Gufungura Inkomoko Yashize Umwaka ushize Yahinduye Uburyo Abanyamwuga Batekereza Umutekano

Porogaramu ifunguye isoko irahari hose-ikoreshwa hafi ya porogaramu igezweho - ariko ibibazo byumutekano ihura nabyo bikomeje kwiyongera cyane. Kwishingikiriza ku nkingi y’abakorerabushake, intege nke ubu ziba intego nyamukuru yibitero byibasirwa naba hackers babi ndetse nabakinnyi ba leta. Ihamagarwa rya hafi hamwe na xz Utils yinyuma yibitero byerekana uburyo umutekano ufunguye umutekano ushobora kuba. Hamwe n’ibikoresho bifungura isoko ari ingenzi ku masosiyete yigenga na za guverinoma, hazakenerwa ishoramari ryinshi ry’abikorera ndetse n'inzego za Leta.

Byinshi mu bikoresho bya interineti byifashishwa na interineti birashobora kwibasirwa n’abacuruzi babi ndetse n’ibihugu by’ibihugu. Ikinyamakuru The Economist cyatangaje ko porogaramu ifunguye isoko iri ku “mutima wa interineti,” ikomezwa ahanini n’abakorerabushake bake kandi ibyo bikaba ari ikibazo gikomeye cy’umutekano ku bigo ndetse na guverinoma kimwe. Porogaramu ifunguye isoko isanzwe ikoreshwa mubikorwa remezo bya digitale kubera igiciro cyayo gito. Ibyo bikorwa remezo byashyizwe ku isi yose, byibasiwe n’ibihugu bitandukanye by’abanzi.

Martin Woodward, VP ushinzwe umubano w’iterambere muri GitHub mbere yagize ati : "Porogaramu ifunguye isoko ni ishingiro rya 99% bya software ku isi." Hafi ya 97% ya porogaramu ikoresha kode ifungura isoko, hamwe 90% byamasosiyete arimo cyangwa ayakoresha mubushobozi bumwe.

Ibyo umwaka ushize byagaragaje mumutekano ufunguye

Ibyabaye kuri xz Utils byari urugero rukomeye rwibibazo. Ku ya 29 Werurwe 2024, Andres Freund, injeniyeri ya software muri Microsoft, “atabishaka yasanze urugi rwihishe mu gice cya software kiri muri sisitemu y'imikorere ya Linux.” Uru rugongo rwaturutse kumurongo wo gusohora kuri xz Utils, zahinduwe, kandi zemerera kwinjira muri sisitemu bitemewe ukoresheje verisiyo zanduye. Inkomoko yinkomoko yabangamiwe yari ya xz Ikoresha ifungura isoko yamakuru yo gukusanya ibikoresho muri sisitemu ya Linux. Ikinyamakuru New York Times cyanditse ko injeniyeri yakumiriye “igitero gishobora kuba amateka.”

Kubera ko xz Utils ifunguye software, code yayo iragerwaho kumugaragaro, yemerera umuntu wese kureba impinduka zakozwe. Nyamara, uku gufungura kwakoreshejwe muburyo budasanzwe: igitero cyibasiye kode gusa muri tarball yo kurekura (dosiye yububiko bwa compression ya verisiyo yo gusohora software), hasigara ishami rikuru ryububiko. Aya mayeri yubwenge yatumye ubwumvikane bugorana kubimenya. Hatabayeho kuba maso kubateza imbere no guhitanwa n'amahirwe, igitero cyashoboraga guteza ibyago byinshi, bikica sisitemu zitabarika ku isi.

Umushinga witwa Jia Tan yatangiye gutanga imisanzu ifasha kode kumushinga kandi buhoro buhoro yizera. Noneho igihe, umukinnyi mubi yinjije magendu. Kimwe mu bintu bitangaje bigize igitero cya xz Utils inyuma yukuntu uburyo code mbi yatangijwe binyuze mubikorwa bya git bisa nkaho bitagira ingaruka. Aho kugirango uhindure kode yinkomoko ya xz itaziguye, malware yahishe nka code ya x86_64 yibintu muri dosiye yikizamini cya binary, yiyoberanya nkibizamini byibice byimanza muri XZ decompression. Urwego rw’ubutasi rw’Uburusiya, SVR, rukekwaho kuba ari rwo rwihishe inyuma y’ibyo bitero , n’urwego rumwe rw’ubutasi rwihishe inyuma y’igitero cya SolarWinds.

Ibi byabaye ntabwo byonyine. Gufungura isoko yimishinga ni intego ishimishije kubakinnyi ba leta kuko code ni rusange. Mugihe uku gufungura ari byiza kubufatanye, binatanga ibitero byoroshye kwiga kode namakuru agezweho. Gufungura isoko bigira uruhare runini mubikorwa remezo byisi; Raporo yatanzwe na Lineaje mu 2023 yerekanye ko 70% ya software yose muri iki gihe ari isoko ifunguye kandi ko 82% by'ibikoresho bya software bifungura isoko “bishobora guteza akaga.” Kubwamahirwe, imikoreshereze yayo yose ituma intege nke zayo zirushaho kuba mbi.

Raporo ziva kuri Lineaje nizindi zigaragaza ingaruka: 82% yibikoresho bifungura isoko bifatwa nkibyago kubera kubungabunga nabi, kode itajyanye n'igihe, cyangwa amakosa yumutekano. Byinshi muribi bikorwa bikoreshwa nitsinda rito cyangwa abakorerabushake ku giti cyabo bafite amikoro make, bigatuma bashobora kwibasirwa n'ibitero.

Uburyo AI izagira uruhare runini

Kwiyongera kuri izi ngaruka ni izamuka ryururimi runini (LLMs) . Mugihe LLM ifasha abitezimbere bafite imirimo nko gukemura cyangwa gutangiza akazi, birashobora no gukoreshwa nabi. Abagabye igitero barashobora gukoresha LLMs kugirango basesengure byihuse kode ifungura isoko yintege nke, byoroshye kubona inenge zikoreshwa. Ibi bikoresho bya AI birashobora kandi gukora ubutumwa bwemeza uburobyi cyangwa imisanzu yimpimbano kumishinga ifungura isoko, bikagorana kubona abakinnyi babi. Ubushobozi bwa LLMs bwo kwigana imikoranire yabantu byongera amahirwe ya code mbi kunyerera bitamenyekanye binyuze muburobyi nibindi bitero bishobora kwikora.

Nubwo hari ibibazo, LLMs nayo itanga amahirwe yo kuzamura umutekano ufunguye. Ariko hariho impirimbanyi zigomba kubaho kuva zishobora kuba ikiguzi kibuza, kubera ko ibigo bidashoboka gushora imari mu gukora abasesengura bishingiye kuri LLM kuri kode ifunguye nta ngengo yimari. Kurugero, sisitemu ya AI irashobora kwerekana impinduka ziteye inkeke muri codebase cyangwa kumenya uburyo budasanzwe mumyitwarire yabaterankunga. Gufungura isoko LLMs kandi "yungukirwa n’iterambere ryihuta ry’abaturage bateza imbere imipaka yabo no gupima buri munsi kugirango bakemure ibibazo bitoroshye by’umutekano wa interineti."

Nyamara, tekinoroji imwe ishimangira kwirwanaho nayo ishobora kuba intwaro . Kohereza isoko ifunguye LLM kuri seriveri cyangwa mubicu bitangiza ibyago byo kubona uburenganzira butemewe kuri moderi cyangwa amakuru yoroheje ikora, niba nta kugenzura neza umutekano bihari. Abakinnyi babi barashobora guhindura amakuru yamahugurwa cyangwa icyitegererezo ubwacyo, bagatera kode yangiza cyangwa kubogama bivamo ibiyobya cyangwa ibintu bibi. Byongeye kandi, LLMs ifite umutekano muke irashobora kumeneka amakuru yoroheje, haba mumyandiko yatanzwe cyangwa ibitero byibasiye imiterere yububiko.

Ibyari bimaze gukorwa hamwe nububiko bumwe ukoresheje ibikoresho nka xz Utils birashobora guhita bipimwa amagana numuntu umwe ukoresha tekinoroji ya GenAI yateye imbere mumyaka mike iri imbere - kandi iri hinduka rishobora kuba ryatangiye. Inzitizi yo kwinjira yagabanutse cyane, yimuka isaba umutungo wigihugu-urwego rwigihugu cyangwa ubwitange bukabije kubintu bishobora gukorwa ubu. Birashoboka rwose ko mumyaka iri imbere, ubwinshi bwibintu bito cyangwa bito bigezweho kububiko bizakorwa na GenAI.

Nubwo intererano zifite ireme, zujuje ubuziranenge ziterambere zikomeje kuba ingorabahizi, uruhare rwabashinzwe kubungabunga rushobora guhinduka. Aho kuba abahanga mu iterambere bafite uruhare runini mu gutanga kode, abayikomeza barashobora kurushaho kuba indashyikirwa mu gucunga imirimo itontoma no kwerekana ishusho yubufasha, bagasiga imirimo igoye cyangwa igezweho mumatsinda mato yabatezimbere.

Ikizere cya AI

Ibitero bya fishing byibanze ku kubona ububiko bwimbere bwikigo no kwibasira abantu bakomeye - cyangwa abo bizeye. Hamwe na NPM yagutse cyane yibidukikije, bigerwaho kumugaragaro, abateye bafite impande zitandukanye. Barashobora kumenya umubare muto wabashinzwe kubungabunga paki yatanzwe, gusuzuma ibirarane byikibazo, no gukoresha ayo makuru kugirango bakoreshe bots bigaragara ko ifasha mugutanga ibisubizo cyangwa gutanga ubufasha. Ibi birema inzira yo kugirirwa ikizere no kwishora mubikorwa byiterambere.

Indangamuntu nziza zimpimbano zakozwe hamwe namakuru yukuri-yisi, akungahazwa mugihe akoresheje imbuga nkoranyambaga, inyandiko zamasomo, nibindi byinshi. Indangamuntu yimpimbano yemeza ikubiyemo amakuru arambuye, yuzuye hamwe namafoto, amahuza, hamwe no kumurongo. GenAI yoroshya kurema izo ndangamuntu, mugihe nayo izamura mukwigana ibikorwa bya coding kurubuga nka GitHub.

Intererano nyinshi za mbere mugukingura isoko yimishinga ni nto kandi byoroshye kugenzura - nko gukosora amakosa yibitekerezo cyangwa kuvugurura ibintu. Ibi bikorwa nibyiza kubatera bakoresheje LLM, kuko birashobora kwikora murwego. Ibi bifasha kurema amajana yindangamuntu yibinyoma, buriwese ufite imyirondoro ya LinkedIn, konte mbuga nkoranyambaga, n'amateka ya GitHub arimo imisanzu ibihumbi bito ariko byemewe.

Izi ndangamuntu zirashobora kwitabira imishinga myinshi, birashoboka cyane, kandi ikubaka inyandiko yubufasha. Igihe kirenze, umukinnyi mubi ashobora gukoresha imwe muriranga kugirango atange imisanzu ikomeye. Ndetse iyi ntererano irashobora kubanza kugaragara ifite akamaro kandi ifite akamaro. Mu mbaraga zihuriweho, nk'iz’ibihugu by’ibihugu cyangwa itsinda rya ba hackers, indangamuntu imwe ishobora gushimangira icyizere cy’undi, gushimangira inkuru cyangwa kugira uruhare.

Tumaze kubona ingero nka xz utils ibyabaye, aho indangamuntu nyinshi zakoreshejwe mugukoresha ikizere. Igihe igitero cyagaragaraga, izo ndangamuntu zajugunywe. Mubikorwa byintoki, gutakaza imitungo nkiyi byaba bihenze. Ariko, hamwe na GenAI, kubyara indangamuntu nshya biza ku giciro gito, bikagabanya cyane imigabane yabatera.

Ibitero byo gutanga amasoko biziyongera

Igitero giheruka gutanga porogaramu yibasiye isomero rizwi cyane @ solana / web3.js npm isomero, rikoreshwa cyane mukubaka porogaramu zishingiye kuri Solana, kubangamira verisiyo 1.95.6 na 1.95.7 hamwe na kode mbi yo kwiba urufunguzo rwabakoresha no kuvoma amafaranga. umufuka. Igitero cyakoresheje ubukangurambaga bw’uburobyi butuma abakora iterabwoba babona uburyo bwo gutangaza no gutera inshinge zinyuma, bagasohora urufunguzo rwihariye bakoresheje imitwe ya Cloudflare yemewe. Impapuro zanduye zavanyweho, kandi abakoresha basabwe kuvugurura verisiyo 1.95.8 hanyuma bagatekereza kuzenguruka urufunguzo rwabo kugirango bagabanye ingaruka.

Biteganijwe ko ibitero bitangwa na software byiyongera mu 2025 bitewe n’uko bigenda byiyongera ku masomero afunguye ndetse no kuzamuka kw’ibitero bitangaje nko kuroba no gukora imibereho myiza. Nk’uko ubushakashatsi bwakozwe na Synopsys bubitangaza, intege nke ziri muri software zifungura isoko zigenda ziyongera. Byongeye kandi, kongera ibikorwa by’ibikoresho bifungura isoko muri sisitemu y’ibigo bitanga ibitero ku nyungu nyinshi ku ishoramari, bigatuma iryo hohoterwa rirushaho gukurura abanyabyaha ba interineti ndetse n’abaterankunga ba Leta.

Uruhare rwabakinnyi ba leta no kwibasira abakorerabushake

Ibyabaye kuri xz Utils, kimwe nigitero cya SolarWinds, bikora nkumuhamagaro wo kubyuka, byerekana ko hakenewe ishoramari n’ubufatanye hagati y’abikorera ndetse n’abikorera kugira ngo babone porogaramu zifungura isoko kandi babungabunge agaciro kayo nk’inyungu rusange. Ibigo byunguka ibikoresho bifungura isoko bigomba guhaguruka no gushyigikira iyi mishinga. Iyi nkunga irashobora gushiramo inkunga, gutanga igihe cyabatezimbere, cyangwa gutanga ubumenyi bwumutekano. Gufungura isoko yimishinga nayo ikeneye imiyoborere myiza, nkibikorwa bikomeye byo gusuzuma kode hamwe ninshingano zisangiwe zo kuvugurura. Kwihutisha gushakisha intege nke nibindi byihutirwa, kuko gutinda kureka sisitemu ihura nibitero mugihe kirekire.

Abakinnyi ba leta bakomeje kuba kimwe mubikangisho bikomeye. Porogaramu ifunguye isoko ibaha igiciro gito, ibihembo byinshi-byo kuneka, gusenya, no guhungabana. Igitero cya SolarWinds, nubwo kirimo porogaramu yihariye, ni urugero rwambere rwukuntu ibyo byangiza amasoko bishobora kwangiza.

Abagizi ba nabi birashoboka ko bazakomeza kwibasira ababikomeza ku giti cyabo, bakoresheje amayeri yo mu rwego rwo hejuru y’imibereho kugira ngo bahungabanye imishinga. Ibikoresho bya AI bizakomeza kongerera ubushobozi abateye ndetse na ba myugariro, bituma habaho irushanwa ryo gukomeza imbere y’iterabwoba rishya. Guverinoma nazo zishobora kurushaho kugira uruhare , zifasha guteza imbere ubufatanye bwa Leta n’abikorera kugira ngo umutekano urusheho kwiyongera ku bidukikije. Muri icyo gihe, amabwiriza akomeye arashobora gushyirwaho, bigatuma ibigo bifata inshingano nyinshi kubice bifungura isoko bakoresha.

Iyo bigeze kuri SolarWinds ibyabaye, niba byarayoyotse mububiko biterwa nukureba. Nubwo abaturage bashobora kuba barahindutse, abayobozi ba leta ninzobere mu bijyanye n’umutekano wa interineti bakomeje kwibanda ku gukemura amasomo bize. Byinshi mubikorwa bikomeje gukorwa mumutekano wo gutanga software, nkibikorwa byakozwe na OpenSSF (nka SLSA na GUAC), ni igisubizo kiziguye cyo gukenera kwirwanaho gukomeye, gutwarwa ninzego nka CISA , ariko iterambere ryatinze, kandi sibyose amashyirahamwe yafashe ubwo burinzi. Guverinoma ya federasiyo ubwayo ni umwe mu bakoresha cyane porogaramu zifungura isoko kandi izakomeza kongera uruhare rwayo mu kirere.

Nubwo izo mbaraga zikomeje kuba inyuma, ingaruka zibyabaye ntizishobora kumvikana neza nabantu muri rusange, cyane cyane mubashinzwe porogaramu yigenga cyangwa yishimisha badashobora kumva neza ingaruka nini.

Ubwanyuma, nkuko impuguke Michal Zalewski yabivuze , "Icyibanze ni uko dufite amamiliyaridi y'amadorari atagendera hejuru ya code yatunganijwe na hobbyist." Ibi bishimangira ko bishoboka ko izindi nyuma zishobora kuba zihishe, zitavumbuwe, muri software ikomeye igize urufatiro rwa interineti.

Nubwo kumenya intege nke biteye impungenge, ikibazo kinini kiri mu isuri yo kwizerana muri ecosysteme yisanzuye. Inkomoko ifunguye itera imbere kumisanzu yabateza imbere badafite isura bakora muburyo bwiza, akenshi nta mikoranire itaziguye cyangwa kugenzura indangamuntu. GenAI yangiza iyi fondasiyo ituma bishoboka ko benshi mubaterankunga badafite isura bahimbwa rwose.

Ibitero byuburobyi bimaze guteza akaga kuko bifashisha ikizere aho guca muburyo bwa tekiniki - bashuka abantu kugirango bakore code mbi ahantu hizewe. GenAI yongerera ibyago ingaruka zifasha abateye gutera kode mbi mubipapuro byizewe bifunguye bitwaje imisanzu yemewe.

Ibi birashoboka ko bizatera irushanwa hagati yabakinnyi babi bakoresheje GenAI kugirango binjire mu mishinga nibikoresho byo kwirwanaho bifashisha GenAI kugirango bamenye kandi barwanye intege nke mbere yuko zikoreshwa. Ikibazo noneho gihinduka niba kwizera kumasoko afunguye bishobora kubaho mwisi aho abaterankunga bashobora kurushaho gutandukana nabashinzwe gutwara AI.

Mugihe twinjiye muri 2025, porogaramu ifunguye isoko iri mugihe gikomeye. Iterabwoba riragenda rirushaho kuba ingorabahizi, ritwarwa n’abakozi ba Leta, gukoresha nabi ibikoresho bya AI nka LLMs, no kwibanda ku kwivanga kw’ibicuruzwa kugira ngo byangize byinshi. Ariko, hamwe ningamba zifatika, ishoramari ryinshi, hamwe ninshingano zisangiwe, birashoboka gushiraho ejo hazaza aho isoko ifunguye ikomeje gutera imbere nkimbaraga zo guhanga udushya no gutera imbere, aho kuba intege nke zitegereje gukoreshwa.