Google game da fadadawa biyan tukuicin neman lahani a aikace-aikace daga kasidar Google Play. Idan a baya shirin ya ƙunshi kawai mafi mahimmanci, aikace-aikacen da aka zaɓa na musamman daga Google da abokan hulɗa, daga yanzu za a fara ba da kyaututtukan kyaututtuka don gano matsalolin tsaro a cikin kowane aikace-aikacen dandamali na Android waɗanda aka sauke daga Google Play catalog more. fiye da sau miliyan 100. Girman lambar yabo don gano raunin da zai iya haifar da aiwatar da lambar nesa ya karu daga 5 zuwa dala dubu 20, kuma ga raunin da ke ba da damar yin amfani da bayanai ko abubuwan sirri na aikace-aikacen - daga 1 zuwa 3 dala dubu.
Za a ƙara bayani game da raunin da aka samu zuwa kayan aikin gwaji na atomatik don gano irin waɗannan matsalolin a wasu aikace-aikacen. Marubuta aikace-aikace masu matsala ta hanyar Za a aika sanarwa tare da shawarwari don warware matsaloli. An yi zargin cewa, a wani mataki na ci gaba da inganta tsaro na manhajojin Android, an bayar da taimako wajen kawar da lallacewa ga masu haɓakawa fiye da dubu 300 da kuma shafi aikace-aikace sama da miliyan guda a Google Play. An biya masu binciken tsaro dala 265 don gano lahani a Google Play, wanda $75 aka biya a watan Yuli da Agusta na wannan shekara.
An kuma kaddamar da wani shiri tare da dandalin HackerOne (DDPRP), wanda ke ba da lada don ganowa da taimakawa don toshe batutuwan cin zarafin mai amfani (kamar tattara bayanai marasa izini da ƙaddamarwa) a cikin aikace-aikacen Android, ayyukan OAuth, da ƙari na Chrome waɗanda suka saba Dokar Amfani da Google Play, Google API da Chrome Web. Store.
Matsakaicin ladan gano wannan rukunin matsalolin an saita shi akan dala dubu 50.
source: budenet.ru