{"id":102530,"date":"2021-12-09T15:36:49","date_gmt":"2021-12-09T13:36:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-tor-browser-11-0-2-rasshirenie-blokirovki-sajtov-tor-vozmozhnye-ataki-na-tor"},"modified":"2021-12-09T15:36:49","modified_gmt":"2021-12-09T13:36:50","slug":"vypusk-tor-browser-11-0-2-rasshirenie-blokirovki-sajtov-tor-vozmozhnye-ataki-na-tor","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-tor-browser-11-0-2-rasshirenie-blokirovki-sajtov-tor-vozmozhnye-ataki-na-tor","title":{"rendered":"Tor Brauseri 11.0.2 vabanemise teadete. Tor'i saitide blokeerimise laiendus. V\u00f5imalikud r\u00fcnnakud Tor'i vastu","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Esitleme Tor Brauseri 11.0.2 versiooni, mis on suunatud anon\u00fc\u00fcmsuse, turvalisuse ja privaatsuse tagamisele. Tor Brauseri kasutamisel suunatakse kogu liiklus ainult Tor v\u00f5rgus, mist\u00f5ttu ei saa otse \u00fchenduda arvuti olemasoleva v\u00f5rgu\u00fchenduse kaudu, mis takistab kasutaja tegeliku IP-aadressi j\u00e4lgimist (browzeri h\u00e4kkimise korral v\u00f5ivad r\u00fcndajad p\u00e4\u00e4seda ligi s\u00fcsteemi v\u00f5rgu parameetritele, seega tuleks v\u00f5imalike lekete t\u00e4ielikuks blokimiseks kasutada selliseid tooteid nagu Whonix). Tor Brauseri versioonid on valmistatud Linuxi, Windowsi ja macOS-i jaoks. <\/p>\n

Kaitse suurendamiseks sisaldab Tor Browser lisana HTTPS Everywhere, mis v\u00f5imaldab kr\u00fcpteerida liiklust k\u00f5ikidel saitidel, kus see on v\u00f5imalik. JavaScripti r\u00fcnnakute v\u00e4hendamiseks ja vaikimisi pistikprogrammide blokeerimiseks on kaasas NoScripti lisand. Liikluse blokeerimise ja kontrollimise vastu kasutatakse alternatiivseid transportteid. Spetsiifiliste k\u00fclastajate omaduste tuvastamise v\u00e4ltimiseks on piiratud v\u00f5i keelatud API-d nagu WebGL, WebGL2, WebAudio, Social, SpeechSynthesis, Touch, AudioContext, HTMLMediaElement, Mediastream, Canvas, SharedWorker, WebAudio, Permissions, MediaDevices.enumerateDevices ja screen.orientation, samuti on keelatud telemeetria edastamise vahendid, Pocket, Reader View, HTTP Alternative-Services, MozTCPSocket, «link rel=preconnect», muudetud libmdns. <\/p>\n

Uues versioonis on s\u00fcnkroniseeritud koodibaas Firefox 91.4.0 versiooniga, milles on parandatud 15 haavatavust, millest 10 on t\u00e4histatud ohtlikeks. Seitsme haavatavuse p\u00f5hjuseks on m\u00e4luhaldusprobleemid, nagu m\u00e4lupuhvri \u00fclet\u00e4itumine ja juba vabastatud m\u00e4lupiirkondadele p\u00f6\u00f6rdumine, mis v\u00f5ivad potentsiaalselt viia kurjategija koodi k\u00e4ivitamiseni spetsiaalselt vormindatud lehtede avamisel. Linuxi platvormile m\u00f5eldud versioonist on v\u00e4listatud m\u00f5ned ttf-kirjad, mille kasutamine p\u00f5hjustas teksti kuvamise probleemid Fedora Linuxi kasutajaliidese elementides. Keelatud on «network.proxy.allow_bypass» seade, mis haldab API Proxy vale kasutamise kaitse aktiivsust lisades. Obfs4 transportimiseks on vaikimisi kasutusele v\u00f5etud uus v\u00e4rav «deusexmachina». <\/p>\n

Vahepeal j\u00e4tkub lugu Tor'i blokeerimisest Venemaal. Roskomnadzor on muutnud keelatud veebisaitide registris blokeeritavate saitide mustrit domeenide<\/a> keelas «www.torproject.org» aadressilt «*.torproject.org» ja laiendas blokeeritavate IP-aadresside loetelu. Muutuse t\u00f5ttu on blokeeritud enamus Tor projekti alamdomeene, sealhulgas blog.torproject.org, gettor.torproject.org ja support.torproject.org. Juurest on saadaval forum.torproject.net, mis asub Discourse infrastruktuuris. Osaliselt on saadaval gitlab.torproject.org ja lists.torproject.org, millele algul puudus juurdep\u00e4\u00e4s, kuid p\u00e4rast ilmselt IP-aadresside vahetust on see taastatud (gitlab suunab n\u00fc\u00fcd hosti gitlab-02.torproject.org). <\/p>\n

Samuti ei ole enam m\u00e4rgata Tor'i v\u00f5rgu sildade ja s\u00f5lmede ning ajax.aspnetcdn.com (Microsofti CDN) blokeerimist, mida kasutatakse meek-asure transpordis. Tundub, et eksperimendid Tor'i s\u00f5lmede blokeerimisega Tor'i saidi blokeerimise j\u00e4rel on peatunud. Raskesti lahendatav olukord on tor.eff.org peegli \u00fcmber, mis j\u00e4tkab t\u00f6\u00f6d. Asi on selles, et peegel tor.eff.org on seotud sama IP-aadressiga<\/a>, mis on seotud eff.org domeeniga EFF (Electronic Frontier Foundation) organisatsioonile, seega tor.eff.org'i blokeerimine toob kaasa tuntud inim\u00f5iguste organisatsiooni veebisaidi osalise blokeerimise.

\"Tor<\/center> <\/p>\n

Lisaks v\u00f5ib m\u00e4rkida uut aruannet v\u00f5imalike Tor'i kasutajate deanonimise r\u00fcnnakute katsete kohta, mida seostatakse KAX17 grupiga, mis on eristatud spetsiifiliste vale\u00fchenduse e-kirjade kaudu s\u00f5lme parameetrites. Septembri ja oktoobri jooksul on Tor'i projekt blokeerinud 570 potentsiaalselt kahjulikku s\u00f5lme. H\u00f6\u00f6veldamise tipphetkel suutis KAX17 tuua Tor'i v\u00f5rgus kontrolli all olevate s\u00f5lmede arvu 900-ni, mis asub 50 erinevas teenusepakkujas, mis on umbes 14% k\u00f5igist edastuspunktidest (v\u00f5rdluseks, 2014. aastal suutis r\u00fcndaja kontrollida peaaegu poolte Tor'i edastuspunktide \u00fcle ja 2020. aastal 23.95% v\u00e4ljundis\u00f5lmedest).

\"Tor<\/center> <\/p>\n

Suur arvu \u00fche operaatori kontrolli all olevaid s\u00f5lmi paigutamine v\u00f5imaldab kasutajate deanon\u00fc\u00fcmitamist Sybili r\u00fcnnaku abil, mida saab l\u00e4bi viia, kui kurjategijatel on kontroll esimese ja viimase s\u00f5lme \u00fcle anon\u00fc\u00fcmsuse ahelas. Tor'i ahela esimene s\u00f5lm teab kasutaja IP-aadressi, viimane aga teab n\u00f5utava ressursi IP-aadressi, mis v\u00f5imaldab anon\u00fc\u00fcmsuse ahela kaudu esitatud p\u00e4ringut deanon\u00fc\u00fcmitada, lisades sissep\u00e4\u00e4susoone s\u00f5lme kindla varjatud m\u00e4rgise pakettide p\u00e4istele, mis j\u00e4\u00e4vad kogu anon\u00fc\u00fcmsuse ahela v\u00e4ltel muutumatuks ning anal\u00fc\u00fcsides seda m\u00e4rkust v\u00e4ljundis\u00f5lme poolel. Kui r\u00fcndajad kontrollivad v\u00e4ljundis\u00f5lmi, saavad nad samuti teha muudatusi kr\u00fcpteerimata liikluses, n\u00e4iteks elimineerida suunamisi HTTPS-versioonide peale ja haarata kr\u00fcpteerimata sisu. <\/p>\n

Tor-v\u00f5rku esindavate isikute s\u00f5nul kasutati enamik s\u00fcgiseseid eemalolevaid s\u00f5lmi ainult vahepealsete s\u00f5lmedena, mitte sissetulevate ja v\u00e4ljaminevate p\u00e4ringute t\u00f6\u00f6tlemiseks. Erinevad teadlased on m\u00e4rkinud, et s\u00f5lmed kuulusid k\u00f5ikidesse kategooriatesse ning t\u00f5en\u00e4osus sattuda KAX17 r\u00fchma kontrollitava sissetuleva s\u00f5lme alla oli 16%, ja v\u00e4ljuva s\u00f5lme alla 5%. Kuid isegi kui see on t\u00f5si, siis KAX17 r\u00fchma 900 kontrollitava s\u00f5lmega korraga sissetulevale ja v\u00e4ljaminevale s\u00f5lmele sattumise \u00fcldine t\u00f5en\u00e4osus hinnatakse 0,8%-ks. Otseseid t\u00f5endeid KAX17 s\u00f5lmi r\u00fcnnakute l\u00e4biviimiseks ei ole, kuid sellised r\u00fcnnakud pole potentsiaalselt v\u00e4listatud.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Tor Browser 11.0.2, \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0441\u0442\u0438, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u043e\u0441\u0442\u0438. \u041f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 Tor Browser \u0432\u0435\u0441\u044c \u0442\u0440\u0430\u0444\u0438\u043a \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0442\u044c Tor, \u0430 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0447\u0435\u0440\u0435\u0437 \u0448\u0442\u0430\u0442\u043d\u043e\u0435 \u0441\u0435\u0442\u0435\u0432\u043e\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0442\u0435\u043a\u0443\u0449\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0447\u0442\u043e \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0442\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0439 IP-\u0430\u0434\u0440\u0435\u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f (\u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c \u0441\u0435\u0442\u0438, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":102531,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-102530","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Tor Browser 11.0.2 v\u00e4ljaanne. Tor'i saidi blokeerimise laiendamine. V\u00f5imalikud r\u00fcnnakud Tor'i vastu | ProHoster","description":"Esitlusele on tulnud spetsialiseeritud veebibrauseri Tor Browser 11.0.2 v\u00e4ljaanne, mis keskendub anon\u00fc\u00fcmsuse, turvalisuse ja privaatsuse tagamisele.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-tor-browser-11-0-2-rasshirenie-blokirovki-sajtov-tor-vozmozhnye-ataki-na-tor","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a Tor Browser 11.0.2. \u0420\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0441\u0430\u0439\u0442\u043e\u0432 Tor. \u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 Tor | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Tor Browser 11.0.2, \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0441\u0442\u0438, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u043e\u0441\u0442\u0438.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-tor-browser-11-0-2-rasshirenie-blokirovki-sajtov-tor-vozmozhnye-ataki-na-tor","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-12-09T13:36:50+00:00","article:modified_time":"2021-12-09T13:36:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"102530","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-12-09 13:38:05","updated":"2026-02-11 11:12:05","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/102530","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=102530"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/102530\/revisions"}],"predecessor-version":[{"id":160563,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/102530\/revisions\/160563"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/102531"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=102530"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=102530"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=102530"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}