Vakakwanisa kuburitsa kiyi inoshandiswa muIntel processors kunyorera zvinyorwa

Boka revanoongorora nezvekuchengetedza veRussia rakaburitswa Mamwe mazuva apfuura vakabudirira kutora kiyi yakavanzika mapurosesa anoshandiswa Intel kunyorera zvinyorwa nerubatsiro rwekushandisa izvo zvinogona kuve nemhedzisiro huru pamaitiro ekuti machipisi anoshandiswa uye pamwe nemabatirwo aanoitwa.

Maxim goryachy uye vaongorori Dmitry Sklyarov naMark Ermolov kubva Positive Technologies, vakashandisa kunetsekana kwakakomba iyo Ermolov naGoryachy yakawanikwa muIntel manejimendi injini muna 2017.

Nekudaro, iko kukanganisa kwavanotora mukana wavo kunobvumira kupinda mukugadzirisa kweiyo microcode, iyo inozoshandiswa senzira yekugadzirisa maprosesa kuitira kusagadzikana kana shanduko yepasi-pasi mukushanda.

Chinokosha yakashandiswa kutsikisa zvinyorwa zvema microcode yakapihwa neIntel kugadzirisa kusagadzikana kwekuchengeteka uye mamwe marudzi ebugs.

Zvisinei, Iva nekopi yakanyorwa yekuvandudza inogona kubvumira hackers ku reverse injinjini uye dzidza chaizvo mashandisiro ekushandisa iko kukanganisa iko iko kugadzirisa kunogadziriswa.

Kiyi futi inogona kubvumidza vamwe vatatu kunze kweIntel, semunhu anobira mari kana chero munhu ane maturusi akakodzera kana ruzivo, ndapota gadziridza machipisi neako microcode (kunyangwe ivo vachitaura kuti iyi vhezheni yetsika haizopona sisitimu yekutanga)

Nezve mutongo

Aive makore matatu apfuura apo vaongorori Goryachy naErmolov yakawana kunetseka kwakanyanya muIntel Management Injini, yakanyorwa seIntel SA-00086, iyo yaivabvumidza kumhanyisa chero kodhi yavanoda mukati meiyo Intel CPU-inoenderana kernel.

Ivo vanotaura kuti,iyo Intel yakaburitsa chigamba kugadzirisa iyo bug, inogona kuramba ichishandiswa, sezvo maCPUs anogona kudzoserwa kune yapfuura firmware vhezheni isina kugadziriswa.

Asi zvaive kusvika mwedzi mishoma yapfuura (pakutanga kwegore) kuti timu yekutsvaga yakakwanisa kushandisa kusagadzikana vakawana kuvhura modhi yebasa yakavakirwa muIntel machipisi inonzi "Red Pill Chip" iyo mainjiniya ayo anoshandisa kugadzirisa microcode. Goryachy, Ermolov, naSklyarov vakazo tumidza mudziyo wavo wekuwana Chip Red Pill debugger mukureva The Matrix.

Nekuwana imwe yeIntel's Goldmont-yakavakirwa maCPU muChip Red Pill modhi, vaongorori vakakwanisa kutora yakasarudzika nzvimbo yeROM inonzi iyo MSROM (Microcode ROM Sequencer).

Zvadaro, reverse yakagadzira iyo microcode uye mushure memwedzi yekuongorora, ivo vakakwanisa kuburitsa iyo RC4 kiyi inoshandiswa neIntel mune yekuvandudza maitiro.

Nekudaro, ivo vaongorori havana kukwanisa kuwana kiyi yekusaina inoshandiswa neIntel kuratidzira nenzira inoratidza kuti yakagadziriswa ndeyechokwadi here kana kuti kwete.

Ivo vanotaura kuti:

"Dambudziko rakatsanangurwa hariratidzi kuchengetedzwa kwevatengi, uye hativimbe nekufungidzirwa kwemashoko ari seri kwekuvhurwa kutsvuku senzira yekuchengetedza. Pamusoro peiyo INTEL-SA-00086 kudzikisira, maOEMs anotevera hutungamiriri hwekugadzira kweIntel aderedza hunyanzvi hwekuvhurika kweOEM-inodiwa pakuferefeta uku. Iyo yakavanzika kiyi inoshandiswa kuratidza microcode haigare pasilicon, uye anorwisa haakwanise kurodha chigamba chisina kuzivikanwa kune iri kure system '.

"Pane fungidziro yekuti maCUU emazuva ano anonyanya kugadzirwa nefekitori uye dzimwe nguva anogamuchira mashoma-chiyero chemicrocode inogadziridza mbichana kunyanya dzinotyisa," Kenn White, director wezvekuchengetedza chigadzirwa kuMongoDB akandiudza. "Asi chero icho chiri chokwadi (uye kusvika padanho hombe chisiri icho), kune mashoma mashoma maganho anoshanda kune izvo injinjini aigona kuita nemakiyi eumambo yesilicon iyoyo."

Saka nekudaro, vaongorori vanoonawo sirivheri yakamonerwa. kutora mukana wekukanganisa, sezvo ichi chingave nzira kune avo vanoda kudzura yavo CPU (nenzira imwechete iyo vanhu vakapwanya jailbroken kana midzi midziyo yeApple neApple kana kubira Sony's PlayStation 3 koni) uye nekudaro kukwanisa kuwedzera kana svinura mamwe maitiro, nekuti semuenzaniso iwe une revo yeakavharika macores eimwe akateedzana processor.

mabviro: https://arstechnica.com