Iyo HackerOne chikuva, iyo inobvumira vaongorori vekuchengetedza kuzivisa vanogadzira nezve kuziva kusagona uye kugamuchira mibairo yeizvi, yakagamuchirwa. nezve hacking yako. Mumwe wevatsvakurudzi akakwanisa kuwana nhoroondo yemuongorori wezvokuchengetedza paHackerOne, ane simba rekuona zvinhu zvakasarudzwa, kusanganisira ruzivo rwekusagadzikana kusati kwagadziriswa. Kubva pakavambwa puratifomu iyi, HackerOne yakabhadhara vaongorori mari inosvika mamirioni makumi maviri nematatu emadhora kuti vaone kusasimba muzvigadzirwa kubva kune vanopfuura zana vatengi, kusanganisira Twitter, Facebook, Google, Apple, Microsoft, Slack, Pentagon, uye US Navy.
Zvinokosha kuziva kuti kutorwa kweakaundi kwakagoneka nekuda kwekukanganisa kwevanhu. Mumwe wevaongorori akaendesa chikumbiro chekuongorora nezve njodzi inogona kuitika muHackerOne. Munguva yekuongorora kwechikumbiro, muongorori weHackerOne akaedza kudzokorora nzira yakarongwa yekubira, asi dambudziko harina kudzokororwa, uye mhinduro yakatumirwa kumunyori wechikumbiro ichikumbira rumwe ruzivo. Panguva imwecheteyo, muongorori haana kuona kuti, pamwe chete nemigumisiro yecheki isina kubudirira, akatumira asingazivi zviri mukati mechikamu chake Cookie. Kunyanya, panguva yenhaurirano, muongorori akapa muenzaniso wechikumbiro cheHTTP chakaitwa ne curl utility, kusanganisira misoro yeHTTP, kubva kwaakakanganwa kujekesa zviri mukati mechikamu Cookie.
Mutsvagiri akacherekedza utariri uhwu uye akakwanisa kuwana mukana weakaundi yakasarudzika pa hackerone.com nekungoisa iyo yakacherechedzwa kukosha kweCookie pasina kuenda kuburikidza neakawanda-chinhu chechokwadi chinoshandiswa musevhisi. Kurwiswa kwacho kwakagoneka nekuti hackerone.com haina kusunga chikamu kuIP yemushandisi kana browser. Iyo inonetsa chikamu ID yakabviswa maawa maviri mushure mekuburitswa kweshumo. Zvakasarudzwa kubhadhara muongorori 20 zviuru zvemadhora ekuzivisa nezvedambudziko.
HackerOne yakatanga ongororo yekuongorora zvingangoitika zveCookie kudonha kwakafanana munguva yakapfuura uye kuongorora kubvinza kungangove kweruzivo rwevaridzi nezve matambudziko evatengi vebasa. Ongororo iyi haina kuburitsa humbowo hwekuvuza munguva yakapfuura uye yakaona kuti muongorori airatidza dambudziko aigona kuwana ruzivo nezve angangoita 5% yezvirongwa zvese zvakaunzwa musevhisi izvo zvaiwanikwa nemuongorori ane kiyi yechikamu yakashandiswa.
Kuti tidzivirire pakurwiswa kwakafanana mune ramangwana, takaita kusungirirwa kwesesheni kiyi kuIP kero uye kusefa kwesesheni makiyi uye echokwadi tokeni mumashoko. Mune ramangwana, vanoronga kutsiva kusungirirwa kuIP nekusunga kumidziyo yemushandisi, sezvo kusunga kuIP kusingaite kune vashandisi vane kero dzakapihwa zvine simba. Izvo zvakare zvakasarudzwa kuwedzera iyo log system neruzivo nezve mushandisi kuwana data uye kuita modhi yekuwana granular yevanoongorora kune data revatengi.
Source: opennet.ru