Muva nje izindaba zakhishwa zokuthi ubuthakathaka bukhonjisiwe (I-CVE-2021-40823, i-CVE-2021-40824) kuzinhlelo eziningi zamakhasimende yesikhulumi sezokuxhumana esisezingeni eliphansi I-Matrix, evumela ukuthola ulwazi mayelana nokhiye abasetshenziselwa ukudlulisa imilayezo ezingxoxweni zokuphela kokuphela ezifihliwe (E2EE).
Umhlaseli ofake engozini omunye wabasebenzisi kusuka engxoxweni ingabhala ngemfihlo imiyalezo ethunyelwe ngaphambilini kulo msebenzisi kusuka kuzinhlelo zokusebenza zamakhasimende asengozini. Ukusebenza okuphumelelayo kudinga ukufinyelela ku-akhawunti yomamukeli womyalezo nokufinyelela kungatholwa kokubili ngokuvuza kwamapharamitha we-akhawunti nangokugenca iseva yeMatrix lapho umsebenzisi exhuma khona.
Kushiwo lokho ukuba sengozini kuyingozi kakhulu kubasebenzisi bamakamelo okuxoxa abethelwe lapho kuxhunywa khona amaseva e-Matrix alawulwa ngabahlaseli. Abalawuli bamaseva anjalo bangazama ukuzenza abasebenzisi beseva ukuthola imilayezo ethunyelwe engxoxweni evela kuzinhlelo zokusebenza zamakhasimende asengozini.
Ukuba sengozini zidalwa amaphutha anengqondo ekusetshenzisweni kwendlela yokunikeza ukufinyelela kabusha kokhiye Iziphakamiso kumakhasimende ahlukene zitholakele. Ukuqaliswa okususelwa kumatrix-ios-sdk, matrix-nio, kanye nemitapo yolwazi ye-libolm akusengozini yokuba sengozini.
Ngenxa yalokho, ukuba sengozini kuvela kuzo zonke izinhlelo zokusebenza eziboleke ikhodi eyinkinga y azithinti ngqo izivumelwano zeMatrix ne-Olm / Megolm.
Ngokuqondile, le nkinga ithinta iklayenti le-Element Matrix (phambilini elaliyiRiot) lewebhu, ideskithophu, ne-Android, kanye nezicelo zamakhasimende ezivela eceleni nemitapo yolwazi, efana neFluffyChat, Nheko, Cinny, neSchildiChat. Inkinga ayiveli kuklayenti le-iOS elisemthethweni, noma kuzinhlelo zokusebenza zeChatty, Hydrogen, mautrix, purple-matrix kanye neSiphon.
Izinhlobo ezinamakhadi zamakhasimende athintekile seziyatholakala; ngakho-ke kuyacelwa ukuthi ibuyekezwe ngokushesha okukhulu futhi siyaxolisa ngokungalungile. Uma ungeke ukwazi ukuthuthukisa, cabanga ukugcina amaklayenti asengozini yokungaxhunyiwe ku-inthanethi uze ukwazi. Uma amaklayenti asengozini engaxhumekile ku-inthanethi, awakwazi ukukhohliselwa ekuvezeni okhiye. Bangabuyela ku-inthanethi ngokuphepha uma sebebuyekeze.
Ngeshwa, kunzima noma akunakwenzeka ukuthola izimo zalokhu kuhlasela ngamazinga ajwayelekile we-log akhona kumakhasimende nakumaseva. Kodwa-ke, njengoba ukuhlaselwa kudinga ukuyekethisa i-akhawunti, abaphathi bamaseva asekhaya bangafisa ukubuyekeza izingodo zabo zokuqinisekisa nganoma yiziphi izimpawu zokufinyelela okungafanele.
Indlela yokushintshanisa ukhiye, ekufakweni kobuthakathaka obutholakele, ivumela iklayenti elingenabo okhiye bokubhala ngemfihlo umlayezo wokucela okhiye kusuka kudivayisi yomthumeli noma kwamanye amadivayisi.
Isibonelo, leli khono liyadingeka ukuqinisekisa ukushumeka kwemilayezo emidala kudivayisi entsha yomsebenzisi noma esimweni lapho umsebenzisi elahlekelwa khona okhiye abakhona. Ukucaciswa kweprotocol kunquma ngokuzenzakalela ukungaphenduli kuzicelo ezisemqoka nokuzithumela ngokuzenzakalela kumadivayisi aqinisekisiwe omsebenzisi ofanayo. Ngeshwa, ekusebenzeni okusebenzayo, le mfuneko ayizange ihlangatshezwe futhi izicelo zokuthumela okhiye zacutshungulwa ngaphandle kokukhonjwa kwedivayisi okufanele.
Ubuthakathaka bukhonjwe ngesikhathi kucwaningwa ukuphepha kweklayenti le-Element. Ukulungiswa manje sekutholakala kuwo wonke amakhasimende akhathazekile. Abasebenzisi bayelulekwa ukuthi bafake ngokushesha izibuyekezo futhi banqamule amaklayenti ngaphambi kokufaka isibuyekezo.
Kwakungekho bufakazi bokusebenzisa ubungozi ngaphambi kokukhishwa kwesibuyekezo. Akunakwenzeka ukuthola iqiniso lokuhlaselwa usebenzisa izingodo ezijwayelekile zeklayenti nezeseva, kepha njengoba lokhu kuhlasela kudinga ukuyekethisa i-akhawunti, abaphathi bangahlaziya ubukhona bokungena okusolisayo besebenzisa izingodo zokufakazela ubuqiniso kumaseva abo, futhi Abasebenzisi bangahlola uhlu yamadivayisi axhunywe ku-akhawunti yawo wokuxhuma kabusha kwakamuva nezinguquko zesimo se-trust.
Umthombo: https://matrix.org