Babban kuskuren tsaro da aka gano a cikin Slack

slack

Wannan lokacin ya kasance Frans Rosen wanda ke kula da gargadin al'umma game da wata sabuwar matsalar tsaro, a wannan karon a cikin daya daga cikin aikace-aikacen da kowane irin kamfani ya fi amfani da su wajen sadarwa na cikin gida kamar slack.

Dangane da bayanan da Detectify mai binciken tsaro ya bayar, Slack ya kasance yana da mawuyacin rauni inda mai amfani da cikakken ilimin zai iya cikakken damar yin amfani da asusun biyu da saƙonni wanda duk wani mai amfani da dandamali ya rubuta.

Slack yana gyara wata matsalar tsaro a cikin tsarinta cikin 'yan kwanaki.

Da zarar an gano kwaron, Rosén ya tuntubi shugabannin Slack don sadarwa da shi, abin da ke da babban tasiri tun cikin 'yan kwanaki kadan an yi facin bug ta irin wannan hanyar da ba za a iya sata alamar tabbatarwa ta mai amfani ba don haka, daga baya, za ka iya yin kama da shi.

Ga waɗanda basu sani ba, ana amfani da alamun da Slack ya ƙirƙira don bots, rubutun ko wasu shirye-shiryen don haɗuwa da Slack kanta. Ba lallai ba ne a faɗi, idan za ku iya riƙe wannan bayanan, kowa na iya sami cikakken damar shiga asusunku, ƙungiyoyi da saƙonni da ka aiko ko ka karɓa.

A bayyane kuma bisa ga abin da aka buga, ana iya satar wannan alamar amincin yayin buɗe wani shafin yanar gizo mai ɓarna saboda lahani a cikin sigar don mai binciken dandalin Slack kansa. A bayyane, kuma bisa ga tsokaci Rosén, ya sami damar gano wannan gazawar yayin binciken ɓarnar da za a iya rataye kira ga wasu mutane.

A matsayin cikakken bayani, zan fada muku cewa bayan sanar da wannan gazawar ga Slack, dandalin ba kawai ya iya aiki da sauri don magance matsalar ba, har ma ya sami lada da 3.000 Tarayyar Turai zuwa Rosén don gano gazawar.


Bar tsokaci

Your email address ba za a buga. Bukata filayen suna alama da *

*

*

  1. Wanda ke da alhakin bayanan: Miguel Ángel Gatón
  2. Manufar bayanan: Sarrafa SPAM, sarrafa sharhi.
  3. Halacci: Yarda da yarda
  4. Sadarwar bayanan: Ba za a sanar da wasu bayanan ga wasu kamfanoni ba sai ta hanyar wajibcin doka.
  5. Ajiye bayanai: Bayanin yanar gizo wanda Occentus Networks (EU) suka dauki nauyi
  6. Hakkoki: A kowane lokaci zaka iyakance, dawo da share bayanan ka.