Pulogalamu yatsopano yaumbanda yapezeka pamalopo informace ndipo potero amapezerapo mwayi pa Google OAuth endpoint yosadziwika yotchedwa MultiLogin kuti itsitsimutsenso makeke otsimikizira omwe anatha ntchito ndikulowa muakaunti ya ogwiritsa ntchito ngakhale mawu achinsinsi a akauntiyo akhazikitsidwanso. Tsamba la BleepingComputer linanena za izi.
Kumapeto kwa Novembala chaka chatha, BleepingComputer inanena za mapulogalamu aukazitape otchedwa Lumma omwe amatha kubwezeretsa ma cookie otsimikizika a Google omwe adatha ntchito pamasewera apakompyuta. Mafayilowa amatha kulola kuti anthu ophwanya malamulo azitha kulowa muakaunti ya Google mosaloledwa ngakhale eni ake atatuluka, kukonzanso mawu achinsinsi, kapena kumaliza nthawi yawo. Kulumikizana ndi lipoti la seva ya CloudSEK, tsamba lawebusayiti tsopano lafotokoza momwe kuwukira kwa tsiku la zero kumagwirira ntchito.
Zithunzi
Mwachidule, cholakwikacho chimalola kuti pulogalamu yaumbanda ikhazikitsidwe pakompyuta kuti "ichotse ndikuzindikira zidziwitso zomwe zili patsamba la Google Chrome." CloudSEK yapeza kachilombo katsopano komwe kamayang'ana ogwiritsa ntchito Chrome kuti azitha kulowa muakaunti ya Google. Pulogalamu yaumbanda yowopsa iyi imadalira otsata ma cookie.
Chifukwa chomwe izi zitha kuchitika popanda ogwiritsa ntchito kuzindikira ndi chifukwa mapulogalamu aukazitape omwe tawatchulawa amathandizira. Itha kubwezeretsa ma cookie a Google omwe anatha ntchito pogwiritsa ntchito kiyi ya API yomwe yangopezeka kumene. Choipitsitsacho, zigawenga zapaintaneti zitha kugwiritsanso ntchito mwayiwu kamodzinso kulowa muakaunti yanu ngakhale mutakhazikitsanso chinsinsi cha akaunti yanu ya Google.
Mutha kukhala ndi chidwi ndi
Malinga ndi BleepingComputer, adalumikizana ndi Google kangapo pankhaniyi ya Google, koma sanayankhebe.
