Linux e tlositsoe likhethong tsa Pwn2Own 2019 empa ea eketsoa ho Tesla

PONAHALO

Bahlophisi ba Zero Day Initiative (ZDI) e phatlalalitse ketsahalo ea Pwn2Own 2019eo Barupeluoa ba koptjoa ho bonts'a mekhoa ea ho sebetsa ho sebelisa menyetla e neng e sa tsejoe pele.

Ketsahalo eo e tla etsahala ka Hlakubele 20-22 kopanong ea CanSecWest e Vancouver. Boholo ba letlole la moputso ke liranta tse fetang limilione tse peli le halofo.

Pwn2Own ke tlholisano ea bosholu ba likhomphutha e tšoaroang selemo le selemo kopanong ea ts'ireletso ea CanSecWest, ho qala ka 2007.

Barupeluoa ba phephetsoa ho sebelisa software e sebelisoang haholo le lisebelisoa tsa mehala ka bofokoli bo sa tsejoeng ho fihlela joale.

Bahlōli ba tlholisanong ba fumana sesebelisoa seo ba se phatlohileng, moputso oa chelete le baki ea "Masters" e ketekoang selemo sa tlholo ea bona.

Lebitso "Pwn2Own" le tsoa molemong oa hore bankakarolo ba tlameha ho "pwn" kapa ho qhekella sesebelisoa hore ba "e be" kapa ba se hape.

Tlholisanong ea Pwn2Own e sebeletsa ho bonts'a ts'oaetso ea lisebelisoa tse sebelisoang haholo le software hape e fana ka sebaka sa ho lekola tsoelo-pele e entsoeng ts'ireletsehong ho tloha selemong se fetileng.

Mabapi le Pwn2Own 2019

Selemong sena ho qhekelloa ha Linux kernel hammoho le merero e mengata e bulehileng (nginx, OpenSSL, Apache httpd) ha ea kenyelletsoa likhethong tsa likhau.

Lilemong tsa morao tjena, bosholu bo ne bo lekantsoe ho pontšo ea ts'oaetso ea Linux kernel e ipapisitse le bofokoli ba Letsatsi la Zero ka selemo sa 2017 e lumellang mosebelisi oa lehae ho phahamisa litokelo tsa bona tsamaisong.

Ka mokhoa o ts'oanang, kabo ea Linux "Ubuntu" e tlositsoe palo ea libaka tsa ho qhekella. Ho merero e bulehileng, ke libatli feela (Firefox, Chrome) le VirtualBox li lula likhethong, empa liketso tsa bona li tlameha ho bonts'oa tikolohong ea Windows.

Ka nako e ts'oanang Sehlopha se secha sa moputso bakeng sa litsamaiso tsa tlhahiso-leseling ea likoloi tsa Tesla Model 3 se kentsoe ho tlholisano e tlang, kakaretso ea litefiso tse fuoang moputso tse fetang $ 900 tse likete.

Likhetho tse amanang le Tesla li kenyelletsa ho fumana taolo holim'a bese ea CAN, ho siea malware a sebetsa kamora ho qala bocha, ho hlasela modem, tuner, Wi-Fi, Bluetooth, infotainment system, autopilot, le ho sebelisa mohala. Bohlale joalo ka senotlolo.

Pwn2Own

Moputso o moholo ka ho fetisisa ke $ 250 ka boholo, e fanwe bakeng sa ho etsa khoutu e laoloang maemong a litsamaiso tsa Gateway (e hokahanya litsamaiso tsohle tsa tlhaiso-leseling ea makoloi), Autopilot kapa VCSEC (subsystem ea polokeho).

Ho qala ho hloleha ha moeti, ho fanoa ka bonase ea lidolara tse likete tse 50, ho notlolla liloko, ho qala enjene ntle le senotlolo ebe o fumana taolo holim'a bese ea CAN - 100, ho fumana phihlello ea metso ho infotainment system $ 85.

Mabapi le bona ba putsoa

Likhetho tse amanang le mahlale a morao-rao a seva li lekantsoe feela ho moputso oa ho utsoa Microsoft Windows RDP (moputso oa $ 150).

ea Ho fanoa ka meputso ea ho sebelisa bofokoli ts'ebelisong ea mosebelisi Adobe Reader (likete tse 40), Microsoft Office 365 Pro Plus (Likete tse 60) le Microsoft Outlook (tse likete tse 100).

Ho khethoa likhetho tsa sebatli bakeng sa Google Chrome (80), Microsoft Edge (50, 60, le 80), Apple Safari (55 le 65) le Firefox ea Mozilla (40 le 50).

Ho litsamaiso tsa bonono tse nkang karolo tlholisanong, ho tšoauoa VirtualBox (35 likete), VMware Workstation (70 sekete), VMware ESXi (150 sekete) le Microsoft Hyper-V Client (250 tse likete).

E fanoe ka thoko bakeng sa khetho ea nyollo ea litokelo ka ts'ebeliso ea bofokoli ho Windows kernel (30 likete).

Qetellong, ha ho Pwn2Own e neng e tla phethahala ntle le ho roala Master of Pwn. Kaha taelo ea tlholisano e nkuoa ke ho taka ka mokhoa o sa reroang, bankakarolo ba ka fanang ka lipatlisiso tse ntle empa e le bona ba ho qetela ho fana ba tla fumana chelete e nyane ha mekoloko e latelang e lahleheloa ke boleng.

Leha ho le joalo, lintlha tse fanoeng bakeng sa ho kena ka katleho ka ngoe ha li theohe. Motho e mong a ka ba le toro e mpe mme a ntse a bokella lintlha tse ling hape.

Motho kapa sehlopha se nang le lintlha tse ngata qetellong ea tlholisano se tla fuoa moqhaka oa Master of Pwn, fumana lintlha tsa moputso tsa 65,000 ZDI


Litaba tsa sengoloa sena li latela melao-motheo ea rona ea melao ea boitšoaro ea bongoli. Ho tlaleha phoso tlanya mona.

Maikutlo a 2, siea ea hau

Siea maikutlo a hau

aterese ya hao ya imeile ke ke ho phatlalatswa.

*

*

  1. E ikarabella bakeng sa data: Miguel Ángel Gatón
  2. Morero oa data: Laola SPAM, tsamaiso ea maikutlo.
  3. Molao: Tumello ea hau
  4. Puisano ea data: Lintlha li ke ke tsa tsebisoa batho ba boraro ntle le ka tlamo ea molao.
  5. Polokelo ea data: Database e hapiloeng ke Occentus Networks (EU)
  6. Litokelo: Nako efe kapa efe o ka fokotsa, oa hlaphoheloa mme oa hlakola tlhaiso-leseling ea hau.

  1.   Juan Antonio Moncada a re

    Rea u amohela ho kopo ena e ncha. Re tla be re emetse ka sesebelisoa sena se secha.

  2.   filtara-kantle-aquarium a re

    moputso oa lidolara tse likete tse 150 bakeng sa ho qhekella lifensetere ke khotsofalo e habeli e se nang papiso !!!