Gaskiya game da matsalar tsaron 1Password

Tabbas yan kwanakin nan zaka karanta labarai game da mummunan lahani na tsaro a cikin 1Password, ɗayan mafi kyawun aikace-aikacen da ake dasu don iOS da OS X kuma ɗayan abubuwan da muke so don kyakkyawan aikin da masu haɓaka keyi dashi, tare da sabuntawa koyaushe ba tare da tsada ba ga masu amfani da ita. Da kaina, yana cikin aikace-aikacen da na aminta don adana kalmomin shiga na, bayanan banki, katinan kuɗi, da dai sauransu. tsawon shekaru yanzu, kuma na kasance cikin damuwa game da sanar da kaina game da wannan matsalar ta tsaro saboda ina matukar sha'awar hakan. Kamar yadda yake faruwa sau da yawa a waɗannan sharuɗɗan, tsoratarwa da ban mamaki sun mamaye yanar gizo (Kar mu manta cewa shine mafi siyarwa) saboda haka zanyi kokarin fayyace abinda ya faru da kuma sakamakon da zai iya haifarwa.

Matsalar

Komai ya dogara ne akan rahoton da wani injiniyan Microsoft, Dale Myers ya wallafa, inda yake tabbatar da hakan 1Password tana adana bayanan da ba a rufesu ba a cikin tsarin boye-boye na AgileKeychain. Waɗannan bayanan da ba a ɓoye ba musamman adiresoshin yanar gizo ne na waɗancan shafuka waɗanda muka adana a cikin wannan sabis ɗin, da taken su, amma ba za mu taɓa samun damar shiga ba kanta, wanda ya kasance cikakke ɓoye. Me yasa za'a kiyaye wannan bayanan? Ainihin saboda ɓoye su a wancan lokacin (muna magana ne game da 2008) ya haifar da matsala ga wasu na'urori yayin samun damar wannan bayanan kuma ya haifar da matsalar aiki da batir.

Ya zuwa yanzu mutum na iya tunani, "Mece ce matsalar?" Yawancin masu amfani suna amfani da 1PasswordA ko'ina, aikin da Dropbox ke amfani da shi don adana maɓallanku na 1Password kuma yana ba ku damar samun damar yin amfani da su daga kowane burauzar ba tare da sanya kayan aikin a kan na'urar ba. Wannan shine ainihin inda babbar matsalar take: Google yayi bayanin wannan abun yayin da aka adana shi a cikin fayil ɗin html, kuma wani da ilimin da ya dace zai iya samun damar wannan fayil ɗin kuma ya san wannan bayanan ba tare da ɓoyewa ba. Ina sake nacewa, ba bayanan samun damar ku bane, sai adiresoshin gidan yanar gizo da sunayen yanar gizo wadanda kuka adana a cikin 1Password, ba takardun shaidarku ba.

da mafita

Masu haɓaka 1Password ɗin kansu sun riga sun warware wannan matsalar a cikin 2012 tare da sabuwar hanyar adana bayananku mai suna OPVault.. Wannan sabon tsarin yana rufa duk wasu bayanai, gami da wadanda ba'a rufesu da AgileKeychain ba. To menene matsalar? Cewa zasu yanke shawara ko suyi amfani da OPVault azaman kawai tsarin ɓoye-ɓoye, ko ci gaba da amfani da AgileKeychain azaman madadin. Kuma sun zaɓi wannan zaɓi na biyu.

Me yasa za'a kiyaye tsarin da bashi da tsaro sosai? OPVault bai ba da matsala ga masu amfani da iOS da Mac OS X ba, amma ya yi wa Windows, masu amfani da Android, da waɗanda suka zaɓi Dropbox a matsayin tsarin aikin haɗin bayanan su. Tsoffin fasalin 1Password na ƙarshen basu dace da OPVault ba, don haka dole su yanke shawarar abin da zasu yi: bar waɗancan tsoffin sifofin a baya ko ci gaba da ba da jituwa ga kowa. Kuma sun zaɓi wannan madadin na biyu, suna riƙe da zaɓi na amfani da AgileKeychain.

Hakikanin girman matsalar

Abu mafi mahimmanci shine dagewa akan bayanan cewa wanda zai iya isa wannan fayil ɗin html kuma ya karanta bayananku zai sami damar shiga (wanda ba shi da sauƙi): adiresoshin yanar gizo da taken yanar gizo. Wannan kawai. Ee, gaskiya ne cewa babu wanda ya san wannan bayanan, kuma cewa kuskure ne wanda dole ne a gyara shi, amma Babu buƙatar jin tsoro don bayanan damar ku zuwa shafukan yanar gizo ko lambobin katin kuɗin ku, wanda yake taimako ne.

Da zarar wannan ya bayyana, ya zama dole a nuna su wanene ke da wannan matsalar: waɗanda har yanzu suke amfani da AgileKeychain. Waɗannan masu amfani waɗanda suka riga sun yi amfani da OPVault ba su da wata matsala kaɗan. Wanene ke amfani da OPVault? Waɗanda ke amfani da 1Password don iOS da OS X tare da zaɓi na daidaita tare na iCloud da aka kunna (kamar yadda lamarin yake). Idan wannan ma batunku ne, to babu matsala tare da ku. Idan kai mai amfani ne da 1Password akan Windows, Android ko kuma kayi amfani da Dropbox a matsayin tsarin aiki tare to dole ne ka canza zuwa OPVault azaman tsarin ajiya, wanda kayi cikakken bayani a cikin Blog na Agilebits, 1Password developers (a karshen labarin).