Zhvilluesit e platform\u00ebs s\u00eb komunikimeve t\u00eb decentralizuara Matrix paralajm\u00ebruan p\u00ebr identifikimin e vulnerabilities kritike n\u00eb bibliotekat matrix-js-sdk, matrix-ios-sdk dhe matrix-android-sdk2, t\u00eb cilat lejojn\u00eb administrator\u00ebt e server\u00ebve t\u00eb t\u00ebrheqin v\u00ebmendjen p\u00ebr p\u00ebrdorues t\u00eb tjer\u00eb dhe t\u00eb lexojn\u00eb mesazhe n\u00eb biseda me enkripsion end-to-end (E2EE). K\u00ebto vulnerabilitete jan\u00eb t\u00eb shkaktuara nga gabimet n\u00eb realizimet e ve\u00e7anta t\u00eb protokollit Matrix dhe nuk jan\u00eb probleme t\u00eb protokollit vet\u00eb. Aktualisht, projekti ka l\u00ebshuar p\u00ebrdit\u00ebsime p\u00ebr SDK-t\u00eb problematike dhe disa aplikacione klient\u00ebsh t\u00eb nd\u00ebrtuara mbi to. <\/p>\n
P\u00ebr nj\u00eb sulm t\u00eb suksessh\u00ebm k\u00ebrkohet akses n\u00eb serverin e kontrolluar nga sulmuesi server<\/a> (homeserver \u2014 server p\u00ebr ruajtjen e historis\u00eb dhe llogarive t\u00eb klient\u00ebve). P\u00ebrdorimi i enkriptimit t\u00eb plot\u00eb nga ana e klientit nuk i lejon administratorit server<\/a> t\u00eb nd\u00ebrhyjn\u00eb n\u00eb shk\u00ebmbimin e mesazheve, por vulnerabilitetet e identifikuara ofrojn\u00eb mund\u00ebsi p\u00ebr t\u00eb anashkaluar k\u00ebt\u00eb mbrojtje. Problemet prek\u00ebn klientin kryesor t\u00eb Matrix-it, Element (dhe m\u00eb par\u00eb Riot) p\u00ebr Web, sisteme desktop, iOS dhe Android, si dhe aplikacionet klient\u00eb t\u00eb pal\u00ebve t\u00eb treta, duke p\u00ebrfshir\u00eb Cinny, Beeper, SchildiChat, Circuli dhe Synod.im. Vulnerabilitetet nuk shfaqen n\u00eb bibliotekat matrix-rust-sdk, hydrogen-sdk, Matrix Dart SDK, mautrix-python, mautrix-go dhe matrix-nio, si dhe n\u00eb aplikacionet Hydrogen, ElementX, Nheko, FluffyChat, Syphon, Timmy, Gomuks dhe Pantalaimon. <\/p>\n Identifikohen tre skenar\u00eb kryesor\u00eb t\u00eb sulmit: <\/p>\n K\u00ebrkuesit q\u00eb zbuluan dob\u00ebsin\u00eb gjithashtu demonstruan sulme q\u00eb \u00e7ojn\u00eb n\u00eb shtimin e nj\u00eb p\u00ebrdoruesi t\u00eb jasht\u00ebm n\u00eb bised\u00eb ose lidhjen e nj\u00eb pajisjeje t\u00eb jashtme me p\u00ebrdoruesin. Sulmet bazohen n\u00eb faktin se mesazhet sh\u00ebrbyese, t\u00eb p\u00ebrdorura p\u00ebr t\u00eb shtuar p\u00ebrdoruesit n\u00eb bised\u00eb, nuk lidhen me \u00e7el\u00ebsat e krijuesit t\u00eb bised\u00ebs dhe mund t\u00eb gjenerohen nga administratori i serverit. Zhvilluesit nga projekti Matrix i klasifikuan k\u00ebto dobesi si t\u00eb par\u00ebnd\u00ebsishme, pasi manipulime t\u00eb tilla nuk do t\u00eb mbeten t\u00eb paevituara \u2014 n\u00eb rastin e z\u00ebvend\u00ebsimit t\u00eb p\u00ebrdoruesit, ai do t\u00eb shfaqet n\u00eb list\u00ebn e p\u00ebrdoruesve t\u00eb bised\u00ebs, dhe p\u00ebr nj\u00eb pajisje t\u00eb re do t\u00eb jepet nj\u00eb paralajm\u00ebrim, nd\u00ebrsa pajisja do t\u00eb jet\u00eb e sh\u00ebnuar si e pa verifikuar (n\u00eb k\u00ebt\u00eb rast, menj\u00ebher\u00eb pas shtimit t\u00eb pajisjes s\u00eb z\u00ebvend\u00ebsuar, do t\u00eb fillojn\u00eb t\u00eb transmetohen \u00e7el\u00ebsat e zakonsh\u00ebm, t\u00eb nevojsh\u00ebm p\u00ebr dekriptimin e mesazheve). \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u0435\u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439 Matrix \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430\u0445 matrix-js-sdk, matrix-ios-sdk \u0438 matrix-android-sdk2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0432 \u0447\u0430\u0442\u0430\u0445 \u0441\u043e \u0441\u043a\u0432\u043e\u0437\u043d\u044b\u043c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c (E2EE). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0437\u0432\u0430\u043d\u044b \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 Matrix \u0438 \u043d\u0435 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u0441\u0430\u043c\u043e\u0433\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f, \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u0445 SDK […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105214","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vulnerabilitete kritike q\u00eb kompromitojn\u00eb enkripsionin end-to-end n\u00eb shum\u00eb klient\u00eb t\u00eb Matrix | ProHoster","description":"Zhvilluesit e platform\u00ebs s\u00eb komunikimeve t\u00eb decentralizuara Matrix paralajm\u00ebruan p\u00ebr identifikimin e vulnerabilities kritike n\u00eb bibliotekat matrix-js-sdk, matrix-ios-sdk dhe matrix-android-sdk2, t\u00eb cilat lejojn\u00eb administrator\u00ebt e server\u00ebve t\u00eb t\u00ebrheqin v\u00ebmendjen p\u00ebr p\u00ebrdorues t\u00eb tjer\u00eb dhe t\u00eb lexojn\u00eb mesazhe n\u00eb biseda me enkripsion end-to-end (E2EE). K\u00ebto vulnerabilitete jan\u00eb t\u00eb shkaktuara nga gabimet n\u00eb realizimet e ve\u00e7anta t\u00eb protokollit Matrix dhe nuk jan\u00eb probleme t\u00eb protokollit vet\u00eb. Aktualisht, projekti ka l\u00ebshuar p\u00ebrdit\u00ebsime p\u00ebr SDK-t\u00eb problematike.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/kriticheskie-uyazvimosti-komprometiruyushhie-skvoznoe-shifrovanie-vo-mnogih-matrix-klientah","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0435 \u0441\u043a\u0432\u043e\u0437\u043d\u043e\u0435 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0432\u043e \u043c\u043d\u043e\u0433\u0438\u0445 Matrix-\u043a\u043b\u0438\u0435\u043d\u0442\u0430\u0445 | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u0435\u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u0439 Matrix \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0438 \u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0430\u0445 matrix-js-sdk, matrix-ios-sdk \u0438 matrix-android-sdk2, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u0447\u0438\u0442\u0430\u0442\u044c \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f \u0432 \u0447\u0430\u0442\u0430\u0445 \u0441\u043e \u0441\u043a\u0432\u043e\u0437\u043d\u044b\u043c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c (E2EE). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0437\u0432\u0430\u043d\u044b \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0445 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 Matrix \u0438 \u043d\u0435 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c\u0438 \u0441\u0430\u043c\u043e\u0433\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f, \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u0445 SDK","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/kriticheskie-uyazvimosti-komprometiruyushhie-skvoznoe-shifrovanie-vo-mnogih-matrix-klientah","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-09-29T13:36:37+00:00","article:modified_time":"2022-09-29T13:36:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"105214","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-09 21:42:04","updated":"2026-02-22 15:31:01","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/105214","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=105214"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/105214\/revisions"}],"predecessor-version":[{"id":162385,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/105214\/revisions\/162385"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=105214"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=105214"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=105214"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}\n
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"