{"id":55546,"date":"2020-01-23T00:00:00","date_gmt":"2020-01-22T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/otkryt-kod-klientskih-prilozhenij-protonvpn"},"modified":"2020-02-18T14:03:40","modified_gmt":"2020-02-18T11:03:40","slug":"otkryt-kod-klientskih-prilozhenij-protonvpn","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/otkryt-kod-klientskih-prilozhenij-protonvpn","title":{"rendered":"Koden til ProtonVPN-klientapplikationer er \u00e5bnet","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Proton Technologies, der udvikler en sikker e-mailservice og VPN, har annonceret<\/a><\/noindex> har annonceret kildeteksterne<\/a><\/noindex> klientprogrammerne ProtonVPN for Windows<\/a><\/noindex>, macOS<\/a><\/noindex>, Android<\/a><\/noindex> og iOS<\/a><\/noindex> (konsol Linux-klient<\/a><\/noindex> blev oprindeligt \u00e5bnet). Koden er tilg\u00e6ngelig under GPLv3-licensen. Samtidig er der offentliggjort rapporter om gennemf\u00f8rslen af en uafh\u00e6ngig revision af de n\u00e6vnte applikationer. Under revisionen blev der ikke fundet problemer, der kunne f\u00f8re til dekryptering af VPN-trafik eller h\u00e6ve privilegier.<\/p>\n

Koden er offentliggjort som en del af initiativet for at sikre projektets gennemsigtighed, s\u00e5 uafh\u00e6ngige eksperter kan verificere, at koden overholder de angivne specifikationer og kontrollere korrektheden af sikkerhedsrevisionen. Som en del af samarbejdet med Mozilla, som udvikler<\/a><\/noindex> en betalt VPN-service, havde Mozillas ingeni\u00f8rer ogs\u00e5 adgang til andre teknologier fra ProtonVPN for revisionen. Det n\u00e6vnes, at n\u00e6ste skridt vil v\u00e6re at \u00e5bne de \u00f8vrige applikationer i ProtonVPN. <\/p>\n

Af tidligere h\u00e6ndelser med ProtonVPN kan n\u00e6vnes the detection of<\/a><\/noindex> s\u00e5rbarheder<\/a><\/noindex> i Windows-applikationen, der gjorde det muligt for brugeren at h\u00e6ve sine privilegier i systemet til administrator (s\u00e5rbarheden blev for\u00e5rsaget af uhensigtsm\u00e6ssig interaktion mellem den ikke-privilegerede GUI-klient og systemtjenesten). <\/p>\n

Den kodeaudit, der afsluttedes for et par dage siden, afsl\u00f8rede 4 s\u00e5rbarheder<\/a><\/noindex> (to af moderat alvor og to ubetydelige): opbevaring af sessionstokens og legitimationsoplysninger i proces hukommelsen, foruddefinerede VPN-servern\u00f8gler angivet i konfigurationsfilen (ikke brugt til autentificering), aktivering af debug-information og accept af forbindelser p\u00e5 alle netv\u00e6rksinterfacer. <\/p>\n

I versionen til macOS<\/a><\/noindex> blev der ikke fundet s\u00e5rbarheder. I versionen til iOS blev der fundet to ubetydelige s\u00e5rbarheder<\/a><\/noindex> (SSL-certifikatbinding er ikke anvendt, og der blokeres ikke for drift p\u00e5 enheder efter jailbreak). I versionen til Android fundet<\/a><\/noindex> blev der fundet fire ubetydelige problemer (aktivering af debug-meddelelser, manglende blokering af backup ved hj\u00e6lp af ADB-v\u00e6rkt\u00f8jet, kryptering af indstillinger med en foruddefineret n\u00f8gle, manglende SSL-certifikatbinding) og \u00e9n s\u00e5rbarhed af moderat alvor (ufuldst\u00e6ndig afslutning af sessionen, hvilket muligg\u00f8r genbrug af sessionstokens).<\/p>\n

Vi minder om, at Proton Technologies er grundlagt af flere forskere fra CERN (Den Europ\u00e6iske Organisation for Nuklear Forskning) og registreret i Schweiz, som har strenge lovgivninger vedr\u00f8rende beskyttelse af privatliv, der forhindrer efterretningsmyndigheder i at kontrollere oplysninger. ProtonVPN-projektet tilbyder et h\u00f8jt niveau af beskyttelse af kommunikationskanalen (data str\u00f8mmes krypteret ved hj\u00e6lp af AES-256, n\u00f8gleudveksling foretages p\u00e5 baggrund af 2048-bit RSA-n\u00f8gler og HMAC, autentificering bruger SHA-256, og der er beskyttelse mod angreb baseret p\u00e5 korrelation af datastreams), afviser logf\u00f8ring og fokuserer ikke p\u00e5 profit, men p\u00e5 at forbedre sikkerhed og privatliv p\u00e5 nettet (projektet finansieres af FONGIT-fonden, st\u00f8ttet af Europa-Kommissionen). <\/p>\n

<\/a><\/noindex><\/p>\n

Kilde: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Proton Technologies, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0439 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0438 VPN, \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c ProtonVPN \u0434\u043b\u044f Windows, macOS, Android \u0438 iOS (\u043a\u043e\u043d\u0441\u043e\u043b\u044c\u043d\u044b\u0439 Linux-\u043a\u043b\u0438\u0435\u043d\u0442 \u043e\u0442\u043a\u0440\u044b\u0442 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e). \u041a\u043e\u0434 \u043e\u0442\u043a\u0440\u044b\u0442 \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GPLv3. \u041e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043e\u0442\u0447\u0451\u0442\u044b \u043e \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u041f\u0440\u043e\u0431\u043b\u0435\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0435 VPN-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0438\u043b\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0432 \u0445\u043e\u0434\u0435 \u0430\u0443\u0434\u0438\u0442\u0430 \u043d\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-55546","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kildekoden til ProtonVPN-klientapps er \u00e5bnet | ProHoster","description":"Proton Technologies, der udvikler en sikker e-mail tjeneste og VPN, har annonceret \u00e5bningen af","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/otkryt-kod-klientskih-prilozhenij-protonvpn","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0442\u043a\u0440\u044b\u0442 \u043a\u043e\u0434 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 ProtonVPN | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Proton Technologies, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0439 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0438 VPN, \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/otkryt-kod-klientskih-prilozhenij-protonvpn","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-22T21:00:00+00:00","article:modified_time":"2020-02-18T11:03:40+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55546","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:42:37","updated":"2022-10-07 23:49:44","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/55546","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=55546"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/55546\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=55546"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=55546"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=55546"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}