Yile nto uChris Moore, umnini webhlog yokhuseleko kunye neetekhnoloji esekwe e-UK, uthi i-OnePlus iqokelela idatha njengokukodwa kubasebenzisi njengoko i-IMEI yeefowuni zakho, idilesi ye-MAC, inombolo yefowuni kunye nabanye ngaphandle kwemvume yabo.
Ayisiyihlazo lokuqala elijamelene nenkampani ye-OnePlus nangona kunjalo kwesi sihlandlo, kwaye yanikwa ubunzima obukhulu bomcimbi, iba yinto engalindelekanga ukuba ndinike iinkcazo eziqinisekileyo.
Ukuphucula amava omsebenzisi ngokuphula umthetho wabucala, kubonakala ngathi ngumgaqo-nkqubo we-OnePlus
Ngaphambili, i-OnePlus kuye kwafuneka ijongane neengxaki ezininzi kule minyaka imbalwa idlulileyo, ngakumbi ngokunxulumene nokungakwazi kwayo ukubonelela ngenkxaso kubathengi bayo. Ukongeza, emva kokumiliselwa kwe-OnePlus 5, kwavela iingxelo ezazithetha ngobuqhophololo, izikrini ezixhonywe kakubi kunye nabasebenzisi abangakwaziyo ukubiza inkonzo yongxamiseko xa beyifuna. Ewe, ngoku kuza ingxaki enzima ngakumbi kunangaphambili kwaye ngaphambili abasebenzisi kufuneka bafune inkcazo enyanzelisayo nengxamisekileyo.
UChris Moore, umnini webhlog yokhuseleko kunye netekhnoloji e-UK, uthumele inqaku iyakuza ukubonisa ukuba I-OnePlus ibiqokelela ulwazi lomntu kubasebenzisi kwaye iludlulisa ngaphandle kwemvume.
Luhlobo luni lwedatha eqokelelwa yi-OnePlus ngaphandle kwemvume yabasebenzisi?
Ukufunyanwa kwafika kumsitho we-SANS Holiday Hack Challenge apho uMoore ifunyenwe indawo engaziwayo, ndaye ndagqiba kwelokuba ndiyihlolisise. Yintoni eyayisenza loo domain - open.oneplus.net- yayisisiseko ukuqokelela idatha yomsebenzisi kwisixhobo sakho kwaye uyithumele kumzekelo we-Amazon AWS, konke ngaphandle kwemvume yakho.
Phakathi kwedatha efikelela kwi-OnePlus kulwazi lwesixhobo ngokwaso njengekhowudi ye-IMEI, inombolo ye-serial, inombolo yefowuni, idilesi ye-MAC, igama lenethiwekhi, isimaphambili se-IMSI kunye nenethiwekhi engenazingcingo ye-ESSID kunye ne-BSSID, kwidatha yomsebenzisi njengokuqalisa kwakhona, imithwalo, iiflegi, usetyenziso lweapp kunye nokunye.
Ngaba sikhona isicombululo sengxaki?
Ngokuka-Moore, ikhowudi ejongene nokuqokelelwa kwedatha yinxalenye yoMphathi weSixhobo se-OnePlus kunye noMboneleli weSixhobo soPhathi se-OnePlus. Ngethamsanqa, uJakub Czekanski uthi ngaphandle kokuba yinkonzo yenkqubo, ezi zinokukhubazeka ngokusisigxina ngokufaka i-net.oneplus.odm ye-pkg nge-ADB okanye ngokusebenzisa lo myalelo: pm uninstall -k -user 0 pkg.
Kwaye ucinga ntoni u-OnePlus ngale mpikiswano?
Ewe, ngokusisiseko, akukho nto yimbi sinokuyithetha ngaphaya "kokutyibilika". Ngokucacileyo, i-OnePlus ngomnye wabenzi ababaluleke kakhulu kwiifowuni eziphathwayo ze-Android, inesiseko esibalulekileyo somsebenzisi, kwaye inyani yokuba ibiqokelela kwaye ihambisa idatha yomsebenzisi ngaphandle kwemvume, inzima ngohlobo lomthetho, kunjalo ngakumbi ngokunxulumene nomthamo wabantu abachaphazelekayo. Kodwa nexhala nangaphezulu I-OnePlus ibonakala ngathi ayiyithathi njengeyona nto ibalulekileyo. Ukubonisana noGunyaziwe we-Android malunga nokufunyanwa kukaChris Moore, inkampani izithintele ekuchazeni ukuba idatha eqokelelweyo yenzelwe ukuba isebenze njengenkxaso kubasebenzisi ngokwabo, ngaphandle kokuphendula nangayiphi na indlela kwimibuzo emalunga nemfihlo yabo bangabo abathengi.
Sithumela ngokukhuselekileyo uhlalutyo kwimifudlana emibini eyahlukeneyo kwi-HTTPS kwiseva yeAmazon. Ukuhamba kokuqala kukusetyenziswa kohlalutyo, esiqokelela ukuze sikwazi ukuhlengahlengisa ngokuchanekileyo isoftware yethu esekwe kwindlela yokuziphatha komsebenzisi. Unikezelo lomsebenzi wokusebenza unokukhubazeka ngokuhamba uye 'kuseto' -> 'Phambili' -> 'Joyina inkqubo yamava omsebenzisi'. Ukuhamba kwesibini lulwazi lwesixhobo, esiqokelela ukubonelela ngenkonzo ebhetele emva kokuthengisa.
UBrian Reigh, osuka kwi-Android Authority, uqaphele ukuba banxibelelane kwaye bathetha nommeli we-OnePlus nangona kunjalo, "asifumananga ngcaciso eyonelisayo malunga nokuba kutheni inkampani ingabavumeli abasebenzisi ukuba bakhethe ukwabelana ngedatha yabo ukunceda kuhlaziyo oluzayo. ». Kwaye iyaqhubeka: "isigqebelo Nantsi into yokuba i-OnePlus yaphula imfihlo yabasebenzisi bayo ukubonelela ngenkonzo ebhetele emva kokuthengisa. Kubo bonke abavelisi, inkampani ekwazileyo ukucaphukisa nokuphazamisa abasebenzisi abaninzi ngokuchanekileyo ngenxa yokusilela kwenkxaso yasemva kokuthengisa izama ukuthethelela ukuqokelelwa kwedatha okungagunyaziswanga ngesizathu sokuba yinkxaso yasemva kokuthengisa. "