Kwanan nan, a taron IEEE kan Tsaro da Sirri, ƙungiyar masu bincike daga Laboratory Computer na Jami'ar Cambridge. game da sabon rauni a cikin wayoyin hannu wanda ya ba da izini kuma har yanzu yana ba da damar saka idanu masu amfani akan Intanet. Lalacewar da aka gano ya zama mai yuwuwa ba tare da sa hannun Apple da Google kai tsaye ba kuma an same shi a cikin dukkan nau'ikan iPhone kuma a cikin wasu 'yan nau'ikan wayoyi masu amfani da Android kawai. Misali, ana samunsa a cikin samfuran Google Pixel 2 da 3.
Masana sun ba da rahoton gano raunin ga Apple a watan Agustan bara, kuma an sanar da Google a watan Disamba. An kira rashin lafiyar SensorID kuma an sanya shi a hukumance CVE-2019-8541. Apple ya kawar da haɗarin da aka gano tare da sakin facin don iOS 12.2 a cikin Maris. Dangane da Google, har yanzu bai mayar da martani ga barazanar da aka gano ba. Duk da haka, mun sake maimaita cewa yayin da aka kai harin SensorID a sauƙaƙe akan kusan dukkanin nau'ikan wayoyin hannu na Apple, ƙananan wayoyin hannu masu amfani da Android sun sami rauni a gare shi.
Menene SensorID? Daga sunan yana da sauƙi a fahimci cewa SensorID shine mai ganowa na musamman don firikwensin. Wani nau'in sa hannu na dijital na na'urar, wanda a mafi yawan lokuta ya dace da takamaiman wayar salula kuma, sabili da haka, kusan koyaushe na wani takamaiman mutum ne.
Godiya ga ƙoƙarin masu bincike na tsaro, irin wannan sa hannu shine saitin bayanai akan daidaitawar magnetometer, accelerometer da na'urori masu auna firikwensin gyroscope (saboda dalilai masu ma'ana, samar da na'urori masu auna firikwensin yana tare da rarrabuwa na sigogi). An rubuta bayanan calibration a cikin firmware na na'urar a masana'anta, kuma yana ba ku damar haɓaka ayyukan wayowin komai da ruwan tare da na'urori masu auna firikwensin - haɓaka daidaiton matsayi da martanin wayar hannu ga ƙungiyoyi. Lokacin duba shafi akan Intanet ta amfani da kowane mai bincike ko lokacin ƙaddamar da aikace-aikace, wayar hannu da ke hannunka da wuya ta kasance mara motsi. Shafukan suna karanta bayanan daidaitawa cikin yardar kaina don dacewa da wayar hannu kuma wannan yana faruwa kusan nan take. Ana iya amfani da wannan mai ganowa don bin diddigin mai amfani da aka riga aka gano akan wasu rukunin yanar gizon. Inda ya tafi, abin da yake sha'awar. Tabbas wannan hanyar tana da kyau ga tallan da aka yi niyya. Hakanan, ta hanyar ayyuka masu sauƙi, irin wannan mai ganowa za a iya haɗa shi da mutum tare da duk sakamakon da ya biyo baya.
An bayyana jimlar raunin wayoyin hannu na Apple ga harin SensorID ta gaskiyar cewa kusan dukkanin iPhones ana iya rarraba su azaman na'urori masu ƙima, masana'anta waɗanda, gami da ƙirar masana'anta na firikwensin, suna da inganci mai inganci. A wannan yanayin, wannan ƙwaƙƙwarar ta gazawar kamfanin. Ko da sake saitin masana'anta baya goge sa hannun dijital na SensorID. Wayoyin hannu masu amfani da Android wani lamari ne. Ga mafi yawancin, waɗannan na'urori ne marasa tsada, saitunan masana'anta waɗanda ba kasafai suke tare da daidaitawar firikwensin ba. Sakamakon haka, yawancin wayoyin hannu na Android ba su da sa hannu na dijital don kai harin SensorID, kodayake na'urori masu ƙima suna da tabbacin haɗa su da ingancin da suka dace kuma ana iya kaiwa hari bisa la'akari da bayanan daidaitawa.
source: 3dnews.ru