{"id":195486,"date":"2022-06-30T18:52:00","date_gmt":"2022-06-30T15:52:00","guid":{"rendered":"https:\/\/geek.mediadoma.com\/?p=195486"},"modified":"2022-03-30T07:36:52","modified_gmt":"2022-03-30T04:36:52","slug":"google-ootab-natuke-kauem-enne-kui-avaldab-nullpaeeva-haavatavuse-ueksikasjad","status":"publish","type":"post","link":"https:\/\/geek.mediadoma.com\/et\/google-ootab-natuke-kauem-enne-kui-avaldab-nullpaeeva-haavatavuse-ueksikasjad\/","title":{"rendered":"Google ootab natuke kauem, enne kui avaldab nullp\u00e4eva haavatavuse \u00fcksikasjad"},"content":{"rendered":"<p><a href=\"https:\/\/www.shutterstock.com\/image-vector\/glitched-attention-danger-symbol-computer-hacked-1135176134\" target=\"_blank\" rel=\"noopener nofollow\" class=\"external external_icon\">SkillUp\/Shutterstock<\/a><\/p>\n<p>Project Zero on Google&#8217;i meeskond, kelle \u00fclesandeks on haavatavuste leidmine ja nendest tootjatele teatamine. See pole vastuoluline, kuna aeg-ajalt avaldatakse haavatavuste \u00fcksikasjad enne plaastrit. Selleks lisab Project Zero oma <a href=\"https:\/\/redirect.viglink.com\/?key=204a528a336ede4177fff0d84a044482&#038;u=https%3A%2F%2Fgoogleprojectzero.blogspot.com%2Fp%2Fabout-project-zero.html\" target=\"_blank\" rel=\"noopener nofollow\" class=\"external external_icon\">avalikustamisperioodile<\/a> veidi aega .<\/p>\n<p>Vanade reeglite kohaselt oli tarkvaram\u00fc\u00fcjatel aega 90 p\u00e4eva paiga vabastamiseks alates hetkest, mil Google avaldas m\u00fc\u00fcjale haavatavuse. Olenemata sellest, kas see juhtus v\u00f5i mitte, paljastaks see avalikkusele nullp\u00e4eva haavatavuse, sageli piisavalt \u00fcksikasjalikult, et halb n\u00e4itleja saaks seda teavet kasutada \u00e4rakasutamiseks. L\u00f5puks lisas Google valikulise ajapikendusperioodi, mida tarkvaram\u00fc\u00fcjad said taotleda, kui plaaster oli peaaegu valmimas.<\/p>\n<p>Kurjategijad v\u00e4idavad, et karm t\u00e4htaeg seab avalikkuse ohtu, kui ettev\u00f5te tegeleb aktiivselt lahenduse leidmisega, kuid probleem on piisavalt keeruline ja seda ei saa 90 p\u00e4evaga lahendada. Teised juhivad t\u00e4helepanu sellele, et m\u00f5ned ettev\u00f5tted ei pruugi plaastrit ilma k\u00f5va aknata \u00fcldse luua. Avalikkuse surve aitab veenda tarkvaram\u00fc\u00fcjat tegutsema seal, kus ta muidu ei pruugi.<\/p>\n<p>Selle kesktee leidmine on keeruline osa ja Google \u00fctleb, et teeb muudatusi, et lahendada laiema turvakogukonna muresid. Aastal 2021 ootab see haavatavuse \u00fcksikasjade avalikustamiseks veel 30 p\u00e4eva, kui m\u00fc\u00fcja vabastab paiga enne 90. akna l\u00f5ppemist. Idee on anda kasutajatele aega v\u00e4rskenduste installimiseks ja nende kaitsmiseks. Kui aga m\u00fc\u00fcja taotleb ajapikendusakent, s\u00f6\u00f6b see 30-p\u00e4evase v\u00e4rskendusakna sisse.<\/p>\n<p>Seda juhul, kui Google ei ole avastanud haavatavust, mida juba aktiivselt kuritarvitatakse. Enne seda, kui see juhtus, avaldas Google k\u00f5ik \u00fcksikasjad seitsme p\u00e4eva jooksul p\u00e4rast teatamist. Edaspidi avalikustab see haavatavuse seitsme p\u00e4eva p\u00e4rast, kuid oodake tehniliste \u00fcksikasjade avaldamist veel 30 p\u00e4eva.<\/p>\n<p>K\u00f5ik see kehtib ainult 2021. aasta kohta, sest j\u00e4rgmisel aastal kavatseb Google k\u00f5iki oma aknaid veidi l\u00fchendada. Alates 2022. aastast l\u00e4heb Project Zero \u00fcle mudelile \u201e84 + 28&quot; \u2013 avalikustamiseni 84 p\u00e4eva, millele lisandub veel 28 p\u00e4eva t\u00e4ielike \u00fcksikasjade ilmumiseks. Project Zero loodab, et akende l\u00fchendamine soodustab paiga kiiremat v\u00e4ljat\u00f6\u00f6tamist. See viitab ka sellele, et \u00fcleminek p\u00e4evadele jagatav seitsmega v\u00e4hendab v\u00f5imalust, et t\u00e4htaeg langeb n\u00e4dalavahetusele \u2013 kui tarkvaram\u00fc\u00fcjatel on tavaliselt puhkep\u00e4evad.<\/p>\n<p>Allikas: <a href=\"https:\/\/redirect.viglink.com\/?key=204a528a336ede4177fff0d84a044482&#038;u=https%3A%2F%2Fgoogleprojectzero.blogspot.com%2Fp%2Fabout-project-zero.html\" target=\"_blank\" rel=\"noopener nofollow\" class=\"external external_icon\">Project Zero<\/a><\/p>\n<p><div id=\"PostUnique_PostSource\" style=\"padding-top: 50px\">:  <a target=\"_blank\" rel=\"noopener nofollow\" href=\"\/\/www.reviewgeek.com\" class=\"external external_icon\">www.reviewgeek.com<\/a><\/div><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Project Zero on Google&#8217;i meeskond, kelle \u00fclesandeks on haavatavuste leidmine ja nendest tootjatele teatamine. See pole vastuoluline, kuna aeg-ajalt avaldatakse haavatavuste \u00fcksikasjad enne plaastrit. Selleks lisab Project Zero oma avalikustamisperioodile veidi aega.<\/p>\n","protected":false},"author":1,"featured_media":177447,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_wp_rev_ctl_limit":""},"categories":[650,735,754,724],"tags":[],"class_list":["post-195486","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-hobid","category-mitmesugused","category-turvalisus","category-uudis"],"_links":{"self":[{"href":"https:\/\/geek.mediadoma.com\/et\/wp-json\/wp\/v2\/posts\/195486","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/geek.mediadoma.com\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/geek.mediadoma.com\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/geek.mediadoma.com\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/geek.mediadoma.com\/et\/wp-json\/wp\/v2\/comments?post=195486"}],"version-history":[{"count":0,"href":"https:\/\/geek.mediadoma.com\/et\/wp-json\/wp\/v2\/posts\/195486\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/geek.mediadoma.com\/et\/wp-json\/wp\/v2\/media\/177447"}],"wp:attachment":[{"href":"https:\/\/geek.mediadoma.com\/et\/wp-json\/wp\/v2\/media?parent=195486"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/geek.mediadoma.com\/et\/wp-json\/wp\/v2\/categories?post=195486"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/geek.mediadoma.com\/et\/wp-json\/wp\/v2\/tags?post=195486"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}