{"id":2238,"date":"2024-07-04T02:32:31","date_gmt":"2024-07-04T02:32:31","guid":{"rendered":"https:\/\/tastycounter.net\/index.php\/2024\/07\/04\/hang-nghin-ung-dung-ios-co-the-gap-nguy-vi-lo-hong-nguon-mo\/"},"modified":"2024-07-04T02:32:31","modified_gmt":"2024-07-04T02:32:31","slug":"hang-nghin-ung-dung-ios-co-the-gap-nguy-vi-lo-hong-nguon-mo","status":"publish","type":"post","link":"https:\/\/tastycounter.net\/index.php\/2024\/07\/04\/hang-nghin-ung-dung-ios-co-the-gap-nguy-vi-lo-hong-nguon-mo\/","title":{"rendered":"H\u00e0ng ngh\u00ecn \u1ee9ng d\u1ee5ng iOS c\u00f3 th\u1ec3 g\u1eb7p nguy v\u00ec l\u1ed7 h\u1ed5ng ngu\u1ed3n m\u1edf"},"content":{"rendered":"<\/p>\n
\n

Nh\u00f3m nghi\u00ean c\u1ee9u c\u1ee7a EVA Information Security, c\u00f4ng ty an ninh m\u1ea1ng v\u00e0 ki\u1ec3m th\u1eed t\u1ea1i Israel ph\u00e1t hi\u1ec7n m\u1ed9t l\u1ed7 h\u1ed5ng tr\u00ean ph\u1ea7n m\u1ec1m ngu\u1ed3n m\u1edf Cocoapods c\u00f3 th\u1ec3 khi\u1ebfn c\u00e1c \u1ee9ng d\u1ee5ng nh\u01b0 Facebook, TikTok, Netflix tr\u00ean iOS, macOS c\u00f3 nguy c\u01a1 b\u1ecb t\u1ea5n c\u00f4ng.<\/p>\n

Cocoapods l\u00e0 tr\u00ecnh qu\u1ea3n l\u00fd ph\u1ee5 thu\u1ed9c (Dependency Manager) \u0111\u01b0\u1ee3c s\u1eed d\u1ee5ng r\u1ed9ng r\u00e3i cho c\u00e1c d\u1ef1 \u00e1n ph\u1ea7n m\u1ec1m \u0111\u01b0\u1ee3c m\u00e3 h\u00f3a b\u1eb1ng ng\u00f4n ng\u1eef l\u1eadp tr\u00ecnh Swift v\u00e0 Objective-C.<\/p>\n

Dependency Manager l\u00e0 c\u00f4ng c\u1ee5 quan tr\u1ecdng trong qu\u00e1 tr\u00ecnh ph\u00e1t tri\u1ec3n ph\u1ea7n m\u1ec1m, cho ph\u00e9p x\u00e1c th\u1ef1c v\u00e0 k\u00fd m\u00e3 h\u00f3a c\u00e1c g\u00f3i ph\u1ea7n m\u1ec1m.<\/p>\n

V\u00ec v\u1eady, vi\u1ec7c Cocoapods g\u1eb7p v\u1ea5n \u0111\u1ec1 s\u1ebd \u1ea3nh h\u01b0\u1edfng x\u1ea5u \u0111\u1ebfn nhi\u1ec1u ph\u1ea7n c\u1ee7a ph\u1ea7n m\u1ec1m ho\u1eb7c web.<\/p>\n

\"H\u00e0ng<\/p>\n

Theo EVA Information Security, l\u1ed7 h\u1ed5ng l\u00e0 k\u1ebft qu\u1ea3 c\u1ee7a qu\u00e1 tr\u00ecnh di chuy\u1ec3n m\u00e1y ch\u1ee7 Cocoapods kh\u00f4ng tr\u01a1n tru v\u00e0 c\u00f3 th\u1ec3 \u0111\u00e3 t\u1ed3n t\u1ea1i t\u1eeb n\u0103m 2014, khi\u1ebfn h\u00e0ng ngh\u00ecn g\u00f3i th\u01b0 vi\u1ec7n ph\u1ea7n m\u1ec1m kh\u00f4ng c\u00f2n li\u00ean k\u1ebft v\u1edbi t\u1ec7p g\u1ed1c ban \u0111\u1ea7u v\u00e0 kh\u00f4ng th\u1ec3 truy xu\u1ea5t ngu\u1ed3n g\u1ed1c.<\/p>\n

K\u1ebd h\u1edf n\u00e0y cho ph\u00e9p k\u1ebb t\u1ea5n c\u00f4ng thay th\u1ebf m\u00e3 ngu\u1ed3n g\u1ed1c b\u1eb1ng m\u00e3 \u0111\u1ed9c h\u1ea1i c\u1ee7a ch\u00fang v\u00e0o c\u00f4ng c\u1ee5 ph\u00e1t tri\u1ec3n ph\u1ea7n m\u1ec1m d\u00e0nh cho nh\u00e0 ph\u00e1t tri\u1ec3n. V\u00ec kh\u00f4ng \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n trong th\u1eddi gian d\u00e0i n\u00ean c\u00f3 th\u1ec3 c\u00f3 h\u00e0ng ngh\u00ecn \u1ee9ng d\u1ee5ng v\u00e0 h\u00e0ng tri\u1ec7u thi\u1ebft b\u1ecb \u0111\u00e3 b\u1ecb l\u1ed9 nh\u1eefng n\u0103m qua.<\/p>\n

<\/ins><\/div>\n

Hacker c\u00f3 th\u1ec3 l\u1ee3i d\u1ee5ng l\u1ed7 h\u1ed5ng c\u00e0i ransomware ho\u1eb7c c\u00e1c lo\u1ea1i m\u00e3 \u0111\u1ed9c kh\u00e1c v\u00e0o c\u00e1c \u1ee9ng d\u1ee5ng c\u00f3 quy\u1ec1n truy c\u1eadp v\u00e0o th\u00f4ng tin nh\u1ea1y c\u1ea3m c\u1ee7a ng\u01b0\u1eddi d\u00f9ng v\u00e0 thu th\u1eadp ch\u00fang.<\/p>\n

C\u0169ng theo nh\u00f3m nghi\u00ean c\u1ee9u, \u0111a s\u1ed1 \u1ee9ng d\u1ee5ng iOS v\u00e0 macOS \u0111\u1ec1u \u0111\u01b0\u1ee3c m\u00e3 h\u00f3a b\u1eb1ng ng\u00f4n ng\u1eef Swift v\u00e0 Objective-C, trong \u0111\u00f3 c\u00f3 c\u1ea3 nh\u1eefng c\u00e1i t\u00ean ph\u1ed5 bi\u1ebfn nh\u01b0 TikTok, Snapchat, LinkedIn, Netflix, Microsoft Teams, Facebook, Messenger. V\u00ec v\u1eady, l\u1ed7 h\u1ed5ng tr\u00ean ph\u1ea7n m\u1ec1m ngu\u1ed3n m\u1edf Cocoapods c\u00f3 th\u1ec3 \u1ea3nh h\u01b0\u1edfng t\u1edbi h\u00e0ng ngh\u00ecn \u1ee9ng d\u1ee5ng v\u00e0 “m\u1ed9t cu\u1ed9c t\u1ea5n c\u00f4ng v\u00e0o h\u1ec7 sinh th\u00e1i \u1ee9ng d\u1ee5ng di \u0111\u1ed9ng c\u00f3 th\u1ec3 l\u00e2y nhi\u1ec5m cho h\u1ea7u h\u1ebft thi\u1ebft b\u1ecb c\u1ee7a Apple, khi\u1ebfn h\u00e0ng ngh\u00ecn t\u1ed5 ch\u1ee9c b\u1ecb \u1ea3nh h\u01b0\u1edfng.<\/p>\n

Theo nh\u00f3m nghi\u00ean c\u1ee9u, Cocoapods hi\u1ec7n \u0111\u00e3 v\u00e1 nh\u1eefng l\u1ed7i tr\u00ean. Nh\u01b0ng vi\u1ec7c ch\u00fang t\u1ed3n t\u1ea1i g\u1ea7n m\u1ed9t th\u1eadp k\u1ef7 kh\u00f4ng \u0111\u01b0\u1ee3c ph\u00e1t hi\u1ec7n l\u00e0 m\u1ed9t v\u1ea5n \u0111\u1ec1 \u0111\u00e1ng lo ng\u1ea1i. Nh\u00f3m khuy\u1ebfn c\u00e1o c\u00e1c nh\u00e0 ph\u00e1t tri\u1ec3n n\u00ean xem l\u1ea1i m\u00e3 ngu\u1ed3n s\u1ea3n ph\u1ea9m c\u1ee7a m\u00ecnh \u0111\u1ec3 x\u00e1c \u0111\u1ecbnh ph\u1ea7n m\u1ec1m c\u00f3 b\u1ecb d\u00ednh l\u1ed7i hay kh\u00f4ng.<\/p>\n

Apple ch\u01b0a \u0111\u01b0a ra b\u00ecnh lu\u1eadn v\u1ec1 ph\u00e1t hi\u1ec7n nghi\u00eam tr\u1ecdng n\u00e0y.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

Nh\u00f3m nghi\u00ean c\u1ee9u c\u1ee7a EVA Information Security, c\u00f4ng ty an ninh m\u1ea1ng v\u00e0 ki\u1ec3m th\u1eed t\u1ea1i Israel ph\u00e1t hi\u1ec7n m\u1ed9t l\u1ed7 h\u1ed5ng tr\u00ean ph\u1ea7n m\u1ec1m ngu\u1ed3n m\u1edf Cocoapods c\u00f3 th\u1ec3 khi\u1ebfn c\u00e1c \u1ee9ng d\u1ee5ng nh\u01b0 Facebook, TikTok, Netflix tr\u00ean iOS, macOS c\u00f3 nguy c\u01a1 b\u1ecb t\u1ea5n c\u00f4ng. Cocoapods l\u00e0 tr\u00ecnh qu\u1ea3n l\u00fd ph\u1ee5 thu\u1ed9c (Dependency […]<\/p>\n","protected":false},"author":1,"featured_media":2239,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-2238","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-khong-phan-loai"],"_links":{"self":[{"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/posts\/2238","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/comments?post=2238"}],"version-history":[{"count":0,"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/posts\/2238\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/media\/2239"}],"wp:attachment":[{"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/media?parent=2238"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/categories?post=2238"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tastycounter.net\/index.php\/wp-json\/wp\/v2\/tags?post=2238"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}