GitHub tau tshaj tawm txoj cai hloov pauv uas qhia txog cov cai hais txog kev tshaj tawm kev siv dag zog thiab kev tshawb nrhiav malware, nrog rau kev ua raws li US Digital Millennium Copyright Act (DMCA). Cov kev hloov pauv tseem nyob rau hauv cov txheej txheem, muaj rau kev sib tham hauv 30 hnub.
Ntxiv rau qhov kev txwv yav dhau los tam sim no ntawm kev faib tawm thiab ua kom muaj kev teeb tsa lossis xa cov khoom siv malware thiab kev siv, cov ntsiab lus hauv qab no tau ntxiv rau DMCA kev ua raws cai:
- Kev txwv tsis pub muab tso rau hauv repository thev naus laus zis rau kev hla dhau txoj kev tiv thaiv kev cai lij choj, suav nrog cov yuam sij rau daim ntawv tso cai, nrog rau cov kev pab cuam tsim cov yuam sij, hla kev pov thawj tseem ceeb thiab txuas ntxiv lub sijhawm ua haujlwm dawb.
- Ib txheej txheem rau kev ua ntawv thov kom tshem tawm cov cai no tau qhia. Tus neeg thov kev tshem tawm yuav tsum tau muab cov ntsiab lus qhia, nrog rau kev tshaj tawm lub hom phiaj xa daim ntawv thov rau kev kuaj ua ntej thaiv.
- Thaum lub chaw khaws cia raug thaiv, lawv cog lus tias yuav muab lub peev xwm los xa tawm cov teeb meem thiab PRs, thiab muab cov kev pabcuam raug cai.
Cov kev hloov pauv rau kev siv dag zog thiab malware cov cai hais txog kev thuam uas tuaj tom qab Microsoft tshem tawm tus qauv Microsoft Exchange siv los tua tawm. Cov kev cai tshiab sim cais cov ntsiab lus txaus ntshai siv rau kev tawm tsam los ntawm cov cai uas txhawb kev tshawb fawb txog kev nyab xeeb. Cov kev hloov pauv tau ua:
- Nws raug txwv tsis pub tsuas yog tawm tsam GitHub cov neeg siv los ntawm kev tshaj tawm cov ntsiab lus nrog kev siv dag zog rau nws lossis siv GitHub raws li kev xa khoom siv, zoo li tau hais ua ntej, tab sis kuj tseem yuav tshaj tawm cov cai tsis zoo thiab kev siv dag zog uas nrog kev tawm tsam. Feem ntau, nws tsis yog txwv tsis pub tshaj tawm cov piv txwv ntawm kev siv dag zog uas tau npaj thaum tshawb fawb txog kev nyab xeeb thiab cuam tshuam rau qhov tsis zoo uas twb tau kho lawm, tab sis txhua yam yuav nyob ntawm seb lo lus "kev tawm tsam" txhais li cas.
Piv txwv li, luam tawm JavaScript code nyob rau hauv ib hom ntawv ntawm cov ntawv nyeem uas tawm tsam ib tug browser ntog nyob rau hauv cov kev cai no - tsis muaj dab tsi tiv thaiv tus attacker los ntawm downloading lub hauv paus code rau tus neeg raug tsim txom browser siv fetch, cia li patching nws yog hais tias tus exploit qauv yog luam tawm nyob rau hauv ib tug inoperable daim ntawv. , thiab ua nws. Ib yam li lwm cov cai, piv txwv li hauv C ++ - tsis muaj dab tsi tiv thaiv koj los ntawm kev sau nws ntawm lub tshuab tawm tsam thiab tua nws. Yog tias qhov chaw khaws cia nrog cov lej zoo sib xws tau pom, nws tau npaj tsis tshem nws, tab sis txhawm rau nkag mus rau nws.
- Tshooj txwv txwv tsis pub "spam", kev dag, kev koom tes hauv kev ua lag luam tsis ncaj ncees, cov kev pab cuam rau kev ua txhaum cai ntawm txhua qhov chaw, phishing thiab nws cov kev sim siab tau tsiv siab dua hauv cov ntawv nyeem.
- Ib kab lus tau ntxiv piav qhia txog qhov muaj peev xwm ua ntawv thov kom rov hais dua yog tias tsis pom zoo nrog qhov thaiv.
- Ib qho yuav tsum tau muab ntxiv rau cov tswv ntawm cov chaw khaws cia uas muaj cov ntsiab lus txaus ntshai uas yog ib feem ntawm kev tshawb fawb txog kev nyab xeeb. Lub xub ntiag ntawm cov ntsiab lus no yuav tsum tau hais meej meej thaum pib ntawm README.md cov ntaub ntawv, thiab cov ntaub ntawv tiv tauj yuav tsum muab rau hauv SECURITY.md cov ntaub ntawv. Nws tau hais tias feem ntau GitHub tsis tshem tawm kev tawm dag zog nrog rau kev tshawb fawb txog kev nyab xeeb rau qhov uas twb tau nthuav tawm qhov tsis zoo (tsis yog 0-hnub), tab sis khaws lub sijhawm los txwv kev nkag mus yog tias nws txiav txim siab tias tseem muaj kev pheej hmoo ntawm cov kev siv dag zog no siv rau kev tawm tsam tiag. thiab hauv kev pabcuam GitHub kev txhawb nqa tau txais kev tsis txaus siab txog cov lej raug siv rau kev tawm tsam.
Tau qhov twg los: opennet.ru