{"id":33661,"date":"2019-10-31T21:54:01","date_gmt":"2019-10-31T18:54:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/kak-ponyat-kogda-proksi-lgut-verifikatsiya-fizicheskih-lokatsij-setevyh-proksi-s-pomoshhyu-algoritma-aktivnoj-geolokatsii\/"},"modified":"2019-10-31T21:54:01","modified_gmt":"2019-10-31T18:54:01","slug":"kak-ponyat-kogda-proksi-lgut-verifikatsiya-fizicheskih-lokatsij-setevyh-proksi-s-pomoshhyu-algoritma-aktivnoj-geolokatsii","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kak-ponyat-kogda-proksi-lgut-verifikatsiya-fizicheskih-lokatsij-setevyh-proksi-s-pomoshhyu-algoritma-aktivnoj-geolokatsii","title":{"rendered":"Kuidas m\u00f5ista, kui proxy valetab: v\u00f5rgu proxyde f\u00fc\u00fcsiliste asukohtade verifitseerimine aktiivse geolokatsiooni algoritmi abil","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Kuidas<\/a><\/noindex><\/p>\n

Inimesed \u00fcle kogu maailma kasutavad kommertsprokse, et varjata oma t\u00f5elist asukohta v\u00f5i identiteeti. Seda tehakse erinevate probleemide lahendamiseks, sealhulgas blokeeritud teabe juurde p\u00e4\u00e4semiseks v\u00f5i privaatsuse tagamiseks. <\/p>\n

Aga kui usaldusv\u00e4\u00e4rsed on selliste proksiteenuste pakkujad, kui nad v\u00e4idavad, et nende serverid asuvad teatud riigis? See on oluline k\u00fcsimus, millele vastus m\u00e4\u00e4rab, kas konkreetsest teenusest saavad kasutada kliendid, kes on mures isikuandmete kaitse p\u00e4rast.<\/p>\n

Ameerika \u00dchendriikide teadlaste grupp, kes t\u00f6\u00f6tab Massachusettsi \u00dclikoolis, Carnegie Mellonis ja Stony Brooki \u00dclikoolis, avaldas uuring<\/a><\/noindex>, uuringu, kus nad kontrollisid seitsme populaarse proksiteenuse pakkuja serverite tegelikku asukohta. Oleme koostanud l\u00fchikese \u00fclevaate peamistest tulemustest.<\/a><\/noindex><\/p>\n

Sissejuhatus<\/h2>\n

\nProksiteenuste operaatorid ei paku sageli mingit teavet, mis v\u00f5iks kinnitada nende v\u00e4idete t\u00e4psust serverite asukoha kohta. IP-asukoha andmebaasid kinnitavad tavaliselt nende ettev\u00f5tete reklaamiteese, kuid need sisaldavad palju t\u00f5endeid vigadest.<\/p>\n

Uuringu k\u00e4igus hindasid Ameerika teadlased 2269 proksiserveri asukohta, mis on seitsme proksifirma halduses ja asuvad kokku 222 riigis ja piirkonnas. Anal\u00fc\u00fcs n\u00e4itas, et v\u00e4hemalt kolmandik k\u00f5ikidest serveritest ei asu neis riikides, millest ettev\u00f5tted oma turundusmaterjalides v\u00e4idavad. Selle asemel asuvad nad riikides, kus on odav ja usaldusv\u00e4\u00e4rne hostimine: T\u0161ehhis, Saksamaal, Hollandis, Suurbritannias ja Ameerika \u00dchendriikides.<\/p>\n

Serverite asukoha anal\u00fc\u00fcs<\/h2>\n

\nKommertsv\u00f5rkude VPN ja proksiteenuste pakkujad v\u00f5ivad m\u00f5jutada IP-to-location andmebaaside t\u00e4psust \u2013 ettev\u00f5tetel on v\u00f5imalus manipuleerida n\u00e4iteks asukohakoodide ja ruuteri nimedega. L\u00f5ppkokkuv\u00f5ttes v\u00f5ivad turundusmaterjalid n\u00e4idata suurt hulka kergelt k\u00e4tte saadavaid asukohti, samas kui tegelikult, s\u00e4\u00e4stmiseks ja t\u00f6\u00f6kindluse t\u00f5stmiseks asuvad serverid f\u00fc\u00fcsiliselt v\u00e4hestes riikides, kuigi IP-to-location andmebaasid r\u00e4\u00e4givad vastupidist.<\/p>\n

Serverite tegeliku asukoha kontrollimiseks kasutasid teadlased aktiivse geolokatsiooni algoritmi. Selle abil hinnati paketi roundtrip aega, mis saadeti serveri suunas ja teistele tuntud hostidele internetis. <\/p>\n

Samuti vastavad ping'ile v\u00e4hem kui 10% testitud proksidest, ning teadlastel ei olnud v\u00f5imalust k\u00e4ivitada mingit tarkvara serveris, ilmselgetel p\u00f5hjustel. Neil oli vaid v\u00f5imalus saata pakette proksi kaudu, seega on roundtrip igasse punkti ruumis summa ajast, mille jooksul pakett j\u00f5uab test-hostist proksisse ja proksist adressaadini.<\/p>\n

\"Kuidas
\n
\nUuringu k\u00e4igus t\u00f6\u00f6tati v\u00e4lja spetsialiseeritud tarkvara nelja aktiivse geolokatsiooni algoritmi p\u00f5hjal: CBG, Octant, Spotter ja h\u00fcbriidne Octant\/Spotter. Lahenduse kood saadaval<\/a><\/noindex> GitHubis.<\/p>\n

Kuna IP-to-location andmebaasi ei saanud usaldada, kasutasid teadlased katsete jaoks RIPE Atlase ankurdus-hostide nimekirja \u2013 see andmebaas on kergesti ligip\u00e4\u00e4setav internetis, pidevalt uuendatav, ja dokumenteeritud asukohad on t\u00e4psed; lisaks saadavad loendist hostid pidevalt \u00fcksteisele ping-signaale ja uuendavad roundtrip andmeid avalikus andmebaasis.<\/p>\n

Teadlaste v\u00e4lja t\u00f6\u00f6tatud lahendused on veebirakendus, mis seadistab kaitstud (HTTPS) TCP-\u00fchendusi kaitsmata HTTP 80 pordi kaudu. Kui server ei kuula seda porti, siis p\u00e4rast \u00fchte p\u00e4ringut juhtub t\u00f5rge, kuid kui server kuulab selle pordi, siis saab brauser SYN-ACK vastuse TLS ClientHello paketiga. See p\u00f5hjustab protokolli viga ja brauser kuvab vea, kuid ainult p\u00e4rast teist roundtrip'i. <\/p>\n

\"Kuidas
\n
\nSeega saab veebirakendus m\u00f5\u00f5ta \u00fche v\u00f5i kahe roundtrip'i aega. Sarnane teenus on ellu viidud programmina, mida k\u00e4ivitatakse k\u00e4surealt.<\/p>\n

\u00dckski testitud teenusepakkuja ei nimeta oma proksi-serverite t\u00e4pset asukohta. Parimal juhul mainitakse linnu, kuid sagedamini on olemas teave ainult riigi kohta. Ieven kui linna mainitakse, v\u00f5ivad juhtuda segadused \u2013 n\u00e4iteks uurisid teadlased \u00fche serveri konfiguratsioonifaili, mille nimi oli usa.new-york-city.cfg, mis sisaldas juhiseid \u00fchendamiseks serveriga, mille nimi oli chicago.vpn-provider.example. Seega on enam-v\u00e4hem t\u00e4pselt v\u00f5imalik vaid t\u00f5endada serveri kuuluvust konkreetsele riigile.<\/p>\n

tulemused n\u00e4itasid ainult nelja ebaolulise koodibloki kattuvust, mis olid tingitud POSIX ja ANSI C n\u00f5uetest.<\/h2>\n

\nTestide tulemuste p\u00f5hjal aktiivse geolokatsiooni algoritmiga suudeti teadlastel kinnitada 989 IP-aadressi asukohta 2269-st. 642 puhul ei \u00f5nnestunud seda teha, ning 638 asub kindlasti riigis, kus nad ei peaks olema vastavalt proksiteenuste kinnitustele. \u00dcle 400 sellise vale aadressi asub tegelikult samal mandril, mis on tuntud riik. <\/p>\n

\"Kuidas<\/a><\/noindex><\/p>\n

\u00d5iged aadressid asuvad maades, mida k\u00f5ige sagedamini kasutatakse serverite majutamiseks (pildi avamiseks kl\u00f5psa, see avaneb t\u00e4issuuruses).<\/i><\/p>\n

Kahtlased hostid leiti k\u00f5igi seitsme testitud teenusepakkuja juures. Teadlased k\u00fcsisid ettev\u00f5tetelt kommentaare, kuid k\u00f5ik keeldusid suhtlemast.
\n
Allikas: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041b\u044e\u0434\u0438 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u0440\u043e\u043a\u0441\u0438 \u0434\u043b\u044f \u0442\u043e\u0433\u043e, \u0447\u0442\u043e\u0431\u044b \u0441\u043a\u0440\u044b\u0442\u044c \u0441\u0432\u043e\u0435 \u0438\u0441\u0442\u0438\u043d\u043d\u043e\u0435 \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0438\u043b\u0438 \u043b\u0438\u0447\u043d\u043e\u0441\u0442\u044c. \u042d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u0434\u0435\u043b\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u0440\u0430\u0437\u043d\u044b\u0445 \u0437\u0430\u0434\u0430\u0447, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0438\u043b\u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u043e\u0441\u0442\u0438. \u041d\u043e \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u044b \u0442\u0430\u043a\u0438\u0445 \u043f\u0440\u043e\u043a\u0441\u0438, \u043a\u043e\u0433\u0434\u0430 \u0437\u0430\u044f\u0432\u043b\u044f\u044e\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0438\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u044b \u0432 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0439 \u0441\u0442\u0440\u0430\u043d\u0435? \u042d\u0442\u043e \u043f\u0440\u0438\u043d\u0446\u0438\u043f\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u0430\u0436\u043d\u044b\u0439 \u0432\u043e\u043f\u0440\u043e\u0441, \u043e\u0442 \u043e\u0442\u0432\u0435\u0442\u0430 \u043d\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25350,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-33661","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kuidas m\u00f5ista, kui proksid valetavad: v\u00f5rgu prokside f\u00fc\u00fcsiliste asukohtade verifitseerimine aktiivse geolokatsiooni algoritmi abil | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kak-ponyat-kogda-proksi-lgut-verifikatsiya-fizicheskih-lokatsij-setevyh-proksi-s-pomoshhyu-algoritma-aktivnoj-geolokatsii","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u043f\u043e\u043d\u044f\u0442\u044c, \u043a\u043e\u0433\u0434\u0430 \u043f\u0440\u043e\u043a\u0441\u0438 \u043b\u0433\u0443\u0442: \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043b\u043e\u043a\u0430\u0446\u0438\u0439 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0440\u043e\u043a\u0441\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u0433\u0435\u043e\u043b\u043e\u043a\u0430\u0446\u0438\u0438 | ProHoster","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kak-ponyat-kogda-proksi-lgut-verifikatsiya-fizicheskih-lokatsij-setevyh-proksi-s-pomoshhyu-algoritma-aktivnoj-geolokatsii","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:54:01+00:00","article:modified_time":"2019-10-31T18:54:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33661","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 16:12:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:35:32","updated":"2026-01-21 16:12:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/33661","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=33661"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/33661\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/25350"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=33661"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=33661"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=33661"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}