|
Inye kuphela enokuhlala iphila kwaye kule meko ibe sisikhangeli seenkwenkwezi sikaGoogle. I-iPhone, i-Safari, i-Explorer kunye ne-Firefox engcwalisiweyo iye yawa ngaphandle kweengxaki ezandleni zabona bahlaseli behlabathi abadibana minyaka le eCanada ukuzama ukwaphula ezona nkqubo zidumileyo zelo xesha kwaye babonise iziphene zabo zokhuseleko. Nangona kunjalo, abakwazanga ukwaphula eyona ndlela inzima "yebhokisi yesanti" ekhusela i-Chrome, i-colossus eye yaxhathisa ukuhlaselwa kweengcali zekhompyuter ezilungileyo kakhulu emhlabeni. |
Ukhuphiswano lonyaka lwePwn2Own kumboniso wokhuseleko weCanSecWest eVancouver lubonelela ngemeko-bume egqibeleleyo kwiingcali zehlabathi zokhuseleko lwe-cybersecurity ukuba ziphume ngokuchasene nazo zonke iintlobo zezixhobo ezihamba phambili kunye nesoftware. Unyaka nonyaka, bayakwazi ukutyhutyha imiqobo yokhuseleko ethi iinkqubo eziphononongwayo zizama ukuyibeka, kodwa bambalwa abanelungelo lokufikelela esiphelweni sokhuphiswano ngaphandle kokusilela nokukodwa.
Eyokuqala ukuwa yaba yiApple iPhone ephumeleleyo.UVincenzo Iozzo kunye noRalf Philipp Weinmann bebengafuni imizuzwana engama-20 ukwenza isidenge sesona sixhobo sifunwayo okwangoku. Abaduni benza kuphela i-iPhone (ngaphandle kwe-jailbreak) bafake indawo eyaphuhliswa ngabo ngaphambili, apho bakhuphela khona yonke i-database ye-SMS (nokuba isusiwe) kwiiseva zabo. Batsho ukuba ngaphandle kweenzame ze-Apple zokuthintela olu lwaphulo-mthetho, "indlela abaphumeze ngayo ukusayina ikhowudi ilula kakhulu." Baphumelele i-15.000 yeedola kulo mbonakaliso wobukrelekrele kwaye ngokukhawuleza ukuba inkampani ye-apula ilungise impazamo yokhuseleko, iinkcukacha zokufikelela ziya kuboniswa.
UCharlie Miller, umhlalutyi oyintloko wezokhuseleko kwi-Independent Security Evaluators, ukwazile ukuqhekeza iSafari kwi-MacBook Pro eqhuba i-Snow Leopard kwaye ngaphandle kokufikelela ngokomzimba, ukufumana i-10,000 yeedola. Le nja indala kumsitho ikwazile ukuvuthela isixhobo sika-Apple minyaka le. Kubonakala ngathi unomnwe wakhe kwi-pulse ye-brand. Bekungayi kuba buhlungu ukuba inkampani yamqesha ukuze abone ukuba banako na ukuphelisa iziphene zokhuseleko kwiimveliso zabo.
Umphandi ozimeleyo wezokhuseleko uPeter Vreugdenhil wafumana imali efanayo ngokuqhekezwa kwe-Internet Explorer 8, engasamangali nabani na ukubona uhlelo olunye kunye nolunye ngokunjalo, njengoko luwa luhlaselwe luhlaselo lwalo naluphi na uchwephesha olucebisayo. Ukugqekeza i-IE8, uVreugdenhil uthe uxhaphaze ubuthathaka obumbini kuhlaselo olunamacandelo amane adlula i-ASLR (idilesi yeNdawo yoLayo ngokuRandomization) kunye ne-DEP (UThintelo loKusebenza kweDatha), eziyilelwe ukunceda ukumisa ukuhlaselwa kwisikhangeli. Njengakwezinye iinzame, inkqubo iye yachaphazeleka xa isikhangeli sityelele indawo yokubamba ikhowudi engalunganga. Esi sigwebo samnika amalungelo ekhompyutha, nto leyo awabonisa ngayo ngokwenza isixhobo sokubala salo matshini sisebenze.
IFirefox nayo kwafuneka iguqe ngamadolo kumaqhinga kaNils, intloko yophando e-United Kingdom kwi-MWR InfoSecurity, ephumelele i-10,000 yeedola ngeendleko zobuthathaka besikhangeli esigcina iMicrosoft ebusuku. U-Nils ubanga ukuba usebenzise ubungozi bokonakala kwenkumbulo kwaye kuye kwafuneka ukuba adlule i-ASLR kunye ne-DEP enkosi kwimpazamo ekuphunyezweni kweMozilla.
Kwaye ekugqibeleni, ekuphela kwayo esele imile ibiyiChrome. Ukuza kuthi ga ngoku kuphela isikhangeli esihlala singoyiswayo, into esele iyifumene ngexesha loshicilelo luka-2009 lwesi siganeko esenzeka eCanada kwaye sifuna ukulumkisa abasebenzisi ngobuthathaka beenkqubo. «Kukho iziphene kwiChrome, kodwa kunzima kakhulu ukuzisebenzisa. "Bayila imodeli 'yebhokisi yesanti', ekunzima kakhulu ukuyiphula," watsho uCharlie Miller, umgebenga odumileyo, owathi kolu hlelo wakwazi ukulawula iSafari kwiMacbook Pro.
Umthombo: Neoteo kunye Segu-Info kunye ZDNET