Rufe talla

Babban rashin tsaro ya haifar da ƙirƙirar "amintattun" aikace-aikacen malware waɗanda za su iya samun dama ga tsarin aiki gaba ɗaya Android. Na'urori daga Samsung, LG da sauran masana'antun suna da rauni.

Kamar yadda kwararre a harkar tsaro kuma mai haɓakawa ya nuna Lukasz Siewierski, Shirin tsaro na Google Android Initiative Vulnerability Initiative (APVI) a bainar jama'a ta bayyana wani sabon amfani da ke sa na'urori daga Samsung, LG, Xiaomi da sauran masana'antun su zama masu rauni. Babban matsalar ita ce waɗannan masana'antun sun zazzage makullin sa hannun su Android. Ana amfani da maɓallin sa hannu don tabbatar da cewa sigar AndroidYin aiki akan na'urarka halal ne, wanda masana'anta suka ƙirƙira. Hakanan za'a iya amfani da maɓalli iri ɗaya don sanya hannu kan aikace-aikacen mutum ɗaya.

Android an tsara shi don amincewa da duk wani aikace-aikacen da aka sanya hannu tare da maɓalli iri ɗaya da aka yi amfani da shi don sanya hannu kan tsarin aiki da kansa. Mai satar da ke da waɗannan maɓallan sa hannu na aikace-aikacen zai iya amfani da tsarin "ID ɗin mai amfani da aka raba". Androidu don ba da cikakken izini na matakin-tsari ga malware akan na'urar da abin ya shafa. Wannan zai bawa maharin damar samun damar duk bayanan da ke kan na'urar da abin ya shafa.

Yana da kyau a lura cewa wannan raunin baya faruwa ba kawai lokacin shigar da sabon ko aikace-aikacen da ba a sani ba. Tun da waɗannan maɓallan sun leka AndroidA wasu lokuta, ana kuma amfani da sanya hannu kan aikace-aikacen gama gari, gami da aikace-aikacen Bixby akan wasu wayoyi Galaxy, mai hari zai iya ƙara malware zuwa amintaccen aikace-aikacen, sanya hannu akan sigar ɓarna da maɓalli iri ɗaya, kuma Android zai amince da shi a matsayin "sabuntawa". Wannan hanyar za ta yi aiki ba tare da la'akari da ko app ɗin ya fito ne daga shagunan Google Play ba kuma Galaxy Ajiye ko an ɗora shi a gefe.

A cewar Google, matakin farko na gyara matsalar shine kamfanin da abin ya shafa ya maye gurbin nasu (ko "juya") androidov sa hannu makullin. Bugu da kari, babbar manhajar ta bukaci dukkan masu kera wayoyin hannu da tsarinta da su rage yawan amfani da maballin shiga manhajoji.

Google ya ce tun lokacin da aka bayar da rahoton wannan batu a watan Mayu na wannan shekara, Samsung da duk sauran kamfanonin da abin ya shafa sun riga sun "daukar matakan gyara don rage tasirin wadannan manyan matsalolin tsaro ga masu amfani." Duk da haka, ba a bayyana cikakken abin da ainihin wannan ke nufi ba, kamar yadda wasu maɓallai masu rauni bisa ga rukunin yanar gizon APKMirror a cikin ƴan kwanaki na ƙarshe ya yi amfani da v androidSamsung apps.

Google ya lura cewa na'urar tare da AndroidAna kiyaye su daga wannan raunin ta hanyoyi da yawa, gami da fasalin tsaro na Google Play Kare. Ya kara da cewa cin gajiyar bai kai ga manhajojin da ake rarrabawa ta Google Play Store ba.

Wanda aka fi karantawa a yau

.