Cov tsim tawm ntawm lub platform rau decentralized messaging Matrix tshaj tawm kev kaw thaum muaj xwm txheej ceev ntawm cov servers Matrix.org thiab Riot.im (tus neeg siv tseem ceeb ntawm Matrix) vim kev nyiag ntawm qhov project infrastructure. Thawj qhov hluav taws xob tau tshwm sim nag hmo, tom qab ntawd cov servers tau rov qab los thiab cov ntawv thov rov tsim dua los ntawm cov ntaub ntawv siv. Tab sis ob peb feeb dhau los cov servers tau cuam tshuam rau zaum ob.
Cov neeg tawm tsam tau tshaj tawm cov ntaub ntawv qhia txog ntawm nplooj ntawv tseem ceeb ntawm qhov project kev teeb tsa server thiab pov thawj ntawm lawv muaj lub ntaub ntawv khaws cia uas muaj cov hashes ntawm yuav luag tsib thiab ib nrab lab tus neeg siv Matrix. Ib qho hash password rau tus thawj coj ntawm Matrix project tau raug tso tawm rau pej xeem ua pov thawj. Cov code hloov kho ntawm lub vev xaib tau muab tso rau hauv GitHub repository ntawm cov neeg tawm tsam (tsis yog lub chaw khaws ntaub ntawv Matrix official). Cov ntsiab lus hais txog qhov hack thib ob tseem tsis tau paub.
Tom qab thawj qhov kev tawm tsam, pab pawg Matrix tau tshaj tawm daim ntawv qhia tias qhov kev tawm tsam tau ua los ntawm qhov tsis muaj zog hauv Jenkins kev sib koom ua ke tsis tu ncua. Tom qab tau txais kev nkag mus rau neeg rau zaub mov Los ntawm Jenkins, cov neeg tawm tsam tau cuam tshuam cov yuam sij SSH thiab tau nkag mus rau lwm cov servers hauv cov khoom siv. Cov lej qhov chaw thiab cov pob khoom tsis raug cuam tshuam los ntawm kev tawm tsam. Kev tawm tsam kuj tsis cuam tshuam rau Modular.im servers. Txawm li cas los xij, cov neeg tawm tsam tau nkag mus rau lub kaw lus tswj hwm database tseem ceeb, uas muaj cov lus tsis tau encrypted, cov cim nkag mus, thiab cov password hashes.
Txhua tus neeg siv tau qhia kom hloov lawv tus password. Tab sis nyob rau hauv tus txheej txheem ntawm kev hloov passwords nyob rau hauv lub ntsiab Riot tus neeg siv, cov neeg siv tau ntsib nrog lub ploj ntawm cov ntaub ntawv nrog backup cov ntawv luam ntawm cov yuam sij rau rov qab encrypted correspondence thiab tsis muaj peev xwm mus saib tau cov keeb kwm ntawm yav dhau los cov lus.
Cia peb nco qab tias lub platform rau kev teeb tsa kev sib tham tsis sib haum xeeb Matrix tau nthuav tawm raws li qhov project uas siv cov qauv qhib thiab ua tib zoo saib xyuas kom muaj kev ruaj ntseg thiab kev ceev ntiag tug ntawm cov neeg siv. Matrix muab qhov kawg-rau-kawg encryption raws li cov pov thawj Signal algorithm, txhawb kev tshawb nrhiav thiab tsis txwv kev saib cov ntaub ntawv keeb kwm, tuaj yeem siv los hloov cov ntaub ntawv, xa cov ntawv ceeb toom, ntsuas tus tsim tawm hauv online, teeb tsa kev sib tham hauv xov tooj, hu xov tooj thiab video. Nws kuj tseem txhawb nqa cov yam ntxwv siab heev xws li ntaus ntawv ceeb toom, nyeem ntawv pom zoo, thawb cov ntawv ceeb toom thiab kev tshawb nrhiav neeg rau zaub mov, synchronization ntawm tus neeg siv khoom keeb kwm thiab xwm txheej, ntau yam kev xaiv tus cim (email, xov tooj, Facebook account, thiab lwm yam).
Tau qhov twg los: opennet.ru
