Bahlophisi ba Zero Day Initiative (ZDI) e phatlalalitse ketsahalo ea Pwn2Own 2019eo Barupeluoa ba koptjoa ho bonts'a mekhoa ea ho sebetsa ho sebelisa menyetla e neng e sa tsejoe pele.
Ketsahalo eo e tla etsahala ka Hlakubele 20-22 kopanong ea CanSecWest e Vancouver. Boholo ba letlole la moputso ke liranta tse fetang limilione tse peli le halofo.
Pwn2Own ke tlholisano ea bosholu ba likhomphutha e tšoaroang selemo le selemo kopanong ea ts'ireletso ea CanSecWest, ho qala ka 2007.
Barupeluoa ba phephetsoa ho sebelisa software e sebelisoang haholo le lisebelisoa tsa mehala ka bofokoli bo sa tsejoeng ho fihlela joale.
Bahlōli ba tlholisanong ba fumana sesebelisoa seo ba se phatlohileng, moputso oa chelete le baki ea "Masters" e ketekoang selemo sa tlholo ea bona.
Lebitso "Pwn2Own" le tsoa molemong oa hore bankakarolo ba tlameha ho "pwn" kapa ho qhekella sesebelisoa hore ba "e be" kapa ba se hape.
Tlholisanong ea Pwn2Own e sebeletsa ho bonts'a ts'oaetso ea lisebelisoa tse sebelisoang haholo le software hape e fana ka sebaka sa ho lekola tsoelo-pele e entsoeng ts'ireletsehong ho tloha selemong se fetileng.
Mabapi le Pwn2Own 2019
Selemong sena ho qhekelloa ha Linux kernel hammoho le merero e mengata e bulehileng (nginx, OpenSSL, Apache httpd) ha ea kenyelletsoa likhethong tsa likhau.
Lilemong tsa morao tjena, bosholu bo ne bo lekantsoe ho pontšo ea ts'oaetso ea Linux kernel e ipapisitse le bofokoli ba Letsatsi la Zero ka selemo sa 2017 e lumellang mosebelisi oa lehae ho phahamisa litokelo tsa bona tsamaisong.
Ka mokhoa o ts'oanang, kabo ea Linux "Ubuntu" e tlositsoe palo ea libaka tsa ho qhekella. Ho merero e bulehileng, ke libatli feela (Firefox, Chrome) le VirtualBox li lula likhethong, empa liketso tsa bona li tlameha ho bonts'oa tikolohong ea Windows.
Ka nako e ts'oanang Sehlopha se secha sa moputso bakeng sa litsamaiso tsa tlhahiso-leseling ea likoloi tsa Tesla Model 3 se kentsoe ho tlholisano e tlang, kakaretso ea litefiso tse fuoang moputso tse fetang $ 900 tse likete.
Likhetho tse amanang le Tesla li kenyelletsa ho fumana taolo holim'a bese ea CAN, ho siea malware a sebetsa kamora ho qala bocha, ho hlasela modem, tuner, Wi-Fi, Bluetooth, infotainment system, autopilot, le ho sebelisa mohala. Bohlale joalo ka senotlolo.
Moputso o moholo ka ho fetisisa ke $ 250 ka boholo, e fanwe bakeng sa ho etsa khoutu e laoloang maemong a litsamaiso tsa Gateway (e hokahanya litsamaiso tsohle tsa tlhaiso-leseling ea makoloi), Autopilot kapa VCSEC (subsystem ea polokeho).
Ho qala ho hloleha ha moeti, ho fanoa ka bonase ea lidolara tse likete tse 50, ho notlolla liloko, ho qala enjene ntle le senotlolo ebe o fumana taolo holim'a bese ea CAN - 100, ho fumana phihlello ea metso ho infotainment system $ 85.
Mabapi le bona ba putsoa
Likhetho tse amanang le mahlale a morao-rao a seva li lekantsoe feela ho moputso oa ho utsoa Microsoft Windows RDP (moputso oa $ 150).
ea Ho fanoa ka meputso ea ho sebelisa bofokoli ts'ebelisong ea mosebelisi Adobe Reader (likete tse 40), Microsoft Office 365 Pro Plus (Likete tse 60) le Microsoft Outlook (tse likete tse 100).
Ho khethoa likhetho tsa sebatli bakeng sa Google Chrome (80), Microsoft Edge (50, 60, le 80), Apple Safari (55 le 65) le Firefox ea Mozilla (40 le 50).
Ho litsamaiso tsa bonono tse nkang karolo tlholisanong, ho tšoauoa VirtualBox (35 likete), VMware Workstation (70 sekete), VMware ESXi (150 sekete) le Microsoft Hyper-V Client (250 tse likete).
E fanoe ka thoko bakeng sa khetho ea nyollo ea litokelo ka ts'ebeliso ea bofokoli ho Windows kernel (30 likete).
Qetellong, ha ho Pwn2Own e neng e tla phethahala ntle le ho roala Master of Pwn. Kaha taelo ea tlholisano e nkuoa ke ho taka ka mokhoa o sa reroang, bankakarolo ba ka fanang ka lipatlisiso tse ntle empa e le bona ba ho qetela ho fana ba tla fumana chelete e nyane ha mekoloko e latelang e lahleheloa ke boleng.
Leha ho le joalo, lintlha tse fanoeng bakeng sa ho kena ka katleho ka ngoe ha li theohe. Motho e mong a ka ba le toro e mpe mme a ntse a bokella lintlha tse ling hape.
Motho kapa sehlopha se nang le lintlha tse ngata qetellong ea tlholisano se tla fuoa moqhaka oa Master of Pwn, fumana lintlha tsa moputso tsa 65,000 ZDI
Maikutlo a 2, siea ea hau
Rea u amohela ho kopo ena e ncha. Re tla be re emetse ka sesebelisoa sena se secha.
moputso oa lidolara tse likete tse 150 bakeng sa ho qhekella lifensetere ke khotsofalo e habeli e se nang papiso !!!