Apple iev\u0113rojami palielina atalgojumu par kiberdro\u0161\u012bbas k\u013c\u016bdu atra\u0161anu<\/p>\n
Tehnolo\u0123iju gigants Apple ir veicis noz\u012bm\u012bgus uzlabojumus sav\u0101 programmat\u016bras dro\u0161\u012bbas v\u0101jumu mekl\u0113\u0161anas un atl\u012bdz\u012bbas programm\u0101 Apple Security Bounty. S\u0101kotn\u0113ji uzs\u0101kta 2020. gad\u0101, programma jau veiksm\u012bgi atalgojusi vair\u0101k nek\u0101 800 dro\u0161\u012bbas p\u0113tnieku ar kop\u0113jo summu, kas p\u0101rsniedz 35 miljonus ASV dol\u0101ru. Tagad Apple ir gatavs v\u0113l d\u0101sn\u0101k atalgot speci\u0101listus par kritisku k\u013c\u016bdu atkl\u0101\u0161anu sav\u0101s sist\u0113m\u0101s, palielinot potenci\u0101lo atl\u012bdz\u012bbu l\u012bdz pat 5 miljoniem ASV dol\u0101ru.<\/p>\n
Jauni bonusi par ekskluz\u012bvu k\u013c\u016bdu mekl\u0113\u0161anu<\/p>\n
Apple sav\u0101 ofici\u0101laj\u0101 emu\u0101r\u0101 ir detaliz\u0113ti izkl\u0101st\u012bjis jaunin\u0101jumus, kas paredz divk\u0101r\u0161ot maksim\u0101lo atl\u012bdz\u012bbas summu l\u012bdz 2 miljoniem ASV dol\u0101ru. \u0160\u012b summa paredz\u0113ta par t\u0101 d\u0113v\u0113to \u201eeksploitu \u0137\u0113\u017eu\u201d atra\u0161anu \u2013 sare\u017e\u0123\u012btu uzbrukumu sec\u012bbu, kas var\u0113tu nodro\u0161in\u0101t piek\u013cuvi, kas piel\u012bdzin\u0101ma valsts l\u012bme\u0146a kiberspiegu izmantotaj\u0101m metod\u0113m. Turkl\u0101t, par atsevi\u0161\u0137u aizsardz\u012bbas meh\u0101nismu apzin\u0101tu api\u0161anu, piem\u0113ram, dro\u0161\u012bbas re\u017e\u012bma Lockdown Mode nepiln\u012bbu atkl\u0101\u0161anu vai k\u013c\u016bdu beta versij\u0101s, var sa\u0146emt papildu bonusus, kas kop\u0101 var sasniegt pat iespaid\u012bgo 5 miljonu dol\u0101ru slieksni.<\/p>\n
Konkr\u0113ti atalgojuma piem\u0113ri un apraksti<\/p>\n
Programma tagad pied\u0101v\u0101 \u013coti specifiskus atalgojuma l\u012bme\u0146us par atkl\u0101taj\u0101m v\u0101j\u012bb\u0101m. Piem\u0113ram, par piln\u012bgu Gatekeeper aizsardz\u012bbas api\u0161anu oper\u0113t\u0101jsist\u0113m\u0101 macOS, kas \u013cauj kait\u012bgam kodam darboties bez dro\u0161\u012bbas p\u0101rbaud\u0113m, tiek pied\u0101v\u0101ti 100 000 ASV dol\u0101ru. Lai ieg\u016btu pla\u0161u un neat\u013cautu piek\u013cuvi iCloud, p\u0113tnieki var nopeln\u012bt 1 miljonu ASV dol\u0101ru. Interesants jaunums ir kategorija \u201eone-click WebKit sandbox escapes\u201d jeb viena klik\u0161\u0137a aizb\u0113g\u0161anas no WebKit smil\u0161u kastes, kas ir \u013coti b\u012bstamas v\u0101j\u012bbas, jo \u013cauj apiet Safari p\u0101rl\u016bkprogrammas dro\u0161\u012bbu ar minim\u0101lu piep\u016bli \u2013 par \u0161\u0101d\u0101m k\u013c\u016bd\u0101m Apple gatavs maks\u0101t l\u012bdz pat 300 000 ASV dol\u0101ru. T\u0101pat tiek pied\u0101v\u0101ts 1 miljons ASV dol\u0101ru par jebk\u0101da veida bezvadu tuvuma (wireless proximity) eksplota atkl\u0101\u0161anu, neatkar\u012bgi no izmantot\u0101 radio modu\u013ca.<\/p>\n
K\u0101 jaunin\u0101jumi stiprina Apple ekosist\u0113mu<\/p>\n
\u0160ie papla\u0161in\u0101tie dro\u0161\u012bbas pas\u0101kumi ir cie\u0161i saist\u012bti ar Apple centieniem past\u0101v\u012bgi uzlabot savu produktu dro\u0161\u012bbu. Lockdown Mode ir viens no ac\u012bmredzamiem piem\u0113riem, kas minimiz\u0113 potenci\u0101l\u0101s uzbrukumu virsmas, blo\u0137\u0113jot failu pielikumus, saist\u012bbu priek\u0161skat\u012bjumus un t\u012bmek\u013ca skriptus. Safari p\u0101rl\u016bkprogrammas dro\u0161\u012bbas arhitekt\u016bras uzlabojumi ar\u012b apgr\u016btina dro\u0161\u012bbas k\u013c\u016bdu izmanto\u0161anu. Ievie\u0161ot Memory Integrity Enforcement, kas ir aparat\u016bras l\u012bme\u0146a aizsardz\u012bba pret atmi\u0146as boj\u0101jumiem jaun\u0101kajos \u010dipos, Apple demonstr\u0113 savu nelok\u0101mo ap\u0146em\u0161anos aizsarg\u0101t lietot\u0101ju datus. Komp\u0101nija uzsver, ka p\u0113c \u0161iem uzlabojumiem sist\u0113mas uzbrukumi iOS ier\u012bc\u0113m joproj\u0101m ir iesp\u0113jami tikai ar \u0101rk\u0101rt\u012bgi sare\u017e\u0123\u012btu un d\u0101rgu spiegu programmat\u016bru, kas parasti tiek v\u0113rsta pret \u013coti \u0161auru personu loku. \u0160is solis izce\u013cas pretstat\u0101 citu tehnolo\u0123iju gigantu, piem\u0113ram, Microsoft, maz\u0101kajiem atalgojumiem par l\u012bdz\u012bg\u0101m k\u013c\u016bd\u0101m.<\/p>\n","protected":false},"excerpt":{"rendered":"Apple iev\u0113rojami palielina atalgojumu par kiberdro\u0161\u012bbas k\u013c\u016bdu atra\u0161anu Tehnolo\u0123iju gigants Apple ir veicis noz\u012bm\u012bgus uzlabojumus sav\u0101 programmat\u016bras dro\u0161\u012bbas…\n","protected":false},"author":2,"featured_media":18415,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[16],"tags":[6001,6004,77,76,6003,1064,35,39,38,36,37,34,40,6002],"class_list":{"0":"post-18414","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-bizness","8":"tag-apple-security-bounty","9":"tag-atlidziba","10":"tag-bizness","11":"tag-business","12":"tag-drosibas-petnieki","13":"tag-kiberdrosiba","14":"tag-latvia","15":"tag-latvian","16":"tag-latviesu","17":"tag-latviesu-valoda","18":"tag-latviesuvaloda","19":"tag-latvija","20":"tag-lv","21":"tag-vajibas"},"share_on_mastodon":{"url":"","error":""},"_links":{"self":[{"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/posts\/18414","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/comments?post=18414"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/posts\/18414\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/media\/18415"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/media?parent=18414"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/categories?post=18414"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/lv\/wp-json\/wp\/v2\/tags?post=18414"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}