Amaxesha ngamaxesha, iingcali kwezokhuseleko ezivela kwihlabathi liphela ziyahlangana ukuze zixoxe ngemiba yezokhuseleko. Enye yazo yi Ingqungquthela yeBlack Hat ebibanjelwe eLas Vegas. Kwenye yeziganeko ndikwazile ukuthatha ulawulo lweMac, kuqwalaselo lwangaphambili lwenkqubo yokusebenza.
Ukuba semngciphekweni kusebenza ngalo mzuzu siqwalasele i-Wi-Fi okokuqala, sisebenzisa isixhobo soLawulo lweSixhobo seFowuni. Ngale ndlela, i-malware inokufakwa kwikhompyuter nangaphambi kokuba umsebenzisi ayisebenzise okokuqala. Eyona nto inobungozi kukuba umsebenzisi akanakukwazi ukuba ushiye "umnyango" uvulekile.
Kuyinyani ukuba ukuze uthathe ulawulo, iimeko ezilandelelanayo kufuneka zivele kuphela yinxalenye encinci yabasebenzisi abanokujongana nayo. Ngeli thuba, iimeko zokuhlaselwa zenzeke, ifuna ukuba iqela lethu lisebenzise izixhobo ze-MDM, ezilungiselelwe ilizwe leshishini.
Siyazazi iindaba ezivela kwimagazini Intambo:
Xa iMac ivuliwe kwaye iqhagamshelwe kwiWi-Fi okokuqala, ingena kwiiseva zikaApple ngokuyintloko ukuthumela umyalezo, “Heyi, ndinguMac onale nombolo. Ngaba ndingowomntu othile? Ndingenza ntoni?"
Ukuba inombolo ye-serial ibhalisiwe njengenxalenye ye-DEP okanye i-MDM, olo tshekisho lokuqala luza kuqala ngokuzenzekelayo ukulandelelana okungagqibekanga, ngothotho lweetshekhi ezongezelelweyo ngeeseva ze-Apple kunye neeseva zomthengisi we-MDM. Amashishini ngokubanzi athembele kwisixhobo se-MDM somntu wesithathu ukuhamba ngendlela yeshishini lika-Apple. Ngexesha lesinyathelo ngasinye, inkqubo isebenzisa "izatifikethi," indlela yokuqinisekisa ukuba iiseva ezithile zewebhu zezabo zibanga oko. Kodwa abaphandi bafumana ingxaki kwelinye lala manyathelo: Xa i-MDM isiya kwiVenkile yeApple yeMac ukukhuphela isoftware yeshishini, ulandelelwano lufumana isicatshulwa sokukhuphela kunye nokuyifaka, ngaphandle kokufumanisa ubunyani besicatshulwa.
Ukuba i-hacker inokufumana indawo phakathi kwe-MDM yomncedisi wewebhu kunye nesixhobo sexhoba, banokutshintsha isicatshulwa sokukhuphela ngento enobungozi eyalela iMac ukuba ifake i-malware endaweni yayo.
Kwakhona le malware inokufikelela kulwazi kuthungelwano lonke lweshishini.
Obu bungozi bufunyenwe nguJesse Endahl, igosa eliyintloko lokhuseleko kwifemu yolawulo iFleetsmith, kunye UMax Bélanger, injineli yezityalo kwiDropbox.
kunjalo, Obu bungozi bucwangcisiwe kwi-macOS 10.13.6. kwinyanga ephelile. Ezi zizathu zokuba kutheni sicebisa ukuba ufake uhlaziyo ngalunye ngokukhawuleza.
