I-bug kwiminyaka emibini edlulileyo kwi-Android Kernel inokunika ukufikelela kwengcambu kubaphuli-mthetho

I-Malware kwi-Android

Kubonakala ngathi umsebenzi kaGoogle ukukhusela abasebenzisi be-Android awupheli. Inkampani yokukhangela kunye nomnini wenkqubo esetyenziswayo esetyenziswa kakhulu kwiplanethi ilumkisa ukuba umsebenzisi okhohlakeleyo unokufumana ukufikelela okuphezulu kwisicelo esisebenzisa ithuba Ukophula umthetho yaye iyintoni ifunyenwe ingekho ngaphantsi kweminyaka emibini edlulileyo. Ibug ekhankanyiweyo ikhona kwiLinux Kernel, emalunga nokuba kuphi Android Iyaphuhliswa.

Ingxaki yezokhuseleko yaziwa ukusukela ngo-Epreli 2014, nangona ngelo xesha yayingabhalwanga ngathi "sesichengeni". Kodwa ngoFebruwari 2015 kwafumaniseka ukuba le Ukungaphumeleli kwekernel yayineziphumo zokhuselo, ngelo xesha babesele beyinike isazisi (i-CVE-2015-1805). Ukongeza, ingxaki ibingekho de isoftware iguqulelwe kwi-Android, esinye isizathu sokuba ibinganikwanga kubaluleka kude kube ngaphezulu konyaka odlulileyo.

Ibali livela kude

Kwinyanga ephelileyo, iqela IQela le-CoRE bafumanise ukuba obu bungozi bunokuxhaphazwa ngabagculeli ukuze bafumane ukufikelela Ingcambu kwisixhobo. I-hacker enofikelelo Ingcambu isixhobo sinokufikelela okuphezulu, okuyeyona nto ilawulayo ngaphezu komnini wesixhobo okanye usetyenziso lomntu wesithathu. Ngokuxhaphaza obu bungozi, i-cybercriminal inokufikelela kunye / okanye iguqule nayiphi na ifayile kwinkqubo yokusebenza, engavakali kakuhle kwaphela.

Umgcini weqonga

Iqela le-CoRE lazise uGoogle ngobukho be ukuxhaphaza kwaye inkampani enkulu yokufumanisa ukuba isebenze kwisiqwengana ekufuneka ibandakanyiwe kuhlaziyo lokhuseleko lwexesha elizayo, kodwa abanalo ixesha elaneleyo lokuyilungisa kwaye Zimperium, Iqela lokhuseleko elafunyanwa nguStagefright, uxelele uGoogle ukuba ukuxhaphaza Sele ikhona kwi-Nexus 5, iyifikelela ngokusebenzisa iVenkile yokuDlala esele ivaliwe.

UGoogle unakho vimba ii -apps ezizama ukufikelela Ingcambu Kwisixhobo, kodwa awunakuxela ukuba ixesha elingalunganga lisenza njani isenzo salo. Kwingxelo yezokhuseleko, uGoogle uthe "UGoogle uqinisekisile ubukho besicelo sokufikelela esidlangalaleni esisebenzisa le meko kwi-Nexus 5 nakwi-Nexus 6 ukubonelela ngamalungelo amakhulu kwisixhobo sefowuni. Igama lomsebenzisi ".

UGoogle wayicacisa le ngxaki nge iqondo lobukrakra «Lubalulekile», kodwa isicelo ekuthethwa ngaso asithathwa njengekhohlakeleyo. Ngapha koko, inqanaba elibukhali lobukrakra lithetha ukuba abanye abahlaseli banokusebenzisa okufanayo ukuxhaphaza ukusasaza i-malware.

Sele kukho isiziba sendlela

UGoogle sele ekhuphe ii-patches ukulungisa le ngxaki yezokhuseleko kwi-Android Open Source Project (AOSP) kwiinguqulelo 3.4, 3.10 kunye no-3.14 ze-Android Kernel. Iinguqulelo ezine IKernel 3.18 nangaphezulu ayinabungozi ukusilela oku. Iipatches ziya kubandakanywa kuhlaziyo lokhuseleko luka-Epreli lwezixhobo zeNexus, eziziindaba ezimnandi kubasebenzisi abaneNexus, kodwa abanye abasebenzisi kuya kufuneka balinde inkampani yezixhobo zabo ukuba zikhuphe uhlaziyo lwabo olunokuthatha iintsuku, iiveki okanye iinyanga.

Ungazikhusela njani

Njengakwezinye iimeko ezininzi, ingqiqo yeyona antivirus ilungileyo. Into efanelekileyo yokwenza kukuba soloko ukhuphela usetyenziso kwiivenkile ezisemthethweni. Kwimeko yezicelo ezikhutshelwe kuGoogle Play, ukuba kukho usetyenziso oluyingozi, luthintelwe nguGoogle uqobo, ngenxa yoko alunakusebenzisa. ukuxhaphaza kwaye siya kukhuseleka ngokupheleleyo. Ukuba kufuneka sifakele usetyenziso oluvela ngaphandle kweGoogle Play, kufanelekile ukuba ube Inkqubo yokuqinisekisa kuseto lwefowuni. Kukho ukhetho kwezinye izixhobo eziskena inkqubo yokusongela, into enokuchaphazela ukusebenza kwesixhobo, kodwa kufanelekile.

Ukuze wazi ukuba isixhobo sifumene indawo yokhuseleko elungisa le ngxaki, kuya kufuneka ufake icandelo lokhuseleko kwifowuni. Ukuba uhlaziyo lwamva nje luthi Epreli 1 okanye kamva, ngekhe kubekho ngxaki. Ukuba akunjalo, lumka kakhulu ukuba wenzani.


Shiya uluvo lwakho

Idilesi yakho ye email aziyi kupapashwa. ezidingekayo ziphawulwe *

*

*

  1. Uxanduva lwedatha: UMiguel Ángel Gatón
  2. Injongo yedatha: Ulawulo lwe-SPAM, ulawulo lwezimvo.
  3. Umthetho: Imvume yakho
  4. Unxibelelwano lwedatha: Idatha ayizukuhanjiswa kubantu besithathu ngaphandle koxanduva lomthetho.
  5. Ukugcinwa kweenkcukacha
  6. Amalungelo: Ngalo naliphi na ixesha unganciphisa, uphinde uphinde ucime ulwazi lwakho.