Rahoton: Android Jelly Bean ya fi tsaro

Tambayar ita ce ko da yaushe android tsaro idan aka kwatanta da sauran tsarin aiki don na'urorin hannu, musamman tare da iOS. Kuma ba tare da dalili ba, tun daga yau Google bai sami "maɓalli" don ba da tsaro wanda za'a iya ɗauka a matsayin cikakke.

Tabbas, baya daina gwadawa da kowane sabon sigar da ta ƙaddamar da, jelly Bean ba togiya. Yana iya zama, cewa a wannan lokacin, akwai ainihin ci gaba a fagen tsaro tun lokacin da Google ya yi yanke shawarar yin cikakken amfani da ka'idar tsaro ta ASLR, wanda kuma zai kasance wani bangare na iOS 6 da nau'ikan Windows daban-daban, gami da na wayoyin Windows Phone. Saboda haka, ana sa ran ci gaba a fili.

Amma menene ASLR kuma menene na musamman game da inganta tsaro? Gagarabadau suna nufin daidai Adireshin Sararin Samaniya Randomization (Bazuwar redirect sarari) kuma sun riga sun bayyana shi ƙara ko žasa abin da wannan ka'ida ke ba da izini: a tura ayyukan tsarin aiki ba da gangan ba, hare-haren da ake samu daga ƙasashen waje, gami da na malware ko waɗanda ake ƙoƙarin satar bayanai masu mahimmanci, suna da wahalar aiwatar da aikinsu. A takaice, kasancewa bazuwar - tsarin aiki yana iya saurin gano abin da yake nema - da tsarin "hacking" ko "amfana" ba shi da kyau sosai, don haka ba a aiwatar da shi ko bai cancanci ƙoƙarin da za a yi ba.

Misali: idan wani hari yana neman nemo wasu lambobin aiwatarwa, misali daga tsarin karatu na tsarin, yana ƙaddamar da masu bin diddigin duka lambar tushe da tsarin tsarin, amma lokacin yin ta ta hanyar da aka saba, ba ta da komowa, tunda. cewa bayanin da kuke nema yana cikin wani wuri da ba a saba gani ba. Saboda haka, sai dai itace manufa don ɗayan manyan matsalolin Android, wanda ba komai bane illa aikace-aikace marasa aminci waɗanda ke ƙoƙarin satar bayanai daga na'urori lokacin da suke aiki, kuma sakamakon shine mafi amintaccen tsarin aiki. Duk wannan idan aikin wayar ko kwamfutar hannu ya shafi.

Google ya kuma yanke shawarar hada wata yarjejeniya ta tsaro, wanda ake kira DEP (Rigakafin Kisa Bayanai), wanda ke da kyakkyawan aiki na kare na'urori daga takamaiman hare-haren da masu satar bayanai ke nema gazawar ƙwaƙwalwar ajiya-musamman daga kwari waɗanda ke haifar da tsananin amfani- neutralizing su da barin madaidaicin lambar a tasiri. Saboda haka, tsaro yana ƙaruwa, kodayake a cikin wannan yanayin aiwatarwarsa yana jinkirta sadarwa tsakanin processor da ƙwaƙwalwar ɗan lokaci, amma ba a iya gani.

Jelly Bean ya haɗa da wasu ƙarin haɓakawa idan ya zo ga tsaro, kamar wancan gane fuska ya fi kyau (Ko da yake, kamar yadda ba shi da kyau, dole ne ku yi hankali da amfani da shi). Amma, ba tare da shakka ba, wannan bai da mahimmanci fiye da ɗayan biyun da suka gabata.

Saboda haka, haɓakawa idan aka kwatanta da sigar Sandwich Ice Cream yana da girma sosai, kuma yafi bayyana tare da zazzagewar aikace-aikacen Google Play, don haka Jelly Bean ya haɗa da haɓakawa waɗanda ba a inganta su ba, amma waɗanda ke da tasiri sosai ga masu amfani kuma hakan zai sa su kasance da aminci sosai ... kodayake wannan ba Wannan yana nufin. cewa dole ne ka rage kariyar ka daga hare-hare da software na lalata tun da, ba dade ko ba dade, za ka sami hanyar ketare ASLR kuma Windows, iOS da Android za su sami wata hanyar kare kansu. Amma, har sai lokacin, tsaro ya fi kyau akan Android 4.1 fiye da 4.0.

Kyakkyawan ƙari na Google, amma ya ɗan makara a cikin wannan "tseren" wanda a yanzu Apple's iOS ke cin nasara, wanda ke amfani da ASLR da DEP kusan shekara guda (da wasu ƙa'idodi kamar fasahar Sa hannu na Code). Duk da haka Android yana kan hanya madaidaiciya kuma, ba zai zama abin mamaki ba, cewa a cikin ƙasa da shekara guda ana iya la'akari da shi gaba ɗaya lafiya. Idan suka ci gaba a haka, to tabbas.