavakirwa kuyedzwa kusagadzikana, iyo D-Unganidzo DCH-G020 uye iyo Turris Omnia router.
Pakati pekushandisas yakavakirwa paMediaTek machipisi, iyo router yakaedzwa ASUS RT-AC52U uye IoT mhinduro dzakanangana ne Microsoft Azure Sphere uchishandisa MediaTek MT3620 microcontroller.
Kuti ushandise zvese zviri zviviri kusagadzikana, anorwisa anogona kutumira akakosha mafuremu mafomati anokonzeresa kuzvibatanidza uye kupomhodza iyo data inotumirwa inotevera.
Kudonhedza kunowanzo shandiswa mumatareya asina waya kushandura kubva pane imwe nzvimbo yekuwana kuenda kune imwe paunenge uchifamba kana kana kubatana kune iripo nzvimbo yekuwana kwarasika. Kudonhedza kunogona kukonzerwa nekutumira furemu yekudzora, iyo inopfuudzwa isina kunyorwa uye isingade yechokwadi (anorwisa anongoda chiratidzo cheWi-Fi, asi haadi kubatana kune isina waya netiweki).
Kurwiswa kunogona kuitiswa zvese kana mudziyo unonetsekana wevatengi ukawana isingakundike nzvimbo yekuwana, uye kana iri mudziyo usina kukanganiswa nedambudziko, nzvimbo yekuwana panowanikwa kutambura.
Iyo kusagadzikana kunokanganisa kunyorera pane isina waya netiweki uye inobvumidza kuongororwa kweasina kuchengetedzeka kubatana kwakamisikidzwa nemushandisi (semuenzaniso, DNS, HTTP, uye tsamba yekutumira), asi hazvipe mukana wekukanganisa kubatana nekunyorera padanho. Application ( HTTPS, SSH, STARTTLS, DNS pamusoro peTLS, VPN uye nezvimwewo).
Ngozi yekurwiswa inoderedzwawo nenyaya yekuti anorwisa anogona kudhirowa chete ma kilobyte mashoma e data panguva iyoayo aive mune yekumhanyisa bhaudha panguva yekubviswa.
Kuti ubudirire kutora iyo data yakatumira pamusoro pehukama husina kuchengeteka, anorwisa iwe unofanirwa kuziva chaizvo nguva yekuwana nzvimbo yekudambura yakatumirwa kana kugara uchitanga, iyo inobata kutarisisa kwemushandisi nekuda kwekugara uchitangazve kweiyo isina waya yekubatanidza.
Mhinduro
Nyaya yacho yakagadziriswa mukugadziriswa kwaChikunguru yevatyairi vanezvivakwa zveQualcomm machipisi uye mune yaApril yekuvandudza yevatyairi veMediaTek machipisi.
Kugadziriswa kweMT3620 kwakataurwa muna Chikunguru. Vatsvagurudzo vakaona dambudziko havana ruzivo rwekuti vangabate sei yemahara ath9k mutyairi.
Uye zvakare, chinyorwa chePython chakagadzirirwa kuyedza kuburitswa kwemidziyo kumatambudziko ese ari maviri. Kana iwe uchida kuve nekwaniso kwazviri, uye iwe unogona shanyira chinotevera chinongedzo.
Kune rimwe divi isu tinogona kunongedzera iyo Kuzivikanwa kwekusasimba kwechitanhatu muQualcomm DSP machipisi, iyo inoshandiswa ne40% yemafoni efoni, kusanganisira zvishandiso kubva kuGoogle, Samsung, LG, Xiaomi uye OnePlus, nevanoongorora veCheckpoint.
Vagadziri havana kuzivisa ruzivo kusagadzikana kudzamara zvagadziriswa.