Ondrej Holzman A farkon mako dole ne a warware ta Apple babbar matsalar tsaro a cikin App Store har yau. Ma'ajiyar aikace-aikacen ta na iPhones da iPads sun kamu da cutar malware wanda zai iya tattara bayanan mai amfani a cikin aikace-aikacen dozin da yawa. Apple ya cire masu cutar da sauri, amma muna ba da shawarar cewa duk masu amfani su goge takamaiman software daga na'urorinsu.
Ka'idodin da suka kamu da malware sun shiga cikin App Store ta hanyar masu haɓaka China waɗanda suka yi amfani da sigar jabu na kayan haɓaka Xcode. XcodeGhost yana amfani da tsofaffin nau'ikan Xcode kuma masu haɓakawa ba za su ma lura da kutsawar lambar ba. Ko da madaidaicin rajistan shiga cikin App Store bai lura da shi ba.
An sami sigar Xcode mai ɓarna don zazzagewa akan dandalin China, yana sauƙaƙa wa masu haɓakawa a wurin samun software. Injin bincike na kasar Sin Baidu, lokacin da yake neman "zazzage xcode 6.4" a gaban sabar hukuma ta Apple, nan da nan ya sami tarukan tattaunawa daban-daban guda hudu inda za'a iya saukar da sigar Xcode wacce ba ta hukuma ba (kuma a cikin wadannan lokuta malicious).
Matsalar kuma ita ce hanyar sadarwar intanet a kasar Sin, wacce ke da saurin yin tafiyar hawainiya, kuma galibi Sinawa suna toshe sabar na kasashen waje. Samun zuwa gidan yanar gizon hukuma na Apple don saukar da Xcode ba koyaushe ba ne mai sauƙi a wannan ƙasa. Kuma tunda Xcode aikace-aikacen gigabyte ne da yawa, masu haɓakawa suna neman hanya mafi sauƙi don isa gare ta.
Da zarar wani app mai XcodeGhost ya hau kan na'urar iOS, zai fara tattara duk bayanan da za a iya yi a bango. Yana saukar da bayanai game da aikace-aikacen, game da na'urar, game da wurin, harshe, bayanan cibiyar sadarwa, da sauransu. Da zarar ya sami bayanan, ya aika zuwa uwar garken waje kuma bisa ga Palo Alto Networks yana iya karɓar umarni daga nesa.
A ka'ida, alal misali, yana iya ƙaddamar da gidajen yanar gizo ko bayar da saƙon karya don shigar da ID na Apple da kalmar wucewa. XcodeGhost na iya samun dama ga abubuwan da ke cikin allon allo da satar kalmomin shiga.
Abin farin ciki, yawancin aikace-aikacen da suka kamu da cutar sun fito ne daga China, don haka ba za mu sami wasu sanannun aikace-aikace a cikin jerin da ke ƙasa ba. Koyaya, a China, alal misali, WeChat yana da dubban ɗaruruwan masu amfani da shi, don haka barazanar tsaro tana da girma. Duk da haka, yana da kyau ku shiga cikin aikace-aikacenku kuma idan kun sami wasa, share shi daga iPhone ko iPad.
Yana da ma'auni na rigakafi domin ko da yake yana cikin jerin Palo Alto Networks sun sami kansu da misali shahararren Angry Birds 2, dakin kallo na raya kasa Rovio ya ba da tabbacin cewa matsalar tsaro ta shafi wasu nau'ikan wasan da suka shahara ne kawai, musamman na kasar Sin. A wasu ƙasashe, Angry Birds har yanzu yana cikin App Store kuma bai kamata ya cutar da masu amfani ta kowace hanya ba. Duk da haka, ba a tabbatar da cewa iri ɗaya ya shafi wasu aikace-aikacen ba, don haka muna ba da shawarar share su aƙalla na ɗan lokaci.
A ƙasa akwai jerin ƙa'idodin da muke ba da shawarar gogewa saboda XcodeGhost:
- Didi Chuxing
- Hushi Tsuntsaye 2
- NetEase
- Tashar Micro
- IFlyTek shigar
- 12306 Railway
- The Kitchen
- Katin Lafiya
- CITIC Bank motsa katin sarari
- Ofishin Wayar Hannu na China Unicom
- Babban taswirar Jamusanci
- Jane littafin
- Idanu Yadauka
- Rayuwar mutum
- mara mara
- Magunguna don tilastawa
- Himalayan
- Lissafin aljihu
- Ja ruwa
- Da sauri ya tambayi likita
- M karshen mako
- Microblogging kamara
- Karatun ruwa
- Damansara
- CamCard
- Yankin Yankin
- Hannun jari bude aji
- Kasuwar hannun jari mai zafi
- Sabbin kwamiti guda uku
- Direba ya fadi
- 'Yan wasa
- Mercury
- WinZip
- Musical.ly
- PDFReader
- Mai cikakkiyar365
- PDFReader Kyauta
- WhiteTile
- IHexine
- WinZip Standard
- MoreLikers2
- CamScanner Lite
- Tikitin wayar hannu
- Saukewa: IMS-4500
- OPlayer Lite
- QYER
- wasan golf
- abubuwa
- Golfsensehd
- Wallpapers10000
- CSMBP-AppStore
- MSL108
- TinyDeal.com
- kwafin snapgrab
- iOBD2
- PocketScanner
- CuteCUT
- AmHexinForPad
- SuperJewelsQuest2
- iska2
- InstaFollower
- CamScanner Pro
- Baba
- WeLoop
- Mai Kula da Bayanai
- MSL070
- nice yarinya
- immmtdchs
- 'Yan wasa
- FlappyCircle
- BioQingBao
- SaveSnap
- Guitar Jagora
- jin
- WinZip Sector
- Saurin Ajiye
Don girman Allah, shin masu sana'ar tsuntsaye masu fushi za su iya amfani da wani abu kamar haka?
Na fahimci cewa yana da game da saurin intanet kuma XCode ainihin doki ne, kawai ban fahimci cewa suna da wauta ba cewa lokacin da GateKeeper ya tashi, ba sa gane cewa wani abu ba daidai ba ne ... GateKeeper bai ce aikace-aikacen wauta ba ne, don haka na fahimta kadan, amma taga ya tashi!
Yana da ban mamaki sosai. Amma ban ma yi mamakin ingancin da wasu kamfanonin kasar Sin ba su ji kunyar kerawa da sayarwa ba ;-)
Waɗannan ƙwararrun ƙwararru ne da gaske. Ta yaya masu haɓakawa ke bugawa zuwa AppStore za su yi amfani da XCode da aka zazzage daga wasu sabar Sinawa mara duhu. Ban gane haka ba..
Wani abu makamancin haka ba zai iya shiga cikin AppStore bayan duk:D