|
Mumwe chete ndiye anogona kuramba ari mupenyu uye mune iyi nyaya yanga iri Google's nyeredzi browser. iPhone, Safari, Explorer uye kunyangwe iyo Firefox yakagadzwa yakawira pasina matambudziko mumaoko evabiridzi vakanaka kwazvo pasi rose vanosangana gore rega rega muCanada kuyedza kuparadza masisitimu ane mukurumbira enguva uye kuratidza kukanganisa kwavo kwekuchengetedza. Nekudaro, ivo havana kukwanisa kutyora yakaoma sandbox modhi inodzivirira Chrome, iyo colossus iyo yakakwikwidza kurwiswa kweakanakisa makomputa nyanzvi papasi. |
Mumakwikwi epagore ePwn2Own kuCanSecWest chengetedzo yakanaka muVancouver inopa nharaunda yakakwana kune epasirese IT ekuchengetedza nyanzvi kuti vaite mukutenderera kuzere kurwisa mhando dzese dzemidziyo inopisa uye software. Gore negore, vanokwanisa kudzora zvipingamupinyi zvekuchengetedza izvo masisitimu ari kuongororwa anoedza kumisikidza, asi vashoma chete vane rukudzo rwekusvika kumagumo emakwikwi vasina kana chakakanganisa.
Yekutanga kudonha yaive yakabudirira Apple iPhone, Vincenzo Iozzo naRalf Philipp Weinmann vaingoda masekondi makumi maviri chete kuita benzi rechinhu chakanyanya kudiwa chenguva iyoyo. Vabiridzi vacho vakangoita iyo iPhone (isina jailbreak) inopinda saiti yakambogadzirwa navo, kubva kwavakateedzera iyo dhatabhesi rese reSMS (kunyangwe iwo akadzimwa) kumaseva avo. Vakataura kuti kunyangwe Apple ichiedza kudzivirira mipata iyi, "mashandisiro avakaita kusaina kodhi akareruka." Vakahwina madhora zviuru gumi nezvishanu pakuratidzira kwehungwaru uye kambani yekapuro painogadzirisa bhagi rekuchengetedza, ruzivo rwekupinda rwunoratidzwa.
Charlie Miller, Principal Security Analyst kuIndependent Security Evaluators, akakwanisa kubira Safari paMacBook Pro ine Snow Leopard uye asingawanikwe, achiwana $ 10,000. Iyi imbwa yekare yechiitiko inokwanisa kupaza chishandiso chine Apple gore rega rega. Zvinotaridza kuti atora kupisa kwechiratidzo. Hazvingakuvadze kuti kambani imushandire iye kuti aone kana kamwe chete uye zvachose vanogona kupedza kukanganisa kwekuchengetedza muzvigadzirwa zvavo.
Muongorori wezvekuchengetedza akazvimiririra Peter Vreugdenhil akahwina yakaenzana yeiyo kubiwa kweInternet Explorer 8, iyo isingachashamisa chero munhu kuona imwe vhezheni uye imwe zvakare, sezvo achirohwa nekurwiswa kwenyanzvi ipi neipi inoitsvaga. Kubira IE8 Vreugdenhil akati akashandisa kusagadzikana kwechipiri muchikamu chechina-chakapfuura chakapfuura ASLR (Kero Space Kurongedzwa Randomization) uye DEP (Dhata Kuuraya Kudzivirira), izvo zvakagadzirirwa kubatsira kumisa kurwiswa mubrowser. Sezvimwe mukuedza kumwe, sisitimu yacho yakagadziriswa apo bhurawuza rakashanyira saiti yaive nekodhi yakaipa. Mutongo wakamupa kodzero kukomputa, iyo yaakaratidza nekumhanya macalculator emuchina.
Firefox yaifanirwawo kupfugama nemabvi kune hunyanzvi hwaNils, UK mukuru wekutsvaga kweMWR InfoSecurity, uyo akaita $ 10,000 kubvisa kusagadzikana kwebrowser kuri kuita kuti Microsoft igadzike. Nils akati akashandisa kushushikana kwekurangarira huori uye aifanirwa kukunda ASLR neDIP nekutenda kubug mukuitwa kweMozilla.
Uye pakupedzisira, iyo chete yakasara yakamira yave iri Chrome. Parizvino ndiyo yega bhurawuza inoramba isina kukundwa, chimwe chinhu icho chakange chazadzikiswa panguva yegore ra2009 yechiitiko ichi chinoitika muCanada uye icho chinotsvaga kunyevera vashandisi nezve kushushikana kwezvirongwa. “Pane zvikanganiso muChannel, asi zvakaoma kwazvo kushandisa. Vakagadzira 'sandbox' modhi, izvo zvinonetsa kuputsa, "akadaro Charlie Miller, mubavha ane mukurumbira, uyo mune ino shanduro akakwanisa kutora Safari paMacbook Pro.
mabviro: Neoteo uye Segu-Info uye ZDNET