I-Android ishaya indiva ukuthintwa kokugunyazwa kwe-VPN? Hlola isembozo kuqala

Uthinta inkinobho yokugunyazwa kwe-VPN futhi ingxoxo ayiphenduli. Isiphetho esingokwemvelo ukuthi uhlelo lwe-VPN noma iseva yephukile, ngakho abantu baphinda basethe amagama ayimfihlo, bashintsha i-DNS noma bafaka kabusha iklayenti. Ngokuvamile akukho kulokhu okuthinta iphutha, ngoba i-Android ilahla ukuthintwa okufika ngokusebenzisa isithiyo, futhi isikrini sokugunyazwa kwe-VPN siwuhlobo lwesicelo semvume esibucayi esithola lokho kuvikelwa. Ukuthinta akukaze kufinyelele enkinobhweni.

Yini ukuvikelwa okwenqabayo ngempela

I-Android ivikela ukusebenzisana okubucayi ku-tapjacking, lapho elinye iwindi lihlala phezu kwengxoxo futhi lize lintshatshe ukuthintwa noma likwenze kungacaci. Umbono ujoyina lokhu nge-View.setFilterTouchesWhenObscured, futhi umcimbi ufika uphethe i-MotionEvent.FLAG_WINDOW_IS_OBSCURED lapho elinye iwindi limakwe njengelifihla ingxenye noma konke. Lapho lokho kwenzeka, umcimbi uyalahlwa esikhundleni sokuthi ulethwe endaweni engafanele. I-Android 12 (API 31) yandisa lokho kuvikelwa ngokuvimbela ukuthintwa okungathenjwa ezindaweni zemvume zohlelo, yingakho ingxoxo yokugunyaza inganqaba ukuthintwa okuvela esembozweni uhlelo olunye lungakwamukela.

Izinto ezintathu zivame ukudala isithiyo: uhlelo olunemvume yokubonisa phezu kwezinye izinhlelo, isevisi yokufinyeleleka edweba okuqukethwe, kanye newijethi entantayo evela kusishicileli sesikrini noma ithuluzi lokuhlunga. Ezinye izici zesikrini zomkhiqizi zongeza ungqimba lwazo futhi, yingakho ingxoxo efanayo ingaziphatha ngendlela ehlukile kumafoni amabili anenguqulo efanayo ye-Android. Iwindi elifihla ingxenye libeka i-FLAG_WINDOW_IS_PARTIALLY_OBSCURED, futhi ukuthintwa kulahlwa ngaphambi kokuba inkinobho ikubone. Lokhu kuyisici sesikrini, hhayi senethiwekhi. Akukho okwathunyelwa kuseva ye-VPN ngesikhathi ukuthinta kulahlwa, ngakho akukho shintsho ohlangothini lweseva olungathinta umphumela.

Hlukanisa ukuthinta okufile nokuxhumana okwehlulekile

Lokho kwehluka kuwukuxilongwa konke futhi kuthatha imizuzwana eyishumi. Uma ukuthinta kushaywa indiva futhi ingxoxo ihlala njengoba yayinjalo, isithiyo sendawo. Uma ingxoxo ivaleka futhi iphutha livela ngemva kwalokho, imvume yamukelwa futhi usudlulele esigabeni esihlukile esidinga ulwazi lomcimbi lohlelo lwe-VPN uqobo.

Ungaqinisekisa ukufundwa kwendawo ngokuthi uhlole ukuthi uhlelo olucelayo lwazama ukuxhumana yini. Iklayenti engakaze iqophe umzamo wokuxhawula ngesikhathi ingxoxo yemvume isesikrinini ayifikanga kunethiwekhi.

adb shell cmd appops get com.example.vpn SYSTEM_ALERT_WINDOW
adb shell settings get secure enabled_accessibility_services

Bhala ukuthi ubani onemvume yesembozo nokuthi yiziphi izinsiza zokufinyeleleka ezivuliwe, bese uziqhathanisa nalokho okusebenzayo. Ungayicishi ukuvikelwa kwepulatifomu ngokwayo; yikho okuvimbela iwindi elifihlekile ukuba liphendule isicelo semvume egameni lakho.

Susa isithiyo, bese uzama kabusha inqubo evamile

Qala ngokuhlonza uhlelo olwacele ukugunyazwa kwe-VPN, ukuze wazi ukuthi yiluphi imvume oyinikezayo. Bese umisa isembozo esithile ngokusebenzisa isilungiselelo saso, esikhundleni sokuhoxisa imvume ebanzi ongase uyidinge kamuva. Isihlungi sesikrini ngokuvamile sineswishi kuhlelo lwaso; iwijethi entantayo inesilawuli sokuvala; imodi yesikrini yomkhiqizi ineswishi kuzilungiselelo zesikrini.

Buyela kuhlelo lwe-VPN ngemva kwalokho futhi ucele imvume futhi, ukuze ingxoxo idalwe kabusha. Uma ukuthinta kusebenza manje, lungisa ukuziphatha kokuhambisana kwesembozo noma ukushiye kucishiwe ngesikhathi uxhuma, futhi ugcine ukuvikelwa kokuthinta kuvuliwe.

Uma ungakwazi ukusho ukuthi yiliphi iwindi elibhekene necala, susa elilodwa ngesikhathi bese uzama kabusha ingxoxo yemvume ngemva kwangakunye ushintsho. Ibha yokulawula yesishicileli noma isinqamuleli esintantayo ngokuvamile iyicala, futhi lokho okukususile ngqo ngaphambi kokuba kusebenze yikhona impendulo.

Buyisela noma yini engahlobene oyicishile endleleni. Isihlungi sesikrini noma imodi yasebusuku akuyona isitha; iwindi elithile elihlangana nengxoxo yilona isitha.

Yini okufanele ungayenzi ukuze udlule ingxoxo

Unganikezi uhlelo ongalwazi imvume yokufinyeleleka ukuze likwazi ukucindezela inkinobho, futhi ungafaki uhlelo olusizayo ngalokho. Zinikeza khona kanye amandla ukuvikelwa okukhona ukuze kwenqatshwe, esikrinini esigunyaza i-VPN.

Futhi ungayenzi ingxoxo isebenze ngokuzenzakalela ngethuluzi lokufaka. Kunikeza umphumela ofanayo nesembozo esinobungozi futhi akukufundisi lutho ngesizathu.

Kudivaysi ephethwe, inqubomgomo evimbela izinguquko ze-VPN iyisinqumo somlawuli. Ukuhlola isembozo akusona isigunyazo sokuyedlula. Ngokufanayo, inkinobho yemvume engaphenduli ayisona isizathu sokuqedela ukuqinisekiswa kwesitifiketi noma ukushintsha imininingwane ye-akhawunti: asikho isilungiselelo esisusa isithiyo sendawo yokuthinta.

Uma kusahluleka, bika ukuziphatha okuqondile

Chaza ingxoxo hhayi isiphetho: yiluphi uhlelo olwacele imvume, ingxoxo yahlala ivulekile noma yavaleka, izinye izicelo ezibucayi njengezixwayiso zemithombo engaziwa noma zokufinyeleleka nazo ziyakushaya indiva yini ukuthinta, imodeli yedivaysi nenguqulo ye-Android, kanye nohlu lwezembozo nokufinyeleleka oluqoqiwe.

Buza umnikazi wokusekelwa omunye umbuzo ngesikhathi ukhona: ingabe inqubomgomo yedivaysi ivimbela nhlobo izinguquko zokucushwa kwe-VPN. Ukuvinjwa okuphethwe kubukeka kuhlukile kunokuthinta okushayiwe indiva, futhi ukwazi ukuthi ubhekene nakho kusindisa umjikelezo wesibili.

Leli qoqo lehlukanisa inkinga yokuthinta okusithekile nedivaysi yokufaka ephukile, ingxoxo emile, noma ukuvinjwa yinqubomgomo. Futhi litshela umuntu olandelayo ukuthi abheke isikrini noma inethiwekhi.

Umhlahlandlela we-Android we-tapjacking uhlanganisa izimo zamawindi asithekile kanye nama-API angemuva kwalokhu kuziphatha. Uma ufuna umkhondo wobufakazi, funa i-FLAG_WINDOW_IS_OBSCURED ne-FLAG_WINDOW_IS_PARTIALLY_OBSCURED kumcimbi ongakaze ufinyelele enkinobhweni. Ingxoxo ehlala ivulekile yiyo okufanele iqoshwe, ngoba ikhombisa ukuthi ukuthinta kwagcinwa hhayi ukulethwa kwelinye iwindi.