{"id":55546,"date":"2020-01-23T00:00:00","date_gmt":"2020-01-22T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/otkryt-kod-klientskih-prilozhenij-protonvpn"},"modified":"2020-02-18T14:03:40","modified_gmt":"2020-02-18T11:03:40","slug":"otkryt-kod-klientskih-prilozhenij-protonvpn","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/otkryt-kod-klientskih-prilozhenij-protonvpn","title":{"rendered":"ProtonVPN klientrakenduste kood on avatud","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Proton Technologies, mis arendab kaitstud meiliteenust ja VPN-i, teatas<\/a><\/noindex> teatas allika koodidest<\/a><\/noindex> ProtonVPN kliendiprogrammide avamisest Windows<\/a><\/noindex>, macOS<\/a><\/noindex>, Android<\/a><\/noindex> ja iOS<\/a><\/noindex> (konsol Linuxi klient<\/a><\/noindex> oli algselt avatud). Kood on avaldatud GPLv3 litsentsi alusel. Samuti on avaldatud aruanded s\u00f5ltumatute auditite l\u00e4biviimise kohta nende rakenduste osas. Auditi k\u00e4igus ei leitud probleeme, mis v\u00f5iksid viia VPN-i liikluse dekr\u00fcpteerimise v\u00f5i \u00f5iguste t\u00f5stmise juurde.<\/p>\n

Kood on avatud projekti l\u00e4bipaistvuse tagamise algatuse raames, et s\u00f5ltumatud eksperdid saaksid veenduda koodi vastavuses v\u00e4ljakuulutatud spetsifikatsioonidega ja kontrollida turvaauditi korrektsust. Koost\u00f6\u00f6s Mozilla'ga, millele arendab<\/a><\/noindex> on tasuline VPN-teenus, anti Mozilla inseneridele juurdep\u00e4\u00e4s ka teistele tehnoloogiatele, mis on seotud ProtonVPN-iga. T\u00e4heldatakse, et j\u00e4rgmine samm on avada ka muud ProtonVPN rakendused. <\/p>\n

Eelmiste h\u00e4irete t\u00f5ttu ProtonVPN-is v\u00f5ib m\u00e4rkida tuvastamist<\/a><\/noindex> haavatavusest<\/a><\/noindex> Windowsi rakenduses, mis v\u00f5imaldas kasutajal t\u00f5sta oma \u00f5igusi s\u00fcsteemis administraatoriks (haavatavus tulenes eba\u00f5igest suhtlemisest privileegideta GUI-klienti ja s\u00fcsteemi teenuse vahel). <\/p>\n

M\u00f5ned p\u00e4evad tagasi l\u00f5petatud Windowsi rakenduste koodi audit tuvastas 4 haavatavust<\/a><\/noindex> (kaks m\u00f5\u00f5duka ohtlikkusega ja kaks v\u00e4ikese riskiga): seansi tokenite ja kasutajaandmete salvestamine protsessi m\u00e4llu, eesm\u00e4gitud VPN-serveri konfiguratsioonifailis, laadimisel ei kasutata autentimiseks, ja debug-infot ning k\u00f5igi v\u00f5rgu liidesete \u00fchenduste lubamine. <\/p>\n

Versioonis macOS<\/a><\/noindex> haavatavusi ei leitud. iOS versioonis leiti kaks v\u00e4ikese riskiga haavatavusest<\/a><\/noindex> (SSL-sertifikaadi sidumist ei kasutata ja seadmete t\u00f6\u00f6 blokeerimise p\u00e4rast jailbreaki ei takistata). Androidi versioonis leiti<\/a><\/noindex> neli ebaolukorras probleem (silumislogide lubamine, varukoopia mittet\u00f5kestamine ADB t\u00f6\u00f6riista abil, seadete kr\u00fcptimine eelkonfigureeritud v\u00f5tmega, SSL-sertifikaadi sidumise puudumine) ja \u00fcks m\u00f5\u00f5duka t\u00f5sidusega haavatavus (puudulik sessiooni l\u00f5petamine, mis v\u00f5imaldab sessioonitokenite taaskasutamist).<\/p>\n

Tuletame meelde, et Proton Technologies on asutatud mitme teadlase poolt CERNis (Euroopa Tuumauuringute Organisatsioon) ja registreeritud \u0160veitsis, kus kehtib range seadusandlus eraelu kaitse osas, mis ei luba luureteenustel teavet kontrollida. ProtonVPN projekt tagab k\u00f5rge taseme sidekanali kaitse (voog kr\u00fcptitakse AES-256 abil, v\u00f5tmete vahetus toimub 2048-bitiste RSA-v\u00f5tmete ja HMAC p\u00f5hjal, autentimiseks kasutatakse SHA-256, on kaitse andmevoo korrelatsiooni r\u00fcnnakute vastu), loobub logide pidamisest ja on suunatud mitte kasumi teenimisele, vaid veebis julguse ja privaatsuse parandamisele (projekti rahastab FONGIT fond, mida toetab Euroopa Komisjon). <\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Proton Technologies, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0439 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0438 VPN, \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c ProtonVPN \u0434\u043b\u044f Windows, macOS, Android \u0438 iOS (\u043a\u043e\u043d\u0441\u043e\u043b\u044c\u043d\u044b\u0439 Linux-\u043a\u043b\u0438\u0435\u043d\u0442 \u043e\u0442\u043a\u0440\u044b\u0442 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e). \u041a\u043e\u0434 \u043e\u0442\u043a\u0440\u044b\u0442 \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GPLv3. \u041e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043e\u0442\u0447\u0451\u0442\u044b \u043e \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u041f\u0440\u043e\u0431\u043b\u0435\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0435 VPN-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0438\u043b\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0432 \u0445\u043e\u0434\u0435 \u0430\u0443\u0434\u0438\u0442\u0430 \u043d\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-55546","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47ProtonVPN klientrakenduste kood on avatud | ProHoster","description":"Proton Technologies, mis arendab turvalist meiliteenust ja VPN-i, teatas ProtonVPN klientrakenduste l\u00e4htekoodide vabastamisest Windowsi, macOS-i, Androidi ja iOS-i jaoks (Linuxi konsooli klient oli algselt avatud). Kood on avatud GPLv3 litsentsi alusel. Samal ajal avaldati aruanded nimetatud rakenduste s\u00f5ltumatust auditist. Auditi k\u00e4igus ei tuvastatud probleeme, mis v\u00f5iksid viia VPN-i liikluse dekr\u00fcpteerimiseni v\u00f5i privilgeeritud ligip\u00e4\u00e4su saamiseni.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/otkryt-kod-klientskih-prilozhenij-protonvpn","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0442\u043a\u0440\u044b\u0442 \u043a\u043e\u0434 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 ProtonVPN | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Proton Technologies, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0439 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0438 VPN, \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c ProtonVPN \u0434\u043b\u044f Windows, macOS, Android \u0438 iOS (\u043a\u043e\u043d\u0441\u043e\u043b\u044c\u043d\u044b\u0439 Linux-\u043a\u043b\u0438\u0435\u043d\u0442 \u043e\u0442\u043a\u0440\u044b\u0442 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e). \u041a\u043e\u0434 \u043e\u0442\u043a\u0440\u044b\u0442 \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GPLv3. \u041e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043e\u0442\u0447\u0451\u0442\u044b \u043e \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u041f\u0440\u043e\u0431\u043b\u0435\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0435 VPN-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0438\u043b\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0432 \u0445\u043e\u0434\u0435 \u0430\u0443\u0434\u0438\u0442\u0430 \u043d\u0435","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/otkryt-kod-klientskih-prilozhenij-protonvpn","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-22T21:00:00+00:00","article:modified_time":"2020-02-18T11:03:40+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55546","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:42:37","updated":"2022-10-07 23:49:44"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/55546","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=55546"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/55546\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=55546"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=55546"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=55546"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}