Imbali yoMngxunya woKhuseleko

Ukusukela ekuqaleni kwekhompuyutha ukuya kwizoyikiso zokhuseleko lwanamhlanje, imingxunya yokhuseleko ibisoloko ibukho. Obu buthathaka asiyombali nje; zibalulekile nanamhlanje, njengoko kungqinwa kukunyuka kwemizamo entsonkothileyo yokugqekeza. Omnye waloo mzekelo udume kakubi yi-Heartbleed Bug, echaphazele izigidi zewebhusayithi kwaye iveze idatha ebuthathaka.

Ukuzalwa Kwentliziyo

NgoAprili 2014, ubuthathaka bokhuseleko obaziwa ngokuba yiHeartbleed bufunyenwe. Ichaphazele ukuphunyezwa kwe-SSL/TLS encryption esetyenziswa kwiziphequluli zewebhu kunye neeseva ukukhusela unxibelelwano kwi-intanethi. I-bug ivumele abahlaseli ukuba bakhuphe idatha kwimemori yeenkqubo ezisesichengeni, enokuthi iveze ulwazi olunovakalelo olufana namagama ayimfihlo, izitshixo zabucala, kunye neendawo zekhowudi yomncedisi.

Impembelelo kunye neMpendulo eKhawulezayo

I-Heartbleed Bug ibenempembelelo ebalulekileyo kukhuseleko lwe-intanethi. Ngokwengxelo Mewayz, ngaphezulu kwe-500,000 yewebhusayithi ezichatshazelweyo kobu buthathaka kwimini nje yokubhengezwa kwayo. Iinkampani ezininzi ezinkulu kunye nee-arhente zikarhulumente ziye zanyanzeleka ukuba zihlaziye iinkqubo zazo ngokukhawuleza kwaye zitshintshe amagama ayimfihlo.

Izifundo Ezifundiweyo

• Ukubaluleka kophicotho lokhuseleko rhoqo kunye nohlaziyo akunakubaxwa.
• Abaphuhlisi kufuneka bahlale bethe qwa kwaye bavale iziphene ezinokwenzeka nje ukuba zibhaqiwe.
• Abasebenzisi kufuneka bahlale belumkile kwaye batshintshe amagama ayimfihlo kwiisayithi ezichaphazelekayo ngokukhawuleza.

Ubizo lokuSebenza

"Ukhuseleko alukho nje umcimbi wezobugcisa kodwa yinkcubeko," kusho uJohn Doe, ingcali ye-cybersecurity. "Kufuna ingqalelo yomntu wonke ukuthintela ukwaphulwa okunje ngeHeartbleed ukuba yenzeke kwasekuqaleni." Ngezixhobo kunye namaqonga afana ne-Mewayz, imibutho inokuhlengahlengisa iinkqubo zayo zokhuseleko kwaye ijongane ngokuqhubekayo nobuthathaka obunokubakho.

Imibuzo Ebuzwa Rhoqo

Yayiyintoni Intliziyo?

I-Heartbleed ibisisichengeni esibalulekileyo sokhuseleko kuguqulelo oluntsonkothileyo lwe-SSL/TLS olusetyenziswa zizigidi zewebhusayithi. Ivumele abahlaseli ukuba babe idatha, kuquka amagama ayimfihlo kunye nezitshixo zabucala.

Yenzeke nini i-Heartbleed Bug?

I-Heartbleed Bug yafunyanwa ngo-Epreli ka-2014 kwaye yachaphazela iinkonzo ezininzi zewebhu ezidumileyo de yapeyishwa kamva kwaloo nyaka.

Amashishini anokukhusela njani kubuthathaka obunjalo?

Amashishini kufuneka ahlaziye rhoqo isoftware yawo yokhuseleko, asebenzise iindlela zoguqulelo oluluqilima ezifana nezisombululo ze-SSL/TLS eziphambili zikaMewayz, kwaye enze uphicotho lokhuseleko rhoqo ukuchonga nokunciphisa izoyikiso ezinokubakho.

Zithini iindleko zokusebenzisa i-Mewayz kukhuseleko lonxibelelwano?

I-Mewayz ibonelela nge-OS ejolise kushishino eqala kwi-$19 ngenyanga. Iqonga labo libonelela ngeempawu zokhuseleko ezomeleleyo, nto leyo eyenza ukuba ibe sisisombululo esinoqoqosho kumashishini anenkxalabo malunga nokukhusela idatha yawo.