IGitHub ikhiphe izinguquko eziningi zemithetho, ikakhulukazi echaza inqubomgomo maqondana nendawo yokuxhashazwa kanye nemiphumela yophenyo lwe-malwarekanye nokuhambisana nomthetho wamanje we-copyright wase-US.
Ekushicilelweni kwezibuyekezo ezintsha zenqubomgomo, basho ukuthi bagxila komehluko phakathi kokuqukethwe okulimazayo, okungavunyelwe endaweni yesikhulumi, kanye nekhodi yokuphumula esekela ucwaningo lwezokuphepha, olwamukelekile nolunconyiwe.
Lezi zibuyekezo ziphinde zigxile ekususeni ukungaqondakali endleleni esisebenzisa ngayo amagama anjengokuthi "ukuxhaphaza," "i-malware," kanye "nokulethwa" ukukhuthaza ukucaca kokulindelekile nezinhloso zethu. Sivule isicelo sokudonsa ukuphawula komphakathi futhi simema abacwaningi bezokuphepha nabathuthukisi ukuthi basebenzisane nathi kulokhu kuchazwa futhi basisize siqonde kangcono izidingo zomphakathi.
Phakathi kwezinguquko esingazithola, kunezelwe imibandela elandelayo emithethweni yokuhambisana ne-DMCA, ngaphezu kokuvinjelwa kokusabalalisa obekukhona ngaphambilini nokuqinisekisa ukufakwa noma ukulethwa kwe-malware esebenzayo nokuxhaphazayo:
Ukuvinjelwa okusobala kokubeka ubuchwepheshe enqolobaneni ukunqanda izindlela zobuchwepheshe zokuvikela ilungelo lobunikazi, kufaka phakathi okhiye belayisense, kanye nezinhlelo zokwenza okhiye, ukweqa ukuqinisekiswa kokhiye, nokwelula isikhathi sokusebenza samahhala.
Kulokhu kushiwo ukuthi inqubo yethulwa ukwethula isicelo sokususwa kwekhodi eshiwo. Umfakisicelo wokususa kumele anikeze imininingwane yezobuchwepheshe, ngenhloso eshiwo yokufaka isicelo sokubuyekezwa ngaphambi kokuvalwa.
Ngokuvimba indawo yokugcina izinto, bathembisa ukuhlinzeka ngekhono lokuthekelisa izingqinamba nobudlelwano bomphakathi, futhi banikele ngezinsizakalo zomthetho.
Izinguquko zenqubomgomo yokuxhaphaza kanye ne-malware zibonisa ukugxekwa kulandela ukususwa kweMicrosoft kohlobo oluthile lweMicrosoft Exchange olusetshenziselwa ukwenza ukuhlasela. Imithetho emisha izama ukuhlukanisa ngokusobala okuqukethwe okuyingozi okusetshenziselwa ukwenza ukuhlasela okusebenzayo kusuka kwikhodi ehambisana nophenyo lwezokuphepha. Izinguquko ezenziwe:
Akuvunyelwe kuphela ukuhlasela abasebenzisi be-GitHub ukushicilela okuqukethwe ngokuxhaphaza noma ukusebenzisa i-GitHub njengemoto yokuletha ukuxhaphaza, kodwa futhi ushicilele ikhodi enonya nokuxhaphaza okuhambisana nokuhlaselwa okusebenzayo. Ngokuvamile, akuvunyelwe ukushicilela izibonelo zokuxhashazwa okwenziwe ezifundweni zezokuphepha nezithinta ukuba sengozini osekuvele kulungisiwe, kodwa konke kuzoncika ekutheni igama elithi "ukuhlaselwa okusebenzayo" lihunyushwa kanjani.
Isibonelo, ukuthumela noma yiluphi uhlobo lwekhodi yomthombo weJavaScript ehlasela isiphequluli iwela ngaphansi kwale nqubo: umhlaseli akavimbeli umhlaseli ekulandeni ikhodi yomthombo kusiphequluli sesisulu ngokusesha, ngokuzifaka ngokuzenzakalela ukuthi ngabe uhlobo lokuxhaphaza olushicilelwe lungasebenziseki form, nokuyiqhuba.
Okufanayo kuya kunoma iyiphi enye ikhodi, ngokwesibonelo ku-C ++: akukho okukuvimbela ekuhlanganiseni nasekusebenzeni kumshini ohlaselwe. Uma kutholakala ikhosombe elinekhodi enjalo, kuhlelwa ukuthi ungalisusi, kepha ukuvala ukufinyelela kulo.
Ngaphezu kwalokhu, kungezwe:
- Isigaba somthetho esichaza ukuthi kungenzeka yini ukuthi kufakwe isikhalazo uma kukhona ukungavumelani nokuvinjelwa.
- Isidingo sabanikazi bamakhosombe abamba okuqukethwe okungaba yingozi njengengxenye yocwaningo lwezokuphepha. Ukuba khona kwalokhu okuqukethwe kufanele kushiwo ngokusobala ekuqaleni kwefayela le-README.md, futhi imininingwane yokuxhumana yokuxhumana kufanele inikezwe kufayela le-SECURITY.md.
Kuthiwa i-GitHub ngokuvamile ayikususi ukuxhashazwa okushicilelwe kanye nezifundo zokuphepha zokuba sengozini osekudaluliwe (hhayi usuku lwe-0), kepha iyaligodla ikhono lokukhawulela ukufinyelela uma izwa ukuthi kusenobungozi bokusebenzisa lokhu ku-In-service nokuhlaselwa kwangempela Ukuxhaswa kweGitHub kuthole izikhalazo ngokusetshenziswa kwekhodi yokuhlaselwa.
Izinguquko zisesimo sokusalungiswa, ziyatholakala ukuxoxwa izinsuku ezingama-30.
Umthombo: https://github.blog/