Pilipo Novotny Ua ʻōlelo ʻia ʻaʻohe hopena o ka polokalamu polokalamu Heartbleed, ʻo ia hoʻi ka pilikia nui loa ma ka Pūnaewele i kēia lā, ʻaʻohe hopena i nā kikowaena o Apple. Ua pili kēia puka palekana i ka 15% o nā pūnaewele puni honua, akā ʻaʻole pono e makaʻu nā mea hoʻohana o iCloud a i ʻole nā lawelawe Apple ʻē aʻe. Ua ʻōlelo ʻo ia he kikowaena US Re / pāʻālua.
"Aloha nui ʻo Apple i ka palekana. ʻAʻole i loaʻa iā iOS a i ʻole OS X kēia polokalamu hoʻohana, a ʻaʻole i hoʻopilikia ʻia nā lawelawe pūnaewele koʻikoʻi, "i ʻōlelo ai ʻo Apple iā Re/code. ʻAʻole makaʻu nā mea hoʻohana i ke komo ʻana i iCloud, ka App Store, iTunes a i ʻole iBookstore, a i ʻole ke kūʻai ʻana ma ka e-shop kūʻai.
Manaʻo ka poʻe akamai i ka hoʻohana ʻana i nā huaʻōlelo ʻokoʻa a lawa ka ikaika ma nā pūnaewele pākahi, a me nā polokalamu mālama e like me 1Password a i ʻole Lastpass. Hiki ke kōkua pū ka mea hana huna huna o Safari. Ma waho aʻe o kēia mau kaʻina hana, ʻaʻole pono e hana hou aku, no ka mea, ʻaʻole ʻo Heartbleed kahi maʻi maʻamau e hoʻouka i nā mea kūʻai aku.
He polokalamu ia i loko o ka ʻenehana cryptographic OpenSSL i hoʻohana ʻia e ka hapa nui o nā pūnaewele puni honua. Hāʻawi kēia hemahema i ka mea hoʻouka e heluhelu i ka hoʻomanaʻo ʻōnaehana o ka server i hāʻawi ʻia a loaʻa, no ka laʻana, ka ʻikepili mea hoʻohana, nā ʻōlelo huna a i ʻole nā mea huna.
Ua puni ka Heartbleed bug no kekahi mau makahiki, i ʻike mua ʻia ma Dekemaba 2011, a ua aʻo nā mea hoʻomohala o ka polokalamu OpenSSL e pili ana i kēia makahiki wale nō. Akā naʻe, ʻaʻole maopopo ka lōʻihi o ka ʻike ʻana o ka poʻe hoʻouka i ka pilikia. Hiki iā lākou ke koho mai kahi waihona nui o nā pūnaewele, ʻo ia hoʻi ʻo Heartbleed noho ma ka 15 pakeneka o nā mea kaulana loa.
No ka manawa lōʻihi, ʻo nā kikowaena like ʻo Yahoo!, Flickr a i ʻole StackOverflow ua nāwaliwali. Ua pilikia pū nā pūnaewele Czech Seznam.cz a me ČSFD a i ʻole Slovak SME. I kēia manawa, ua hoʻopaʻa mua kā lākou mea hoʻohana i kahi hapa nui o nā kikowaena ma o ka hoʻonui ʻana iā OpenSSL i kahi mana hou a paʻa. Hiki iā ʻoe ke ʻike inā palekana nā pūnaewele āu e kipa ai me ka hoʻohana ʻana i kahi hoʻokolohua maʻalahi ma ka pūnaewele ka hoao ana, hiki iā ʻoe ke ʻike i ka ʻike hou aku ma ka pūnaewele Heartbleed.com.
ʻAʻole maopopo iaʻu pehea e pili ai ka hoʻohana ʻana i nā ʻōlelo huna ikaika i ka pilikia Heartbleed. Hiki ke loaʻa kahi ʻōlelo huna ikaika me kēia nāwaliwali a me ka nāwaliwali.
Eia kekahi, ʻo ka ʻōlelo ʻana ʻaʻole paʻa nā kikowaena he mea lapuwale. Pehea e pale ai nā kikowaena i kahi hewa ʻike ʻole? Ua pilikia nā kikowaena.
Ua ʻōlelo ʻo Apple ʻaʻole ia i hoʻohana i kēia polokalamu hackable. No laila hoʻohana ʻo ia i ka OpenSSL kahiko, akā ʻaʻole hoʻohana i ka OpenSSL. ʻAʻole ia he palekana ʻoi aku ka maikaʻi.
ʻAʻole ʻo OpenSSL wale nō ka hoʻokō SSL. No ka laʻana, ʻaʻole hoʻohana ʻo Microsoft i OpenSSL.
E like me kaʻu i ʻike ai, ʻaʻole hoʻohana ʻo Apple i kāna hoʻonā SSL ponoʻī, no laila e hoʻohana paha ia i ka waihona OpenSSL.