Kowa yayi kuskure. Ta fuskar tsaro, ko Apple ba ma'asumi ba ne

Daga lokaci zuwa lokaci, bayanai game da matsaloli daban-daban na kamfanonin fasaha za su bayyana. A cikin mafi muni, waɗannan kurakuran suna shafar tsaro gabaɗaya, sanya masu amfani, da haka na'urorinsu, cikin haɗari mai yuwuwa. Intel, alal misali, sau da yawa yana fuskantar wannan zargi, da kuma wasu ɗimbin ƙattai. Amma dole ne a kara da cewa duk da cewa Apple ya gabatar da kansa a matsayin hamshakin attajiri kusan ma'asumi tare da mai da hankali 100% kan sirri da amincin masu amfani da apple, haka nan kuma yana tafiya a gefe lokaci zuwa lokaci yana jawo hankali ga kansa wanda ko shakka ba ya so.

Amma bari mu zauna tare da Intel da aka ambata na ɗan lokaci. Idan kuna sha'awar abubuwan da ke faruwa a duniyar fasahar sadarwa, to tabbas ba ku rasa abin da ya faru ba daga watan Disambar bara. A wancan lokacin, bayanai game da wani mummunan lahani na tsaro a cikin na'urori na Intel, wanda ke ba maharan damar shiga maɓallan ɓoyewa don haka ketare guntuwar TPM (Trusted Platform Module) da BitLocker, ya bazu a Intanet. Abin takaici, babu abin da ba shi da aibi kuma akwai lahani na tsaro a kusan kowace na'ura da muke aiki da ita a kullum. Kuma ba shakka, ko Apple ba shi da kariya ga waɗannan abubuwan da suka faru.

Rashin tsaro yana shafar Macs tare da guntuwar T2

A halin yanzu, kamfanin Passware, wanda ke mai da hankali kan kayan aikin fasa kalmar sirri, sannu a hankali ya gano wani kuskure a cikin guntun tsaro na Apple T2. Duk da cewa hanyarsu har yanzu tana da ɗan hankali fiye da na al'ada kuma a wasu lokuta yana iya ɗaukar dubban shekaru cikin sauƙi don fashe kalmar sirri, har yanzu "shift" ne mai ban sha'awa wanda za'a iya cin zarafi cikin sauƙi. A wannan yanayin, kawai abin da ke da mahimmanci shine ko mai siyar da apple yana da kalmar sirri mai ƙarfi/dogon. Amma bari mu hanzarta tunatar da kanmu abin da wannan guntu yake a zahiri don. Apple ya fara gabatar da T2 a cikin 2018 a matsayin ɓangaren da ke tabbatar da amintaccen booting na Macs tare da na'urori masu sarrafawa daga Intel, ɓoyewa da ɓarna bayanai akan faifan SSD, Tsaron ID na taɓawa da sarrafawa akan magudin kayan aikin na'urar mara izini.

Yadda ake kunna FileVault akan Mac

atomatikke_kapitlalky_tecky_macos1

activation_filevault_mac1

activation_filevault_mac5

activation_filevault_mac4

activation_filevault_mac3

activation_filevault_mac2

Passware yana gaba sosai a fagen fasa kalmar sirri. A baya, ta yi nasarar warware tsaro na FileVault, amma akan Macs kawai waɗanda ba su da guntun tsaro na T2. A irin wannan yanayin, ya isa yin fare kan harin ƙamus, wanda ya gwada haɗa kalmar sirri ta bazuwar ƙarfi. Koyaya, wannan bai yiwu ba tare da sabbin Macs tare da guntu da aka ambata a baya. A gefe guda, kalmar sirrin da kansu ba a adana su a cikin faifan SSD ba, yayin da guntu kuma ya iyakance yawan ƙoƙarin, wanda wannan mummunan harin zai ɗauki miliyoyin shekaru cikin sauƙi. Koyaya, kamfanin yanzu ya fara ba da ƙarin ƙara T2 Mac yantad da wanda mai yuwuwa zai iya ketare wannan tsaro da kuma aiwatar da harin ƙamus. Amma tsarin yana da hankali sosai fiye da na al'ada. Maganin su na iya "kawai" gwada kalmomin sirri kusan 15 a sakan daya. Idan Mac ɗin da aka rufaffen haka yana da dogon kalmar sirri da ba ta dace ba, har yanzu ba zai yi nasarar buɗe shi ba. Passware yana siyar da wannan ƙarawa ga abokan cinikin gwamnati kawai, ko ma ga kamfanoni masu zaman kansu, waɗanda zasu iya tabbatar da dalilin da yasa suke buƙatar irin wannan abu kwata-kwata.

Shin da gaske tsaron Apple yana gaba?

Kamar yadda muka dan yi nuni a sama, kusan babu na'urar zamani da ba za ta karye ba. Bayan haka, yawancin ƙarfin da tsarin aiki ke da shi, alal misali, mafi girman damar cewa ƙaramin madaidaicin madaidaicin zai bayyana a wani wuri, wanda maharan za su iya amfana da farko. Saboda haka, waɗannan lokuta suna faruwa ga kusan kowane kamfani na fasaha. Abin farin ciki, sanannun fasahohin tsaro na software a hankali ana fake su ta hanyar sabbin sabuntawa. Duk da haka, wannan ba shakka ba zai yiwu ba a yanayin rashin lahani na hardware, wanda ke sanya duk na'urorin da ke da matsala mai matsala.