Cherechedza mushanduri: kuti zvive nyore kuvaverengi, mazuva anopiwa muMoscow nguva
Isu nguva pfupi yadarika takapotsa kupera kwechimwe chezvitupa zvinoshandiswa kusaina maadd-ons. Izvi zvakaita kuti ma-add-ons avharwe kune vashandisi. Zvino sezvo dambudziko rakanyanya kugadziriswa, ndinoda kugovera ruzivo rwezvakaitika uye basa rakaitwa.
Background: akawedzera uye siginicha
Akaiswa ma-add-ons anofanira kuva nawo digital siginecha, iyo inodzivirira vashandisi kubva kune zvakashata zvekuwedzera uye inoda kushoma kuongororwa kweadd-ons nevashandi veMozilla. Takaunza chinodiwa ichi muna 2015 nekuti taisangana nazvo matambudziko akakomba nemaadd-ons ane hutsinye.
Mashandiro ayo: Yese kopi yeFirefox ine "midzi chitupa". Kiyi ye "mudzi" uyu inochengetwa mukati Hardware Security Module (HSM)pasina network. Makore mashoma ega ega, "chitupa chepakati" chitsva chinosainwa nekiyi iyi, iyo inoshandiswa pakusaina ma-add-ons. Kana mugadziri achiendesa yekuwedzera, isu tinogadzira yechinguvana "yekupedzisira chitupa" uye tichiisaina tichishandisa chepakati chitupa. Iyo yekuwedzera pachayo inozosainwa nechitupa chekupedzisira. Schematically zvinoita seizvi.
Ndokumbira utarise kuti chitupa chega chega chine "chidzidzo" (kwaakapihwa chitupa) uye "anoburitsa" (akapa chitupa). Panyaya yechitupa chemidzi, "subject" = "exsuer", asi kune zvimwe zvitupa, mupi wechitupa ndiye musoro wegwaro remubereki iro rinosainwa naro.
Chinhu chakakosha: imwe neimwe yekuwedzera inosainwa nechitupa chekupedzisira, asi kanenge nguva dzose izvi zvitupa zvinosainwa nechitupa chimwe chepakati.
Chiziviso chemunyori: Kusarudzika ndekwechinyakare mawedzero. Panguva iyoyo, zvitupa zvakasiyana-siyana zvepakati zvakashandiswa.
Ichi chitupa chepakati chakakonzera matambudziko: chitupa chega chega chinoshanda kune imwe nguva. Nguva iyi isati yasvika kana yapera, chitupa hachina basa uye bhurawuza harizoshandisa maadd-on akasainwa nechitupa ichi. Nehurombo, chitupa chepakati chakapera muna Chivabvu 4 na4 am.
Migumisiro yacho haina kuoneka pakarepo. Firefox haitarise masiginecha eakaisirwa ma-add-on nguva dzose, asi kanenge kamwe pamaawa makumi maviri nemana, uye nguva yekuongorora ndeye yega kune yega yega mushandisi. Somugumisiro, vamwe vanhu vakangoerekana vasangana nematambudziko, asi vamwe vakazosangana nematambudziko gare gare. Isu takatanga taziva nezve dambudziko panguva iyo chitupa chakapera uye takabva tangotanga kutsvaga mhinduro.
Kuderedza kukanganisa
Patakangoziva zvakanga zvaitika, takaedza kuita kuti zvinhu zvisanyanya kuipa.
Chekutanga, vakarega kubvuma uye kusaina zvinyorwa zvitsva. Hapana chikonzero chekushandisa chitupa chakapera basa pane izvi. Ndichitarira shure, ndingati tingadai takasiya zvinhu zvose sezvazvaiva. Takatangazve kugamuchira ma supplements.
Chechipiri, vakabva vatumira gadziriso yaidzivirira kusaina kutariswa zuva nezuva. Nekudaro, isu takachengeta avo vashandisi vane browser yanga isati yawana nguva yekutarisa ma-add-ons mumaawa makumi maviri nemana apfuura. Iyi gadziriso ikozvino yakabviswa uye haichadiwi.
Parallel operation
Mune dzidziso, mhinduro yedambudziko inotaridzika yakapusa: gadzira nyowani inoshanda yepakati chitupa uye isainazve yega yega yekuwedzera. Zvinosuruvarisa izvi hazvishande:
- hatigone kukurumidza kusainazve zviuru gumi nezvishanu zvekuwedzera kamwechete, sisitimu haina kugadzirirwa mutoro wakadaro
- Mushure mekunge tasaina zvakawedzerwa, shanduro dzakagadziridzwa dzinoda kuendeswa kune vashandisi. Mazhinji ekuwedzera anoiswa kubva kuMozilla maseva, saka Firefox ichawana zvigadziriso mukati memaawa makumi maviri nemana anotevera, asi vamwe vanogadzira vanogovera ma-add-on akasainwa kuburikidza nematanho echitatu-bato, saka vashandisi vaizofanira kugadzirisa ma-add-ons pamaoko.
Pane kudaro, takaedza kugadzira gadziriso yaizosvika vashandisi vese vasingade zvakawanda kana kusaita chiito kwavari.
Nekukurumidza takasvika kune maviri makuru mazano, atakashandisa mukufanana:
- Gadziridza Firefox kuti uchinje nguva yechokwadi yechitupa. Izvi zvichaita kuti zviripo ma-add-ons ashande zvemashiripiti zvakare, asi zvinoda kusunungura uye kutumira chivakwa chitsva cheFirefox.
- Gadzira chitupa chakakodzera uye neimwe nzira ita kuti Firefox igamuchire panzvimbo peiyo iripo iyo yapera
Isu takasarudza kushandisa yekutanga sarudzo kutanga, iyo yaitaridzika chaizvo inoshanda. Pakupera kwezuva, vakasunungura chechipiri chekugadzirisa (chitupa chitsva), chatichataura nezvazvo gare gare.
Kutsiva chitupa
Sezvandambotaura pamusoro apa, zvaidiwa:
- gadzira chitupa chitsva
- kuiisa kure muFirefox
Kuti tinzwisise kuti sei izvi zvichishanda, ngatitarisei zvakanyanya maitiro ekuwedzera-on verification. Iyo yekuwedzera pachayo inouya seti yemafaira, kusanganisira ketani yezvitupa zvinoshandiswa kusaina. Nekuda kweizvozvo, iyo yekuwedzera inogona kusimbiswa kana browser ichiziva midzi chitupa, iyo yakavakirwa muFirefox panguva yekuvaka. Nekudaro, sezvatinotoziva, chitupa chepakati chapera, saka hazvigoneke kuratidza yekuwedzera.
Kana Firefox ichiedza kuona yekuwedzera, haina kugumira pakushandisa zvitupa zviri mukati meiyo yekuwedzera pachayo. Pane kudaro, bhurawuza rinoedza kugadzira cheni chaiyo yechitupa, kutanga nechitupa chekupedzisira uye kuenderera kusvika yasvika pamudzi. Padanho rekutanga, tinotanga nechitupa chekupedzisira tozowana chitupa chine musoro wekupa chitupa chekupedzisira (kureva, chepakati chitupa). Kazhinji ichi chitupa chepakati chinopihwa neyekuwedzera, asi chero chitupa kubva mubhurawuza chengetedzo chinogonawo kushanda sechitupa chepakati. Kana isu tichigona kuwedzera kure chitupa chitsva chinoshanda kuchitoro chezvitupa, Firefox inoedza kuishandisa. Mamiriro ezvinhu asati uye mushure mekuisa chitupa chitsva.
Mushure mekuisa chitupa chitsva, Firefox ichave nesarudzo mbiri paunenge uchisimbisa cheni yechitupa: shandisa chitupa chekare chisingashande (chisingashande) kana chitupa chitsva chinoshanda (chichashanda). Izvo zvakakosha kuti chitupa chitsva chine zita rezvidzidzo zvakafanana uye kiyi yeruzhinji sechitupa chekare, saka siginecha yayo pachitupa chekupedzisira ichave inoshanda. Firefox yakangwara zvakakwana kuti iedze zvese zviri zviviri kusvika yawana imwe inoshanda, saka ma-add-on anoedzwa zvakare. Ziva kuti iyi ndiyo pfungwa imwechete yatinoshandisa kusimbisa zvitupa zveTLS.
Chiziviso cheMunyori: Vaverengi vanoziva nezveWebPKI vanozoona kuti zvitupa-zvitupa zvinoshanda nenzira imwecheteyo.
Chinhu chikuru pamusoro pekugadzirisa uku ndechekuti hazvidi kuti iwe usaine zvekare ma-add-ons. Kana bhurawuza richingogamuchira chitupa chitsva, ese ma-add-ons anozoshanda zvakare. Dambudziko rasara ndere kuendesa chitupa chitsva kune vashandisi (otomatiki uye kure), pamwe nekuwana Firefox kuti itarise zvakare akaremara ma-add-ons.
Normandy uye hurongwa hwekutsvagisa
Zvinotoshamisa ndezvokuti, dambudziko iri rinogadziriswa ne-add-on inokosha inonzi "system". Kuti tiite tsvagiridzo, takagadzira sisitimu inodaidzwa kuti Normandy inoendesa tsvakiridzo kuvashandisi. Zvidzidzo izvi zvinongoitwa otomatiki mubrowser, uye zvine mukana wekuwana maAPI emukati eFirefox. Tsvagiridzo inogona kuwedzera zvitupa zvitsva kuchitoro chezvitupa.
Chiziviso chemunyori: Hatisi kuwedzera chitupa chine chero ropafadzo dzakakosha; inosainwa nemudzi wetiti, saka Firefox inovimba nayo. Isu tinongowedzera kune dziva rezvitupa zvinogona kushandiswa nebrowser.
Saka mhinduro ndeyekugadzira chidzidzo:
- kuisa chitupa chitsva chatakagadzira vashandisi
- kumanikidza bhurawuza kuti itarise zvakare akaremara ma-add-on kuti ashande zvakare
"Asi mira," iwe unoti, "add-ons haashande, ndingatangisa sei system yekuwedzera?" Ngatisainei nechitupa chitsva!
Kuisa zvese pamwe chete ... nei zvichitora nguva yakareba kudaro?
Saka, chirongwa: buritsa chitupa chitsva kutsiva chekare, gadzira system yekuwedzera uye uiise kune vashandisi kuburikidza neNormandy. Matambudziko, sezvandakataura, akatanga musi waMay 4 na4:00, uye atova na12:44 yezuva rimwe chetero, asingasviki maawa 9 gare gare, takatumira gadziridzo kuNormandy. Zvakatora mamwe maawa 6-12 kuti isvike kune vese vashandisi. Hazvina kushata zvachose, asi vanhu pa Twitter varikubvunza kuti sei tisina kuita nekukurumidza.
Kutanga, zvakatora nguva kuburitsa chitupa chitsva chepakati. Sezvandambotaura pamusoro, kiyi kune midzi chitupa inochengeterwa kunze kwenyika mune hardware kuchengetedza module. Izvi zvakanaka kubva pakuona kwekuchengetedza, sezvo mudzi uchishandiswa kashoma uye unofanirwa kuchengetedzwa zvakavimbika, asi zvinokanganisa zvishoma kana iwe uchida kukurumidza kusaina chitupa chitsva. Mumwe wemainjiniya edu aifanira kuenda kunzvimbo yekuchengetedza yeHSM. Ipapo kwakava nokuedza kusingabudiriri kupa chitupa chakarurama, uye kuedza kumwe nokumwe kunodhura awa imwe kana maviri yakapedzwa mukuedzwa.
Chechipiri, kuvandudzwa kwegadziriro yekuwedzera kwakatora nguva. Conceptually iri nyore kwazvo, asi kunyangwe zvirongwa zviri nyore zvinoda kutarisirwa. Taida kuona kuti taisaita kuti zvinhu zvinyanye kuipa. Tsvagiridzo inoda kuongororwa isati yatumirwa kune vashandisi. Mukuwedzera, iyo yekuwedzera inofanira kusainwa, asi yedu yekuwedzera-yekusaina system yakavharwa, saka taifanira kutsvaga workaround.
Pakupedzisira, patakanga tava netsvagurudzo yakagadzirira kuendeswa, kutumirwa kwakatora nguva. Bhurawuza rinotarisa kuti Normandy inogadziridza maawa matanhatu ega ega. Haasi ese makomputa anogara ari uye akabatana neInternet, saka zvinotora nguva kuti kugadzirisa kupararira kune vashandisi.
Matanho ekupedzisira
Tsvagiridzo inofanirwa kugadzirisa dambudziko kune vazhinji vashandisi, asi haiwanikwe kune wese munhu. Vamwe vashandisi vanoda nzira yakakosha:
- vashandisi vakaremara kutsvagisa kana telemetry
- vashandisi veiyo Android vhezheni (Fennec), uko kutsvagisa kusingatsigirwe zvachose
- vashandisi vetsika inovaka yeFirefox ESR mumabhizinesi umo telemetry isingagone kugoneswa
- vashandisi vakagara kuseri kweMitM proxies, sezvo yedu yekuwedzera-on yekuisa sisitimu inoshandisa kiyi pinning, isingashande nema proxies akadaro.
- vashandisi venhaka shanduro dzeFirefox dzisingatsigire tsvakiridzo
Hatina chatingaite nezve chikamu chekupedzisira chevashandisi - vanofanirwa kuramba vachivandudza kune itsva Firefox vhezheni, nekuti vechinyakare vane zvakakomba zvisina kurongeka. Isu tinoziva kuti vamwe vanhu vanogara pamavhezheni ekare eFirefox nekuti ivo vanoda kumhanyisa ekare ma-add-ons, asi mazhinji ekare ekuwedzera akatoiswa kune matsva mavhezheni ebrowser. Kune vamwe vashandisi, isu takagadzira chigamba chinozoisa chitupa chitsva. Yakaburitswa sebugfix kuburitswa (chinyorwa chemuturikiri: Firefox 66.0.5), kuti vanhu vazviwane - vangangove vatozviwana - kuburikidza neyenguva dzose yekuvandudza chiteshi. Kana uri kushandisa tsika yekuvaka yeFirefox ESR, ndapota taura nemuchengeti wako.
Tinonzwisisa kuti izvi hazvina kunaka. Mune zvimwe zviitiko, vashandisi vakarasikirwa neadd-on data (semuenzaniso, yekuwedzera-data Zvakawanda-Akaundi Midziyo).
Iyi yedivi mhedzisiro yaisagona kudzivirirwa, asi isu tinotenda kuti munguva pfupi takasarudza mhinduro yakanaka kune vazhinji vashandisi. Mukufamba kwenguva, tichatsvaga dzimwe nzira dzepamusoro dzekuvaka.
Zvidzidzo
Chekutanga, timu yedu yakaita basa rinoshamisa kugadzira uye kutumira kugadzirisa mukati meawa isingasviki gumi nemaviri mushure mekunge nyaya yawanikwa. Somunhu aipinda misangano, ndinogona kutaura kuti mumamiriro ezvinhu aya akaoma vanhu vakashanda nesimba uye nguva shomanene yakapambadzwa.
Sezviri pachena, hapana chimwe cheizvi chaifanira kunge chakaitika zvachose. Zviri pachena kuti zvakakosha kugadzirisa maitiro edu kuderedza mukana wezviitiko zvakadaro uye kuita kuti kugadzirisa kuve nyore.
Svondo rinouya tichaburitsa zviri pamutemo post-mortem uye runyorwa rwekuchinja kwatinoda kuita. Parizvino, ndichataura pfungwa dzangu. Chekutanga, panofanirwa kuve neimwe nzira iri nani yekutarisa mamiriro eicho chingave nguva bhomba. Tinofanira kuva nechokwadi chokuti hatizviwani timene tiri mumamiriro ezvinhu umo mumwe wavo akashanda kamwe kamwe. Isu tichiri kugadzira iwo mameseji, asi pane zvishoma, zvinodikanwa kuti tifunge nezvese zvinhu zvakadaro.
Chechipiri, isu tinoda michina yekukurumidza kuendesa zvigadziriso kune vashandisi, kunyangwe kana-kunyanya kana-zvese zvatadza. Zvaive zvakanaka kuti isu takakwanisa kushandisa iyo "tsvakurudzo" system, asi chishandiso chisina kukwana uye chine zvimwe zvisingadiwe mhedzisiro. Kunyanya, isu tinoziva kuti vashandisi vazhinji vane otomatiki zvigadziriso zvakabatidzwa, asi vangade kusatora chikamu mukutsvagisa (Ndinobvuma, ndakavadzima futi!). Panguva imwecheteyo, isu tinoda nzira yekutumira zvigadziriso kune vashandisi, asi chero iyo yemukati tekinoroji yekumisikidza, vashandisi vanofanirwa kunyoresa kune zvigadziriso (kusanganisira zvinopisa zvinogadzirisa) asi vobuda pane zvese zvimwe. Pamusoro pezvo, chiteshi chekuvandudza chinofanira kunge chichiteerera kupfuura zvachiri ikozvino. Kunyangwe muna Chivabvu 6, pakanga pachine vashandisi vasina kutora mukana wekugadzirisa kana vhezheni itsva. Dambudziko iri rakatogadziriswa, asi zvakaitika zvakaratidza kukosha kwaro.
Chekupedzisira, isu tichanyatso tarisisa iyo yekuwedzera-yekuchengetedza dhizaini kuti ive nechokwadi kuti inopa iyo chaiyo nhanho yekuchengetedza ine njodzi shoma yekutyora chero chinhu.
Svondo rinouya tichatarisa mhedzisiro yekunyatsoongorora zvakaitika, asi panguva ino ndichafara kupindura mibvunzo neemail: [email inodzivirirwa]
Source: linux.org.ru