Isicelo Iipassword, eyaziswa ngu-Apple ukwenza lula ulawulo lwengqinisekiso kwizixhobo zayo, ibe sembindini wempikiswano yamva nje emva kokuba kufunyenwe ubuthathaka obunzulu.
Abaphandi kwi-cybersecurity firm Mysk bafumanise ukuba isixhobo siveze amawakawaka abasebenzisi kuhlaselo olunokubakho ngenxa yokusebenzisa uqhagamshelo lwe-HTTP olungafihlwanga. Ukuze ufunde ngakumbi malunga nendlela yokuphepha ukuba lixhoba lezi zoyikiso, unokufunda indlela iApple esinceda ngayo ukuba sichonge ii-imeyile ezisemthethweni kwaye sithintele inkohliso.
Oku kuchaphazeleka kwezokhuseleko kuxelwe ukuba kukho iinyanga ezininzi, kuvunyelwa abahlaseli abanofikelelo kuthungelwano ukuba bathintele kwaye balungise izicelo zokusetha kwakhona iphasiwedi. Oku kuthetha ukuba, phantsi kweemeko ezithile, umsebenzisi ebenokuthi ngempazamo athunyelwe kwiphepha elingeyonyani elenzelwe ukuba iziqinisekiso zabo.
Lusebenze njani uhlaselo lobutsotsi
Ngokutsho kohlalutyo lweengcali zeMysk, ingxaki kukuba isicelo ulwazi oluceliwe malunga neenkonzo ezigciniweyo ngaphandle kokuqinisekisa uqhagamshelwano olukhuselekileyo. Ngamagama alula, nawuphi na umhlaseli oqhagamshelwe kwinethiwekhi efanayo ye-Wi-Fi unokuthintela ukugcwala kwaye afake iphepha lobuqhophololo endaweni yesiza esisemthethweni. Olu hlobo lohlaselo luqhelekile, njengoko kukhankanyiwe kumxholo wabasebenzisi be-iPhone ekujoliswe kubo kubuqhetseba obukhulu.
Olu hlaselo belunokwenziwa ngokulula kuthungelwano lukawonke-wonke, olufana nolo lukwiivenkile zekofu okanye kwizikhululo zeenqwelo-moya, apho abaphuli-mthetho be-intanethi badla ngokuxhaphaza amaxhoba angalindelanga. Emva kokuba umsebenzisi efake idatha yakhe kwiphepha lomgunyathi, ulwazi lwalusezandleni zomhlaseli, onokusebenzisa ukufikelela ngokungekho mthethweni kwiiakhawunti zabo.
I-Apple iphendula ngokulungiswa kwe-iOS 18.2
Nangona umba uye wavela mva nje, iApple yalungisa ukuba sesichengeni ngoDisemba ngohlaziyo iOS 18.2. Isisombululo esiphunyeziweyo yayikukwamkelwa okunyanzelekileyo kweprotocol HTTPS kunxibelelwano lwesicelo, ukuthintela abahlaseli ekusebenziseni umngxuma wokhuseleko. Nangona kunjalo, kubalulekile ukukhumbula ukuba ukhuseleko lwe-intanethi lukwafuna izenzo ezilungileyo, njengoko ufunda kwiingcebiso zethu zokhuseleko ze-iPhone yakho.
Nangona kunjalo, inyani yokuba obu buthathaka bukhona ixesha elide ingabonwa iphakamisa imibuzo malunga nolawulo lokhuseleko lwe-Apple kwiiapps zayo ezintsha. Inkampani ayizange ichaze lo mbandela esidlangalaleni de abaphandi bawuveze, bephakamisa inkxalabo phakathi kwabasebenzisi kunye neengcali ze-cybersecurity.
Imingcipheko yokuthembela ngokumfamekileyo kwabaphathi bamagama ayimfihlo
Olu hlobo lokusilela lubangela umbuzo kwi ukuthembeka yabaphathi bephasiwedi abadityaniswe kwiindlela zokusebenza. Ngelixa izixhobo ezifana ne-Apple's Password app zibonelela ngokulula kunye nokhuseleko olongezelelekileyo ngeendlela ezininzi, akukho sisombululo sisibhanxa ngokupheleleyo. Isindululo ngokubanzi sihlala sinokuqinisekiswa kwezinto ezimbini (2FA) kuzo zonke ii-akhawunti ezibalulekileyo, ezongeza umaleko owongezelelweyo wokukhusela kwimeko apho iziqinisekiso zisengozini, ngakumbi kuba kubalulekile ukusebenzisa ungqinisiso lwezinto ezimbini ukukhusela iiakhawunti ezibalulekileyo njenge-iCloud.
Ukongeza, kubalulekile ukuba abasebenzisi bagcine izixhobo zabo zihlaziywa ngeenguqulelo zamva nje ze-iOS, njengoko uninzi lwezi buthathaka zilungiswa kuphela uhlaziyo lwesoftware. I-Apple yomelezile iprotocol ye-app yayo, kodwa abo bangayihlaziyanga inkqubo yabo yokusebenza basenokuba semngciphekweni walo mbandela.
Ukuvuza kunye nokwaphulwa kokhuseleko yinto eqhubekayo kwihlabathi ledijithali, eligxininisa i mfuneko ukuhlala uphaphile kwiingozi ezinokubakho. Esi siganeko kunye ne-Apple's Passwords app sisikhumbuzo sokuba nezona zixhobo zikhuselekileyo zinokusilela ngaxa lithile. Olona khuselo lubalaseleyo luhlala luyindibaniselwano yeendlela ezilungileyo zokhuseleko lwe-cyber kunye nokusetyenziswa kobuchwephesha bokhuseleko oluphezulu.
