{"id":287,"date":"2023-09-20T03:17:31","date_gmt":"2023-09-20T03:17:31","guid":{"rendered":"https:\/\/tastycounter.net\/index.php\/2023\/09\/20\/cac-nha-nghien-cuu-ai-cua-microsoft-vo-tinh-de-lo-hang-terabyte-du-lieu-nhay-cam-noi-bo\/"},"modified":"2023-09-20T03:17:31","modified_gmt":"2023-09-20T03:17:31","slug":"cac-nha-nghien-cuu-ai-cua-microsoft-vo-tinh-de-lo-hang-terabyte-du-lieu-nhay-cam-noi-bo","status":"publish","type":"post","link":"https:\/\/tastycounter.net\/index.php\/2023\/09\/20\/cac-nha-nghien-cuu-ai-cua-microsoft-vo-tinh-de-lo-hang-terabyte-du-lieu-nhay-cam-noi-bo\/","title":{"rendered":"C\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u AI c\u1ee7a Microsoft v\u00f4 t\u00ecnh \u0111\u1ec3 l\u1ed9 h\u00e0ng terabyte d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m n\u1ed9i b\u1ed9"},"content":{"rendered":"<\/p>\n
\n

C\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u AI c\u1ee7a Microsoft \u0111\u00e3 v\u00f4 t\u00ecnh l\u00e0m l\u1ed9 h\u00e0ng ch\u1ee5c terabyte d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m, bao g\u1ed3m c\u1ea3 private key v\u00e0 m\u1eadt kh\u1ea9u, trong khi xu\u1ea5t b\u1ea3n kho l\u01b0u tr\u1eef d\u1eef li\u1ec7u \u0111\u00e0o t\u1ea1o ngu\u1ed3n m\u1edf tr\u00ean GitHub.<\/p>\n

Trong nghi\u00ean c\u1ee9u \u0111\u01b0\u1ee3c chia s\u1ebb v\u1edbi TechCrunch, startup b\u1ea3o m\u1eadt \u0111\u00e1m m\u00e2y Wiz cho bi\u1ebft h\u1ecd \u0111\u00e3 ph\u00e1t hi\u1ec7n ra kho l\u01b0u tr\u1eef GitHub thu\u1ed9c b\u1ed9 ph\u1eadn nghi\u00ean c\u1ee9u AI c\u1ee7a Microsoft nh\u01b0 m\u1ed9t ph\u1ea7n trong c\u00f4ng vi\u1ec7c \u0111ang ti\u1ebfn h\u00e0nh c\u1ee7a h\u1ecd v\u1ec1 vi\u1ec7c v\u00f4 t\u00ecnh l\u00e0m l\u1ed9 d\u1eef li\u1ec7u \u0111\u01b0\u1ee3c l\u01b0u tr\u1eef tr\u00ean \u0111\u00e1m m\u00e2y.<\/p>\n

Ng\u01b0\u1eddi \u0111\u1ecdc kho l\u01b0u tr\u1eef GitHub, n\u01a1i cung c\u1ea5p m\u00e3 ngu\u1ed3n m\u1edf v\u00e0 c\u00e1c m\u00f4 h\u00ecnh AI \u0111\u1ec3 nh\u1eadn d\u1ea1ng h\u00ecnh \u1ea3nh, \u0111\u01b0\u1ee3c h\u01b0\u1edbng d\u1eabn t\u1ea3i xu\u1ed1ng nh\u1eefng model t\u1eeb Azure Storage URL. Tuy nhi\u00ean, Wiz nh\u1eadn th\u1ea5y r\u1eb1ng URL n\u00e0y \u0111\u00e3 \u0111\u01b0\u1ee3c c\u1ea5u h\u00ecnh \u0111\u1ec3 c\u1ea5p quy\u1ec1n tr\u00ean to\u00e0n b\u1ed9 t\u00e0i kho\u1ea3n l\u01b0u tr\u1eef, do nh\u1ea7m l\u1eabn l\u00e0m l\u1ed9 th\u00eam d\u1eef li\u1ec7u ri\u00eang t\u01b0.<\/p>\n

D\u1eef li\u1ec7u n\u00e0y bao g\u1ed3m 38 terabyte th\u00f4ng tin nh\u1ea1y c\u1ea3m, bao g\u1ed3m c\u1ea3 b\u1ea3n sao l\u01b0u tr\u00ean m\u00e1y t\u00ednh c\u00e1 nh\u00e2n c\u1ee7a hai nh\u00e2n vi\u00ean Microsoft. D\u1eef li\u1ec7u n\u00e0y c\u0169ng ch\u1ee9a nhi\u1ec1u th\u00f4ng tin c\u00e1 nh\u00e2n nh\u1ea1y c\u1ea3m kh\u00e1c, bao g\u1ed3m m\u1eadt kh\u1ea9u c\u00e1c d\u1ecbch v\u1ee5 c\u1ee7a Microsoft, key b\u00ed m\u1eadt v\u00e0 h\u01a1n 30.000 tin nh\u1eafn Microsoft Teams n\u1ed9i b\u1ed9 t\u1eeb h\u00e0ng tr\u0103m nh\u00e2n vi\u00ean Microsoft.<\/p>\n

Theo Wiz, URL \u0111\u00e3 ti\u1ebft l\u1ed9 d\u1eef li\u1ec7u n\u00e0y k\u1ec3 t\u1eeb n\u0103m 2020 c\u0169ng b\u1ecb c\u1ea5u h\u00ecnh sai, cho ph\u00e9p c\u00e1c quy\u1ec1n “to\u00e0n quy\u1ec1n” thay v\u00ec “ch\u1ec9 \u0111\u1ecdc”, \u0111i\u1ec1u \u0111\u00f3 c\u00f3 ngh\u0129a l\u00e0 b\u1ea5t k\u1ef3 ai bi\u1ebft n\u01a1i c\u1ea7n t\u00ecm \u0111\u1ec1u c\u00f3 th\u1ec3 x\u00f3a, thay th\u1ebf v\u00e0 \u0111\u01b0a n\u1ed9i dung \u0111\u1ed9c h\u1ea1i v\u00e0o ch\u00fang.<\/p>\n

Wiz l\u01b0u \u00fd r\u1eb1ng t\u00e0i kho\u1ea3n l\u01b0u tr\u1eef kh\u00f4ng b\u1ecb l\u1ed9 tr\u1ef1c ti\u1ebfp. Thay v\u00e0o \u0111\u00f3, c\u00e1c nh\u00e0 ph\u00e1t tri\u1ec3n AI c\u1ee7a Microsoft \u0111\u00e3 bao g\u1ed3m token SAS (Shared Access Signature) qu\u00e1 d\u1ec5 d\u00e3i trong URL. Token SAS l\u00e0 m\u1ed9t c\u01a1 ch\u1ebf \u0111\u01b0\u1ee3c Azure s\u1eed d\u1ee5ng cho ph\u00e9p ng\u01b0\u1eddi d\u00f9ng t\u1ea1o c\u00e1c li\u00ean k\u1ebft c\u00f3 th\u1ec3 chia s\u1ebb \u0111\u1ec3 c\u1ea5p quy\u1ec1n truy c\u1eadp v\u00e0o d\u1eef li\u1ec7u c\u1ee7a t\u00e0i kho\u1ea3n Azure Storage.<\/p>\n

<\/ins><\/div>\n

\u201cAI m\u1edf ra ti\u1ec1m n\u0103ng to l\u1edbn cho c\u00e1c c\u00f4ng ty c\u00f4ng ngh\u1ec7\u201d, <\/em>\u0111\u1ed3ng s\u00e1ng l\u1eadp Wiz v\u00e0 CTO Ami Luttwak n\u00f3i v\u1edbi TechCrunch. \u201cTuy nhi\u00ean, khi c\u00e1c nh\u00e0 khoa h\u1ecdc v\u00e0 k\u1ef9 s\u01b0 d\u1eef li\u1ec7u ch\u1ea1y \u0111ua \u0111\u1ec3 \u0111\u01b0a c\u00e1c gi\u1ea3i ph\u00e1p AI m\u1edbi v\u00e0o s\u1ea3n xu\u1ea5t, l\u01b0\u1ee3ng d\u1eef li\u1ec7u kh\u1ed5ng l\u1ed3 m\u00e0 h\u1ecd x\u1eed l\u00fd \u0111\u00f2i h\u1ecfi ph\u1ea3i c\u00f3 c\u00e1c bi\u1ec7n ph\u00e1p b\u1ea3o v\u1ec7 v\u00e0 ki\u1ec3m tra b\u1ea3o m\u1eadt b\u1ed5 sung. V\u1edbi vi\u1ec7c nhi\u1ec1u nh\u00f3m ph\u00e1t tri\u1ec3n c\u1ea7n thao t\u00e1c v\u1edbi l\u01b0\u1ee3ng d\u1eef li\u1ec7u kh\u1ed5ng l\u1ed3, chia s\u1ebb d\u1eef li\u1ec7u \u0111\u00f3 v\u1edbi c\u00e1c \u0111\u1ed3ng nghi\u1ec7p c\u1ee7a h\u1ecd ho\u1eb7c c\u1ed9ng t\u00e1c trong nh\u1eefng d\u1ef1 \u00e1n ngu\u1ed3n m\u1edf c\u00f4ng c\u1ed9ng, nh\u1eefng tr\u01b0\u1eddng h\u1ee3p nh\u01b0 c\u1ee7a Microsoft ng\u00e0y c\u00e0ng kh\u00f3 theo d\u00f5i v\u00e0 tr\u00e1nh kh\u1ecfi\u201d.<\/em><\/p>\n

Wiz cho bi\u1ebft h\u1ecd \u0111\u00e3 chia s\u1ebb nh\u1eefng ph\u00e1t hi\u1ec7n c\u1ee7a m\u00ecnh v\u1edbi Microsoft v\u00e0o ng\u00e0y 22 th\u00e1ng 6 v\u00e0 Microsoft \u0111\u00e3 thu h\u1ed3i token SAS hai ng\u00e0y sau \u0111\u00f3 v\u00e0o ng\u00e0y 24 th\u00e1ng 6. Microsoft cho bi\u1ebft h\u1ecd \u0111\u00e3 ho\u00e0n t\u1ea5t cu\u1ed9c \u0111i\u1ec1u tra v\u1ec1 t\u00e1c \u0111\u1ed9ng ti\u1ec1m t\u00e0ng c\u1ee7a t\u1ed5 ch\u1ee9c v\u00e0o ng\u00e0y 16 th\u00e1ng 8.<\/p>\n

Trong m\u1ed9t b\u00e0i \u0111\u0103ng tr\u00ean blog \u0111\u01b0\u1ee3c chia s\u1ebb v\u1edbi TechCrunch tr\u01b0\u1edbc khi xu\u1ea5t b\u1ea3n, Trung t\u00e2m ph\u1ea3n h\u1ed3i b\u1ea3o m\u1eadt c\u1ee7a Microsoft cho bi\u1ebft \u201ckh\u00f4ng c\u00f3 d\u1eef li\u1ec7u kh\u00e1ch h\u00e0ng n\u00e0o b\u1ecb l\u1ed9 v\u00e0 kh\u00f4ng c\u00f3 d\u1ecbch v\u1ee5 n\u1ed9i b\u1ed9 n\u00e0o kh\u00e1c g\u1eb7p r\u1ee7i ro v\u00ec v\u1ea5n \u0111\u1ec1 n\u00e0y\u201d<\/em>.<\/p>\n

Microsoft cho bi\u1ebft, nh\u1edd nghi\u00ean c\u1ee9u c\u1ee7a Wiz, h\u1ecd \u0111\u00e3 m\u1edf r\u1ed9ng d\u1ecbch v\u1ee5 b\u00ed m\u1eadt c\u1ee7a GitHub, d\u1ecbch v\u1ee5 n\u00e0y gi\u00e1m s\u00e1t t\u1ea5t c\u1ea3 c\u00e1c thay \u0111\u1ed5i m\u00e3 ngu\u1ed3n m\u1edf c\u00f4ng khai \u0111\u1ec3 ph\u00e1t hi\u1ec7n th\u00f4ng tin x\u00e1c th\u1ef1c d\u1ea1ng plaintext v\u00e0 nh\u1eefng b\u00ed m\u1eadt kh\u00e1c bao g\u1ed3m b\u1ea5t k\u1ef3 token SAS n\u00e0o c\u00f3 th\u1ec3 c\u00f3 c\u00e1c \u0111\u1eb7c quy\u1ec1n ho\u1eb7c h\u1ebft h\u1ea1n qu\u00e1 m\u1ee9c cho ph\u00e9p.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

C\u00e1c nh\u00e0 nghi\u00ean c\u1ee9u AI c\u1ee7a Microsoft \u0111\u00e3 v\u00f4 t\u00ecnh l\u00e0m l\u1ed9 h\u00e0ng ch\u1ee5c terabyte d\u1eef li\u1ec7u nh\u1ea1y c\u1ea3m, bao g\u1ed3m c\u1ea3 private key v\u00e0 m\u1eadt kh\u1ea9u, trong khi xu\u1ea5t b\u1ea3n kho l\u01b0u tr\u1eef d\u1eef li\u1ec7u \u0111\u00e0o t\u1ea1o ngu\u1ed3n m\u1edf tr\u00ean GitHub. Trong nghi\u00ean c\u1ee9u \u0111\u01b0\u1ee3c chia s\u1ebb v\u1edbi TechCrunch, startup b\u1ea3o m\u1eadt \u0111\u00e1m m\u00e2y […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-287","post","type-post","status-publish","format-standard","hentry","category-khong-phan-loai"],"_links":{"self":[{"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/posts\/287","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/comments?post=287"}],"version-history":[{"count":0,"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/posts\/287\/revisions"}],"wp:attachment":[{"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/media?parent=287"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/categories?post=287"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/tags?post=287"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}