Ukuvikeleka kobunikazi bemoto exhunyiwe: igunya lomnikazi nobufakazi bomzimba

Lokho okuhlanganiswa yile vidiyo

• Ukulawulwa kokuphatha kobunikazi bekhasimende elithenjwayo kungathinta igunya lemoto elinikezwa izinsiza zohlelo lokusebenza olungezansi.
• UCurry ukhawulela ukuhlolwa okuphelele kweketango lemoto kuma-akhawunti nezimoto zase-US; ukufinyelela kwenkomba yesifunda kanye nesimangalo esibanzi sikaShah kunezindawo ezahlukene.
• Impendulo ehamba cishe amahora amabili ingeyohlaka lwesikhathi lokudalulwa kohlelo lwase-US. I-akhawunti yase-Australia ayinikezi usuku olufanayo lokulungisa.
• Imiyalo esekelwayo incike kumodeli, ukubhalisa, kanye nezinsiza ezixhunyiwe ezisebenzayo. Ukushayela noma ukwehlisa isivimbeli akuzange kusungulwe.
• Abacwaningi bavuselele isimo semoto futhi baqinisekisa imiphumela ebonakalayo nomnikazi eduze kwemoto.
• Umhlahlandlela wokuphrodaktha onenguqulo we-PingIDM uncoma ukususa noma ukuvikela amathuluzi okuthuthukisa futhi ukhomba uhlelo lokufakazela ubuqiniso lwekhonsoli oluhlukile.

Umbhalo obhaliwe ohunyushwe

Kuhunyushwe kusuka ekulandiseni kokuqala kwesiNgisi. Umsindo namazwibela atholakalayo alawulwa yi-YouTube.

Ukungena ngemvume kwaba kanjani ukhiye wemoto?

0:00 Uhlelo lokusebenza lwemoto yakho luyahlola ukuthi ungumnikazi. Abacwaningi benza iseva yakho yobunikazi ibafakazele esikhundleni salokho. Kule vidiyo, ukungena ngemvume kwaba kanjani yigunya lemoto? Futhi yini efakazele ukuthi imoto ihambile ngempela? NgoMsombuluko, ngoNovemba wesishiyagalolunye, futhi lena yiThe Daily Diff. Uhlolo olulodwa lokugcina luhlukanisa isikrini esiqandayo nemoto evuliwe. Izinsiza zezimoto ezixhunyiwe izinhlelo ze-inthanethi ezingemuva kohlelo lokusebenza lwefoni lomnikazi. UShubham Shah noSam Curry babika ukuthi ukungena ngemvume kobunikazi bokuphatha kwabavumela

0:25 ukuthola igunya lohlelo lokusebenza elifana nelomnikazi. Babonise imiyalo ekude ezimotweni ezinegunya. I-akhawunti yabo yase-US ithi amaphutha alungiswa ngemuva kokudalulwa.

Yini esanda kushicilelwa, futhi yini eyayilungisiwe?

0:33 Zombili izincwadi zavela ngoNovemba wesikhombisa. UCurry usuku lwakhe lokudalulwa ekuqaleni kwalo nyaka. UShah uchaza ucwaningo lwase-Australia oluqala ngoJulayi. Lezo izikhathi ezahlukene. Ukuzifunda njengesimo esiphuthumayo somhlaba wonke kungase kunikeze isihloko amandla amaningi kunobufakazi. UShah wathenga enye yezimoto ze-SUV zomkhiqizi ongaqanjwanga ngo-2023. Iyiphi insiza ye-inthanethi ethola impompi uma ngivula imoto yami?

0:53 Yena noCurry bachitha amasonto amabili behlola uhlelo lwe-identity. I-key fob ithole ithimba le-backend. Uhlelo lokusebenza likufaka ngemvume futhi lilayishe igaraji lakho.

Iyiphi identity inkonzo yemoto eyithemba?

1:01 Inkonzo exhunyiwe ihlobanisa lelo akhawunti nezimoto kanye nemvume yemiyalo. Lelo buhlobo yimpendulo ewusizo. Noma ngubani olawula ubunikazi bekhasimende elithenjwayo angathola amakhono ahlosiwe wekhasimende. E-Australia, ithuluzi lokuphatha elisesidlangalaleni libonise imininingwane yekhasimende ngokusebenzisa izindawo ezivikelwe okhiye abathunyelwe ku-JavaScript yesiphequluli. Incazelo enzima yemfihlo. UShah waphinde wathola iziqinisekiso zomlawuli wobunikazi ebhandeni lomthengisi,

1:24 futhi wabika ukuthi basebenza ekukhiqizeni. Iphayimeteri lavimba izindlela ezibucayi. Kodwa izingqimba zesoftware zahlulela isicelo esifanayo ngendlela ehlukile. UCurry uthi onqenqemeni lwalubheka indlela njengequkethwe elimile ngenkathi i-backend ifinyelela ikhonsoli yokuphatha. Ikhaphethi lokwamukela nomnyango ohluthiyiwe babekhuluma ngamamephu ahlukene.

Kungani ikhonsoli yokuthuthukisa ibalulekile?

1:41 Lelo khonsoli lasamukela iziqinisekiso zomlawuli ezizenzakalelayo, ngokusho kukaCurry. Umhlahlandlela wokuphrodaktha usutshela abasebenzisi ukuthi bawususe noma bawuvikele, futhi uthi ukufakazela ubuqiniso kwalo kuhlukile kokokufakazela ubuqiniso komkhiqizo wobunikazi. Okunye ukungena ngemvume okucashile phakathi kwamaphuzu okuhlu lwezincwadi. Amathuluzi okuphatha abonisiwe avumele ikhodi ukuthi isebenze ngaphakathi kwenkonzo yobunikazi. Abacwaningi bafinyelele amarekhodi amakhasimende ngemuva komngcele wokuhlunga womphakathi. Ihluzo lephayimeteri lihlola ithrafikhi ewela lelo phayimeteri.

2:06 Inqubo esivele ingaphakathi kwenkonzo inobudlelwane obuhlukile nedatha. Lokhu kuchaza inkinga yezinto eziningi ku-akhawunti yase-US. Amarekhodi obunikazi ahlinzeka ngemininingwane yokungena ngemvume kanye nendawo yekhodi yokuqinisekisa i-imeyili. Ukulawulwa kokuphatha ngalawo marekhodi kuvumele abacwaningi ukuqedela ukungena ngemvume. Incazelo yangaphezulu yekhasimende yayisivele isishintshile. UShah uchaza ukungahleleki kokufakazela ubuqiniso okuhlukile kwase-Australia okwavumela iketango lakhe ukweqa into eyengeziwe.

2:31 Ukubiza ukufakazela ubuqiniso bezinto eziningi njengokuphukile yonke indawo kungasula imininingwane yokumiswa abathuthukisi abayidingayo. Gcina into yakho eyengeziwe. Gcina uhlelo oluchaza umnikazi walo ethembekile futhi. Iziqinisekiso zinezijob ezahlukene.

Nini iseshini iba yigunya lohlelo lokusebenza?

2:43 Ukungena komlawuli kulawula amarekhodi obunikazi. Iseshini yekhasimende imele ukungena ngemvume okuqedile. Uhlelo lokusebenza lweselula luthola amathokheni amukelwa izinsiza zalo. Ukubiza konke lokho ithokheni lemilingo kulahlekisisa imingcele eyenza ukufinyelela okulingana nomnikazi kwaba nokwenzeka. UCurry uchaza izinhla zemibhalo yobunikazi zabakhiqizi bezimoto ababili abangaqanjwanga ezindaweni eziningi. Ukhawulela ukuhlolwa okuphelele kwezimoto kuma-akhawunti nezimoto zase-US. UShah uchaza umkhiqizi wemoto oyedwa kuyo yonke imikhiqizo emibili yase-Australia,

3:09 bese efuna ukufinyelela okubanzi okuhlanganisiwe. Lezo zindawo ezihlukene azisinikezi isisekelo sokuhlonza izinkampani. IHacker News ixoxa ngokuthi ukuvula ifoni kufanele kube khona yini. Impendulo eyodwa ikhomba ekuhloleni ukukhiya okukhohliwe nokupholisa noma ukufudumeza imoto. Abantu bathanda izici eziwusizo. Ukunikeza amakhasimende lula kuphinde kunikeze inkonzo umsebenzi obizayo. Kufanele izuze igunya layo.

Yini ukulungiswa okwakufaka ngempela?

3:29 UCurry ubika ukuthi bobabili abakhiqizi bezimoto balungise ubungozi cishe amahora amabili ngemuva kokuwuthola futhi bashintsha iziqinisekiso ezithintekile. Leso isikhathi sokuhambisana kwase-US. I-akhawunti kaJulayi kaShah ayinikezi isikhathi esifanayo sokulungisa. I-akhawunti yakhe ishiya isimo samanje sokulungiswa kwase-Australia singacacisiwe. Asikwazi ukuguqula impendulo yehora elilodwa ibe isitophuwashi sokulungisa somhlaba wonke. Kubathuthukisi, qala ngendawo yokuphatha. Bala ukuthi yini evezwe futhi yiluphi uhlelo lokufakazela ubuqiniso oluyivikelayo.

3:55 Susa amathuluzi okuthuthukisa angasetshenzisiwe. Vikela amathuluzi owagcinayo. Buyekeza ukuhunyushwa kwesicelo kwengqimba ngayinye ngaphambi kokubheka umthetho wonqenqemeni njengokugcina igama ekungeneni. UShah uthi iketango lase-Australia lagcina lisebenze cishe phakathi kwamabili, livula imoto ababevumelekile ukuyihlola. Ubunikazi bamapayipi anesiphetho esanelisayo. Umbhalo uzuza isiphetho sawo ngokuhlola enye ingxenye.

4:14 Ukuzethemba kwe-backend yingxenye kuphela yengxoxo. I-akhawunti yase-US kaCurry ithi amakhono ancike kumodeli yemoto, ukubhalisa, kanye nezinsiza ezixhunyiwe ezisebenzayo. Imiyalo esekelwayo ihlanganisa ukuvula umnyango nokuqalisa injini ekude. Akukho ukubhala okusungula ukushayela noma ukwehlisa isivimbeli. Ubufakazi buhlanganisa amakhono athile ohlelo lokusebenza kanye nemvume yomzimba yezibonakaliso. Buza ukuthi iyiphi insiza engashintsha amaqiniso agunyazayo akho athembela kuwo. Ukulungisa kabusha iphasikhodi nezinguquko zoxhumana nabo kubalulekile ngoba ezinye izinhlelo zikusebenzisa

4:41 njengeqiniso. Ukungena ngemvume okuvumelekile kungase kusekelwe kubunikazi obubhalwe kabusha. Le ndaba yemoto iba indaba yakho yohlelo lokusebenza lapho.

Yini efakazele ukuthi imoto ihambile ngempela?

4:48 Uhlolo lokugcina lwenzeka eduze nemoto. UCurry uthi umyalo we-API owamukelwe kuphela awuzange ufakazele lutho mayelana nokuziphatha kwemoto. Bavuselele isimo sayo futhi baqinisekisa umphumela obonakalayo nomnikazi emi eduze kwayo. UShah wavula futhi waqalisa imoto, bese eyimisa futhi ayikhiya futhi. Ubufakazi bafika egcekeni. Uma ukhetha ukukufunda lokhu kunokungizwa ngikusho, i-diff ihlala ku-inbox yakho njalo ekuseni, mahhala ku-daily diff dot dev, isixhumanisi ngezansi. Ngakho-ke, isinqumo sanamuhla, sidinga ukubuyekezwa.

Iyiphi umngcele odinga ukubuyekezwa?

5:10 Ngingahlola izindlela zokuphatha kubunikazi bekhasimende elithenjwayo ngaphambi kokulithemba ngemishini yokulawula umzimba. Ukulungiswa kwe-US okubikiwe kufanele kunikezwe udumo. Ubani ongaphinde achaze umnikazi zonke izinsiza ezingezansi ezikholwayo? Futhi lokho yi-diff yanamuhla. NginguNiko wase-Axrisi. Hlanganisa ngokuzibophezela. Hlanganisa ngokuzibophezela.

Imithombo

1. Hacking Two Automakers: ForgeRock Path Confusion, RCE, and Remote Vehicle AccessShubham Shah and Sam Curry
2. unlocking any car from X brand in most of the worldShubham Shah
3. Remove or protect development and debug tools — PingIDM 7.2Ping Identity
4. Connected-car disclosure discussionHacker News
5. Sam Curry portrait by Magistr8; cropped/background-masked/resized without generated detail; photograph date unspecifiedWikimedia Commons
6. Portrait licence — CC0; no endorsement or current-reaction claimCreative Commons
7. Sam Curry's official About page corroborates portrait identitySam Curry
8. Jurassic Park fictional-character GIF; silent maximum two-second transformed process commentary, no actual automaker reaction or blanket reuse licenceScreenJunkies / GIPHY
9. GIF uploader's native Source link; publisher provenance is not a blanket reuse licenceScreenJunkies
10. Is This A Pigeon template; maximum two-second transformed fictional process satire, no actual automaker reaction or blanket reuse licenceImgflip