{"id":102530,"date":"2021-12-09T15:36:49","date_gmt":"2021-12-09T13:36:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-tor-browser-11-0-2-rasshirenie-blokirovki-sajtov-tor-vozmozhnye-ataki-na-tor"},"modified":"2021-12-09T15:36:49","modified_gmt":"2021-12-09T13:36:50","slug":"vypusk-tor-browser-11-0-2-rasshirenie-blokirovki-sajtov-tor-vozmozhnye-ataki-na-tor","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-tor-browser-11-0-2-rasshirenie-blokirovki-sajtov-tor-vozmozhnye-ataki-na-tor","title":{"rendered":"Tor Browseri 11.0.2 v\u00e4ljaanne. Tor veebisaitide blokeerimise laiendus. V\u00f5imalikud r\u00fcnnakud Tor'i vastu","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

On esitati spetsialiseeritud Tor Browser 11.0.2, mis keskendub anon\u00fc\u00fcmsuse, turvalisuse ja privaatsuse tagamisele. Tor Browseri kasutamisel suunatakse kogu liiklus ainult Tor v\u00f5rgu kaudu, ning otsene juurdep\u00e4\u00e4s kohaliku s\u00fcsteemi tavalisest v\u00f5rgu\u00fchendusest on keelatud, mis takistab kasutaja tegeliku IP-aadressi j\u00e4lgimist (kui brauserit h\u00e4kitakse, v\u00f5ivad r\u00fcndajad p\u00e4\u00e4seda juurde s\u00fcsteemi v\u00f5rguseadetele, seet\u00f5ttu tuleks v\u00f5imalike lekkete t\u00e4ielikuks blokeerimiseks kasutada selliseid tooteid nagu Whonix). Tor Browseri kogud on valmistatud Linuxi, Windowsi ja macOS-i jaoks. <\/p>\n

Tor Brauseri t\u00e4iendav kaitse h\u00f5lmab lisandmoodulit HTTPS Everywhere, mis v\u00f5imaldab kasutada kr\u00fcpteerimist k\u00f5ikidel saitidel, kus see on v\u00f5imalik. JavaScripti p\u00f5histe r\u00fcnnakute v\u00e4hendamiseks ja pluginate vaikimisi blokeerimiseks on kaasas lisandmoodul NoScript. Liikluse blokeerimise ja j\u00e4lgimise vastu v\u00f5itlemiseks kasutatakse alternatiivseid transportmeetodeid. Konkreetsetele k\u00fclastajatele omaste tunnuste tuvastamise v\u00e4ltimiseks on piiratud v\u00f5i keelatud API-d nagu WebGL, WebGL2, WebAudio, Social, SpeechSynthesis, Touch, AudioContext, HTMLMediaElement, Mediastream, Canvas, SharedWorker, WebAudio, Permissions, MediaDevices.enumerateDevices ning screen.orientation, samuti on keelatud telemeetriateenused, Pocket, Reader View, HTTP Alternative-Services, MozTCPSocket, 'link rel=preconnect', muudetud libmdns. <\/p>\n

Uues versioonis on s\u00fcnkroniseeritud koodibaas Firefoxi versiooniga 91.4.0, kus on k\u00f5rvaldatud 15 haavatavust, millest 10 on m\u00e4rgitud ohtlikuks. 7 haavatavust tuleneb m\u00e4lu haldamise probleemidest, n\u00e4iteks m\u00e4lupuhverdamine ja juba vabastatud m\u00e4lupiirkondadele ligip\u00e4\u00e4s, mis v\u00f5ivad anda r\u00fcndajale v\u00f5imaluse k\u00e4ivitada kahjulikku koodi spetsiaalselt vormindatud lehek\u00fclgede avamisel. Linuxi platvormi versioonist on v\u00e4listatud m\u00f5ned ttf-fontid, mille kasutamine p\u00f5hjustas teksti renderdamise h\u00e4ireid Fedora Linuxi liideselementides. Keelatud on seade 'network.proxy.allow_bypass', mis haldab kaitset API Proxy vale kasutamise eest lisandmoodulites. Obfs4 transportimiseks on vaikimisi kasutusel uus v\u00e4rav 'deusexmachina'. <\/p>\n

Sama aega j\u00e4tkub Tor'i blokeerimise lugu Venemaal. Roskomnadzor on muutnud keelatud saitide registris blokeeritud saidi maski. of domains<\/a> \u2018www.torproject.org\u2019 on muudetud \u2018*.torproject.org\u2019 ja IP-aadresside blokeerimise nimekiri on laiendatud. Muutuse t\u00f5ttu on enamik Tor projekti alamdomeene, sealhulgas blog.torproject.org, gettor.torproject.org ja support.torproject.org, blokeeritud. Ainsaks ligip\u00e4\u00e4setavaks j\u00e4\u00e4b forum.torproject.net, mis on majutatud Discourse infrastruktuuris. Osaliselt on ligip\u00e4\u00e4setavad gitlab.torproject.org ja lists.torproject.org, millele algselt ligip\u00e4\u00e4s kadus, kuid seej\u00e4rel taastati, t\u00f5en\u00e4oliselt IP-aadresside muutmise t\u00f5ttu (gitlab suunatakse praegu hostile gitlab-02.torproject.org). <\/p>\n

Samuti ei ole enam m\u00e4rgata Tor v\u00f5rgu v\u00e4ravate ja s\u00f5lmede blokeerimist, ega ka hosti ajax.aspnetcdn.com (Microsofti CDN), mida kasutatakse meek-asure'i transpordis. Tundub, et katsetused Tor v\u00f5rgu s\u00f5lmede blokeerimisega p\u00e4rast Tor saidi blokeerimist on peatunud. Probleem on ka tor.eff.org peegliga, mis j\u00e4tkab t\u00f6\u00f6tamist. Asi on selles, et tor.eff.org on seotud sama IP-aadressi<\/a>, mis on seotud EFF (Electronic Frontier Foundation) organisatsiooni eff.org domeeniga, seega tor.eff.org blokeerimine viib tuntud inim\u00f5iguste organisatsiooni saidi osalise blokeerimiseni.

\"Tor<\/center> <\/p>\n

Samuti tuleks mainida uut raportit, mis k\u00e4sitleb Tor\u2019i kasutajate deanonimise katseid, mis on seotud grupiga KAX17, millel on omad, spetsiifilised vale e-kirjad s\u00f5lmpunktide parameetrites. Septembris ja oktoobris blokeeris Tor projektu raames 570 potentsiaalselt kahjulikku s\u00f5lmpunkti. Tipphetkel \u00f5nnestus grupil KAX17 suurendada oma kontrolli all olevate Tor\u2019i s\u00f5lmpunktide arvu 900-ni, mis on jagatud 50 erineva teenusepakkuja vahel, mis moodustab umbes 14% k\u00f5igist relays'ist (v\u00f5rdluseks: 2014. aastal \u00f5nnestus r\u00fcndajatel saada kontroll peaaegu poolte Tor\u2019i relays'ide \u00fcle ja 2020. aastal 23,95% v\u00e4ljundis\u00f5lmedest).

\"Tor<\/center> <\/p>\n

Sellel, et juhtida suurt hulka \u00fche operaatori alluvaid s\u00f5lmi, v\u00f5imaldab deanon\u00fc\u00fcmiseerida kasutajaid Sybil-klassiga r\u00fcnnaku kaudu, mida saab teha juhul, kui r\u00fcndajatel on kontroll esimese ja viimase s\u00f5lme \u00fcle anon\u00fc\u00fcmsuse ahelas. Tor-ahela esimest s\u00f5lme tunneb kasutaja IP-aadressi, samas kui viimane tunneb n\u00f5utud ressursi IP-aadressi, mis v\u00f5imaldab deanon\u00fc\u00fcmiseerida p\u00e4ringu, lisades sissep\u00e4\u00e4sus\u00f5lmele teatud varjatud m\u00e4rgise pakettide p\u00e4istele, mis j\u00e4\u00e4vad muutumatuks kogu anon\u00fc\u00fcmsete ahelate v\u00e4ltel, ja anal\u00fc\u00fcsides seda m\u00e4rgist v\u00e4ljas\u00f5lus\u00f5lmes. Kui r\u00fcndajatel on kontroll v\u00e4ljas\u00f5lus\u00f5lmede \u00fcle, saavad nad samuti teha muudatusi mittekr\u00fcpteeritud liikluses, n\u00e4iteks eemaldada suunamised HTTPS-versioonidele veebisaitidest ja tabada mittekr\u00fcpteeritud sisu. <\/p>\n

Tor v\u00f5rgu esindajate s\u00f5nul kasutati enamik s\u00fcgisest eemaldatud s\u00f5lmi ainult vahepealsete s\u00f5lmedena, mida ei kasutatud sisend- ja v\u00e4ljundp\u00e4ringute t\u00f6\u00f6tlemiseks. \u00dcksikud uurijad m\u00e4rgivad, et need s\u00f5lmed kuulusid k\u00f5ikidesse kategooriatesse ja t\u00f5en\u00e4osus sattuda KAX17 r\u00fchmaga kontrollitavasse sisend-s\u00f5lme oli 16%, v\u00e4ljund-s\u00f5lme - 5%. Kuid isegi kui see on t\u00f5si, hindatakse, et samaaegselt siseneda KAX17 r\u00fchma 900 kontrollitavasse s\u00f5lme on 0,8%. Otseseid t\u00f5endeid KAX17 s\u00f5lmede kasutamise kohta r\u00fcnnakute korral ei ole, kuid potentsiaalsed r\u00fcnnakud ei ole v\u00e4listatud.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Tor Browser 11.0.2, \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0441\u0442\u0438, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u043e\u0441\u0442\u0438. \u041f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 Tor Browser \u0432\u0435\u0441\u044c \u0442\u0440\u0430\u0444\u0438\u043a \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0442\u044c Tor, \u0430 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0447\u0435\u0440\u0435\u0437 \u0448\u0442\u0430\u0442\u043d\u043e\u0435 \u0441\u0435\u0442\u0435\u0432\u043e\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0442\u0435\u043a\u0443\u0449\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0447\u0442\u043e \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0442\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0439 IP-\u0430\u0434\u0440\u0435\u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f (\u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c \u0441\u0435\u0442\u0438, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":102531,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-102530","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Tor Browser 11.0.2 v\u00e4ljalaskmine. Tori veebisaitide blokeerimise laiendus. Torile suunatud v\u00f5imalikud r\u00fcnnakud | ProHoster","description":"K\u00e4es on Tor Browser 11.0.2, mille eesm\u00e4rk on tagada anon\u00fc\u00fcmsus, turvalisus ja privaatsus.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-tor-browser-11-0-2-rasshirenie-blokirovki-sajtov-tor-vozmozhnye-ataki-na-tor","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a Tor Browser 11.0.2. \u0420\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0441\u0430\u0439\u0442\u043e\u0432 Tor. \u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 Tor | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Tor Browser 11.0.2, \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0441\u0442\u0438, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u043e\u0441\u0442\u0438.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-tor-browser-11-0-2-rasshirenie-blokirovki-sajtov-tor-vozmozhnye-ataki-na-tor","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-12-09T13:36:50+00:00","article:modified_time":"2021-12-09T13:36:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"102530","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-12-09 13:38:05","updated":"2026-02-11 11:12:05","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/102530","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=102530"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/102530\/revisions"}],"predecessor-version":[{"id":160563,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/102530\/revisions\/160563"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/102531"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=102530"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=102530"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=102530"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}