UMatthew Garrett, unjiniyela odumile we-kernel Linux, в своё время получивший от Фонда СПО премию за вклад в развитие свободного ПО, izinkinga ngokuthembeka kwamakhamera okugada axhumeke kwi-Wi-Fi. Ngemva kokuhlaziya ikhamera ye-Ring Video Doorbell 2 efakwe emzini wakhe, uMatthew waphetha ngokuthi abahlaseli bangaphazamisa kalula okuphakelayo kwevidiyo ngokusebenzisa ukuhlasela okwaziwayo kokuqinisekisa okungenantambo, okuvame ukusetshenziswa ku-WPA2 ukuze usethe kabusha uxhumano lweklayenti lapho kudingekile ukubamba ukulandelana kwephakethe ngesikhathi sokusungulwa koxhumano.
Amakhamera okuphepha angenantambo ngokuvamile awasebenzisi indinganiso ngokuzenzakalelayo. Babhala ngemfihlo amaphakethe wesevisi futhi bacubungula amaphakethe avela endaweni yokufinyelela ngombhalo ocacile. Umhlaseli angasebenzisa i-spoofing ukuze akhiqize ukusakazwa kwamaphakethe okulawula okungelona iqiniso okuzokwenza iklayenti linqamuke endaweni yokufinyelela. Ngokuvamile, amaphakethe anjalo asetshenziswa indawo yokufinyelela ukuze anqamule iklayenti uma kwenzeka lilayisha kakhulu noma lihluleka ukufakazela ubuqiniso, kodwa umhlaseli angawasebenzisa ukuze aphazamise ukuxhumeka kwenethiwekhi kwekhamera egadayo.
Njengoba ikhamera isakaza ividiyo kusitoreji samafu noma kuseva yendawo futhi ithumela izaziso ku-smartphone yomnikazi ngenethiwekhi, ukuhlasela kuvimbela umhlaseli ukuthi alondoloze ividiyo futhi adlulisele izaziso mayelana nokugxambukela. Ikheli le-MAC lekhamera linganqunywa ngokugada ithrafikhi yenethiwekhi engenantambo kusetshenziswa nokukhetha amadivayisi anezihlonzi ezaziwayo zomkhiqizi wekhamera. Ngemuva kwalokho, sebenzisa Ungathumela amaphakethe okuqinisekisa ngeluphu. Lokhu kuzobangela ukuthi uxhumano lwekhamera lusethwe kabusha ngokushesha ngemva kokuqinisekisa ngakunye, futhi ukudluliswa kwedatha okuvela kukhamera kuzovinjwa. Ukuhlasela okufanayo kungasetshenziswa kuzo zonke izinhlobo zezinzwa ezinyakazayo nama-alamu axhunywe nge-Wi-Fi.
Source: opennet.ru
