{"id":113601,"date":"2024-02-15T04:02:43","date_gmt":"2024-02-15T02:02:43","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/sczenarij-ataki-na-obrabotchik-ne-ustanovlennyh-prilozhenij-v-ubuntu"},"modified":"2024-02-15T04:02:43","modified_gmt":"2024-02-15T02:02:43","slug":"sczenarij-ataki-na-obrabotchik-ne-ustanovlennyh-prilozhenij-v-ubuntu","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/sczenarij-ataki-na-obrabotchik-ne-ustanovlennyh-prilozhenij-v-ubuntu","title":{"rendered":"Skenari i sulmit ndaj trajtuesit t\u00eb aplikacioneve t\u00eb painstaluara n\u00eb Ubuntu","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
K\u00ebrkuesit nga kompania Aqua Security kan\u00eb v\u00ebn\u00eb re mund\u00ebsin\u00eb e realizimit t\u00eb nj\u00eb sulmi ndaj p\u00ebrdoruesve t\u00eb shp\u00ebrndarjes Ubuntu, duke shfryt\u00ebzuar ve\u00e7orit\u00eb e implementimit t\u00eb procesorit \u201ecommand-not-found\u201c, i cili ofron sugjerime n\u00eb rast p\u00ebrpjekjeje p\u00ebr t\u00eb nisur nj\u00eb program q\u00eb mungon n\u00eb sistem. Problemi \u00ebsht\u00eb se, kur vler\u00ebson komandat e nisura q\u00eb mungojn\u00eb n\u00eb sistem, \u201ecommand-not-found\u201c p\u00ebrdor n\u00eb p\u00ebrzgjedhjen e rekomandimeve jo vet\u00ebm paketat nga depot standarde, por edhe paketat snap nga katalogu snapcraft.io. <\/p>\n
Gjat\u00eb formimit t\u00eb rekomandimit t\u00eb bazuar n\u00eb p\u00ebrmbajtjen e katalogut snapcraft.io, procesori \u201ecommand-not-found\u201c nuk merr parasysh statusin e paket\u00ebs dhe p\u00ebrfshin paketa q\u00eb jan\u00eb shtuar n\u00eb katalog nga p\u00ebrdorues t\u00eb pa-verifikuar. K\u00ebshtu, nj\u00eb sulmues mund t\u00eb vendos\u00eb n\u00eb snapcraft.io nj\u00eb paket\u00eb me p\u00ebrmbajtje t\u00eb fshehur t\u00eb keqe dhe em\u00ebr q\u00eb p\u00ebrputhet me paketat ekzistuese DEB, programe q\u00eb nuk jan\u00eb fillimisht n\u00eb repositor, apo aplikacione falsa, emrat e t\u00eb cilave reflektojn\u00eb gabime tipike dhe gabime t\u00eb p\u00ebrdoruesve gjat\u00eb shkrimit t\u00eb emrave t\u00eb utilitar\u00ebve t\u00eb njohur. <\/p>\n
P\u00ebr shembull, mund t\u00eb vendosen paketat \u201etracert\u201c dhe \u201etcpdamp\u201c me shpres\u00ebn se p\u00ebrdoruesi do t\u00eb gaboj\u00eb gjat\u00eb shkrimit t\u00eb emrave t\u00eb utilitar\u00ebve \u201etraceroute\u201c dhe \u201etcpdump\u201c, dhe \u201ecommand-not-found\u201c do t\u00eb rekomandoj\u00eb t\u00eb instalohet nga snapcraft.io paketat e d\u00ebmshme t\u00eb vendosura nga sulmuesi. P\u00ebrdoruesi mund t\u00eb mos e v\u00ebr\u00eb re mashtrimin dhe t\u00eb mendoj\u00eb se sistemi rekomandon vet\u00ebm paketa t\u00eb verifikuara. Sulmuesi gjithashtu mund t\u00eb vendos\u00eb n\u00eb snapcraft.io nj\u00eb paket\u00eb, emri i s\u00eb cil\u00ebs p\u00ebrputhet me paketat ekzistuese deb, dhe n\u00eb k\u00ebt\u00eb rast \u201ecommand-not-found\u201c do t\u00eb ofroj\u00eb dy rekomandime p\u00ebr instalimin e deb dhe snap, nd\u00ebrsa p\u00ebrdoruesi mund t\u00eb zgjedh\u00eb snap-in, duke e konsideruar at\u00eb m\u00eb t\u00eb sigurt ose duke u tunduar nga nj\u00eb version m\u00eb t\u00eb ri.
<\/center> <\/p>\n
Aplikacionet n\u00eb formatin snap, p\u00ebr t\u00eb cilat n\u00eb snapcraft.io lejohet rishikimi automatik, mund t\u00eb ekzekutohen vet\u00ebm n\u00eb nj\u00eb mjedis t\u00eb izoluar (snap-paketat pa izolim publikohen vet\u00ebm pas nj\u00eb rishikimi manual). P\u00ebr sulmuesin, mund t\u00eb mjaftoj\u00eb t\u00eb ekzekutoj\u00eb n\u00eb nj\u00eb mjedis t\u00eb izoluar me qasje n\u00eb rrjet, p\u00ebr shembull, p\u00ebr minimin e kriptovalutave, kryerjen e sulmeve DDoS ose d\u00ebrgimin e spamit. <\/p>\n
Sulmuesi gjithashtu mund t\u00eb p\u00ebrdor\u00eb metoda t\u00eb d\u00ebmshme p\u00ebr t\u00eb anashkaluar izolimin, si\u00e7 jan\u00eb shfryt\u00ebzimi i dob\u00ebsive t\u00eb pap\u00ebrmir\u00ebsuara n\u00eb b\u00ebrtham\u00eb dhe mekanizmat e siguris\u00eb p\u00ebr izolim, angazhimi i nd\u00ebrfaqeve snap p\u00ebr t\u00eb aksesuar burime t\u00eb jashtme (p\u00ebr regjistrim t\u00eb fsheht\u00eb t\u00eb audios dhe videos) ose kapja e hyrjes nga tastiera kur p\u00ebrdoret protokolli X11 (p\u00ebr krijimin e keylogger-ave q\u00eb funksionojn\u00eb n\u00eb nj\u00eb mjedis sandbox). \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
![\"Skenari](\"\/wp-content\/uploads\/2024\/02\/5ed4b661fcc1bf13a7edc101b829b185.png\")
<\/center> <\/p>\n