Key Takeaways
- Kev pab cuam tshiab ntawm qhov tsis muaj zog qhia pom cov suab paj nruag nrov muaj peev xwm nqa lub khoos phis tawj los ntawm kev tsoo lub hard disk hauv nws.
- Kab laum yog qhov tseeb los ntawm hnub ntawm Windows XP thiab tsuas yog zoo li cuam tshuam rau qee lub laptops.
- Cov kws tshaj lij kev nyab xeeb, txawm li cas los xij, ceeb toom cov txheej txheem uas ua rau kev sib tsoo yog qhov paub zoo thiab muaj kev hem thawj tiag tiag.
Thaum nws yuav zoo li ib yam dab tsi tawm ntawm James Bond caper, cov kws paub txog kev ruaj ntseg ceeb toom tias tsis yog qee lub suab tuaj yeem coj mus rau hauv computer, qhov tshwm sim muaj ntau dua li qhov koj xav txog.
Qhov tsis muaj zog, kaw cia li CVE-2022-38392, taw qhia rau cov suab paj nruag yeeb yaj kiab ntawm Janet Jackson's 1989 classic Rhythm Nation raws li nqa cov qauv tshwj xeeb ntawm hard disks. Txawm li cas los xij, MITER Corporation, uas pab txheeb xyuas thiab txheeb xyuas qhov tsis zoo hauv software, tsuas yog tsis ntev los no tau txiav txim siab sau nws ua qhov teeb meem. Txawm hais tias kab laum tsis yog qhov tshiab, nws tau los rau hauv qhov pom tseeb tom qab Microsoft tus thawj tswj hwm software software Raymond Chen blogged txog nws tsis ntev los no.
"Thaum cov txheej txheem tshiab tau tawm los nrog SSDs, cov khoom siv qub thiab software muaj txoj hauv kev nyob ib puag ncig zoo dhau los ntawm nws qhov tseem ceeb, " Chris Goettl, VP ntawm Kev Tswj Khoom Muag rau cov khoom ruaj ntseg ntawm Ivanti, hais rau Lifewire hauv email. "Microsoft tsuas yog siv sijhawm thiab siv zog los [rau npe nws ua qhov tsis muaj zog] thiab ua rau cov neeg siv khoom paub yog tias muaj ntau cov khoom siv tseem nyob hauv kev ncig uas tuaj yeem cuam tshuam thiab txaus tshwm sim rau nws yuav tsum muaj kev txhawj xeeb."
A Broken Record
Chen's blog post tau suav tias yog kab laum qhov kev tshawb pom rau qhov tsis muaj npe "cov chaw tsim khoom siv computer loj," uas pom tias qee lub khoos phis tawj tau sib tsoo thaum sim ntaus nkauj hauv nqe lus nug.
"Ib qho kev tshawb pom thaum tshawb nrhiav yog qhov ua yeeb yaj kiab yeeb yaj kiab kuj ua rau qee qhov ntawm lawv cov neeg sib tw lub laptops," sau Chen. "Thiab tom qab ntawd lawv tau pom ib yam dab tsi txawv heev: Kev ua yeeb yaj kiab ntawm ib lub laptop ua rau lub laptop zaum ze rau poob, txawm tias lwm lub laptop tsis ua yeeb yaj kiab!"
Chen hais tias lub tuam txhab thaum kawg tau ua haujlwm tawm tias zaj nkauj muaj qee lub suab uas cuam tshuam nrog lub hard disk hauv lub laptop cuam tshuam. Resonance yog qhov tshwm sim ntawm lub cev uas ua rau lub suab tsim los ntawm ib yam khoom kom vibrate ntawm tib zaus raws li lub ntuj zaus ntawm lwm yam khoom, ua rau muaj kev phom sij. Nws yog vim li no, vim li cas cov tub rog tawg stride thaum taug kev ntawm tus choj.
Thaum lub khoos phis tawj sib tsoo, cov chaw tsim khoom tau pom cov suab nthwv dej los ntawm lub khoos phis tawj tus neeg hais lus thaum ua si Janet Jackson nkauj, yuav vibrate ntawm tib zaus li lub hard drive hauv nws, ua rau nws tawg.
Txhawm rau kov yeej qhov teeb meem, cov chaw tsim khoom tsim ib txoj hauv kev los kuaj xyuas thiab tshem tawm cov zaus ua txhaum cai ntawm txhua lub suab ua si hauv computer, sau Chen.
Ntxim qab kawg, Chen qhia txog kab laum rov qab rau hnub Windows XP. Txawm hais tias nws yuav zoo li lub sijhawm dhau los rau peb feem ntau, los ntawm lub lens kev ruaj ntseg, nws tsis tshwm sim nyob deb heev, uas yog vim li cas tus kab mob no tej zaum tseem yuav siv tau ntau heev.
"Qhov no yog nyob rau sab ntug ntawm lub hnub nyoog ntawm qhov uas tseem siv tau hauv khw, tab sis yeej tsis yog qhov qub tshaj plaws uas peb tau pom," said Goettl.
Nws taw qhia rau Cov Lus Qhia Txog Kev Ua Phem Txhaum Cai uas tswj hwm los ntawm Cybersecurity thiab Infrastructure Agency (CISA) uas taug qab cov kab mob uas lub chaw haujlwm xav tias tseem yuav raug siv los ntawm cov neeg nyiag nkas los cuam tshuam cov khoos phis tawj. Ntxiv nrog rau cov kab mob tsis ntev los no, cov ntawv teev npe kuj tseem teev cov kev tsis sib haum xeeb sib tham txhua txoj kev rov qab mus rau 2002 cuam tshuam rau cov khoos phis tawj khiav Windows 2000.
"CISA yuav tsis tau siv sijhawm los hais txog qhov muaj qhov tsis zoo no qub tshwj tsis yog nws tseem raug tsom los ntawm cov neeg ua phem hem," hais Goettl.
Striking a Chord
Roger Grimes, Goettl nug rhetorically. "Tej zaum zoo nkauj, tab sis xav txog zaj nkauj tau nrov tib lub sijhawm raws li cov khoom siv kho vajtse, tej zaum nws tsis yog qhov slim ntawm lub sijhawm tom qab tag nrho."
