Ukuqhekezwa kweziseko zophuhliso ze-matrix.org

Abaphuhlisi beqonga lokuthumela imiyalezo kuMatrix babhengeze ukuvalwa okungxamisekileyo kweeseva i-Matrix.org kunye ne-Riot.im (oyena mxumi we-Matrix) ngenxa yokuqhekezwa kwesiseko seprojekthi. Ukucima kokuqala kwenzeke ngobusuku obudlulileyo, emva koko iiseva zabuyiselwa kwaye izicelo zakhiwa ngokutsha kwimithombo yereferensi. Kodwa kwimizuzu embalwa edlulileyo iiseva ziye zaphazamiseka okwesibini.

Abahlaseli bathumele kwiphepha eliphambili leprojekthi ulwazi oluneenkcukacha malunga nokucwangciswa kweseva kunye nedatha malunga nobukho besiseko sedatha eneeheshi eziphantse zibe zizigidi ezihlanu ezinesiqingatha zabasebenzisi beMatrix. Njengobungqina, igama eliyimfihlo lenkokeli yeprojekthi yeMatrix iyafumaneka esidlangalaleni. Ikhowudi yesayithi elungisiweyo ifakwe kwindawo yokugcina abahlaseli kwi-GitHub (kungekhona kwindawo yokugcina i-matrix esemthethweni). Iinkcukacha malunga ne-hack yesibini azikafumaneki.

Emva kwe-Hack yokuqala, iqela le-Matrix lipapashe ingxelo ebonisa ukuba ukukhwabanisa kwenziwa ngenxa yobuthathaka kwi-Jenkins engahlaziywanga inkqubo eqhubekayo yokudibanisa. Emva kokufumana ukufikelela kumncedisi weJenkins, abahlaseli babamba izitshixo ze-SSH kwaye bakwazi ukufikelela kwezinye iiseva zeziseko. Kwaxelwa ukuba ikhowudi yomthombo kunye neephakheji azizange zichaphazeleke kuhlaselo. Uhlaselo aluzange luchaphazele iiseva zeModular.im. Kodwa abahlaseli bafumana ukufikelela kwi-DBMS ephambili, equlethe, phakathi kwezinye izinto, imiyalezo engabhalwanga, amathokheni okufikelela kunye ne-password hashes.

Bonke abasebenzisi bayalelwa ukuba batshintshe amagama abo ayimfihlo. Kodwa kwinkqubo yokutshintsha amagama ayimfihlo kumthengi oyintloko weRiot, abasebenzisi babejongene nokunyamalala kweefayile ngeekopi ezigciniweyo zezitshixo zokubuyisela imbalelwano efihliweyo kunye nokungakwazi ukufikelela kwimbali yemiyalezo edlulileyo.

Masikhumbule ukuba iqonga lokuququzelela unxibelelwano lweMatrix lunikezelwa njengeprojekthi esebenzisa imigangatho evulekileyo kwaye inika ingqalelo enkulu ekuqinisekiseni ukhuseleko kunye nobumfihlo babasebenzisi. I-Matrix inikezela nge-encryption ekupheleni kokuphela ngokusekelwe kwi-algorithm yeSignali eqinisekisiweyo, isekela ukukhangela kunye nokujonga okungenamkhawulo kwimbali yembalelwano, ingasetyenziselwa ukudlulisa iifayile, ukuthumela izaziso, ukuvavanya ubukho bomphuhlisi kwi-intanethi, ukuququzelela ii-teleconferences, ukwenza iifowuni zezwi kunye nevidiyo. Ikwaxhasa iimpawu eziphambili ezifana nezaziso zokuchwetheza, ukuqinisekiswa kokufunda, izaziso zokutyhala kunye nokukhangela kwe-server-side, ungqamaniso lwembali yomxhasi kunye nesimo, iindlela ezahlukeneyo zokuchonga (i-imeyile, inombolo yefowuni, i-akhawunti ye-Facebook, njl.).

umthombo: opennet.ru

Yongeza izimvo