Daniel Stenberg, autori i utilitaires p\u00ebr marrjen dhe d\u00ebrgimin e t\u00eb dh\u00ebnave n\u00eb rrjetin curl, kritikoi p\u00ebrdorimin e mjeteve AI n\u00eb krijimin e raporteve p\u00ebr dob\u00ebsit\u00eb. K\u00ebto raporte p\u00ebrmbajn\u00eb detaje t\u00eb holl\u00ebsishme, jan\u00eb shkruar me nj\u00eb gjuh\u00eb normale dhe duken cil\u00ebsore, por pa nj\u00eb analiz\u00eb t\u00eb thell\u00eb, n\u00eb t\u00eb v\u00ebrtet\u00eb, mund vet\u00ebm t\u00eb \u00e7ojn\u00eb n\u00eb keqkuptime, duke z\u00ebvend\u00ebsuar problemet reale me p\u00ebrmbajtje q\u00eb duket cil\u00ebsore por \u00ebsht\u00eb e pavler\u00eb. <\/p>\n
Projekti Curl ofron shp\u00ebrblime p\u00ebr identifikimin e dob\u00ebsive t\u00eb reja dhe ka marr\u00eb tashm\u00eb 415 raporte p\u00ebr probleme t\u00eb mundshme, prej t\u00eb cilave vet\u00ebm 64 jan\u00eb konfirmuar si dob\u00ebsi, dhe 77 si gabime q\u00eb nuk kan\u00eb lidhje me sigurin\u00eb. K\u00ebshtu, 66% e t\u00eb gjitha raporteve nuk p\u00ebrmbanin ndonj\u00eb informacion t\u00eb dobish\u00ebm dhe vet\u00ebm i kan\u00eb marr\u00eb koh\u00eb zhvilluesve, e cila mund t\u00eb ishte p\u00ebrdorur p\u00ebr di\u00e7ka t\u00eb dobishme. <\/p>\n
Zhvilluesit jan\u00eb t\u00eb detyruar t\u00eb humbasin shum\u00eb koh\u00eb duke analizuar raporte t\u00eb pafrytshme dhe duke verifikuar informacionin e dh\u00ebn\u00eb aty disa her\u00eb, pasi cil\u00ebsia e jashtme e prezantimit krijon besim shtes\u00eb n\u00eb informacion dhe krijon ndjenj\u00ebn se zhvilluesi ka humbur ndonj\u00eb detaj. Nga ana tjet\u00ebr, formimi i nj\u00eb raporti t\u00eb till\u00eb k\u00ebrkon p\u00ebrpjekje minimale nga ankesuesi, i cili nuk bezdis vet\u00ebn p\u00ebr t\u00eb verifikuar n\u00ebse ka ndonj\u00eb problem real, por thjesht kopjon verb\u00ebrisht t\u00eb dh\u00ebnat e marra nga ndihm\u00ebsit AI, duke shpresuar p\u00ebr fatin n\u00eb gar\u00ebn p\u00ebr t\u00eb marr\u00eb shp\u00ebrblimin. <\/p>\n
Jan\u00eb dh\u00ebn\u00eb dy shembuj t\u00eb raporteve t\u00eb tilla t\u00eb pavlera. Nj\u00eb dit\u00eb para shpalljes s\u00eb planifikuar t\u00eb informacionit mbi dob\u00ebsin\u00eb e rrezikshme t\u00eb tetorit (CVE-2023-38545) u d\u00ebrgua nj\u00eb raport n\u00ebp\u00ebrmjet Hackerone q\u00eb thoshte se patch-i i riparimit ishte b\u00ebr\u00eb i disponuesh\u00ebm publik. N\u00eb t\u00eb v\u00ebrtet\u00eb, raporti p\u00ebrmbante nj\u00eb p\u00ebrzierje t\u00eb faktor\u00ebve t\u00eb ngjash\u00ebm dhe informacione t\u00eb holl\u00ebsishme p\u00ebr dob\u00ebsit\u00eb e kaluara, t\u00eb kompozuara nga ndihm\u00ebsi AI, Google Bard. N\u00eb fund, informacioni dukej i ri dhe aktual, por nuk kishte lidhje me realitetin. <\/p>\n
Shembulli i dyt\u00eb trajton mesazhin e marr\u00eb m\u00eb 28 dhjetor lidhur me mbushjen e buffers n\u00eb menaxherin e WebSocket, d\u00ebrguar nga nj\u00eb p\u00ebrdorues q\u00eb kishte informuar m\u00eb par\u00eb projekte t\u00eb ndryshme p\u00ebr vulnerabilitetet p\u00ebrmes Hackerone. Si nj\u00eb metod\u00eb p\u00ebr t\u00eb riprodhuar problemin, raporti p\u00ebrmendte fjal\u00eb t\u00eb p\u00ebrgjithshme mbi d\u00ebrgimin e nj\u00eb k\u00ebrkese t\u00eb modifikuar me nj\u00eb vler\u00eb q\u00eb e kalon madh\u00ebsin\u00eb e buffers, e p\u00ebrdorur gjat\u00eb kopjimit n\u00ebp\u00ebrmjet strcpy. N\u00eb raport ishte dh\u00ebn\u00eb gjithashtu nj\u00eb shembull i korrigjimit (shembulli i z\u00ebvend\u00ebsimit t\u00eb strcpy me strncpy) dhe ishte cituar nj\u00eb linj\u00eb kodi \"strcpy(keyval, randstr)\" ku sipas denoncuesit kishte nj\u00eb gabim. <\/p>\n
Zhvilluesi e kontrolloi gjith\u00e7ka tri her\u00eb dhe nuk gjeti asnj\u00eb problem, por pasi raporti ishte shkruar me siguri dhe madje p\u00ebrmbante nj\u00eb korrigjim, erdhi nj\u00eb ndjenj\u00eb se diku di\u00e7ka po i shkonte humbur. P\u00ebrpjekja p\u00ebr t\u00eb sqaruar se si hulumtuesi kishte arritur t\u00eb kalonte kontrollin e madh\u00ebsis\u00eb para thirrjes s\u00eb strcpy dhe si madh\u00ebsia e buferit keyval ishte m\u00eb e vog\u00ebl se madh\u00ebsia e t\u00eb dh\u00ebnave t\u00eb lexuara, \u00e7oi n\u00eb marr\u00ebdh\u00ebnie t\u00eb detajuara, por t\u00eb pa informacion shtes\u00eb, t\u00eb cilat thjesht shpjegonin arsyet e zakonshme p\u00ebr mbushjen e buferit, t\u00eb pa lidhura me kodin specifik t\u00eb Curl. P\u00ebrgjigjet i ngjanin dialogut me nj\u00eb ndihm\u00ebs AI, dhe pas kalimit t\u00eb gjysm\u00ebs s\u00eb dit\u00ebs n\u00eb p\u00ebrpjekjet e pafrytshme p\u00ebr t\u00eb kuptuar se si manifestoheshin problemet, zhvilluesi p\u00ebrfundimisht u bind se nuk kishte ndonj\u00eb dob\u00ebsi n\u00eb t\u00eb v\u00ebrtet\u00eb. \u0414\u044d\u043d\u0438\u0435\u043b C\u0442\u0435\u043d\u0431\u0435\u0440\u0433 (Daniel Stenberg), \u0430\u0432\u0442\u043e\u0440 \u0443\u0442\u0438\u043b\u0438\u0442\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u0441\u0435\u0442\u0438 curl, \u0432\u044b\u0441\u0442\u0443\u043f\u0438\u043b \u0441 \u043a\u0440\u0438\u0442\u0438\u043a\u043e\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f AI-\u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043f\u0440\u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u043e\u0442\u0447\u0451\u0442\u043e\u0432 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445. \u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u043e\u0442\u0447\u0451\u0442\u044b \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f, \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u044b \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u044b\u043c \u044f\u0437\u044b\u043a\u043e\u043c \u0438 \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0442 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c\u0438, \u043d\u043e \u0431\u0435\u0437 \u0432\u0434\u0443\u043c\u0447\u0438\u0432\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043d\u0430 \u0434\u0435\u043b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043b\u0438\u0448\u044c \u0432\u0432\u043e\u0434\u0438\u0442\u044c \u0432 \u0437\u0430\u0431\u043b\u0443\u0436\u0434\u0435\u043d\u0438\u0435, \u043f\u043e\u0434\u043c\u0435\u043d\u044f\u044f \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0449\u0438\u043c \u043c\u0443\u0441\u043e\u0440\u043d\u044b\u043c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u044b\u043c. \u041f\u0440\u043e\u0435\u043a\u0442 Curl […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112715","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Probleme p\u00ebr shkak t\u00eb raporteve p\u00ebr dob\u00ebsi t\u00eb p\u00ebrgatitura nga mjete AI | ProHoster","description":"Daniel Stenberg, autori i utilitaires p\u00ebr marrjen dhe d\u00ebrgimin e t\u00eb dh\u00ebnave n\u00eb rrjetin curl, kritikoi p\u00ebrdorimin e mjeteve AI n\u00eb krijimin e raporteve p\u00ebr dob\u00ebsit\u00eb. K\u00ebto raporte p\u00ebrmbajn\u00eb detaje t\u00eb holl\u00ebsishme, jan\u00eb shkruar me nj\u00eb gjuh\u00eb normale dhe duken cil\u00ebsore, por pa nj\u00eb analiz\u00eb t\u00eb thell\u00eb, n\u00eb t\u00eb v\u00ebrtet\u00eb, mund vet\u00ebm t\u00eb \u00e7ojn\u00eb n\u00eb keqkuptime, duke z\u00ebvend\u00ebsuar problemet reale me p\u00ebrmbajtje q\u00eb duket cil\u00ebsore por \u00ebsht\u00eb e pavler\u00eb. Projekti Curl","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/problemy-iz-za-podgotovlennyh-ai-instrumentami-otchyotov-ob-uyazvimostyah","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0438\u0437-\u0437\u0430 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 AI-\u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438 \u043e\u0442\u0447\u0451\u0442\u043e\u0432 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 | ProHoster","og:description":"\u0414\u044d\u043d\u0438\u0435\u043b C\u0442\u0435\u043d\u0431\u0435\u0440\u0433 (Daniel Stenberg), \u0430\u0432\u0442\u043e\u0440 \u0443\u0442\u0438\u043b\u0438\u0442\u044b \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u0441\u0435\u0442\u0438 curl, \u0432\u044b\u0441\u0442\u0443\u043f\u0438\u043b \u0441 \u043a\u0440\u0438\u0442\u0438\u043a\u043e\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f AI-\u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u043f\u0440\u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u043e\u0442\u0447\u0451\u0442\u043e\u0432 \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445. \u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u043e\u0442\u0447\u0451\u0442\u044b \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0434\u0435\u0442\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f, \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u044b \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u044b\u043c \u044f\u0437\u044b\u043a\u043e\u043c \u0438 \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0442 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c\u0438, \u043d\u043e \u0431\u0435\u0437 \u0432\u0434\u0443\u043c\u0447\u0438\u0432\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043d\u0430 \u0434\u0435\u043b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043b\u0438\u0448\u044c \u0432\u0432\u043e\u0434\u0438\u0442\u044c \u0432 \u0437\u0430\u0431\u043b\u0443\u0436\u0434\u0435\u043d\u0438\u0435, \u043f\u043e\u0434\u043c\u0435\u043d\u044f\u044f \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432\u044b\u0433\u043b\u044f\u0434\u044f\u0449\u0438\u043c \u043c\u0443\u0441\u043e\u0440\u043d\u044b\u043c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u044b\u043c. \u041f\u0440\u043e\u0435\u043a\u0442 Curl","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/problemy-iz-za-podgotovlennyh-ai-instrumentami-otchyotov-ob-uyazvimostyah","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-05T19:10:15+00:00","article:modified_time":"2024-01-05T19:10:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/112715","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=112715"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/112715\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=112715"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=112715"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=112715"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"