Ngokwemithombo eku-inthanethi, iwebhusayithi ye-eBay.com isebenzisa iskripthi esikhethekile ukuskena amachweba e-PC yezivakashi ukuze kutholwe izinhlelo zokufinyelela kude. Amachweba amaningi enethiwekhi askeniwe asetshenziswa amathuluzi okuphatha okukude adumile njengeWindows Remote Desktop, VNC, TeamViewer, njll.
Abashisekayo abavela ku-Bleeping Computer benze ucwaningo oluqinisekisa ukuthi i-eBay.com empeleni iskena izimbobo ezihlukene eziyi-14 lapho umsebenzisi evakashela isizindalwazi se-inthanethi. Le nqubo yenziwa kusetshenziswa umbhalo we-check.js futhi yethulwa njalo uma uvakashela insiza. Iskripthi senza ukuskena sisebenzisa i-WebSocket ukuze sixhume ku-127.0.0.1 embobeni enikeziwe.
Umthombo uphawula ukuthi ukuskena kwembobo akwenziwa uma umsebenzisi esebenzisa idivayisi esebenzisa i-Linux lapho evakashela isayithi le-eBay. Nokho, lapho uvakashela inkundla yewebhu kusuka kudivayisi ye-Windows, ukuskena kuyathathwa. Kucatshangwa ukuthi ukuskena okunjalo kwenzelwa ukuthola amakhompyutha onakalisiwe angasetshenziswa abahlaseli ukwenza imisebenzi yokukhwabanisa kusayithi le-eBay.
Masikhumbule ukuthi ngo-2016, kwavela imibiko ku-inthanethi yokuthi abahlaseli bebesebenzisa i-TeamViewer ukuze babambe ukulawula ama-PC abasebenzisi ukuze bathenge ngomgunyathi ku-eBay. Ngenxa yokuthi abasebenzisi abaningi be-eBay basebenzisa amakhukhi ukuze bangene kusayithi ngokuzenzakalelayo, abahlaseli bangakwazi ukulawula amakhompyutha abo bekude futhi bathole ukufinyelela kunkundla ukuze bathenge. Izikhulu ze-eBay zenqabile ukuphawula ngalolu daba.
Source: 3dnews.ru