nVidia hakovana!

[sam633]

Videćemo, da li će ova tema preživeti posle petka.

Nvidia Hacked - A National Security Disaster

Nvidia was hacked for a vast sum of data and this hack is not only a disaster for Nvidia, but all chip companies and the national security of all “western” governments.

semianalysis.substack.com

Spojler: Malo humora...

Trebalo je da jedan od zahteva bude, da onaj čovek konačno kaže:"Ti-Aj".

 

[DukeLander]

NVIDIA Support

nvidia.custhelp.com

 

[alex303]

Ako je to potrebno da napokon dobijemo open source Nvidia drajver, so be it.

 

[zamzung]

Nvidia Allegedly Hacks Hackers Who Stole Company's Data

A happy ending

www.tomshardware.com

 

[Bajica]

osim ako ne lazu, prave zrtvice od sebe

 

[zamzung]

IT je ozbiljan biznis. Mnogo ljudi, mnogo patenata...da ne kažem da dobrim delom pokreću moderan svet - od semafora i veš mašina do Svemirskih misija.

Imaju para, možemo samo biti ljubomorni.

Ne vidim razlog da navijam za propalice jer pravim razliku između hakera i lopova.

 

[Zile995]

Hackers Who Broke Into NVIDIA's Network Leak DLSS Source Code Online

Hackers who penetrated the network of the American chip manufacturer NVIDIA have leaked DLSS source code on the Internet.

thehackernews.com

4chan comments:

It's the real deal. The dump contains, among others: The current driver source. Future driver source including unreleased ada and hopper codenames, the unannounced blackwell codename, all 3 of them are chiplet based and heavily riscv internally for the supporting processors (PM, decoding, encoding, and so on). Production and debug firmwares for everything. This would make nouveau work on latest GPUs, but it won't happen due to licensing issues. CUDA + every library, compiler and tool, including the enterprise ones, sources.

The toolchain is very flexible, supports multiple GCC and MSVC versions, with a bit of work that would possibly mean supporting newer GPUs on older Windows versions in some fashion.
... millions of lines of the NV driver code to figure out everything. This entire leak is 80GB unpacked with 404077 files.

 

[sam633]

To i nije novo, drugi deo će verovatno biti interesantniji.

Mislim da teže po nVidiju da izađu dokumenti za PDK i slično, kinezi će baciti oko na to.

Možda je važnije ono što se zove "trade secret" (usled čega LAPSUS$ traži da nVidia otvori svoj softver), što može biti predmet razmatranja nekih vlada.

I dalje stoji: (tačno kako piše)

STOP ASKING US ABOUT NVIDIA, GIVE UE TIME

 

[Der Schnitter]

Nisu jedini izgleda:

Nakon hakovanja Samsunga, objavljeno 190GB ukradenih podataka

Nedavno je Nvidia bila meta hakerskog napada, a neke informacije su objavljene onlajn. Sada izgleda da je sličan napad pretrpeo i Samsung.

www.b92.net

Tekst je, valjda, prvobitno potekao odavde:

Hackers leak 190GB of alleged Samsung data, source code

The Lapsus$ data extortion group leaked today a huge collection of confidential data they claim to be from Samsung Electronics, the South Korean giant consumer electronics company.

www.bleepingcomputer.com

 

[sam633]

Kao i ovo, recimo:

https://www.itp.net/security/portuguese-media-group-impresa-crippled-by-ransomware-attack

Za nedelju-dve, možda izađe source od Vodafone-a:

Vodafone source code - around 5000 github repos. 200GB or so compressed.

Sve ovo, možda znači, da se ljudi ipak ne šale, to je sve.

Međutim, predmet teme nije LAPSUS$, već nVidia.

Što se tiče toga, s obzirom na oduvlačenje, možda je blef, možda i dalje češljaju ono što imaju od nV, možda su pregovori u toku.

 

[zamzung]

nVidia hakovana a uskoro i korisnici. (malwer koristi zvanicne nVidia potpise-sertifikate da zaobidje Defender zastitu)

The hackers appear to have leaked Nvidia’s official code signing certificates, a means by which users (and Microsoft) can verify that a downloaded program comes from the publisher it says it’s from.

That’s allowing files containing a host of popular malware suites to be posted and downloaded, bypassing Windows Defender’s built-in executable verification and slipping past anti-virus software. BleepingComputer reports that two now-expired (but still usable) verification codes have been compromised and used to deliver remote access trojans. Another example, using the Nvidia verification to sign a fake Windows driver, was also spotted.

Stolen Nvidia certificates used to hide malware in driver downloads

Nvidia GeForce graphics card owners may be vulnerable to malware if they're not careful with their next GPU driver installation.

www.pcworld.com

 

[Olujche]

^ zameniće sertifikate i rešiće problem. Više me zanima koliko će 0day da nađu u drajverima.