N\u00eb nj\u00eb shfaqje t\u00eb guximshme t\u00eb aft\u00ebsive teknologjike, studiuesit n\u00eb Tencent Labs dhe Universiteti Zhejiang kan\u00eb zbuluar nj\u00eb shfryt\u00ebzim novator t\u00eb njohur si ‘BrutePrint’. Kjo metod\u00eb e re e sulmeve kibernetike arrin t\u00eb tejkaloj\u00eb v\u00ebrtetimin e gjurm\u00ebve t\u00eb gisht\u00ebrinjve n\u00eb telefonat inteligjent\u00eb modern\u00eb, duke anashkaluar v\u00ebrtetimin e p\u00ebrdoruesit p\u00ebr t\u00eb fituar kontrollin e pajisjes. \u00cbsht\u00eb nj\u00eb perspektiv\u00eb alarmante, n\u00eb nj\u00eb bot\u00eb q\u00eb gjithnj\u00eb e m\u00eb shum\u00eb mb\u00ebshtetet n\u00eb skanimin e gjurm\u00ebve t\u00eb gisht\u00ebrinjve si mas\u00eb sigurie.<\/p>\n\n\n\n
Nj\u00eb sulm kibernetik zakonisht p\u00ebrfshin p\u00ebrpjekje t\u00eb pand\u00ebrprera p\u00ebr t\u00eb thyer kodet ose fjal\u00ebkalimet. \u00cbsht\u00eb nj\u00eb metod\u00eb e p\u00ebrdorur nga hakerat p\u00ebr t\u00eb fituar akses t\u00eb paautorizuar n\u00eb llogari, sisteme ose rrjete t\u00eb ndryshme. Studiuesit kinez\u00eb e kan\u00eb marr\u00eb k\u00ebt\u00eb koncept dhe e kan\u00eb aplikuar at\u00eb n\u00eb fush\u00ebn e siguris\u00eb biometrike, duke shfryt\u00ebzuar at\u00eb q\u00eb ata pretendojn\u00eb se jan\u00eb dy dob\u00ebsi t\u00eb r\u00ebnd\u00ebsishme t\u00eb k\u00ebtyre sistemeve: Cancel-After-Match-Fail (CAMF) dhe Match-After-Lock (MAL).<\/p>\n\n\n\n
N\u00eb punimin e tyre teknik, t\u00eb botuar n\u00eb Arxiv.org, studiuesit vun\u00eb n\u00eb dukje nj\u00eb dob\u00ebsi t\u00eb natyrshme n\u00eb nd\u00ebrfaqen periferike t\u00eb sensor\u00ebve t\u00eb gjurm\u00ebve t\u00eb gisht\u00ebrinjve (SPI). Duket se t\u00eb dh\u00ebnat biometrike n\u00eb k\u00ebt\u00eb nd\u00ebrfaqe jan\u00eb t\u00eb mbrojtura n\u00eb m\u00ebnyr\u00eb t\u00eb dob\u00ebt, duke hapur mund\u00ebsin\u00eb p\u00ebr nj\u00eb sulm kibernetik q\u00eb mund t\u00eb rr\u00ebmbej\u00eb imazhet e gjurm\u00ebve t\u00eb gisht\u00ebrinjve.<\/p>\n\n\n\n
Metoda ‘BrutePrint’, e shoq\u00ebruar me sulmet SPI MITM, iu n\u00ebnshtrua testimit kund\u00ebr dhjet\u00eb modeleve t\u00eb njohura t\u00eb smartphone-ve. Studiuesit zbuluan se mund t\u00eb b\u00ebnin p\u00ebrpjekje t\u00eb pakufizuara n\u00eb t\u00eb gjitha pajisjet Android dhe HarmonyOS (Huawei), dhe dhjet\u00eb p\u00ebrpjekje t\u00eb mundshme n\u00eb pajisjet iOS.<\/p>\n\n\n\n
Megjithat\u00eb, BrutePrint nuk \u00ebsht\u00eb nj\u00eb hakim n\u00eb distanc\u00eb. P\u00ebr t\u00eb nisur nj\u00eb sulm, \u00ebsht\u00eb i nevojsh\u00ebm aksesi fizik n\u00eb pajisje. Hakeruesi gjithashtu ka nevoj\u00eb p\u00ebr akses n\u00eb nj\u00eb baz\u00eb t\u00eb dh\u00ebnash t\u00eb gjurm\u00ebve t\u00eb gisht\u00ebrinjve, e cila mund t\u00eb merret nga grupet e t\u00eb dh\u00ebnave akademike ose publikimet e palicensuara t\u00eb dh\u00ebnave. Pajisjet e nevojshme p\u00ebr sulmin kushtojn\u00eb 15 dollar\u00eb, nj\u00eb shum\u00eb e cila \u00ebsht\u00eb relativisht modeste.<\/p>\n\n\n\n
Kur b\u00ebhej fjal\u00eb p\u00ebr testimin n\u00eb bot\u00ebn reale, t\u00eb gjitha pajisjet e testuara Android dhe iOS u zbuluan se ishin t\u00eb prekshme ndaj t\u00eb pakt\u00ebn nj\u00eb sulmi. Pajisjet Android ishin ve\u00e7an\u00ebrisht t\u00eb ndjeshme, duke lejuar p\u00ebrpjekje t\u00eb pafundme t\u00eb gjurm\u00ebve t\u00eb gisht\u00ebrinjve. Pajisjet iOS u treguan m\u00eb elastike, duke parandaluar n\u00eb m\u00ebnyr\u00eb efektive sulmet fillestare, megjith\u00ebse iPhone SE dhe iPhone 7 u zbuluan se ishin t\u00eb ndjesh\u00ebm ndaj k\u00ebtyre sulmeve.<\/p>\n\n\n\n
Studiuesit arrit\u00ebn n\u00eb p\u00ebrfundimin se nd\u00ebrsa BrutePrint k\u00ebrkon akses fizik pajisjen e synuar, dhe k\u00ebshtu mund t\u00eb mos duket menj\u00ebher\u00eb k\u00ebrc\u00ebnuese, nuk duhet n\u00ebnvler\u00ebsuar. Teknika mund t\u00eb p\u00ebrdoret nga hajdut\u00ebt p\u00ebr t\u00eb zhbllokuar pajisjet e vjedhura, p\u00ebr t\u00eb nxjerr\u00eb t\u00eb dh\u00ebna t\u00eb vlefshme private, apo edhe p\u00ebr t’u p\u00ebrdorur nga agjensit\u00eb e zbatimit t\u00eb ligjit n\u00eb hetime, duke ngritur pyetje t\u00eb r\u00ebnd\u00ebsishme n\u00eb lidhje me t\u00eb drejtat e privat\u00ebsis\u00eb dhe \u00e7\u00ebshtjet etike.<\/p>\n","protected":false},"excerpt":{"rendered":"
N\u00eb nj\u00eb shfaqje t\u00eb guximshme t\u00eb aft\u00ebsive teknologjike, studiuesit n\u00eb Tencent Labs dhe Universiteti Zhejiang kan\u00eb zbuluar nj\u00eb shfryt\u00ebzim novator t\u00eb njohur si ‘BrutePrint’. Kjo metod\u00eb e re e sulmeve kibernetike arrin t\u00eb tejkaloj\u00eb v\u00ebrtetimin e gjurm\u00ebve t\u00eb gisht\u00ebrinjve n\u00eb telefonat inteligjent\u00eb modern\u00eb, duke anashkaluar v\u00ebrtetimin e p\u00ebrdoruesit p\u00ebr t\u00eb fituar kontrollin e pajisjes. \u00cbsht\u00eb<\/p>\n","protected":false},"author":4,"featured_media":13611,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[37],"tags":[40],"class_list":{"0":"post-13610","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-mobiles","8":"tag-featured"},"yoast_head":"\n