Ngaphezu kweminyaka emibini idlulile ukususela oko kufunyaniswe ubuthathaka obungama-35 kwi-proxy ye-squid caching, kwaye uninzi lwayo alukalungiswa, ilumkisa ingcaphephe yokhuseleko ethe yachaza iingxaki kuqala.
NgoFebruwari 2021, ingcaphephe kwezokhuseleko uJoshua Rogers wenze uhlalutyo lweskwidi kwaye wafumanisa ukuba sibuthathaka abangama-55 kwikhowudi yeprojekthi.
Ukuza kuthi ga ngoku, ngama-20 kuphela kuwo acinyiweyo. Uninzi lobuthathaka alukhange lufumane ukutyunjwa kwe-CVE, okuthetha ukuba akukho zilungiso zisemthethweni okanye iingcebiso zokuzisusa. URogers, kwileta eya kuluntu lwezokhuseleko lwe-Openwall, uthe emva kokulinda ixesha elide, wagqiba ekubeni apapashe olu lwazi.
URogers uchaze ubuthathaka kwiwebhusayithi yakhe, eqaqambisa iingxaki ezahlukeneyo - ukusetyenziswa emva kokukhululwa, ukuvuza kwememori, ityhefu ye-cache, ukungaphumeleli kwenkcazo kunye nezinye iziphene kumacandelo ahlukeneyo. Ngelo xesha, ingcali ibonise ukuqonda kwiqela le-Squid, iphawula ukuba abaninzi abaphuhlisi beeprojekthi ezivulekileyo basebenza ngokuvolontiya kwaye abanakusoloko besabela ngokukhawuleza kwiingxaki ezinjalo.
Kubalulekile ukuqaphela ukuba iSkwidi ngoku sisetyenziswa kwizigidi zeemeko kwihlabathi jikelele.
Iingcebiso zikaRogers zithetha ukuba umsebenzisi ngamnye kufuneka avavanye ngokuzimeleyo ukuba iSquid ifanelekile na kwinkqubo yabo. Ngaphandle koko, abasebenzisi banokuhlangabezana nokungaphumeleli kunye neengozi zokhuseleko lolwazi.
Le meko isikhumbuza sonke ngokubaluleka kokuhlaziya rhoqo kunye nokugcina isoftware ikhuselekile. Kungenjalo, njengoko uRogers egxininisa, "ayizukwenza nto."
Esi siganeko sikhathazayo siphakamisa imibuzo enzima malunga nokhuseleko lweeprojekthi zomthombo ovulekileyo kunye nokukwazi kwazo ukumelana nomzila oqhubekayo wobuthathaka obutsha.
Kuyathenjwa ukuba amalungu oluntu kunye nabaphuhlisi baya kuthatha inyathelo ngokukhawuleza ukulungisa esi songelo kwixesha elizayo.
Ileta eya kuYoshuwa kwiOpenwall (eng.)
Iinkcukacha zeengxaki kwiwebhusayithi kaYoshuwa (eng.)
umthombo: linux.org.ru