{"id":105525,"date":"2022-11-11T21:36:51","date_gmt":"2022-11-11T19:36:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-android-pozvolyayushhaya-obojti-blokirovku-ekrana"},"modified":"2022-11-11T21:36:51","modified_gmt":"2022-11-11T19:36:51","slug":"uyazvimost-v-android-pozvolyayushhaya-obojti-blokirovku-ekrana","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-v-android-pozvolyayushhaya-obojti-blokirovku-ekrana","title":{"rendered":"Mungesa e siguris\u00eb n\u00eb Android, q\u00eb lejon kalimin p\u00ebrmes bllokimit t\u00eb ekranit","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb platform\u00ebn Android \u00ebsht\u00eb gjetur nj\u00eb vulnerabilitet (CVE-2022-20465) q\u00eb lejon \u00e7aktivizimin e bllokimit t\u00eb ekranit p\u00ebrmes ndryshimit t\u00eb kart\u00ebs SIM dhe futjes s\u00eb kodit PUK. Mund\u00ebsia p\u00ebr t\u00eb \u00e7aktivizuar bllokimin \u00ebsht\u00eb demonstruar n\u00eb pajisjet Google Pixel, por duke qen\u00eb se rregullimi prek baz\u00ebn kryesore t\u00eb kodit t\u00eb Android, \u00ebsht\u00eb e mundur q\u00eb problemi t\u00eb ndodhi edhe n\u00eb firmware nga prodhues t\u00eb tjer\u00eb. Problemi \u00ebsht\u00eb zgjidhur n\u00eb paket\u00ebn e rregullimeve t\u00eb problemeve t\u00eb siguris\u00eb p\u00ebr muajin n\u00ebntor p\u00ebr Android. K\u00ebrkuesi q\u00eb e identifikoi problemin mori nj\u00eb shp\u00ebrblim prej 70 mij\u00eb dollar\u00ebsh nga kompania Google. <\/p>\n

Problemi \u00ebsht\u00eb shkaktuar nga p\u00ebrpunimi i gabuar i \u00e7lirimit pas hyrjes s\u00eb kodit PUK (Personal Unblocking Key), i p\u00ebrdorur p\u00ebr t\u00eb rivendosur funksionin e kartel\u00ebs SIM, e cila \u00ebsht\u00eb bllokuar pas shpesh hyrjes s\u00eb gabuar t\u00eb PIN-it. P\u00ebr t\u00eb fikur bllokimin e ekranit, mjafton t\u00eb vendosni n\u00eb telefon kartel\u00ebn tuaj SIM, e cila ka aktivizuar mbrojtjen mbi baz\u00ebn e PIN-it. Pasi t\u00eb keni nd\u00ebrruar kartel\u00ebn SIM, e cila mbron me PIN, ekranin fillimisht do t\u00eb shfaq\u00eb k\u00ebrkes\u00ebn p\u00ebr PIN-in. N\u00ebse e hiqni gabimisht tre her\u00eb PIN-in, do t\u00eb bllokohet kartela SIM, pas s\u00eb cil\u00ebs do t\u00eb ofrohet mund\u00ebsia t\u00eb vendosni kodin PUK p\u00ebr \u00e7lirimin. Ka rezultuar se hyrja e sakt\u00eb e kodit PUK jo vet\u00ebm q\u00eb \u00e7liron kartel\u00ebn SIM, por \u00e7on n\u00eb kalimin n\u00eb nd\u00ebrfaqen kryesore duke anashkaluar ruajt\u00ebsin e ekranit, pa konfirmimin e aksesit me an\u00eb t\u00eb fjal\u00ebkalimit kryesor ose \u00e7el\u00ebsit grafik.

\r\n \"Luaj\r\n
<\/div>\r\n <\/div><\/center> <\/p>\n

Nj\u00eb cenueshm\u00ebri \u00ebsht\u00eb shkaktuar nga nj\u00eb gabim n\u00eb logjik\u00ebn e kontrollit t\u00eb PUK-ve n\u00eb menaxherin KeyguardSimPukViewController, i cili \u00ebsht\u00eb p\u00ebrgjegj\u00ebs p\u00ebr shfaqjen e ekranit t\u00eb m\u00ebtejsh\u00ebm t\u00eb autentikimit. N\u00eb Android p\u00ebrdoren disa lloje ekranesh autentikimi (p\u00ebr PIN, PUK, fjal\u00ebkalim, ky\u00e7 grafik, autentikim biometrik) dhe k\u00ebto ekrane thirren nj\u00ebra pas tjetr\u00ebs, kur k\u00ebrkohen disa kontrollime, p\u00ebr shembull, kur k\u00ebrkohet PIN dhe ky\u00e7 grafik. <\/p>\n

Me futjen e sakt\u00eb t\u00eb PIN-it, aktivizohet faza e dyt\u00eb e kontrollit, e cila k\u00ebrkon futjen e kodit kryesor t\u00eb \u00e7el\u00ebsit, por me futjen e kodit PUK nj\u00eb faz\u00eb e till\u00eb kalon dhe aksesi jepet pa k\u00ebrkuar fjal\u00ebkalimin kryesor ose ky\u00e7in grafik. Hapi i ardhsh\u00ebm i \u00e7eljes p\u00ebrjashtohet sepse gjat\u00eb thirrjes KeyguardSecurityContainerController#dismiss() nuk b\u00ebhet krahasimi i metod\u00ebs s\u00eb pritur dhe t\u00eb kaluar t\u00eb kontrollit, dmth. menaxheri mendon se nuk ka ndodhur ndryshimi i metod\u00ebs s\u00eb kontrollit dhe p\u00ebrfundimi i kontrollit t\u00eb PUK-it tregon konfirmimin e suksessh\u00ebm t\u00eb sakt\u00ebsis\u00eb. <\/p>\n

Nj\u00eb dob\u00ebsi u zbulua aksidentalisht \u2014 p\u00ebrdoruesi kishte b\u00ebr\u00eb shkarkimin e telefonit dhe pas karikimit dhe ndezjes ishte gabuar disa her\u00eb n\u00eb futjen e PIN-it, pas s\u00eb cil\u00ebs hoqi bllokimin me kodin PUK dhe u habit q\u00eb sistemi nuk k\u00ebrkoi fjal\u00ebkalimin kryesor, i p\u00ebrdorur p\u00ebr t\u00eb dekoduar t\u00eb dh\u00ebnat, dhe m\u00eb pas ngeci me mesazhin \u00abPixel po fillon\u2026\u00bb. P\u00ebrdoruesi u tregua kurioz, vendosi t\u00eb kuptoj\u00eb se \u00e7far\u00eb ndodhte dhe filloi t\u00eb eksperimentonte n\u00eb m\u00ebnyra t\u00eb ndryshme me futjen e kodit PIN dhe PUK, derisa aksidentalisht harroi t\u00eb riblokoj\u00eb pajisjen pas ndryshimit t\u00eb kart\u00ebs SIM dhe mori akses n\u00eb ambientin n\u00eb vend q\u00eb t\u00eb ngec\u00eb. <\/p>\n

Reagimi i Google p\u00ebr njoftimin mbi k\u00ebt\u00eb dob\u00ebsi \u00ebsht\u00eb ve\u00e7an\u00ebrisht interesant. Informacioni p\u00ebr problemin u d\u00ebrgua n\u00eb qershor, por deri n\u00eb shtator, k\u00ebrkuesi nuk arriti t\u00eb merrte nj\u00eb p\u00ebrgjigje t\u00eb qart\u00eb. Ai mendoi se ky sjellje mund t\u00eb shpjegohej me faktin se nuk ishte i pari q\u00eb raportoi p\u00ebr k\u00ebt\u00eb gabim. Dyshimet se di\u00e7ka nuk shkon si\u00e7 duhet lind\u00ebn n\u00eb shtator, kur problemi mbeti i patrajtuar pas instalimit t\u00eb nj\u00eb azhurnimi t\u00eb softuerit, i l\u00ebshuar pas 90 dit\u00ebve, kur kishte skaduar periudha e shpallur e moszbulimit. <\/p>\n

Pasi q\u00eb t\u00eb gjitha p\u00ebrpjekjet p\u00ebr t\u00eb m\u00ebsuar gjendjen e mesazhit t\u00eb d\u00ebrguar mbi problemin q\u00eb \u00e7uan vet\u00ebm n\u00eb p\u00ebrgjigje automatike dhe standarde, studiuesi u p\u00ebrpoq t\u00eb kontaktonte personalisht punonj\u00ebsit e Google p\u00ebr t\u00eb sqaruar situat\u00ebn mbi p\u00ebrgatitjen e nj\u00eb rregullimi dhe madje demonstroi dob\u00ebsin\u00eb n\u00eb zyr\u00ebn e Google n\u00eb Lond\u00ebr. Vet\u00ebm pas k\u00ebsaj, pun\u00ebt p\u00ebr eliminimin e dob\u00ebsis\u00eb u l\u00ebviz\u00ebn nga pika e ngurt\u00eb. Gjat\u00eb shqyrtimit doli se dikush m\u00eb par\u00eb kishte raportuar p\u00ebr problemin, por Google vendosi t\u00eb b\u00ebnte nj\u00eb p\u00ebrjashtim dhe t\u00eb paguante nj\u00eb shp\u00ebrblim p\u00ebr raportimin e p\u00ebrs\u00ebritur t\u00eb problemit, pasi vet\u00ebm fal\u00eb k\u00ebmb\u00ebngul\u00ebsis\u00eb s\u00eb autorit t\u00eb tij, problemi mori v\u00ebmendje.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Android \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-20465), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0443 \u044d\u043a\u0440\u0430\u043d\u0430 \u043f\u0443\u0442\u0451\u043c \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 SIM-\u043a\u0430\u0440\u0442\u044b \u0438 \u0432\u0432\u043e\u0434\u0430 PUK-\u043a\u043e\u0434\u0430. \u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Google Pixel, \u043d\u043e \u0442\u0430\u043a \u043a\u0430\u043a \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043e\u0441\u043d\u043e\u0432\u043d\u0443\u044e \u043a\u043e\u0434\u043e\u0432\u0443\u044e \u0431\u0430\u0437\u0443 Android, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u0438 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u043e\u0442 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u043d\u043e\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u043c \u043d\u0430\u0431\u043e\u0440\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u0434\u043b\u044f Android. \u041e\u0431\u0440\u0430\u0442\u0438\u0432\u0448\u0438\u0439 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105525","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Vulnerabilitet n\u00eb Android q\u00eb lejon kalimin e bllokimit t\u00eb ekranit | ProHoster","description":"Nj\u00eb vulnerabilitet \u00ebsht\u00eb identifikuar n\u00eb platform\u00ebn Android (CVE-2022-20465) q\u00eb lejon \u00e7aktivizimin e bllokimit t\u00eb ekranit duke rregulluar kart\u00ebn SIM dhe duke futur kodin PUK. Mund\u00ebsia e \u00e7aktivizimit t\u00eb bllokimit \u00ebsht\u00eb demonstruar n\u00eb pajisjet Google Pixel, por duke qen\u00eb se rregullimi prek baz\u00ebn kryesore t\u00eb kodit t\u00eb Android-it, \u00ebsht\u00eb e mundur q\u00eb problemi t\u00eb preki edhe versionet e tjera nga prodhues t\u00eb ndrysh\u00ebm. Problemi \u00ebsht\u00eb zgjidhur n\u00eb paket\u00ebn e riparimeve p\u00ebr sigurin\u00eb e novembrit p\u00ebr Android. Ata q\u00eb v\u00ebrejn\u00eb","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-v-android-pozvolyayushhaya-obojti-blokirovku-ekrana","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Android, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0431\u043e\u0439\u0442\u0438 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0443 \u044d\u043a\u0440\u0430\u043d\u0430 | ProHoster","og:description":"\u0412 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Android \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-20465), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0443 \u044d\u043a\u0440\u0430\u043d\u0430 \u043f\u0443\u0442\u0451\u043c \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 SIM-\u043a\u0430\u0440\u0442\u044b \u0438 \u0432\u0432\u043e\u0434\u0430 PUK-\u043a\u043e\u0434\u0430. \u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Google Pixel, \u043d\u043e \u0442\u0430\u043a \u043a\u0430\u043a \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043e\u0441\u043d\u043e\u0432\u043d\u0443\u044e \u043a\u043e\u0434\u043e\u0432\u0443\u044e \u0431\u0430\u0437\u0443 Android, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043a\u0430\u0441\u0430\u0435\u0442\u0441\u044f \u0438 \u043f\u0440\u043e\u0448\u0438\u0432\u043e\u043a \u043e\u0442 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u043d\u043e\u044f\u0431\u0440\u044c\u0441\u043a\u043e\u043c \u043d\u0430\u0431\u043e\u0440\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u0434\u043b\u044f Android. \u041e\u0431\u0440\u0430\u0442\u0438\u0432\u0448\u0438\u0439 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-v-android-pozvolyayushhaya-obojti-blokirovku-ekrana","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-11-11T19:36:51+00:00","article:modified_time":"2022-11-11T19:36:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/105525","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=105525"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/105525\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=105525"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=105525"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=105525"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}