Kwethulwe umphathi wephasiwedi weFirefox Lockwise

Inkampani yeMozilla kwethulwe uhlelo lokusebenza lokuphatha iphasiwedi IFirefox Lockwise, eyasungulwa ngaphansi kwegama lekhodi Lockbox ngesikhathi sokuthuthukiswa. I-Lockwise ihlanganisa izinhlelo zokusebenza zeselula ze-Android ne-iOS ezikuvumela ukuthi uhlele ukufinyelela kumaphasiwedi alondolozwe kuFirefox kunoma iyiphi idivayisi yomsebenzisi, ngaphandle kwesidingo sokufaka iFirefox kuwo. Umsebenzi wokugcwalisa ngokuzenzakalelayo amaphasiwedi kumafomu okufakazela ubuqiniso banoma yiziphi izinhlelo zokusebenza zeselula uyasekelwa. Ikhodi yephrojekthi isatshalaliswa ngu ilayisensi ngaphansi kwe-MPL 2.0.

Ukuze uvumelanise amaphasiwedi, amandla ajwayelekile esiphequluli seFirefox kanye ne-akhawunti eku-Akhawunti yeFirefox asetshenziswa. Amadivayisi ane-Lockwise axhuma kusistimu yokuvumelanisa ngendlela efanayo nokuxhuma izimo zesiphequluli ezihlukile. Ukuze kuvikelwe idatha, i-block cipher AES-256-GCM nokhiye abasuselwe ku-PBKDF2 ne-HKDF ene-hashing kusetshenziswa i-SHA-256 bayasetshenziswa. Iphrothokholi isetshenziswa ukudlulisa okhiye Onepw, enikeza isitoreji esingukhiye ohlangothini lomsebenzisi futhi isebenzise ukubethela ngasemaphethelweni ngaphandle kokugcina idatha esusiwe noma okhiye kuseva yangaphandle. Ukhiye wokubethela usethwe ngokusekelwe ekungeneni ngemvume nephasiwedi eshiwo ku-akhawunti; i-akhawunti ngokwayo isetshenziselwa kuphela isitoreji sezokuthutha sedatha esivele ibetheliwe.

Ngaphezu kwezinhlelo zokusebenza zeselula, iphrojekthi nayo iyathuthuka I-Lockwise isengezo sesiphequluli esinikeza enye indlela yokusebenzela eyakhelwe ngaphakathi yeFirefox yokuphatha amaphasiwedi alondoloziwe. Lapho ufaka isengezo, inkinobho ivela kuphaneli lapho ungabuka khona ngokushesha ama-akhawunti alondolozwe kusayithi lamanje, futhi useshe futhi uhlele amaphasiwedi. Okwamanje, isengezo siwukuthuthukiswa kokuhlola (inguqulo ye-alpha) futhi ayikwazi ukusebenza uma igama-mfihlo eliyinhloko lisethwe esipheqululini. Kuyaqhubeka umsebenzi ukufaka i-Lockwise kuFirefox njengesengezo sesistimu.

Izinhlelo zokusebenza zeselula ze-Lockwise ziku-beta, kodwa ukukhishwa kokuqala okuzinzile kuhleliwe ngesonto elizayo. Inikwe amandla ngokuzenzakalela ezinhlelweni zokusebenza thumela i-telemetry ngolwazi olujwayelekile mayelana nezici zokusebenza nohlelo lokusebenza.

Ngaleso sikhathi, kumphathi wephasiwedi ojwayelekile weFirefox kwengezwe ikhono lokucubungula ama-akhawunti kumongo wesizinda sezinga lokuqala, elikuvumela ukuthi unikeze ngephasiwedi eyodwa elondolozwe kuzo zonke izizinda ezingaphansi. Isibonelo, igama eliyimfihlo eligcinelwe ukungena ngemvume. Ushintsho luzofakwa kuFirefox 69.

Futhi kuFirefox 69 kuhleliwe ukuvula umphathi wokuphatha okubalulekile isibambi izinqubo, okuyinto kuvumela dlulisela ulwazi kusistimu yokusebenza mayelana nezinqubo ezibaluleke kakhulu. Isibonelo, inqubo yokuqukethwe ecubungula ithebhu esebenzayo izonikezwa kuqala kakhulu (izinsiza ze-CPU eziningi ezinikeziwe) kunenqubo ehlotshaniswa namathebhu angemuva (uma engadlali ividiyo noma umsindo). Okwamanje, lolu shintsho luhlelelwe ukuthi luvulwe ngokuzenzakalela endaweni ye-Windows kuphela; kwezinye izinhlelo, uzodinga ukwenza kusebenze inketho ethi dom.ipc.processPriorityManager.enabled ku- about-config.

Source: opennet.ru