Svondo rapfuura, vagadziri veanozivikanwa password maneja LastPass vakaburitsa chigadziriso chinogadzirisa kusagadzikana kunogona kutungamira mukudonha kwe data remushandisi. Nyaya yakaziviswa mushure mekunge yagadziriswa uye vashandisi veLastPass vakarairwa kuti vagadzirise password yavo maneja kune yazvino vhezheni.
Tiri kutaura nezvekusagadzikana kunogona kushandiswa nevanorwisa kuba data rakaiswa nemushandisi pawebhusaiti yekupedzisira yakashanyirwa. Dambudziko rakaonekwa mwedzi wapfuura naTavis Ormandy, nhengo yeGoogle Project Zero chirongwa, chinoitisa tsvakiridzo mumunda wekuchengetedza ruzivo.
LastPass parizvino ndiyo inonyanya kufarirwa password maneja. Vagadziri vakagadzirisa njodzi yakambotaurwa muvhezheni 4.33.0, iyo yakave kuwanikwa pachena munaGunyana 12. Kana vashandisi vasingashandise LastPass's otomatiki yekuvandudza chimiro, vanorairwa kuti vatore mawoko iyo yazvino vhezheni yesoftware. Izvi zvinoda kuitwa nekukurumidza sezvinobvira, nekuti mushure mekugadzirisa kusagadzikana, vaongorori vakaburitsa ruzivo rwayo, rwunogona kushandiswa nevanorwisa kuba mapassword kubva kumidziyo iyo application isati yagadziridzwa.
Kushandiswa kwekusagadzikana kunosanganisira kuuraya yakashata JavaScript kodhi pane yakanangwa mudziyo, pasina kupindirana kwemushandisi. Vanorwisa vanogona kukwezva vashandisi kunzvimbo dzine hutsinye kuitira kuti vabire zvitupa zvakachengetwa mune password maneja. Tavis Ormandy anotenda kuti kushandisa kusazvibata kuri nyore, sezvo vanorwisa vanogona kuvanza chinongedzo chine hutsinye, vachinyengedza mushandisi kudzvanya pairi kuti aba magwaro akaiswa panzvimbo yapfuura.
LastPass vamiririri havatauri nezvemamiriro ezvinhu aya. Parizvino, hapana nyaya dzinozivikanwa apo kusadzikama uku kwakashandiswa nevanorwisa.
Source: 3dnews.ru