Amaya Toman Abaduni be-White Hat bathole amaphutha amabili ezokuphepha kusiphequluli se-Safari engqungqutheleni yezokuphepha e-Vancouver. Enye yazo ikwazi ngisho nokulungisa izimvume zayo ize ifinyelele ekulawuleni okuphelele kwe-Mac yakho. Eyokuqala yeziphazamisi ezitholakele ikwazile ukushiya ibhokisi lesihlabathi - isilinganiso sokuphepha esivumela izinhlelo zokusebenza ukuthi zifinyelele kuphela idatha yazo neyesistimu.
Umncintiswano uqalwe yiqembu leFluoroacetate, amalungu ayo okwakungu-Amat Cama noRichard Zhu. Ithimba liqonde ngqo isiphequluli sewebhu seSafari, lasihlasela ngempumelelo lashiya ibhokisi lesihlabathi. Wonke umsebenzi uthathe cishe sonke isikhathi esibekelwe iqembu. Ikhodi ibe yimpumelelo okwesibili kuphela, futhi ukukhombisa isiphazamisi esizuze Ithimba le-Fluoroacetate u-$55K namaphoyinti angu-5 maqondana nesihloko esithi Master of Pwn.
Isiphazamisi sesibili siveze ukufinyelela okuvunyelwe kwezimpande ne-kernel ku-Mac. Isiphazamisi siboniswe yiqembu le-phoenhex & qwerty. Ngenkathi ephequlula iwebhusayithi yawo, amalungu eqembu akwazile ukusebenzisa iphutha le-JIT elilandelwa uchungechunge lwemisebenzi eholela ekuhlaselweni kwesistimu ephelele. U-Apple wayazi ngesinye seziphazamisi, kodwa ukukhombisa izimbungulu kuzuza ababambiqhaza u-$45 namaphuzu angu-4 kusihloko se-Master of Pwn.
Umgqugquzeli walo mhlangano yi-Trend Micro ngaphansi kohlelo lwayo lweZero Day (ZDI). Lolu hlelo ludalelwe ukukhuthaza abagebengu be-inthanethi ukuthi babike ngasese ukukhubazeka ngokuqondile ezinkampanini esikhundleni sokukuthengisela abantu abangalungile. Imiklomelo yezezimali, ukubongwa kanye nezihloko kufanele kube ugqozi kubageli.
Abantu abanentshisekelo bathumela imininingwane edingekayo ngqo ku-ZDI, eqoqa imininingwane edingekayo mayelana nomhlinzeki. Abacwaningi abaqashwe ngokuqondile yilesi sinyathelo bayobe sebebheka lokho okukhuthazayo ezindaweni zokuhlola ezikhethekile bese benikeza umzuzi umklomelo. Ikhokhwa ngokushesha ngemva kokuvunywa kwayo. Ngosuku lokuqala, i-ZDI yakhokha ngaphezu kwamadola angama-240 kochwepheshe.
I-Safari iyindawo evamile yokungena yabaduni. Engqungqutheleni yangonyaka odlule, ngokwesibonelo, isiphequluli sasetshenziswa ukulawula I-Touch Bar ku-MacBook Pro, futhi ngalolo suku, ababekhona babonisa okunye ukuhlasela okusekelwe kusiphequluli.
Umthombo: I ZDI
