Glassworm trɔ gbɔ: Unicode ƒe amedzidzedze makpɔmakpɔ ƒe ƒutsotsoe yeye aɖe va dze nudzraɖoƒewo

Glassworm trɔ gbɔ: Unicode ƒe amedzidzedze makpɔmakpɔ ƒe ƒutsotsoe yeye aɖe dze nudzraɖoƒewo

Le Internet dzi ŋɔdzidoname ƒe nɔnɔme si le tɔtrɔm ɣesiaɣi me la, afɔku aɖe si wonya nyuie gake wòle ŋgɔ yim ɖe edzi la gadze ake: Glassworm ƒe amedzidzedze. Dedienɔnɔ ŋuti numekulawo le amedzidzedze "makpɔmakpɔ" siawo ƒe ƒutsotsoe yeye aɖe yome tim fifia, eye wole taɖodzinu ɖom koŋ na egbegbe kɔmpiutadziɖoɖowo wɔwɔ ƒe dzi—tsoƒekɔpi ƒe nudzraɖoƒewo abe GitHub, GitLab, kple Bitbucket ene. Amedzidzedze siawo zãa dijitaal nuŋɔŋlɔ ƒe avɔ ŋutɔŋutɔ—Unicode ƒe ŋɔŋlɔdzesiwo—tsɔ wɔa kɔpi vɔ̃ɖi siwo dzena abe ɖe womewɔa nuvevi ame o bliboe na amegbetɔ siwo léa ŋku ɖe nu ŋu ene. Esi dɔwɔhawo le ŋu ɖom ɖe ɖoɖo siwo wowɔna le ɖoɖo nu, siwo do ƒome kple wo nɔewo ŋu geɖe wu ta la, ŋutete si li be gbagbã makpɔmakpɔ sia tɔgbe natso kɔmpiutadziɖoɖo blibo aɖe me alea gbegbe kpɔ o. Gbugbɔgadzɔ sia te gbe ɖe afɔku vevi aɖe si le míaƒe dijitaal dɔwɔnuwo ƒe ƒuƒoƒo me dzi.

Alesi Unicode blea Dɔwɔla ƒe Ŋku

Le eƒe gɔmedzedze la, Glassworm ƒe amedzidzedze wɔa Unicode ƒe "homoglyph" kple mɔ eve dzi ɖuɖu ƒe nuŋɔŋlɔwo ŋudɔ. Homoglyphs nye ŋɔŋlɔdzesi vovovo siwo dzena abe ɖe wosɔ kple amegbetɔ ƒe ŋku ene, abe Latingbe me "a" kple Cyrillic "а" ene. Amedzidzela ateŋu atsɔ dzedzeme si sɔ kloe tso ŋɔŋlɔdzesi bubu me aɖɔli ŋɔŋlɔdzesi si le se nu le dɔwɔwɔ ƒe ŋkɔ alo tɔtrɔɖenu me. Le ayemɔ nu wu la, mɔ eve dzi kpɔkpɔ ƒe nuŋɔŋlɔwo ate ŋu agbugbɔ aɖo nuŋɔŋlɔwo gɔmeɖeɖe ɖe ɖoɖo nu, si ana amedzidzela naɣla kɔpi vɔ̃ɖiwo ɖe nusi dze abe nya aɖe ene me. Le kpɔɖeŋu me, woate ŋu aɖe fli si le abe ka ƒe gɔmesese si me afɔku mele o ene afia ne wowɔe be enye ɖoɖo ƒe yɔyɔ si me afɔku le. Ameflunya sia to asi kɔpiwo me toto ŋu keŋkeŋ, elabena tameɖoɖo vɔ̃ɖi la do viviti le nukpɔkpɔ me.

Afɔku Gãwo na Egbegbe, Modular Asitsatsa

Afɔkua nu sẽ ŋutɔ na habɔbɔ siwo wɔa dɔ le gɔmeɖose siwo nye modular dzi, afisi wotu kɔmpiutadziɖoɖowo tso ememe kple ame etɔ̃lia ƒe akpa gbogbo aɖewo me. Woateŋu akaka nugblẽfexeɖoɖo si womekpɔna o le nudzraɖoƒe ƒe module ɖeka me le eɖokui si to CI/CD pɔmpiwo dzi, si axɔ dɔ le subɔsubɔdɔ ɖesiaɖe si nɔ te ɖe edzi la me. Menye nyatakakawo koe amedzidzedzea fiana o; ate ŋu agblẽ xɔtutuwo, awɔ megbeʋɔtruwo, alo atsɔ ransomware ade dɔwɔwɔ me tso nusi wobuna be enye codebase si dzi woka ɖo la me. Le asitsaha siwo ƒe dɔwɔnawo katã nye dijitaal, tso dɔwɔɖoɖo siwo dze ŋgɔ asisiwo dzi va ɖo ememe nuwo wɔwɔ le wo ɖokui si dzi la, menye IT nya dzro aɖe koe sedzidada ma nye o—enye afɔku si le anyinɔnɔ me na dɔwɔwɔ ƒe yiyi kple kakaɖedzi.

Afi siae dɔwɔwɔ ƒe ɖoɖo ɖeka va zua aʋawɔnu si wozãna le aɖaŋu me. Nuƒolanɔƒe abe Mewayz ene tsɔa dɔwɔwɔ ƒe ɖoɖo veviwo ɖoa teƒe ɖeka, tso dɔa dzikpɔkpɔ dzi va ɖo dɔwɔwɔ yometiti dzi. To nudzraɖoƒe ƒe dɔwɔnawo tsɔtsɔ de asitsatsa ƒe OS si le dedie, si woate ŋu adzro me me la, ƒuƒoƒowo kpɔa nukpɔsusu blibo. Woateŋu ade dzesi ɖokuitsɔtsɔna alo tɔtrɔ siwo mesɔ o le modules veviwo me le dɔa ƒe ɣeyiɣiɖoɖo siwo keke ta wu kple ƒuƒoƒo ƒe nuwɔnawo ƒe nyawo me, atsɔ nuwɔna me dzodzro ƒe ƒuƒoƒo vevi aɖe akpe ɖe eŋu le raw code review tame.

Ametakpɔnu Tutu Ðe Nusiwo Womekpɔna O Ŋu

Avuwɔwɔ kple Glassworm ƒe atsyã ƒe amedzidzedzewo bia mɔnu si me woawɔ nu vovovowo le si atsɔ mɔ̃ɖaŋununya, dɔwɔwɔ, kple sidzedze tsaka. Dedienɔnɔ magate ŋu anye nusi ŋu wobu le emegbe si wozãna do ŋgɔ teti na dɔwɔwɔ o; ele be woalɔ̃e ɖe ŋgɔyiyi ƒe agbenɔƒe bliboa me.

ƒe nyawo
• Wɔ Pre-commit Hooks ŋudɔ: Zã dɔwɔnu siwo léa ŋku ɖe Unicode tɔtɔamewo, mɔ eve ƒe ŋɔŋlɔdzesiwo, kple kɔda ƒe nɔnɔme siwo ŋu ɖikeke le ŋu tẽ le dɔwɔla ƒe dɔwɔwɔ me, xea mɔ na commit siwo me kuxi le hafi woaɖo alɔdze gã la gbɔ.
• Zi Dedienɔnɔ Ŋuti Numekuku Siwo Wowɔna Le Wo Ðokui Dzi: Tsɔ dɔwɔnu tɔxɛ siwo nye static application security testing (SAST) de wò CI/CD pipeline si wona hehee tẽ be woade dzesi homoglyph kple obfuscation amedzidzedzewo.
• Wɔ Zero-Trust Model na Code: Bu code katã, tso ememe nudzraɖoƒewo gɔ̃ hã, be woateŋu agblẽ nu le wo ŋu. Bia be woade asi kɔdawo te sesĩe eye woaɖo kpe edzi na ƒoƒoawo katã, vevietɔ ɖe modules veviwo me.
• Do Dedienɔnɔ Ŋuti Nyanya ɖe ŋgɔ: Hehe ŋgɔyiyi ƒe ƒuƒoƒowo be woase ŋɔdzinu sia koŋ gɔme. De dzi ƒo na dekɔnu si me ŋɔŋlɔdzesi ɖesiaɖe ƒe fɔmaɖimaɖi, le nyateƒe me, nye kɔda ƒe nyonyome ƒe akpa aɖe.

ƒe nyawo "Glasworm ƒe gbugbɔgadzɔ nye ŋkuɖodzinya vevie be míaƒe kaka ɖe nukpɔkpɔ ƒe nɔnɔmetatawo dzi nye gbɔdzɔgbɔdzɔ. Kɔmpiutadziɖoɖowo ƒe dedienɔnɔ ƒe liƒo si kplɔe ɖo menye vodadawo didi le susuŋudɔwɔwɔ me ko o, ke boŋ enye nuŋɔŋlɔ ƒe nuŋɔŋlɔ ŋutɔ ƒe blibonyenye taʋiʋli." — Internet Dzi Dedienɔnɔ Ŋuti Numekula, Alilikpo me Afɔku Ŋuti Nyatakaka.

Dedienɔnɔ ƒe ƒoƒo ƒu ɖe Dɔwɔwɔ ƒe Nu vevitɔ me

Mlɔeba la, ŋɔdzinu siwo womekpɔna o dzi ɖuɖu bia be woana dedienɔnɔ nadze eye woate ŋu awɔ nu ɖe eŋu le habɔbɔ bliboa me. Dɔwɔnu siwo me kadodo aɖeke mele o kple ƒuƒoƒo siwo me woɖea mɔ ɖe nu ŋu le la wɔa dometsotso siwo me amedzidzedzewo abe Glassworm ene ate ŋu adzi ɖe edzi le womakpɔe o. Modular business OS, abe Mewayz ene, naa kadodoŋusẽa. To nudzraɖoƒedzikpɔkpɔ, dedienɔnɔ ŋuti nuxlɔ̃amewo, ƒuƒoƒo ƒe kadodo, kple dɔwɔwɔ ŋuti nuŋlɔɖiwo hehe va nɔnɔme ɖeka si me ɖekawɔwɔ me le me la, ewɔa dɔwɔwɔ ƒe ƒuƒoƒo si me kɔ. Dedienɔnɔ ƒe nudzɔdzɔ si le kɔda module me meganye nuxlɔ̃ame ko le dashboard si le vovo me o; enye nusi woate ŋu awɔ dɔ le si do ƒome kple dɔa, ƒuƒoƒoa, kple ɣeyiɣiɖoɖo tɔxɛa, si wɔnɛ be woate ŋu axe mɔ ɖe enu kabakaba, si wowɔ ɖekae. Le avuwɔwɔ kple amedzidzedze siwo màte ŋu akpɔ o me la, aʋawɔnu gãtɔe nye ɖoɖo si megblẽa dɔwɔna aɖeke ɖi le vɔvɔli me o.

Nyabiase Siwo Wobiana Enuenu

Glassworm trɔ gbɔ: Unicode ƒe amedzidzedze makpɔmakpɔ ƒe ƒutsotsoe yeye aɖe dze nudzraɖoƒewo

Le Internet dzi ŋɔdzidoname ƒe nɔnɔme si le tɔtrɔm ɣesiaɣi me la, afɔku aɖe si wonya nyuie gake wòle ŋgɔ yim ɖe edzi la gadze ake: Glassworm ƒe amedzidzedze. Dedienɔnɔ ŋuti numekulawo le amedzidzedze "makpɔmakpɔ" siawo ƒe ƒutsotsoe yeye aɖe yome tim fifia, eye wole taɖodzinu ɖom koŋ na egbegbe kɔmpiutadziɖoɖowo wɔwɔ ƒe dzi—tsoƒekɔpi ƒe nudzraɖoƒewo abe GitHub, GitLab, kple Bitbucket ene. Amedzidzedze siawo zãa dijitaal nuŋɔŋlɔ ƒe avɔ ŋutɔŋutɔ—Unicode ƒe ŋɔŋlɔdzesiwo—tsɔ wɔa kɔpi vɔ̃ɖi siwo dzena abe ɖe womewɔa nuvevi ame o bliboe na amegbetɔ siwo léa ŋku ɖe nu ŋu ene. Esi dɔwɔhawo le ŋu ɖom ɖe ɖoɖo siwo wowɔna le ɖoɖo nu, siwo do ƒome kple wo nɔewo ŋu geɖe wu ta la, ŋutete si li be gbagbã makpɔmakpɔ sia tɔgbe natso kɔmpiutadziɖoɖo blibo aɖe me alea gbegbe kpɔ o. Gbugbɔgadzɔ sia te gbe ɖe afɔku vevi aɖe si le míaƒe dijitaal dɔwɔnuwo ƒe ƒuƒoƒo me dzi.

Alesi Unicode blea Dɔwɔƒea ƒe Ŋku

Le eƒe gɔmedzedze la, Glassworm ƒe amedzidzedze wɔa Unicode ƒe "homoglyph" kple mɔ eve dzi ɖuɖu ƒe nuŋɔŋlɔwo ŋudɔ. Homoglyphs nye ŋɔŋlɔdzesi vovovo siwo dzena abe ɖe wosɔ kple amegbetɔ ƒe ŋku ene, abe Latingbe me "a" kple Cyrillic "а" ene. Amedzidzela ateŋu atsɔ dzedzeme si sɔ kloe tso ŋɔŋlɔdzesi bubu me aɖɔli ŋɔŋlɔdzesi si le se nu le dɔwɔwɔ ƒe ŋkɔ alo tɔtrɔɖenu me. Le ayemɔ nu wu la, mɔ eve dzi kpɔkpɔ ƒe nuŋɔŋlɔwo ate ŋu agbugbɔ aɖo nuŋɔŋlɔwo gɔmeɖeɖe ɖe ɖoɖo nu, si ana amedzidzela naɣla kɔpi vɔ̃ɖiwo ɖe nusi dze abe nya aɖe ene me. Le kpɔɖeŋu me, woate ŋu aɖe fli si le abe ka ƒe gɔmesese si me afɔku mele o ene afia ne wowɔe be enye ɖoɖo ƒe yɔyɔ si me afɔku le. Ameflunya sia to asi kɔpiwo me toto ŋu keŋkeŋ, elabena tameɖoɖo vɔ̃ɖi la do viviti le nukpɔkpɔ me.

Afɔku Gãwo na Egbegbe, Modular Asitsatsa

Afɔkua nu sẽ ŋutɔ na habɔbɔ siwo wɔa dɔ le gɔmeɖose siwo nye modular dzi, afisi wotu kɔmpiutadziɖoɖowo tso ememe kple ame etɔ̃lia ƒe akpa gbogbo aɖewo me. Woateŋu akaka nugblẽfexeɖoɖo si womekpɔna o le nudzraɖoƒe ƒe module ɖeka me le eɖokui si to CI/CD pɔmpiwo dzi, si axɔ dɔ le subɔsubɔdɔ ɖesiaɖe si nɔ te ɖe edzi la me. Menye nyatakakawo koe amedzidzedzea fiana o; ate ŋu agblẽ xɔtutuwo, awɔ megbeʋɔtruwo, alo atsɔ ransomware ade dɔwɔwɔ me tso nusi wobuna be enye codebase si dzi woka ɖo la me. Le asitsaha siwo ƒe dɔwɔnawo katã nye dijitaal, tso dɔwɔɖoɖo siwo dze ŋgɔ asisiwo dzi va ɖo ememe nuwo wɔwɔ le wo ɖokui si dzi la, menye IT nya dzro aɖe koe sedzidada ma nye o—enye afɔku si le anyinɔnɔ me na dɔwɔwɔ ƒe yiyi kple kakaɖedzi.

Ametakpɔnu Tutu ɖe Nusiwo Womekpɔna O Ŋu

Avuwɔwɔ kple Glassworm ƒe atsyã ƒe amedzidzedzewo bia mɔnu si me woawɔ nu vovovowo le si atsɔ mɔ̃ɖaŋununya, dɔwɔwɔ, kple sidzedze tsaka. Dedienɔnɔ magate ŋu anye nusi ŋu wobu le emegbe si wozãna do ŋgɔ teti na dɔwɔwɔ o; ele be woalɔ̃e ɖe ŋgɔyiyi ƒe agbenɔƒe bliboa me.

Dedienɔnɔ ƒe ƒoƒo ƒu ɖe Dɔwɔna ƒe Nu vevitɔ me

Mlɔeba la, ŋɔdzinu siwo womekpɔna o dzi ɖuɖu bia be woana dedienɔnɔ nadze eye woate ŋu awɔ nu ɖe ​​eŋu le habɔbɔ bliboa me. Dɔwɔnu siwo me kadodo aɖeke mele o kple ƒuƒoƒo siwo me woɖea mɔ ɖe nu ŋu le la wɔa dometsotso siwo me amedzidzedzewo abe Glassworm ene ate ŋu adzi ɖe edzi le womakpɔe o. Modular business OS, abe Mewayz ene, naa kadodoŋusẽa. To nudzraɖoƒedzikpɔkpɔ, dedienɔnɔ ŋuti nuxlɔ̃amewo, ƒuƒoƒo ƒe kadodo, kple dɔwɔwɔ ŋuti nuŋlɔɖiwo hehe va nɔnɔme ɖeka si me ɖekawɔwɔ me le me la, ewɔa dɔwɔwɔ ƒe ƒuƒoƒo si me kɔ. Dedienɔnɔ ƒe nudzɔdzɔ si le kɔda module me meganye nuxlɔ̃ame ko le dashboard si le vovo me o; enye nusi woate ŋu awɔ dɔ le si do ƒome kple dɔa, ƒuƒoƒoa, kple ɣeyiɣiɖoɖo tɔxɛa, si wɔnɛ be woate ŋu axe mɔ ɖe enu kabakaba, si wowɔ ɖekae. Le avuwɔwɔ kple amedzidzedze siwo màte ŋu akpɔ o me la, aʋawɔnu gãtɔe nye ɖoɖo si megblẽa dɔwɔna aɖeke ɖi le vɔvɔli me o.