Mva nje Ulwazi lwakhutshwa kumngcipheko esixhenxe ochaphazela iikhompyuter ngeThunderbolt, obu buthathaka baziwa Uluhlu lwe "Thunderspy" kunye nabo umhlaseli unokusebenzisa ukudlula kuwo onke amanqaku aphambili aqinisekisa ukhuseleko lweThunderbolt.
Kuxhomekeke kwiingxaki ezichongiweyo, Kucetyiswa iimeko ezilithoba zokuhlaselwa Zenziwe ukuba umhlaseli unokufikelela kwendawo kwinkqubo ngokudibanisa isixhobo esibi okanye ngokulawula i-firmware yekhompyuter.
Imeko zokuhlaselwa zibandakanya ukukwazi ukwenza izinto ezichonga izixhobo zeThunderbolt ngokungenalusini, Clone izixhobo ezigunyazisiweyo, ukufikelela kwimemori ngokungacwangciswanga ngokusebenzisa i-DMA kunye nokugqitha kuseto lwenqanaba lokhuseleko, kubandakanya ukukhubaza ngokupheleleyo zonke iindlela zokukhusela, ukuthintela ukufakwa kohlaziyo lwe-firmware, kunye nokuguqulela ujongano kwimowudi yeThunderbolt kwiinkqubo ezinqunyelwe kuthumelo lwe-USB okanye kwi-DisplayPort.
Malunga neNdudumo
Kulabo abangaqhelekanga ngeNdudumo, kuya kufuneka uyazi ukuba le eYindibaniselwano yendalo iphela ethi isetyenziselwa ukudibanisa iipheripheripthi Idibanisa i-PCIe (i-PCI Express) kunye ne-DisplayPort ujongano kwintambo enye. I-Thunderbolt yaphuhliswa yi-Intel kunye ne-Apple kwaye isetyenziswa kwii-laptops ezininzi nakwii-PC.
Izixhobo zeThunderbolt esekwe kwi-PCIe ukufikelela kwimemori ngokuthe ngqo kwi-I / O, Ukubeka isoyikiso kuhlaselo lwe-DMA lokufunda nokubhala yonke imemori yenkqubo okanye ukufaka idatha kwiidivayisi ezifihliweyo. Ukuphepha olo hlaselo, I-Thunderbolt icebise umxholo we «Amanqanaba okhuseleko», evumela ukusetyenziswa kwezixhobo kugunyaziswe ngumsebenzisi kuphela kwaye isebenzisa ukuqinisekiswa kwe-cryptographic zonxibelelwano ukukhusela ngokuchasene nobuqhetseba besazisi.
Malunga neTuderspy
Kwimiba echongiweyo, ezi zenza ukuba kuthintelwe ikhonkco elithethiweyo kwaye uqhagamshele isixhobo esibi phantsi kokuzenza onegunya. Ukongeza, kunokwenzeka ukuguqula i-firmware kwaye ubeke i-SPI Flash kwimowudi yokufunda-kuphela, enokusetyenziselwa ukukhubaza ngokupheleleyo amanqanaba okhuseleko kunye nokuthintela uhlaziyo lwe-firmware (i-tcfp kunye ne-spiblock ezilungiselelwe zilungiselelwe ezo zinto zikhohlisayo).
- Ukusetyenziswa kwezikim zokuqinisekisa ze-firmware ezingafanelekanga.
- Sebenzisa inkqubo yokuqinisekisa isixhobo esibuthathaka.
- Khuphela imethadatha kwisixhobo esingagunyaziswanga.
- Ubukho beendlela zokuqinisekisa ukuhambelana neenguqulelo zangaphambili, ukuvumela ukusetyenziswa kohlaselo lokubuyela umva kubuchwephesha obusengozini.
- Sebenzisa iiparameter zoqwalaselo kumlawuli ongagunyaziswanga.
- Iziphene zomdibaniso weSpI Flash.
- Ukungabikho kokhuseleko kwinqanaba leBoot Camp.
Umngcipheko ubonakala kuzo zonke izixhobo zeTynderbolt 1 kunye nezi-2 ezixhotyisiweyo (isekwe kwi-Mini DisplayPort) kunye neNdudumo 3 (isekwe kwi-USB-C).
Akukacaci ukuba iingxaki zivela kwizixhobo ezine-USB 4 kunye neThunderbolt 4, nanjengoko obu buchwephesha bupapashwa kuphela kwaye akukho ndlela yokuqinisekisa ukwenziwa kwazo.
Ukuba semngciphekweni akunakulungiswa sisoftware kwaye ifuna ukwenziwa kwezinto zehardware. Kwangelo xesha, kwezinye izixhobo ezitsha, Kuyenzeka ukuba uvimbe ezinye zeengxaki ezinxulumene ne-DMA usebenzisa indlela yokukhusela i-DMA Kernel, Inkxaso yayo yaziswa ukusukela nge-2019 (ixhaswe kwi-Linux kernel ukusukela kwinguqulelo 5.0, ungaqinisekisa ukubandakanywa /sys/bus/thunderbolt/devices/domainX/iommu_dma_protection").
Ekugqibeleni, ukuze ndikwazi ukuvavanya zonke ezo zixhobo apho kukho amathandabuzo okuba bangachaphazeleka kolu buthathaka, Iskripthi esibizwa ngokuba yi "Spycheck Python" saphakanyiswa, efuna ukusebenza njengengcambu yokufikelela kwi-DMI, ACPI DMAR, kunye netafile yeWMI.
Njengamanyathelo okukhusela iinkqubo ezisengozini, Kuyacetyiswa ukuba le nkqubo mayishiywe ingalindwanga, ivulwe okanye ikwimowudi yokulinda.Ukongeza kokungadibani nezinye izixhobo zeThunderbolt, musa ukushiya okanye ugqithisele izixhobo zakho kubantu ongabaziyo kunye nokubonelela ngokhuseleko ngokwasemzimbeni kwizixhobo zakho.
ngaphandle koko ukuba akukho sidingo sokusebenzisa iThunderbolt kwikhompyuter, kuyacetyiswa ukuba ukhubaze isilawuli seThunderbolt kwi-UEFI okanye kwi-BIOS (Nangona kukhankanyiwe ukuba izibuko le-USB kunye neDisplayPort zinokungasebenzi ukuba ziyaphunyezwa ngomlawuli weThunderbolt).
Umthombo: https://blogs.intel.com