Isiphazamiso eminyakeni emibili edlule ku-Android Kernel singanikeza ukufinyelela kwezimpande kubabulali be-cyber

I-Malware ku-Android

Kubukeka sengathi umsebenzi weGoogle wokuvikela abasebenzisi be-Android awupheli. Inkampani yezinjini zokusesha kanye nomnikazi wohlelo olusetshenziswa kakhulu lweselula kwiplanethi uxwayisa ngokuthi umsebenzisi onobungozi angathola ukufinyelela okuphezulu kohlelo lokusebenza olusebenzisa i-a ukwephulwa kwezokuphepha kwakunjani kwatholakala kungaphansi kweminyaka emibili edlule. Isiphazamisi esishiwo sikhona ku-Linux Kernel, emayelana nokuthi ukuphi Android Ithuthukiswe.

Inkinga yezokuphepha yaziwa kusukela ngo-Ephreli 2014, yize ngaleso sikhathi yayingabhalwa ngokuthi "ukuba sengozini". Kepha ngoFebhuwari 2015 kwatholakala ukuthi lokhu ukwehluleka kernel yayinomthelela kwezokuphepha, lapho base bevele beyinike isikhombi (CVE-2015-1805). Ngaphezu kwalokho, inkinga ibingakabikho kuze kube yilapho isoftware iguqulelwe ku-Android, esinye isizathu sokuthi kungani ibinganikwanga ukubaluleka kuze kube ngaphezu konyaka odlule.

Indaba ivela kude

Ngenyanga edlule, iqembu Ithimba le-CoRE ithole ukuthi lobu bungozi bungasetshenziswa ngabaduni ukuthola ukufinyelela izimpande kudivayisi. Isigebengu esinokufinyelela izimpande idivayisi inokufinyelela okuphezulu, okulawula kakhulu kunomnikazi wedivayisi noma izinhlelo zokusebenza ezivela eceleni. Ngokusebenzisa lokhu kuba sengozini, i-cybercriminal ingafinyelela futhi / noma iguqule noma yiliphi ifayela kuhlelo lokusebenza, elizwakala lingalungile neze.

Uvalo

I-CoRE Team yazise iGoogle ngobukhona be- sebenzisa futhi inkampani enkulu etholayo isebenze ngesiqeshana obekufanele ukuthi siyifakile ekuvuseleleni ezokuphepha ezizayo, kepha bebengenaso isikhathi esanele sokuyilungisa Zimperium, Ithimba lezokuphepha elitholwe nguStagefright, litshele iGoogle ukuthi sebenzisa Ibivele ikhona ku-Nexus 5, iyifinyelela ngohlelo lokusebenza oluvela ku-Google Play Isitolo ngalesi sikhathi eselivele livinjelwe.

I-Google iyakwazi vimba izinhlelo zokusebenza ezizama ukufinyelela izimpande kudivayisi, kepha awukwazi ukusho ukuthi isikhathi esingakanani uhlelo oluyingozi belusenza into yalo. Esitatimendeni sokuphepha, iGoogle ithe "I-Google ikuqinisekisile ukuba khona kohlelo lokusebenza olutholakala esidlangalaleni lokufinyelela ezimpandeni olusebenzise lokhu kuba sengozini ku-Nexus 5 naku-Nexus 6 ukuhlinzeka ngamalungelo amakhulu kakhulu kudivayisi yedivayisi. Igama lomsebenzisi ".

I-Google ihlukanise le nkinga nge izinga lobukhulu «Kubucayi», kepha uhlelo lokusebenza okukhulunywa ngalo aluzange lubhekwe njengolunonya. Ngaphezu kwalokho, isilinganiso sobunzima obucayi sisho ukuthi abanye abaduni bangasebenzisa okufanayo sebenzisa ukusabalalisa i-malware.

Sekuvele kukhona isichibi endleleni

I-Google isivele ikhiphe ama-patches ukulungisa le nkinga yezokuphepha ku-Android Open Source Project (AOSP) yezinguqulo 3.4, 3.10 no-3.14 ze-Android Kernel. Izinhlobo ezine- IKernel 3.18 nangaphezulu ayinabo ubungozi kulokhu kwehluleka. Ama-patches azofakwa kwisibuyekezo sezokuphepha sika-Ephreli samadivayisi we-Nexus, okuyizindaba ezinhle kubasebenzisi abane-Nexus, kepha abanye abasebenzisi kuzofanela balinde inkampani yedivayisi yabo ukuthi ikhiphe okwabo ukubuyekeza. Okungathatha izinsuku, amasonto noma izinyanga.

Ungazivikela kanjani

Njengakwezinye izimo eziningi, ukusebenzisa ingqondo kuyindlela engcono kakhulu yokulwa namagciwane. Into engcono kakhulu ongayenza njalo landa izinhlelo zokusebenza ezitolo ezisemthethweni. Endabeni yezinhlelo zokusebenza ezilandwe kusuka ku-Google Play, uma kukhona uhlelo lokusebenza oluyingozi, livinjelwe i-Google uqobo, ngakho-ke ayikwazanga ukuyisebenzisa. sebenzisa futhi besizophepha ngokuphelele. Uma kufanele sifake uhlelo lokusebenza oluvela ngaphandle kwe-Google Play, kufanelekile ukuthi sibe ne- ukuqinisekiswa kohlelo lokusebenza kusuka kumasethingi efoni. Kukhona okunye ongakhetha kukho kwamanye amadivayisi okuskena isistimu ngezinsongo, okuthile okungathinta ukusebenza kwedivayisi, kepha kungakufanele.

Ukuze wazi ukuthi ngabe idivayisi ithole isichibi sokuphepha esilungisa le nkinga, kufanele ufake isigaba sezimagqabhagqabha sefoni. Uma isibuyekezo sakamuva sithi Ephreli 1 noma kamuva, ngeke kube nankinga. Uma kungenjalo, qaphela ukuthi wenzani.


Okuqukethwe yi-athikili kunamathela ezimisweni zethu ze izimiso zokuhlelela. Ukubika iphutha chofoza lapha.

Yiba ngowokuqala ukuphawula

Shiya umbono wakho

Ikheli lakho le ngeke ishicilelwe. Ezidingekayo ibhalwe nge *

*

*

  1. Ubhekele imininingwane: Miguel Ángel Gatón
  2. Inhloso yedatha: Lawula Ugaxekile, ukuphathwa kwamazwana.
  3. Ukusemthethweni: Imvume yakho
  4. Ukuxhumana kwemininingwane: Imininingwane ngeke idluliselwe kubantu besithathu ngaphandle kwesibopho esisemthethweni.
  5. Isitoreji sedatha: Idatabase ebanjwe yi-Occentus Networks (EU)
  6. Amalungelo: Nganoma yisiphi isikhathi ungakhawulela, uthole futhi ususe imininingwane yakho.