Filip Novotny Kwaron software na Heartbleed wanda ya yadu sosai, wanda za a iya cewa shi ne babban hadarin Intanet a halin yanzu, ba ya shafar sabar Apple. Wannan ramin tsaro ya shafi kashi 15% na gidajen yanar gizon da aka fi ziyarta a duniya, amma masu amfani da iCloud ko wasu ayyukan Apple ba sa bukatar tsoro. Ya bayyana uwar garken Amurka ce Re / code.
"Apple yana ɗaukar tsaro da mahimmanci. iOS ko OS X ba su taɓa ƙunshe da wannan software mai amfani ba, kuma mahimman ayyukan gidan yanar gizo ba su shafi ba," Apple ya gaya wa Re/code. Don haka, masu amfani kada su ji tsoron shiga iCloud, da App Store, iTunes ko iBookstore, ko siyayya a hukuma e-shop.
Masana sun ba da shawarar yin amfani da mabambanta, isassun kalmomin sirri masu ƙarfi akan shafukan yanar gizo guda ɗaya, da software na ajiya kamar 1Password ko Lastpass. Wurin gina kalmar sirri na Safari kuma yana iya taimakawa. Baya ga waɗannan matakan, ba lallai ba ne a ɗauki ƙarin matakai, saboda Zuciyar Zuciya ba ƙwayar cuta ba ce wacce za ta kai hari ga na'urorin abokin ciniki.
Kwaro ne na software a cikin fasahar sirri na OpenSSL da babban ɓangaren gidajen yanar gizon duniya ke amfani da shi. Wannan aibi yana bawa maharin damar karanta tsarin ƙwaƙwalwar ajiyar uwar garken da aka bayar kuma ya samu, misali, bayanan mai amfani, kalmomin shiga ko wasu ɓoyayyun abun ciki.
Kwaro na Heartbleed ya kasance a cikin shekaru da yawa, wanda ya fara bayyana a watan Disamba 2011, kuma masu haɓaka software na OpenSSL sun koyi game da shi kawai a wannan shekara. Sai dai ba a bayyana tsawon lokacin da maharan suka san matsalar ba. Za su iya zaɓar daga babban fayil ɗin gidajen yanar gizo, wato Heartbleed zama a kan duka kashi 15 cikin XNUMX na mafi mashahuri.
Na dogon lokaci, ko da irin waɗannan sabar kamar Yahoo!, Flicker ko StackOverflow sun kasance masu rauni. Shafukan yanar gizo na Czech Seznam.cz da ČSFD ko Slovak SME suma suna da rauni. A halin yanzu, ma'aikatan su sun riga sun amintar da babban ɓangaren sabar ta hanyar sabunta OpenSSL zuwa sabon, tsayayyen sigar. Kuna iya gano ko gidajen yanar gizon da kuke ziyarta suna da aminci ta amfani da gwajin kan layi mai sauƙi gwajin, zaku iya samun ƙarin bayani akan gidan yanar gizon Heartbleed.com.
Ban san yadda amfani da kalmomin sirri masu ƙarfi ke da alaƙa da matsalar Zuciya ba. Ana iya samun kalmar sirri mai ƙarfi tare da wannan rauni da kuma mai rauni.
Bugu da ƙari, yin iƙirarin cewa sabobin ba su da tsaro, wauta ce. Ta yaya sabobin zai kare daga kuskuren da ba a sani ba? Sabbin sun kasance masu rauni.
Apple ya yi iƙirarin cewa bai yi amfani da wannan software da za a iya kutse ba. Don haka ko dai yana amfani da tsofaffin OpenSSL, amma baya amfani da OpenSSL kwata-kwata. Ba wai yana da ingantaccen tsaro ba.
OpenSSL ba shine kawai aiwatar da SSL ba. Misali, Microsoft kuma baya amfani da OpenSSL.
Kamar yadda na sani, Apple baya amfani da nasa maganin SSL, don haka yana da yuwuwar yana amfani da ɗakin karatu na OpenSSL.