{"id":102530,"date":"2021-12-09T15:36:49","date_gmt":"2021-12-09T13:36:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-tor-browser-11-0-2-rasshirenie-blokirovki-sajtov-tor-vozmozhnye-ataki-na-tor"},"modified":"2021-12-09T15:36:49","modified_gmt":"2021-12-09T13:36:50","slug":"vypusk-tor-browser-11-0-2-rasshirenie-blokirovki-sajtov-tor-vozmozhnye-ataki-na-tor","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/vypusk-tor-browser-11-0-2-rasshirenie-blokirovki-sajtov-tor-vozmozhnye-ataki-na-tor","title":{"rendered":"Udgivelse af Tor Browser 11.0.2. Udvidelse til blokering af Tor-websteder. Mulige angreb p\u00e5 Tor","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Tor Browser 11.0.2 er udgivet, med fokus p\u00e5 anonymitet, sikkerhed og privatliv. N\u00e5r Tor Browser bruges, dirigeres al trafik kun gennem Tor-netv\u00e6rket, og det er umuligt at tilg\u00e5 direkte via det nuv\u00e6rende systems netv\u00e6rksforbindelse, hvilket forhindrer, at brugerens faktiske IP-adresse kan spores (hvis browseren bliver kompromitteret, kan angribere f\u00e5 adgang til systemets netv\u00e6rksindstillinger, s\u00e5 for at forhindre mulige l\u00e6kager helt, b\u00f8r man bruge produkter som Whonix). Tor Browser-udgaverne er tilg\u00e6ngelige for Linux, Windows og macOS. <\/p>\n

For additional protection, the Tor Browser includes the HTTPS Everywhere add-on, which enables traffic encryption on all sites where possible. To reduce threats from attacks using JavaScript and to block plugins by default, the NoScript add-on is included. Alternative transports are used to combat traffic blocking and inspection. To protect against revealing visitor-specific features, APIs such as WebGL, WebGL2, WebAudio, Social, SpeechSynthesis, Touch, AudioContext, HTMLMediaElement, Mediastream, Canvas, SharedWorker, WebAudio, Permissions, MediaDevices.enumerateDevices, and screen.orientation have been disabled or restricted, and telemetry sending tools, Pocket, Reader View, HTTP Alternative-Services, MozTCPSocket, 'link rel=preconnect', and the libmdns have been modified. <\/p>\n

The new version has synchronized with the code base of Firefox 91.4.0, which fixes 15 vulnerabilities, ten of which are marked as critical. Seven vulnerabilities are due to memory management issues, such as buffer overflows and accessing already freed memory areas, and could potentially allow the execution of malicious code when specially crafted pages are opened. Some TTF fonts, which caused text rendering issues in user interface elements on Fedora Linux, have been excluded from the build for the Linux platform. The 'network.proxy.allow_bypass' setting, which controls the activity of protection against improper use of the Proxy API in add-ons, has been disabled. A new 'deusexmachina' gateway is used by default for the obfs4 transport. <\/p>\n

Imens forts\u00e6tter historien om blokeringen af Tor i Rusland. Roskomnadzor har \u00e6ndret masken for blokerede hjemmesider i registreret. dom\u00e6ner<\/a> from 'www.torproject.org' to '*.torproject.org' and expanded the list of IP addresses to be blocked. As a result of the changes, most of the project's Tor subdomains were blocked, including blog.torproject.org, gettor.torproject.org, and support.torproject.org. The forum.torproject.net, hosted in the Discourse infrastructure, remains accessible. Gitlab.torproject.org and lists.torproject.org are partially available; they initially lost access but were later restored, likely after IP address changes (gitlab is now directed to the host gitlab-02.torproject.org). <\/p>\n

Derudover er blokeringer af Tor-netv\u00e6rkets gateways og noder, samt hosten ajax.aspnetcdn.com (CDN fra Microsoft), der anvendes i meek-asure transport, ikke l\u00e6ngere blevet bem\u00e6rket. Det ser ud til, at eksperimenter med at blokere Tor-noder er stoppet efter blokeringen af Tor-webstedet. Den komplekse situation med spejlet tor.eff.org, som stadig fungerer, skal n\u00e6vnes. Det er s\u00e5dan, at spejlet tor.eff.org er bundet til det samme IP-adressen<\/a>, der bruges til dom\u00e6net eff.org for organisationen EFF (Electronic Frontier Foundation), s\u00e5 blokering af tor.eff.org vil f\u00f8re til en delvis blokering af den kendte menneskerettighedsorganisations websted.

\"Udgivelse<\/center> <\/p>\n

Derudover kan man n\u00e6vne udgivelsen af en ny rapport om mulige fors\u00f8g p\u00e5 at gennemf\u00f8re angreb for at de-anonymisere Tor-brugere, der forbindes med gruppen KAX17, der fremh\u00e6ves af en specifik falsk kontakt-email i parametrene for noder. I l\u00f8bet af september og oktober blev 570 potentielt skadelige noder blokeret af Tor-projektet. P\u00e5 et tidspunkt lykkedes det gruppen KAX17 at f\u00e5 kontrol over 900 noder i Tor-netv\u00e6rket, placeret hos 50 forskellige udbydere, hvilket svarer til omtrent 14% af det samlede antal rel\u00e6er (til sammenligning lykkedes det angriberne i 2014 at f\u00e5 kontrol over n\u00e6sten halvdelen af Tor-rel\u00e6erne, mens de i 2020 fik kontrol over 23,95% af de udg\u00e5ende noder).

\"Udgivelse<\/center> <\/p>\n

At placeringen af et stort antal noder, der styres af \u00e9n operat\u00f8r, kan de-anonymisere brugere ved hj\u00e6lp af en Sybil-angreb, der kan udf\u00f8res, hvis angriberne har kontrol over den f\u00f8rste og den sidste node i anonymiseringsk\u00e6den. Den f\u00f8rste node i Tor-k\u00e6den kender brugerens IP-adresse, mens den sidste kender IP-adressen p\u00e5 den anmodede ressource, hvilket muligg\u00f8r de-anonymisering af anmodningen ved at tilf\u00f8je en bestemt skjult mark\u00f8r i pakkeoverskrifterne, som forbliver u\u00e6ndrede gennem hele anonymiseringsk\u00e6den, og analysere denne mark\u00f8r p\u00e5 udgangenoden. Hvis der findes kontrollerede udgangsnoder, kan angriberne ogs\u00e5 \u00e6ndre ukrypteret trafik, f.eks. fjerne omdirigeringer til HTTPS-versioner af hjemmesider og opsnappe ukrypteret indhold. <\/p>\n

If\u00f8lge repr\u00e6sentanter fra Tor-netv\u00e6rket blev de fleste af de fjerntliggende noder, der blev fjernet i efter\u00e5ret, kun brugt som intermedi\u00e6re noder, der ikke blev anvendt til behandling af indg\u00e5ende og udg\u00e5ende anmodninger. Enkelte forskere bem\u00e6rker, at noderne tilh\u00f8rte alle kategorier, og sandsynligheden for at ramme en indgangsnode, som var under kontrol af KAX17-gruppen, var 16%, mens det for en udgangsnode var 5%. Men selv hvis det er tilf\u00e6ldet, vurderes den samlede sandsynlighed for, at en bruger samtidig rammer b\u00e5de indgangs- og udgangsnoder fra de 900 KAX17-noder, der er under kontrol, til at v\u00e6re 0,8%. Der er ikke direkte beviser for brugen af KAX17-noder til udf\u00f8relse af angreb, men s\u00e5danne angreb kan potentielt ikke udelukkes.
\n
Kilde: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Tor Browser 11.0.2, \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0441\u0442\u0438, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u043e\u0441\u0442\u0438. \u041f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 Tor Browser \u0432\u0435\u0441\u044c \u0442\u0440\u0430\u0444\u0438\u043a \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0442\u044c Tor, \u0430 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0447\u0435\u0440\u0435\u0437 \u0448\u0442\u0430\u0442\u043d\u043e\u0435 \u0441\u0435\u0442\u0435\u0432\u043e\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0442\u0435\u043a\u0443\u0449\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0447\u0442\u043e \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0442\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0439 IP-\u0430\u0434\u0440\u0435\u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f (\u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c \u0441\u0435\u0442\u0438, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":102531,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-102530","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Udgivelse af Tor Browser 11.0.2. Udvidelse af blokering af Tor-hjemmesider. Mulige angreb p\u00e5 Tor | ProHoster","description":"Der er blevet pr\u00e6senteret en ny version af den specialiserede browser Tor Browser 11.0.2, der fokuserer p\u00e5 at sikre anonymitet, sikkerhed og privatliv.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/vypusk-tor-browser-11-0-2-rasshirenie-blokirovki-sajtov-tor-vozmozhnye-ataki-na-tor","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a Tor Browser 11.0.2. \u0420\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0441\u0430\u0439\u0442\u043e\u0432 Tor. \u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 Tor | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Tor Browser 11.0.2, \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0441\u0442\u0438, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u043e\u0441\u0442\u0438.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/vypusk-tor-browser-11-0-2-rasshirenie-blokirovki-sajtov-tor-vozmozhnye-ataki-na-tor","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-12-09T13:36:50+00:00","article:modified_time":"2021-12-09T13:36:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"102530","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-12-09 13:38:05","updated":"2026-02-11 11:12:05","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/102530","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=102530"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/102530\/revisions"}],"predecessor-version":[{"id":160563,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/102530\/revisions\/160563"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/102531"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=102530"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=102530"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=102530"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}