Ondrej Holzman Kunyangwe iwo maficha matsva akaunzwa muOS X Yosemite uye iOS 8 achiunza akawanda anobatsira maficha kune vashandisi anorerutsa mashandisirwo emidziyo yakawanda, anogona zvakare kuunza njodzi yekuchengetedza. Semuenzaniso, kutumira mameseji mameseji kubva ku iPhone kuenda kuMac zviri nyore kunzvenga nhanho mbiri-yekusimbisa paunosaina kune akasiyana masevhisi.
Iyo seti yeKuenderera mberi mabasa, mukati meiyo Apple inobatanidza makomputa nenharembozha mune azvino masisitimu anoshanda, inonakidza kwazvo, kunyanya maererano netiweki uye matekiniki avanoshandisa kubatanidza iPhones uye iPads kuMacs. Kuenderera mberi kunosanganisira kugona kufona kubva kuMac, kutumira mafaera kuburikidza neAirDrop kana kukurumidza kugadzira hotspot, asi ikozvino isu tichatarisa kutumira yakajairwa SMS kumakomputa.
Iri basa risingaonekwe, asi rinobatsira zvakanyanya rinogona, mune yakaipisisa, kushanduka kuita gomba rekuchengetedza iro rinobvumira anorwisa kuti awane data yechikamu chechipiri chekuongorora kana achipinda mumasevhisi akasarudzwa. Tiri kutaura pano pamusoro pezvinonzi maviri-phase login, iyo, mukuwedzera kumabhangi, iri kutotangwa neakawanda masevhisi einternet uye yakachengeteka zvakanyanya kupfuura kana uine account yakachengetedzwa chete neyekare uye imwechete password.
Kuongororwa kwezvikamu zviviri kunogona kuitika nenzira dzakasiyana, asi kana tichitaura nezve kubhengi yepamhepo uye mamwe masevhisi epainternet, isu tinowanzo sangana nekutumira kodhi yekusimbisa kunhamba yako yefoni, iyo yaunofanirwa kuisa padivi pekuisa password yako yenguva dzose. Naizvozvo, kana mumwe munhu akabata password yako (kana komputa inosanganisira password kana chitupa), ivo vanowanzoda nharembozha yako, semuenzaniso, kuti upinde muinternet banking, uko SMS ine password yechikamu chechipiri chekusimbisa ichasvika. .
Asi nguva yaunenge uine mameseji ako ese atumirwa kubva ku iPhone yako kuenda kuMac yako uye anorwisa anotora Mac yako, ivo havachada iPhone yako. Kuti utumire mameseji eSMS echinyakare, hapana kubatana kwakananga kunodiwa pakati pe iPhone neMac - havafanirwe kunge vari pane imwecheteyo Wi-Fi network, Wi-Fi haifanire kuvhurwa, seBluetooth, uye chinodiwa chete kubatanidza zvishandiso zvese neinternet. Iyo SMS Relay sevhisi, sekutumirwa kwemameseji kunodaidzwa zviri pamutemo, inotaurirana kuburikidza neMessage protocol.
Mukuita, mashandiro aanoita nderekuti kunyangwe meseji ichisvika kwauri seyakajairika SMS, Apple inoibata seMessage uye yoiendesa paInternet kuenda kuMac (ndiwo mashandiro aaiita neMessage isati yasvika SMS Relay) , kwainoiratidza seSMS, iyo inoratidzwa nebubble green . iPhone neMac imwe neimwe inogona kunge iri muguta rakasiyana, zvese zviri zviviri zvishandiso zvinoda kubatana kweInternet.
Iwe unogona zvakare kuwana humbowo hwekuti SMS Relay haishande pamusoro peWi-Fi kana Bluetooth nenzira inotevera: shandisa ndege modhi pa iPhone yako uye nyora uye tumira SMS paMac yakabatana neInternet. Wobva wabvisa Mac kubva paInternet uye, ukuwo, batanidza iyo iPhone kwairi (mobile internet yakakwana). Iyo SMS inotumirwa kunyangwe iwo maviri maturusi asina kumbobvira ataurirana zvakananga kune mumwe nemumwe - zvese zvinovimbiswa neMessage protocol.
Saka, kana uchishandisa kutumira meseji, zvinodikanwa kuti urambe uchifunga kuti kuchengetedzeka kwezviviri-zvinhu kuvimbiswa kunokanganiswa. Kana komputa yako ikabiwa, kudzima meseji nekukasira ndiyo inokurumidza uye iri nyore nzira yekudzivirira kubirwa kweakaundi ako.
Kupinda mubhangi reInternet kuri nyore kana usinga fanire kunyorazve kodhi yekusimbisa kubva kunharembozha, asi ingoikopa kubva kuMharidzo paMac, asi chengetedzo inonyanya kukosha mune iyi kesi, iyo iri kushomeka zvakanyanya nekuda kweSMS Relay. . Mhinduro kudambudziko iri inogona kunge iri, semuenzaniso, mukana wekubvisa nhamba chaidzo kubva kutumira paMac, sezvo macode eSMS anowanzo kubva kunhamba dzakafanana.
Sezvakataurwa mundima yekupedzisira - kugona kukopa kodhi kuri nyore uye kuri nani.
Mukuwedzera - kana mumwe munhu akaba MacBook yangu, chinhu chekutanga chandinoita kuvharisa uye kudzima zvese "kutumira" uye Kuenderera mberi pa iPhone - ndosaka paine zvakare iyi sarudzo muZvirongwa / Mharidzo. :)
Uye kana mumwe munhu akahukochekera kwauri, iwe unoimisawo here?
Uye nei uine mbiri-nhanho mvumo kana iwe uchigona kuvharira mudziyo wakabiwa ipapo, huh?
Maviri-nhanho verification ibasa rechitatu-bato, saka ini handigone kuishandisa kana kuifuratira, zvirinani kana iri nyaya yemabhangi. Uye ini ndinovhara kana kudzima Mac yangu kuburikidza Tsvaga Mac yangu. Mabhenefiti ekutumira maSMS anodarika kana ndikasaona satani ari kuseri kwezvese.
Hapana ane hanya nekuba, full disk encryption inogadzirisa izvozvo. Asi iwe uchaitei nekombuta yakabiwa? Pamwe hapana, haungazive nezvazvo.
Zvakanaka, hongu, mabhenefiti anokunda, hapana anoona dhiabhori uye mushandisi anogara achitengesa chengetedzo yenguruve yekutamba.
Nenzira, iwe une fungidziro yekuti mabhangi ari kukumanikidza kutumira SMS nekuda kwekunakidzwa?
kana paine arikunetseka saka usashandise. Ndinogutsikana nazvo zvakanyanya
Uye avo vasina zvinovanetsa mukubatana ne2FA havatombozvishandise, nekuti zviri pachena kuti havazive zvavari kuita.
Uye ndinosiya sei imwe nhamba paMacbook ndoisiya pa iPhone? Ndatenda nemhinduro
AFAIK yakanakisa sarudzo ndeye "dzima mameseji ekutumira mameseji pasi peMharidzo mune Zvirongwa (kubva ku iPhone yako)."
Kana ndisingakanganisi, hazvigoneke kuchenesa izvo zvinofanirwa kuendeswa mberi, kana kunyora pasi izvo zvisina.
Zvakanaka, hazvisi nyore here kuba foni pane Mac? Ehe, iwe unogona kuve nepassword yenharembozha, asiwo yeMAC. Ini handisi nyanzvi, asi pamwe hazvisi nyore kusvika kuMac kana ndisingazivi password (ini handirevi kuverenga data, asi kupinda mukati kuitira kuti SMS relay itange).
Zvakare, usakanganwa kuti tiri kutaura nezve chengetedzo yakapetwa kaviri, uko chikamu chekutanga ndicho chikuru - kuisa password yekukudza uye kana iwe usina kunyorwa paMAC kana mune imwe magwaro ezvinyorwa mukati, ipapo pane. hapana kupinda kubhangi (uye haushandise 1111 sepassword :-))
Saka, kuba mac kungangokonzera iwe kukuvara kukuru nekuda kwemutengo chaiwo weMac.
2FA haigadzirise yekutanga Mac kana IP kuba. Mhinduro ndeyokuti anorwisa anofanira kutora kutonga kweMac uye chimwe chinhu. Mac yamukwana manje. Coz inoramba mabhenefiti ese e2FA.
(Zano nderekudzivirira kubva kune "anorwisa paMac anongodzora browser" musiyano, ungangodaro usiri mamiriro akadzorwa zvachose.)
Ingori kuti kana iwe uchifunga Mac kuve yakachengeteka zvachose (haha), saka haufanirwe kubata ne2FA. Uye kana zvisiri, saka 2FA yakamira kukuunzira iyo yakawedzera chengetedzo, senge dhiraivha.
Uye imwezve nguva, zvakanyatsojeka - iwe unoenda kune webhusaiti "nicnebezpecneho.cz", iyo ine ngozi nekuda kwekusiririsa kwemamiriro ezvinhu. Izvi zvinogona kuitika kwauri zviri nyore - haufanirwe kuenda kumasaiti ezvinonyadzisira ipapo, zvakaringana kuti mumwe munhu asachengetedze bhurogi rauri kushanyira uye rega javascript isina kucheneswa iiswe mumashoko. Kune kure kure kushandiswa kwebrowser yako pane iro peji (izvi zvinogona kuitika kwauri, hapana chakanyanya kujairika). Kana kuti ubatwe nesocial engineering...
... mushure memaawa mashomanana unoenda kunotumira mari kubva kubhangi (iwe unopinda ku gmail, github ...). Mukuita izvi, iwe unopinza data rekupinda mukombuta yakatokanganiswa (kana kuti haufanirwe kuita izvozvo kana uine aya mapassword akachengetwa) uye kopira uye unamate kodhi kubva kuSMS imwe nguva.
..uye usiku, komputa yako inopinda mubhangi (gmail...) pachayo, password yatochengetwa nemunhu ane malware. Iwe haugamuchire yekusimbisa SMS pafoni yako, asi ... mune iyo komputa yakakanganiswa.
2FA yakagadzirisa chaizvo aya mamiriro. Kusvikira Apple yaityora.
Ndakafunga kuti 2FA inoreva kuti ndinofanira kuzviratidza nezvinhu zviviri, semuenzaniso:
- pasiwedhi
- nefoni inogamuchira SMS
Zvakanaka, kutumira SMS kuMac kunhare zvakare kunowedzera iyo Mac (kana yakawanda Mac uye iPad yandakabatanidza) seimwe nzira, asi ichiri 2FA. Kana kuti kwete?
Zvekare - mumamiriro ezvinhu akajairwa, 2FA inogadzirisa mamiriro akaita se "Mac yangu yakabiwa uye handizive nezvazvo". Nekuti ipapo unogona kufunga kuti Mac inoziva password yako yebasa (kuti watove nayo yakachengetwa kana kuti uchaiteerera nguva inotevera paunopinda musevhisi). Uye zvino unogona kutarisira kuti achazivawo SMS (kana kuti anogona kuikumbira chero nguva uye achaigamuchira).
Mazhinji masevhisi anopa mbiri-chinhu chechokwadi (Facebook, Dropbox, Google, Microsoft, ...) inobvumira-imwe-nguva mapassword kugadzirwa uchishandisa app (ini ndinoshandisa Google Authenticator). Iyo application inogara ichigadzira-inogumira macode emasevhisi akanyoreswa. Iyo kodhi inogona kukopwa nekukasira uye kushandiswa kupinda. Iwe haufanirwe kumirira kuti SMS isvike uye, kana ikatumirwa kuMac, gadzirisa dambudziko rinotsanangurwa muchinyorwa.
Akakanganisika mac ane mameseji eSMS paunopinda...
Inzwa wakasununguka kubvunza izvozvo. Kana ini ndakabatidza vhezheni yezvikamu zviviri nekugadzirwa kwekodhi yenguva imwe chete uchishandisa application, saka iyo yakapihwa sevhisi haitumire chero SMS.
Kana chimwe chinhu chisati chachinja, masevhisi mazhinji aida foni uye akasiya SMS senge yakasarudzika sarudzo. Saka komputa yako yakabiwa yadzoka.
Nenhamba huru yemabhangi, hapana sarudzo, ingori SMS uye ndizvozvo.
Izvi handizvinzwisisi zvakajeka. Kana mumwe munhu akaba Mac yangu, ndinodzima SMS, kupukuta Mac kure uye kuchinja password kubhangi. Kana kuti chii chiri kubata?
Ungaita izvozvo usati waverenga nyaya ino here?
Zvamazvirokwazvo, zvachose otomatiki.
Asi mbiri-chikamu chechokwadi chiri pamusoro pekuti munhu anorwisa anoda zvisimbiso zviviri: PASSWORD NESMS. Izvi zvinoreva kuti kana ndichitya kuti mumwe munhu achatora Mac yangu yakapetwa, ini handichengete password ipapo, uye kana mumwe munhu akabira browser yangu, haapinde muMessage.
Unowanepi vimbiso yekuti haisi kuzobuda mubrowser yako? Zvinoenderana nemhedzisiro yazvino yePwn4Fun nePwn2Own, zvinoita sekunge kune angangoita maviri zero mazuva eSafari:
"PaPwn4Fun, Google yakaunza chiitiko chinokatyamadza kurwisa Apple Safari ichivhura Calculator semudzi paMac OS X"
"NaLiang Chen weKeen Team:
Kupesana neApple Safari, murwi unofashukira pamwe nebhokisi rejecha, zvichikonzera kuurayiwa kwekodhi. "
Mavara machena akatetepa pane yakasvibira kumashure - hapana kana mudzidzi wepachikoro chakakosha angadai akazvikurudzira zviri nani...
Imwe yenzira dzekumisa izvi ndeye kutsiva kodhi chizvarwa kuburikidza ne dongle (semuenzaniso izvi: http://www.czc.cz/battlenet-authenticator/110449/produkt?gclid=Cj0KEQiAs6GjBRCy2My09an6uNIBEiQANfY4zKhlCIiwD9za5e_QYUAp_YEpqdA9frjVqnS9i8sgIgsaAh558P8HAQ ) yakachengeteka uye inogonesa kuchengetedzeka kwepamusoro, KB inodawo kuita chimwe chinhu chakafanana - chitupa chakaiswa ku USB dhisiki, pasina icho munhu haakwanise kubatana neInternet banking, uye dzimwe nguva password yenguva imwe inotumirwa kufoni, nezvimwe. ... Pane zvakawanda zvinogoneka, asi munhu wese ane yake yaanofanira kusarudza kana chengetedzo yakakosha kwaari (kana aine password here? etc.)
Unicredit ine chinhu chikuru. Iyo smart kiyi haisati iri yekirasi yeSMS, asi ini ndinogadzira password yenguva imwe chete mune nharembozha.
Ini ndinoda zano rekuti sei ini kamwe kamwe ndisingakwanisi kutumira mm pfupi vhidhiyo, izvo zvaigoneka kusvika zvino? Iko hakuna sarudzo yekungoisa vhidhiyo, haipindure, haiiise mumeseji
Děkuji