{"id":98915,"date":"2021-01-22T20:42:28","date_gmt":"2021-01-22T18:42:28","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-zakryvaet-storonnij-dostup-k-chrome-sync-api"},"modified":"2021-01-22T20:42:28","modified_gmt":"2021-01-22T18:42:28","slug":"google-zakryvaet-storonnij-dostup-k-chrome-sync-api","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/news\/google-zakryvaet-storonnij-dostup-k-chrome-sync-api","title":{"rendered":"Google zamyka zewn\u0119trzny dost\u0119p do Chrome Sync API","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

W trakcie audytu firma Google odkry\u0142a, \u017ce niekt\u00f3re zewn\u0119trzne produkty oparte na kodzie Chromium wykorzystuj\u0105 klucze umo\u017cliwiaj\u0105ce dost\u0119p do niekt\u00f3rych API i us\u0142ug Google przeznaczonych do u\u017cytku wewn\u0119trznego. W szczeg\u00f3lno\u015bci chodzi o google_default_client_id i google_default_client_secret. Dzi\u0119ki temu u\u017cytkownik ma mo\u017cliwo\u015b\u0107 uzyskania dost\u0119pu do swoich danych Chrome Sync (takich jak zak\u0142adki) nie tylko w Chrome, ale tak\u017ce w zewn\u0119trznych przegl\u0105darkach opartych na kodzie Chromium. Uzasadniaj\u0105c to dzia\u0142aniami maj\u0105cymi na celu popraw\u0119 bezpiecze\u0144stwa, Google zamyka dost\u0119p oprogramowaniu stron trzecich do wymienionych API. Decyzja ta wchodzi w \u017cycie od 15 marca bie\u017c\u0105cego roku.<\/p>\n

<\/p>\n

W zwi\u0105zku z tym wiele dystrybucji rozwa\u017ca<\/a> mo\u017cliwo\u015b\u0107 ca\u0142kowitego zrezygnowania z Chromium w swoich wydaniach. W\u015br\u00f3d nich znajduj\u0105 si\u0119: Arch Linux, Fedora, Debian, Slackware, OpenSUSE i inne.<\/strong><\/p>\n

<\/noindex><\/noindex><\/p>\n

\u0179r\u00f3d\u0142o:<\/p>\n

Cze\u015b\u0107 deweloperze Chromium,<\/p>\n

Piszemy, aby poinformowa\u0107 Ci\u0119, \u017ce od 15 marca 2021 r. u\u017cytkownicy ko\u0144cowi pochodnych Chromium i Chromium OS u\u017cywaj\u0105cy google_default_client_id i google_default_client_secret w swojej konfiguracji budowy nie b\u0119d\u0105 mogli zalogowa\u0107 si\u0119 na swoje konta Google.
\nCo powinienem wiedzie\u0107?<\/p>\n

W trakcie ostatniego audytu odkryli\u015bmy, \u017ce niekt\u00f3re przegl\u0105darki oparte na Chromium wykorzystywa\u0142y klucze, kt\u00f3re mog\u0142y uzyska\u0107 dost\u0119p do API i us\u0142ug Google, kt\u00f3re s\u0105 zarezerwowane wy\u0142\u0105cznie dla Google. Chrome Sync jest najbardziej znacz\u0105cym z tych API. W szczeg\u00f3lno\u015bci chodzi o google_default_client_id i google_default_client_secret.<\/p>\n

W praktyce oznacza to, \u017ce u\u017cytkownik m\u00f3g\u0142by uzyska\u0107 dost\u0119p do swoich danych Chrome Sync (takich jak zak\u0142adki) nie tylko za pomoc\u0105 Chrome, ale tak\u017ce z u\u017cyciem przegl\u0105darki opartej na Chromium, kt\u00f3ra nie jest od Google. Nale\u017cy zauwa\u017cy\u0107, \u017ce u\u017cytkownicy mogliby uzyska\u0107 dost\u0119p tylko do w\u0142asnych danych Chrome Sync, a jedynie niewielki odsetek u\u017cytkownik\u00f3w przegl\u0105darek opartych na Chromium zosta\u0142 dotkni\u0119ty. Nie mamy powod\u00f3w, by s\u0105dzi\u0107, \u017ce dane u\u017cytkownik\u00f3w s\u0105 wykorzystywane lub uzyskiwane przez kogokolwiek innego ni\u017c sami u\u017cytkownicy.<\/p>\n

W ramach dzia\u0142a\u0144 Google maj\u0105cych na celu popraw\u0119 bezpiecze\u0144stwa danych u\u017cytkownik\u00f3w, usuwamy dost\u0119p z produkt\u00f3w pochodnych Chromium i Chromium OS, kt\u00f3re wykorzystywa\u0142y google_default_client_id i google_default_client_secret w swojej konfiguracji budowy do API zarezerwowanych dla Google, pocz\u0105wszy od 15 marca 2021 r. Wytyczne dla dostawc\u00f3w produkt\u00f3w pochodnych Chromium s\u0105 dost\u0119pne na wiki Chromium.
\nCo to oznacza dla moich u\u017cytkownik\u00f3w?<\/p>\n

Users of products that are incorrectly using these APIs will notice that they won’t be able to log into their Google Accounts in those products anymore.<\/p>\n

Dla u\u017cytkownik\u00f3w, kt\u00f3rzy uzyskiwali dost\u0119p do funkcji Google (takich jak Chrome Sync) za po\u015brednictwem zewn\u0119trznej przegl\u0105darki opartej na Chromium, ich dane b\u0119d\u0105 nadal dost\u0119pne w ich koncie Google, a dane, kt\u00f3re przechowali lokalnie, pozostan\u0105 dost\u0119pne lokalnie.<\/p>\n

Jak zawsze, u\u017cytkownicy mog\u0105 przegl\u0105da\u0107 i zarz\u0105dza\u0107 swoimi danymi za pomoc\u0105 Google Chrome, Chrome OS i\/lub na stronie Moje dzia\u0142ania w Google, mog\u0105 r\u00f3wnie\u017c pobra\u0107 swoje dane z strony Google Takeout i\/lub usun\u0105\u0107 je z tej strony.
\nCo powinienem zrobi\u0107?<\/p>\n

Aby unikn\u0105\u0107 zak\u0142\u00f3ce\u0144, post\u0119puj zgodnie z instrukcjami dotycz\u0105cymi konfigurowania i budowania produkt\u00f3w pochodnych Chromium na wiki Chromium (link podany powy\u017cej).<\/p>\n

Mo\u017cliwe sposoby implementacji to:<\/p>\n

Usuni\u0119cie google_default_client_id i google_default_client_secret z twojej konfiguracji budowy.
\nPassing the —allow-browser-signin=false flag at startup.<\/p>\n

Twoje projekty, kt\u00f3re mog\u0105 by\u0107 dotkni\u0119te t\u0105 zmian\u0105, s\u0105 wymienione poni\u017cej:<\/p>\n

Arch Linux Chromium (arch-linux-chromium)<\/p>\n

If you have any questions or require assistance, please contact embedd…@chromium.org.<\/p>\n

Z powa\u017caniem,<\/p>\n

Zesp\u00f3\u0142 Google Chrome<\/p>\n

\u0179r\u00f3d\u0142o: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0445\u043e\u0434\u0435 \u0430\u0443\u0434\u0438\u0442\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043d\u0430 \u043a\u043e\u0434\u0435 Chromium, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043a\u043b\u044e\u0447\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c API \u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c Google, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u043c \u0434\u043b\u044f \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f. \u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u043a google_default_client_id \u0438 \u043a google_default_client_secret. \u0411\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u044d\u0442\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0438\u043c\u0435\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0432\u043e\u0438\u043c \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c Chrome Sync \u0434\u0430\u043d\u043d\u044b\u043c (\u0442\u0430\u043a\u0438\u043c, \u043a\u0430\u043a \u0437\u0430\u043a\u043b\u0430\u0434\u043a\u0438) \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-98915","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google zamyka dost\u0119p zewn\u0119trzny do API synchronizacji Chrome | ProHoster","description":"Podczas audytu firma Google odkry\u0142a, \u017ce niekt\u00f3re zewn\u0119trzne produkty oparte na kodzie Chromium u\u017cywaj\u0105 kluczy, kt\u00f3re umo\u017cliwiaj\u0105 dost\u0119p do niekt\u00f3rych API i us\u0142ug Google, przeznaczonych dla.","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/news\/google-zakryvaet-storonnij-dostup-k-chrome-sync-api","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a Chrome Sync API | ProHoster","og:description":"\u0412 \u0445\u043e\u0434\u0435 \u0430\u0443\u0434\u0438\u0442\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043d\u0430 \u043a\u043e\u0434\u0435 Chromium, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043a\u043b\u044e\u0447\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c API \u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c Google, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u043c \u0434\u043b\u044f.","og:url":"https:\/\/prohoster.info\/pl\/blog\/news\/google-zakryvaet-storonnij-dostup-k-chrome-sync-api","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-01-22T18:42:28+00:00","article:modified_time":"2021-01-22T18:42:28+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"98915","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 09:57:26","updated":"2022-09-28 13:25:58","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/98915","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=98915"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/98915\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=98915"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=98915"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=98915"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}