{"id":98915,"date":"2021-01-22T20:42:28","date_gmt":"2021-01-22T18:42:28","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-zakryvaet-storonnij-dostup-k-chrome-sync-api"},"modified":"2021-01-22T20:42:28","modified_gmt":"2021-01-22T18:42:28","slug":"google-zakryvaet-storonnij-dostup-k-chrome-sync-api","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/news\/google-zakryvaet-storonnij-dostup-k-chrome-sync-api","title":{"rendered":"Google zapira dostop tretjih oseb do Chrome Sync API","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Med audita je podjetje Google ugotovilo, da nekateri tretji izdelki, ki temeljijo na kodi Chromium, uporabljajo klju\u010de, ki omogo\u010dajo dostop do nekaterih Google API in storitev, namenjenih izklju\u010dno za notranjo uporabo. Zlasti do google_default_client_id in google_default_client_secret. Zaradi tega imajo uporabniki mo\u017enost dostopa do svojih podatkov Chrome Sync (kot so zaznamki) ne le v Chromu, temve\u010d tudi v tretjih brskalnikih, temelje\u010dih na kodi Chromium. Google, v prizadevanju za pove\u010danje varnosti, zapira dostop tretjim programski opremi do zgoraj omenjenih API. To odlo\u010ditev za\u010dne veljati 15. marca tega leta.<\/p>\n

<\/p>\n

Zaradi tega so mnogi distribucijski sistemi dodatno dodati korenski certifikat, ki se uporablja za prestrezanje, na seznam preklicanih certifikatov (OneCRL), kot je nedavno storila Mozilla<\/a> pridobili mo\u017enost popolne opustitve Chromiuma v svojih dostavah. Med njimi: Arch Linux, Fedora, Debian, Slackware, OpenSUSE in drugi.<\/strong><\/p>\n

<\/noindex><\/noindex><\/p>\n

Vir:<\/p>\n

Pozdravljen, razvijalec Chromiuma,<\/p>\n

Pisem vam, da vas obvestimo, da bodo od 15. marca 2021 kon\u010dni uporabniki derivatov Chromium in Chromium OS, ki v svoji konfiguraciji gradnje uporabljajo google_default_client_id in google_default_client_secret, prenehali lahko prijavljati v svoje Google ra\u010dune.
\nKaj moram vedeti?<\/p>\n

Med nedavnim auditom smo odkrili, da nekateri brskalniki, ki temeljijo na Chromiumu in jih upravljajo tretje osebe, vsebujejo klju\u010de, ki omogo\u010dajo dostop do Google API in storitev, ki so rezervirane izklju\u010dno za Google. Chrome Sync je najbolj opazen med temi API. Zlasti do google_default_client_id in google_default_client_secret.<\/p>\n

V praksi to pomeni, da bo uporabnik lahko dostopal do svojih osebnih podatkov Chrome Sync (kot so zaznamki) ne samo z Chromom, temve\u010d tudi z ne-Google brskalnikom, temelje\u010dim na Chromiumu. Upo\u0161tevajte, da bodo uporabniki lahko dostopali samo do svojih lastnih podatkov Chrome Sync, in le majhen dele\u017e uporabnikov brskalnikov, ki temeljijo na Chromiumu, je bil prizadet. Nimamo razloga verjeti, da se podatki uporabnikov zlorabljajo ali da jih dostopa kdo drug kot sami uporabniki.<\/p>\n

Kot del prizadevanj Google za izbolj\u0161anje varnosti uporabni\u0161kih podatkov bomo od dne 15. marca 2021 ukinili dostop derivatom Chromiuma in Chromium OS, ki so konstruirali google_default_client_id in google_default_client_secret do API, ki so ekskluzivni za Google. Navodila za dobavitelje izdelkov, ki izhajajo iz Chromiuma, so na voljo na wiki str\u00e1nki Chromium.
\nKaj to pomeni za moje uporabnike?<\/p>\n

Users of products that are incorrectly using these APIs will notice that they won’t be able to log into their Google Accounts in those products anymore.<\/p>\n

Za uporabnike, ki so dostopali do Google funkcij (kot je Chrome Sync) preko tretjega brskalnika, temelje\u010dega na Chromiumu, bodo njihovi podatki \u0161e naprej dostopni v njihovem Google ra\u010dunu, podatki, ki so jih shranili lokalno, pa bodo \u0161e naprej dostopni lokalno.<\/p>\n

Kot vedno lahko uporabniki ogledajo in upravljajo svoje podatke preko Google Chroma, Chrome OS, in\/ali na strani Moje Google dejavnosti, prav tako pa lahko prenesejo svoje podatke s strani Google Takeout, in\/ali jih izbri\u0161ejo s te strani.
\nKaj moram storiti?<\/p>\n

Da bi se izognili prekinjanju, sledite navodilom za konfiguracijo in gradnjo derivatov Chromiuma v wiki strani Chromium (povezava je navedena zgoraj).<\/p>\n

Mo\u017eni na\u010dini za izvajanje tega so:<\/p>\n

Odstranitev google_default_client_id in google_default_client_secret iz va\u0161e konfiguracije gradnje.
\nPassing the —allow-browser-signin=false flag at startup.<\/p>\n

Va\u0161i projekti, ki bi jih ta sprememba lahko prizadela, so navedeni spodaj:<\/p>\n

Arch Linux Chromium (arch-linux-chromium)<\/p>\n

If you have any questions or require assistance, please contact embedd…@chromium.org.<\/p>\n

S spo\u0161tovanjem,<\/p>\n

Ekipa Google Chrome<\/p>\n

Izvor: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0445\u043e\u0434\u0435 \u0430\u0443\u0434\u0438\u0442\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043d\u0430 \u043a\u043e\u0434\u0435 Chromium, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043a\u043b\u044e\u0447\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c API \u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c Google, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u043c \u0434\u043b\u044f \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f. \u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u043a google_default_client_id \u0438 \u043a google_default_client_secret. \u0411\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u044d\u0442\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0438\u043c\u0435\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0432\u043e\u0438\u043c \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c Chrome Sync \u0434\u0430\u043d\u043d\u044b\u043c (\u0442\u0430\u043a\u0438\u043c, \u043a\u0430\u043a \u0437\u0430\u043a\u043b\u0430\u0434\u043a\u0438) \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-98915","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google zapira dostop tretjih oseb do Chrome Sync API | ProHoster","description":"Med revizijo je podjetje Google odkrilo, da nekateri tretji izdelki, ki temeljijo na kodi Chromium, uporabljajo klju\u010de, ki omogo\u010dajo dostop do nekaterih API-jev in storitev Google, namenjenih za.","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/news\/google-zakryvaet-storonnij-dostup-k-chrome-sync-api","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u0437\u0430\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a Chrome Sync API | ProHoster","og:description":"\u0412 \u0445\u043e\u0434\u0435 \u0430\u0443\u0434\u0438\u0442\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430, \u0447\u0442\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0435 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u044b, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u043d\u0430 \u043a\u043e\u0434\u0435 Chromium, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043a\u043b\u044e\u0447\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u043c API \u0438 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c Google, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u043c \u0434\u043b\u044f.","og:url":"https:\/\/prohoster.info\/sl\/blog\/news\/google-zakryvaet-storonnij-dostup-k-chrome-sync-api","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-01-22T18:42:28+00:00","article:modified_time":"2021-01-22T18:42:28+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"98915","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 09:57:26","updated":"2022-09-28 13:25:58","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/98915","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=98915"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/98915\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=98915"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=98915"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=98915"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}