Amakhompyutha we-Apple Mac kanye namathebulethi e-iPad asengozini yokuba sengozini enkulu engadalula okhiye be-cryptographic namaphasiwedi kumadivayisi athile.

Iphutha kuma-chips we-M-series ye-Apple ingasetshenziswa izigebengu ngokusebenzisa uhlelo olungayilungele ikhompuyutha ukuze kwebe okhiye be-cryptographic, okuhlanganisa nalabo abavikela izikhwama zemali ye-cryptocurrency, ngokusho kwabacwaningi bamanyuvesi ahlukahlukene. 

Futhi nakuba ubungozi bomhlaba wangempela bokuxhashazwa bungase bube buphansi, akuyona into ozofuna ukuyiziba uma ubambe isamba esikhulu se-crypto esikhwameni sesofthiwe ku-Mac engase ibe sengozini. Nansi inkomba esheshayo mayelana nesimo, ngokusekelwe kulokho okubikwe ngakho kwadalulwa kuze kube manje.

Yini inkinga?

Abacwaningi umemezele ngesonto eledlule ukuthi bathole ubungozi obubalulekile phakathi kwama-chips we-M-series we-Apple asetshenziswa kuma-Macs nama-iPads angavumela umhlaseli ukuthi afinyelele okhiye namakhodi avikelekile ngokufihlakele.

Udaba lusukela endleleni ebizwa ngokuthi “prefetching,” lapho ama-chips we-M-series akwa-Apple anika amandla ukusheshisa ukusebenzisana kwakho nedivayisi yakho. Ngokulanda kuqala, idivayisi ihlose ukusheshisa ukusebenzisana ngokugcina amathebhu emisebenzini yakho evamile kanye nokugcina idatha iseduze. Kodwa ngokusobala leyo ndlela manje isingasetshenziswa.

Abacwaningi bathi bakwazile ukudala uhlelo lokusebenza "elukhohlise" ngempumelelo iphrosesa ukuthi ifake enye yaleyo datha elandiwe ngaphambili kunqolobane, uhlelo lokusebenza olungase luyifinyelele futhi luyisebenzise ukwakha kabusha ukhiye we-cryptographic. Leyo inkinga engaba yinkulu.

Ubani osengozini?

Uma i-Mac noma i-iPad yakho ine-Apple M-series processor—M1, M2, noma M3—bese idivayisi yakho ingase ibe sengozini yalobu bungozi. Iphrosesa ye-M1 yaqalwa ngasekupheleni kuka-2020 nge-MacBook Air, MacBook Pro, kanye ne-Mac Mini, futhi kamuva yanwetshwa kumadeskithophu e-Mac ngisho namathebulethi e-iPad.

Iphrosesa ye-M2 kanye nephrosesa ye-M3 yamanje nayo ingathinteka kuwo wonke amakhompyutha namathebulethi, futhi i-M2 chip isetshenziswa ngisho I-Apple Vision Pro ihedisethi. Kodwa nge-chip ye-M3, i-prefetcher encike kwimemori yedatha ethintwa ukuba sengozini "inokuthile okukhethekile onjiniyela abangakucela ukukhubaza isici," Ars Technica imibiko, nakuba kutholwe izinga elithile lokusebenza njengomphumela.

Kuthiwani uma ngine-Mac noma i-iPad endala?

Uma une-Mac endala ene-Intel processor, i-Apple eyisebenzise iminyaka neminyaka ngaphambi kokwenza i-silicon yayo, ulungile. Ama-Intel chips awathinteki.

Ngokufanayo, uma une-iPad (endala noma entsha) esebenzisa i-chip eyodwa ye-A-series ye-Apple, ebuye ifakwe kuma-iPhones enkampani, ngakho-ke akubonakali kunengozi. Ama-chips e-M1, M2, kanye ne-M3 kuphela asengozini ngenxa yendlela aklanywe ngayo. Ama-chips e-Apple A14, A15, kanye ne-A16 avela kuma-iPhones nama-iPads akamuva ayizinhlobonhlobo zama-chips ochungechunge lwe-M, kodwa umbiko wocwaningo nemibiko yabezindaba ayibalule njengabasengozini njengalokhu kubhalwa.

Yini engingayenza ngakho?

Yini ongayenza wena ukwenzani ukulungisa inkinga? Lutho, ngeshwa. Lokhu ubungozi bezinga le-chip obuhlobene nezakhiwo ezihlukile zama-chips e-Apple. Lokho kusho ukuthi akuyona into i-Apple engayilungisa ngesichibi. Okungenziwa onjiniyela bohlelo lokusebenza ukufaka ukulungisa ukuze bagweme ukuba sengozini, kodwa ngokusobala kukhona ukuhwebelana kokusebenza njengomphumela, ngakho-ke izinhlelo zokusebenza ezinjalo zingazizwa zinovilapha kakhulu uma sezibuyekeziwe.

Ongakwenza ukuze ususe ubungozi bakho, vele, ukuthola noma imaphi ama-crypto wallet onawo kumadivayisi akho e-Apple asengozini. Zithuthele kwenye idivayisi, noma ngabe i-Windows PC, i-iPhone, ifoni ye-Android, njll. Ungalindi kuze kufike inhlekelele.

Yilokho kanye isikhulu se-Errata Security uRobert Graham utshele Usuku olungasho lutho umlobi uKim Zetter ongabelana ngakho nabafundi: Khipha izikhwama zakho ze-crypto kumadivayisi akho, okungenani okwamanje. "Kukhona abantu njengamanje abanethemba lokwenza lokhu [kuhlasela] futhi basebenza kukho, ngingacabanga," etshela ibhulogi.

Ingabe i-crypto yami ingathathwa nje?

Yize amadivayisi anama-chips e-M1-M3 esengozini ngempela, akufani nabaduni bangakwazi ukumane baphenye iswishi futhi bathathe imali yakho noma nini. Ngokuvamile uzodinga ukufaka uhlelo olungayilungele ikhompuyutha kudivayisi yakho, bese abahlaseli bazodinga ukusebenzisa isofthiwe exhashaziwe ukuze badonse okhiye abayimfihlo futhi bafinyelele isikhwama semali esihlobene.

I-MacOS ye-Apple nayo ikwazi ukumelana ne-malware, njengoba kuzodingeka uvumele mathupha ukuthi uhlelo lokusebenza olunjalo lufakwe kudivayisi yakho. Ama-Mac avimba isofthiwe engasayiniwe, evela eceleni ngokuzenzakalela. Noma kunjalo, uma uwuhlobo olusha futhi ufake izinhlelo zokusebenza ezivela konjiniyela "abangaziwa", uzofuna ukuyidlala iphephile uma usebenzisa idivayisi ye-M-chip esengozini.

Lolu hlobo lokuhlasela lungenziwa nakuseva yefu okwabelwana ngayo ephethe okhiye bakho, ngakho-ke leyo enye i-vector yokuhlasela engaba khona, ngokusho Usuku olungasho lutho. Kungase futhi kwenzeke ukususa lolu hlobo lokuhlasela kuwebhusayithi ngekhodi ye-Javascript, engasebenza kangcono kakhulu ekuthinteni umsebenzisi ojwayelekile—ngeke kudingeke ukuthi bafake noma yini. Kodwa lokho kuyithiyori okwamanje.

Ukuba sengozini kungase futhi kusetshenziselwe ukususa ukubhala ngekhodi okuqukethwe kwekhukhi lesiphequluli sewebhu, ngokusho kwe-Zero Day, ngokunokwenzeka ukuvumela abahlaseli bathole ukufinyelela kokuthile okufana ne-akhawunti ye-imeyili—okungavumela abasebenzisi ukuthi bangene kuma-akhawunti abucayi.

Kuthiwani ngezikhwama zehadiwe?

Izikhwama zehadiwe ezivela kokuthandwa kuka-Ledger no-Trezor ngokusobala azikho engcupheni, ngokusekelwe embikweni wamanje mayelana nokuba sengozini, njengoba okhiye abayimfihlo kudingeka babe kudivayisi yakho ye-Apple nge-chip ye-M1-M3 ukuze ithinteke. Sekushiwo lokho, cishe akuwona umqondo omubi ukugwema ukuxhuma izikhwama zehadiwe kumadivayisi asengozini, uma kwenzeka.

Kuthiwani ngokuhwebelana okumaphakathi?

Ukuhwebelana okumaphakathi njenge-Coinbase kubambelela emalini yakho kuma-wallets okugcina, futhi njengoba ungenabo okhiye abayimfihlo kudivayisi yakho, abekho engcupheni ngokuqondile. Kodwa-ke, uma ugcina iphasiwedi yakho ku-akhawunti yakho ye-Coinbase kusiphathi sephasiwedi esivikelekile ngokufihlakele kudivayisi yakho ye-Apple esengozini, ungase ufune ukushintsha iphasiwedi yakho futhi hhayi ibuyekeze ngaphakathi komphathi. Kungcono ukuphepha kunokuzisola.

Futhi njengoba kushiwo, ngokombono kuyenzeka ukuthi umhlaseli asuse ukubhala amagama ayimfihlo e-akhawunti kumakhukhi esiphequluli esebenzisa lobu bungozi. 

Kubucayi kangakanani lokhu ngempela?

Kuyingozi enkulu, ngokungangabazeki—kodwa amathuba okuba nomthelela kumsebenzisi ojwayelekile we-crypto abonakala ephansi kakhulu. Kuya ohlotsheni lokubethela oluqhekezwa kulokhu kuba sengcupheni, kungathatha isikhathi esingangehora ukudonsa kancane kancane idatha eyanele kunqolobane ukuze kwakhiwe kabusha ukhiye… noma isikhathi eside esingamahora ayi-10.

Lokho akusho ukuthi akunakwenzeka noma ngeke kwenzeke kuwe, kodwa lokhu akulona uhlobo lokuhlasela olushaywe ngokushesha, olushayelayo. Kufanele usathathe izinyathelo zokuphepha ukuze uqinisekise ukuthi awukho engcupheni, kodwa uma umbiko unembile, lapho-ke akuzwakali sengathi lokhu kuzoba usongo olusabalele kumsebenzisi ojwayelekile.

eyahlelwa Guillermo Jimenez

• I-SEO Powered Content & PR Distribution. Khuliswa Namuhla.
• I-PlatoData.Network Vertical Generative Ai. Zinike Amandla. Finyelela Lapha.
• I-PlatoAiStream. I-Web3 Intelligence. Ulwazi Lukhulisiwe. Finyelela Lapha.
• I-PlatoESG. Ikhabhoni, I-CleanTech, Amandla, Environment, Ilanga, Ukuphathwa Kwemfucuza. Finyelela Lapha.
• I-PlatoHealth. I-Biotech kanye ne-Clinical Trials Intelligence. Finyelela Lapha.
• Source: https://decrypt.co/223582/apple-chip-exploit-steals-crypto-what-you-need-know