{"id":99236,"date":"2021-02-22T22:22:43","date_gmt":"2021-02-22T20:22:43","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-passwdqc-2-0-0-s-podderzhkoj-vneshnih-filtrov"},"modified":"2021-02-22T22:22:43","modified_gmt":"2021-02-22T20:22:43","slug":"vypusk-passwdqc-2-0-0-s-podderzhkoj-vneshnih-filtrov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/vypusk-passwdqc-2-0-0-s-podderzhkoj-vneshnih-filtrov","title":{"rendered":"V\u00e4ljaanne passwdqc 2.0.0 v\u00e4liste filtrite toega","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

V\u00e4lja antud uus versioon passwdqc \u2014 paroolide ja paroolifrase keerukuse kontrollimise t\u00f6\u00f6riistade komplekt, mis sisaldab moodulit pam_passwdqc, programmid pwqcheck, pwqfilter (selle versiooniga lisatud) ja pwqgen k\u00e4sitsi v\u00f5i skriptide kaudu kasutamiseks, samuti teeki libpasswdqc. Toetatakse nii PAM-iga s\u00fcsteeme (enamik Linuxi, FreeBSD, DragonFly BSD, Solaris, HP-UX) kui ka ilma PAM-ita (OpenBSD-s toetatakse passwordchecki liidest, pakutakse PHP-st pwqchecki kasutamise m\u00e4hist, samuti on saadaval tasuline versioon Windowsile, ning programme ja teeki saab kasutada ka teistel s\u00fcsteemidel). <\/p>\n

V\u00f5rreldes varasemate versioonidega on lisatud tugi v\u00e4listele paroolifiltrite failidele, sealhulgas binaarfailidele, mis on praegu t\u00e4iustatud kuku\u0161kin-filteri teostus. Selline filter tagab, et \u00fckski keelatud parool ei p\u00e4\u00e4se l\u00e4bi, kuid v\u00f5ib aeg-ajalt p\u00f5hjustada valeh\u00e4ireid, mille t\u00f5en\u00e4osus on passwdqc seadistuste ja algoritmide puhul t\u00fchine. Parooli kontrollimine filtri olemasolu osas n\u00f5uab mitte rohkem kui kahte juhuslikku lugemisjuurdep\u00e4\u00e4su kettale, mis on v\u00e4ga kiire ja tavaliselt ei tekita liigselt koormust. serverile<\/a>. <\/p>\n

Kaksikfilterite loomiseks ja t\u00f6\u00f6tamiseks on passwdqc-sse lisatud programm pwqfilter. See suudab luua filtrit nii paroolide nimekirjast kui ka nende MD4 v\u00f5i NTLM hashidest. NTLM hashide tugi v\u00f5imaldab importida paroole HIBP (Pwned Passwords) nimekirjast, mis on taoliselt levitatud. Palju t\u00f6\u00f6d on kulutatud pwqfilteri optimeerimisele t\u00f5hususe, saadud filtrite kompaktsete m\u00f5\u00f5tmete ja valeh\u00e4ire taseme osas. N\u00e4iteks v\u00f5tab k\u00fcpsisefilter, mille koormustegur on 98%, faili pwned-passwords-ntlm-ordered-by-hash-v7.txt suurusega 21 GiB (22 GB) ja mis sisaldab \u00fcle 613 miljoni rea, loomine umbes 8 minutit Core i7-4770K protsessoril. Saadud filter on suurusega 2.3 GiB (2.5 GB) ning valeh\u00e4ire tase on ligikaudu 1 1.15 miljardi kohta. Madalama sihtkoormuse puhul saab filtrit luua palju kiiremini ning see omab veelgi madalamat valeh\u00e4ire taset, kuid selle suurus saab suurem olema. <\/p>\n

passwdqc t\u00f6\u00f6tab v\u00e4ga h\u00e4sti n\u00f5rkade paroolide mitte lubamisega, ilma v\u00e4listest failidest s\u00f5ltumata. Nende kasutamine v\u00f5ib veelgi suurendada passwdqc efektiivsust, tekitamata samas kasutajatele peaaegu mingit lisamugavust, v\u00f5i v\u00f5ib v\u00f5imaldada teiste piirangute leevendamist. Kasutajate valitud paroolide kontrollimine tuntud lekkide j\u00e4rgi on soovitatav NIST-i poolt. Openwalli projekti jaoks on see v\u00f5imalus potentsiaalselt rahastada passwdqc arendust (ja mitte ainult) valmis filtrite m\u00fc\u00fcgiga, piiranguteta kasutajate jaoks, et luua filtreid ise, kasutades vabalt litsentseeritud programmi pwqfilter. <\/p>\n

pwqfilter t\u00f6\u00f6tab suvaliste stringidega ja seda saab kasutada grep'i asemel paljude eesm\u00e4rkide jaoks, mis ei pruugi isegi paroolide ja turvalisusega seotud olla. Arvestades seda, pakub pwqfilter mitmeid valikuv\u00f5imalusi, mis on sarnaselt olemasolevatele grep'is, v\u00e4ltides valiku nimede kasutamist, mis oleks grep'iga vastupidine, ja kasutab sama v\u00e4ljastuskoode nagu grep. <\/p>\n

Tegevustes, kus valeh\u00e4irete tase on \u00e4\u00e4rmiselt soovimatu, v\u00f5ib nende taset alandada n\u00e4iteks \u00fche kvintilliini (miljon miljardit) tasemeni ning koormustegur v\u00f5ib olla kuni 44%. (Klassikaline kukkurifilter ei v\u00f5imalda sellist m\u00e4rkimisv\u00e4\u00e4rset valeh\u00e4irete taseme langust koormusteguri alandamisel. passwdqc-s saavutatakse see algoritmi t\u00e4iustustega).
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f passwdqc — \u043d\u0430\u0431\u043e\u0440\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438 \u043f\u0430\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0440\u0430\u0437, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u043c\u043e\u0434\u0443\u043b\u044c pam_passwdqc, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b pwqcheck, pwqfilter (\u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u044d\u0442\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438) \u0438 pwqgen \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u0438\u043b\u0438 \u0438\u0437 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 libpasswdqc. \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 PAM (\u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e Linux, FreeBSD, DragonFly BSD, Solaris, HP-UX), \u0442\u0430\u043a \u0438 \u0431\u0435\u0437 PAM (\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 passwordcheck […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-99236","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47V\u00e4ljaanne passwdqc 2.0.0 koos v\u00e4liste filtrite toega | ProHoster","description":"V\u00e4lja on antud uus versioon passwdqc-st \u2014 parooliv\u00e4\u00e4rikuse ja paroolifrase kontrollimise t\u00f6\u00f6riistade kogumist, mis sisaldab moodulit pam_passwdqc, programme pwqcheck, pwqfilter (lisatud selles versioonis) ja pwqgen k\u00e4sitsi v\u00f5i skriptide kaudu kasutamiseks, samuti raamatukogu libpasswdqc. Toetatakse nii PAM-i (enamik Linuxi, FreeBSD, DragonFly BSD, Solaris, HP-UX) kui ka PAM-ita s\u00fcsteeme (toetatakse interface passwordcheck).","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/vypusk-passwdqc-2-0-0-s-podderzhkoj-vneshnih-filtrov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a passwdqc 2.0.0 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0444\u0438\u043b\u044c\u0442\u0440\u043e\u0432 | ProHoster","og:description":"\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f passwdqc - \u043d\u0430\u0431\u043e\u0440\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438 \u043f\u0430\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0440\u0430\u0437, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u043c\u043e\u0434\u0443\u043b\u044c pam_passwdqc, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b pwqcheck, pwqfilter (\u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u044d\u0442\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438) \u0438 pwqgen \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u0438\u043b\u0438 \u0438\u0437 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 libpasswdqc. \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 PAM (\u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e Linux, FreeBSD, DragonFly BSD, Solaris, HP-UX), \u0442\u0430\u043a \u0438 \u0431\u0435\u0437 PAM (\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 passwordcheck","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/vypusk-passwdqc-2-0-0-s-podderzhkoj-vneshnih-filtrov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-02-22T20:22:43+00:00","article:modified_time":"2021-02-22T20:22:43+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"99236","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[],"defaultGraph":"","defaultPostTypeGraph":""},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 09:53:59","updated":"2026-02-22 15:29:50"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/99236","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=99236"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/99236\/revisions"}],"predecessor-version":[{"id":162219,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/99236\/revisions\/162219"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=99236"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=99236"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=99236"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}