{"id":95823,"date":"2020-10-03T13:42:45","date_gmt":"2020-10-03T11:42:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-budet-raskryvat-svedeniya-ob-uyazvimostyah-v-storonnih-android-ustrojstvah"},"modified":"2020-10-03T13:42:45","modified_gmt":"2020-10-03T11:42:45","slug":"google-budet-raskryvat-svedeniya-ob-uyazvimostyah-v-storonnih-android-ustrojstvah","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/google-budet-raskryvat-svedeniya-ob-uyazvimostyah-v-storonnih-android-ustrojstvah","title":{"rendered":"Google hakkab avalikustama teavet kolmandate osapoolte Android-seadmest leitud haavatavuste kohta","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Google'i ettev\u00f5te <noindex><a rel=\"nofollow\" href=\"https:\/\/security.googleblog.com\/2020\/10\/announcing-launch-of-android-partner.html\">esitles<\/a><\/noindex> algatus  <noindex><a rel=\"nofollow\" href=\"https:\/\/bugs.chromium.org\/p\/apvi\/issues\/list\">Android Partner Vulnerability<\/a><\/noindex>, mille raames plaanitakse avalikustada teavet haavatavuste kohta erinevate OEM \u0438\u0437\u0433\u043e\u0442\u043e\u0432\u0438\u0442\u0435\u043b\u0435\u0439 Android-seadmetes. Algatus muudab kasutajatele haavatavuste, mis on spetsiifilised kolmandate osapoolte kohandatud tarkvaradele, teavitamise l\u00e4bipaistvamaks. <\/p>\n<p>Siiani kajastati ametlikes haavatavuste raportites (Android Security Bulletins) ainult probleeme, mis on seotud AOSP-i reposse pakutud p\u00f5hikoodiga, kuid OEM valmistajate kohandatud versioonide erilisi probleeme ignoreeriti. Juba <noindex><a rel=\"nofollow\" href=\"https:\/\/bugs.chromium.org\/p\/apvi\/issues\/list?q=&#038;can=1\">avalikustatud<\/a><\/noindex> probleemid m\u00f5jutavad selliseid tootjaid nagu ZTE, Meizu, Vivo, OPPO, Digitime, Transsion ja Huawei. <\/p>\n<p>Tuvastatud probleemide seas: <\/p>\n<ul>\n<li class=\"l\"> Digitime seadmetes ei kontrollitud API ligip\u00e4\u00e4su \u00f5iguste jaoks t\u00e4iendavate \u00f5iguste kehtivust OTA v\u00e4rskenduste installimise teenuses <noindex><a rel=\"nofollow\" href=\"https:\/\/bugs.chromium.org\/p\/apvi\/issues\/detail?id=19&#038;q=&#038;can=1\">kasutati<\/a><\/noindex> karmilt kodeeritud parooli, mis lubas h\u00e4kkeril vaikselt installida APK-pakette ja muuta rakenduse juurdep\u00e4\u00e4su\u00f5igusi.\n<li class=\"l\"> M\u00f5nede OEM-tootjate seas populaarse alternatiivse brauseri <noindex><a rel=\"nofollow\" href=\"http:\/\/phoenix-browser.com\/\">Phoenix<\/a><\/noindex> paroolihaldur <noindex><a rel=\"nofollow\" href=\"https:\/\/bugs.chromium.org\/p\/apvi\/issues\/detail?id=7&#038;q=&#038;can=1\">oli realiseeritud<\/a><\/noindex> JavaScript-koodina, mis k\u00e4ivitatakse iga lehe kontekstis. R\u00fcndaja kontrolli all olev sait v\u00f5is saada t\u00e4ieliku ligip\u00e4\u00e4su kasutaja paroolide hoidla juurde, mille kr\u00fcpteerimiseks kasutati ebausaldusv\u00e4\u00e4rset DES algoritmi ja karmilt kodeeritud v\u00f5tit.\n<li class=\"l\"> Meizu seadmete System UI rakendus <noindex><a rel=\"nofollow\" href=\"https:\/\/bugs.chromium.org\/p\/apvi\/issues\/detail?id=9&#038;q=&#038;can=1\">laadis<\/a><\/noindex> ilma kr\u00fcpteerimise ja \u00fchenduse autentimiseta lisakoodi. Kui r\u00fcndaja j\u00e4lgis ohvri HTTP liiklust, v\u00f5is ta oma koodi k\u00e4ivitada rakenduse kontekstis.\n<li class=\"l\"> Vivo seadmetes oli <noindex><a rel=\"nofollow\" href=\"https:\/\/bugs.chromium.org\/p\/apvi\/issues\/detail?id=11&#038;q=&#038;can=1\">muudetud<\/a><\/noindex> PackageManagerService'i checkUidPermission meetod anda m\u00f5nedel rakendustel t\u00e4iendavaid \u00f5igusi, isegi kui need \u00f5igused ei olnud manifestifailis m\u00e4\u00e4ratud. \u00dches versioonis andis meetod igasuguseid \u00f5igusi rakendustele, mille ID oli com.google.uid.shared. Teises versioonis tehti \u00f5iguste andmiseks pakettide nimede v\u00f5rdsustumine nimekirja alusel.\n <\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Allikas: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=53825\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0443 Android Partner Vulnerability, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 Android-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 OEM-\u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439. \u0418\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0430 \u0441\u0434\u0435\u043b\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 \u043f\u0440\u043e\u0437\u0440\u0430\u0447\u043d\u044b\u043c \u0434\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0434\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u044b\u0445 \u0434\u043b\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u0441 \u043c\u043e\u0434\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f\u043c\u0438 \u043e\u0442 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439. \u0414\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u0432 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u043e\u0442\u0447\u0451\u0442\u0430\u0445 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 (Android Security Bulletins) \u043e\u0442\u0440\u0430\u0436\u0430\u043b\u0438\u0441\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u043c \u043a\u043e\u0434\u0435, \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u043e\u043c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-95823","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0443\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/news\/google-budet-raskryvat-svedeniya-ob-uyazvimostyah-v-storonnih-android-ustrojstvah\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Google \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 Android-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0443\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/news\/google-budet-raskryvat-svedeniya-ob-uyazvimostyah-v-storonnih-android-ustrojstvah\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-03T11:42:45+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-03T11:42:45+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google hakkab avalikustama teavet kolmandate osapoolte Android-seadmest leitud haavatavuste kohta | ProHoster","description":"Google esitles algatust","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/google-budet-raskryvat-svedeniya-ob-uyazvimostyah-v-storonnih-android-ustrojstvah","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u0431\u0443\u0434\u0435\u0442 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 Android-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0443","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/google-budet-raskryvat-svedeniya-ob-uyazvimostyah-v-storonnih-android-ustrojstvah","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-03T11:42:45+00:00","article:modified_time":"2020-10-03T11:42:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"95823","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:57:46","updated":"2022-09-28 21:44:35","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/95823","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=95823"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/95823\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=95823"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=95823"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=95823"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}