{"id":98915,"date":"2021-01-22T20:42:28","date_gmt":"2021-01-22T18:42:28","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-zakryvaet-storonnij-dostup-k-chrome-sync-api"},"modified":"2021-01-22T20:42:28","modified_gmt":"2021-01-22T18:42:28","slug":"google-zakryvaet-storonnij-dostup-k-chrome-sync-api","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/google-zakryvaet-storonnij-dostup-k-chrome-sync-api","title":{"rendered":"Google sulgeb kolmandate osapoolte juurdep\u00e4\u00e4su Chrome Sync API-le","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Audit k\u00e4igus avastas Google, et m\u00f5ned Chromiumi aluseks olevad kolmandate osapoolte tooted kasutavad v\u00f5tmeid, mis v\u00f5imaldavad juurdep\u00e4\u00e4su teatud API-dele ja teenustele, mis on m\u00f5eldud ainult sisemiseks kasutamiseks. Konkreetsemalt kasutavad nad google_default_client_id ja google_default_client_secret. Selle t\u00f5ttu saavad kasutajad juurdep\u00e4\u00e4su oma Chrome Sync andmetele (nt j\u00e4rjehoidjad) mitte ainult Chrome'is, vaid ka Chromiumi alusel p\u00f5hinevates kolmandate osapoolte brauserites. Omandades vajaduse j\u00e4rele, et suurendada turvalisust, piirab Google juurdep\u00e4\u00e4su nimetatud API-dele kolmandate osapoolte tarkvarale. See otsus j\u00f5ustub alates 15. m\u00e4rtsist sel aastal.<\/p>\n

<\/p>\n

Seet\u00f5ttu paljud jaotused lisada pealtkuulamiseks kasutatavad juursertifikaadid tagasiv\u00f5etud sertifikaatide nimekirja (OneCRL), nagu hiljuti Mozilla<\/a> on t\u00e4ielikult loobumas Chromiumist oma pakkumistes. Nende seas: Arch Linux, Fedora, Debian, Slackware, OpenSUSE ja teised.<\/strong><\/p>\n

<\/noindex><\/noindex><\/p>\n

Allikas:<\/p>\n

Tere Chromiumi arendaja,<\/p>\n

Teatame, et alates 15. m\u00e4rtsist 2021 ei saa Chromiumi ja Chromium OS-i tuletiste l\u00f5ppkasutajad, kes kasutavad oma build-konfiguratsioonis google_default_client_id ja google_default_client_secret, enam oma Googlei kontodele sisse logida.
\nMida peaksin teadma?<\/p>\n

Hiljutise auditi k\u00e4igus avastasime, et m\u00f5ned kolmandate osapoolte Chromiumi baasil p\u00f5hinevad brauserid kasutavad v\u00f5tmeid, mis lubavad p\u00e4\u00e4seda Google'i API-dele ja teenustele, mis on reserveeritud ainult Google'i kasutamiseks. Chrome Sync on \u00fcks m\u00e4rkimisv\u00e4\u00e4rsemaid neist API-dest. Konkreetsemalt kasutavad nad google_default_client_id ja google_default_client_secret.<\/p>\n

Praktiliselt t\u00e4hendab see, et kasutaja suudab p\u00e4\u00e4seda oma isiklikele Chrome Sync andmetele (nt j\u00e4rjehoidjad) mitte ainult Chrome'is, vaid ka mitte-Google'i, Chromiumi alusel p\u00f5hinevas brauseris. Palun pange t\u00e4hele, et kasutajad saavad juurdep\u00e4\u00e4su ainult oma Chrome Sync andmetele ning ainult v\u00e4ike osa Chromiumi baasil p\u00f5hinevate brauserite kasutajatest oli m\u00f5jutatud. Meil ei ole p\u00f5hjust uskuda, et kasutajate andmeid on kuritarvitatud v\u00f5i sellele ligip\u00e4\u00e4su omanikud olid keegi muu kui kasutajad ise.<\/p>\n

Google'i j\u00f5upingutuste osana kasutajate andmete turvalisuse suurendamiseks eemaldame 15. m\u00e4rtsist 2021 juurdep\u00e4\u00e4su Google'i ainulaadsetele API-dele Chromiumi ja Chromium OS-i tuletistest, mis kasutasid google_default_client_id ja google_default_client_secret oma build-konfiguratsioonis. Juhised Chromiumi tuletiste tooteid tootvatele ettev\u00f5tetele on saadaval Chromiumi vikis.
\nMida see minu kasutajatele t\u00e4hendab?<\/p>\n

Users of products that are incorrectly using these APIs will notice that they won’t be able to log into their Google Accounts in those products anymore.<\/p>\n

Kasutajatele, kes p\u00e4\u00e4sesid Google'i funktsioonidele (nt Chrome Sync) kolmanda osapoole Chromiumi baasil p\u00f5hineva brauseri kaudu, j\u00e4\u00e4vad nende andmed nende Google'i kontole k\u00e4ttesaadavaks ja kohapeal salvestatud andmed j\u00e4\u00e4vad kohapeal k\u00e4ttesaadavaks.<\/p>\n

Nagu alati, saavad kasutajad oma andmete vaatamiseks ja haldamiseks kasutada Google Chrome'i, Chrome OS-i ja\/v\u00f5i minu Google'i tegevuse lehte, nad saavad ka oma andmeid allalaadida Google Takeout lehelt ja\/v\u00f5i kustutada need sealt.
\nMida peaksin tegema?<\/p>\n

T\u00f5rgete v\u00e4ltimiseks j\u00e4rgige juhiseid Chromiumi tuletiste konfigureerimiseks ja ehitamiseks Chromiumi vikis (link on antud \u00fclal).<\/p>\n

V\u00f5imalikud viisid selle rakendamiseks on:<\/p>\n

Eemaldada google_default_client_id ja google_default_client_secret oma build-konfiguratsioonist.
\nPassing the —allow-browser-signin=false flag at startup.<\/p>\n

Teie projektid, mis v\u00f5ivad olla seda muudatust m\u00f5jutatud, on allpool loetletud:<\/p>\n

Arch Linux Chromium (arch-linux-chromium)<\/p>\n

If you have any questions or require assistance, please contact embedd…@chromium.org.<\/p>\n

Lugupidamisega,<\/p>\n

Google Chrome'i meeskond<\/p>\n

Allikas: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0445\u043e\u0434\u0435 \u0430\u0443\u0434\u0438\u0442\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043d\u0430 \u043a\u043e\u0434\u0435 Chromium, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043a\u043b\u044e\u0447\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c API \u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c Google, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u043c \u0434\u043b\u044f \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f. \u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u043a google_default_client_id \u0438 \u043a google_default_client_secret. \u0411\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u044d\u0442\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0438\u043c\u0435\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0432\u043e\u0438\u043c \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c Chrome Sync \u0434\u0430\u043d\u043d\u044b\u043c (\u0442\u0430\u043a\u0438\u043c, \u043a\u0430\u043a \u0437\u0430\u043a\u043b\u0430\u0434\u043a\u0438) \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-98915","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google sulgeb kolmandate osapoolte juurdep\u00e4\u00e4su Chrome Sync API-le | ProHoster","description":"Auditi k\u00e4igus avastas Google, et m\u00f5ned kolmanda osapoole tooted, mis p\u00f5hinevad Chromiumi koodil, kasutavad v\u00f5tmeid, mis v\u00f5imaldavad p\u00e4\u00e4seda m\u00f5nedele Google'i API-dele ja teenustele, mis on m\u00f5eldud.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/google-zakryvaet-storonnij-dostup-k-chrome-sync-api","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a Chrome Sync API | ProHoster","og:description":"\u0412 \u0445\u043e\u0434\u0435 \u0430\u0443\u0434\u0438\u0442\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043d\u0430 \u043a\u043e\u0434\u0435 Chromium, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043a\u043b\u044e\u0447\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c API \u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c Google, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u043c \u0434\u043b\u044f.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/google-zakryvaet-storonnij-dostup-k-chrome-sync-api","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-01-22T18:42:28+00:00","article:modified_time":"2021-01-22T18:42:28+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"98915","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 09:57:26","updated":"2022-09-28 13:25:58","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/98915","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=98915"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/98915\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=98915"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=98915"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=98915"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}