{"id":99587,"date":"2021-03-27T10:22:57","date_gmt":"2021-03-27T08:22:57","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vo-freebsd-13-chut-ne-okazalas-halturnaya-realizacziya-wireguard-s-narusheniem-liczenzii-i-uyazvimostyami"},"modified":"2021-03-27T10:22:57","modified_gmt":"2021-03-27T08:22:57","slug":"vo-freebsd-13-chut-ne-okazalas-halturnaya-realizacziya-wireguard-s-narusheniem-liczenzii-i-uyazvimostyami","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/vo-freebsd-13-chut-ne-okazalas-halturnaya-realizacziya-wireguard-s-narusheniem-liczenzii-i-uyazvimostyami","title":{"rendered":"FreeBSD 13-s viibis halva kvaliteediga WireGuard'i teostus, millel on litsentsirikkumised ja haavatavused.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

FreeBSD 13 v\u00e4ljaande koostamiseks kasutatud koodibaasist eemaldati skandaaliliselt Netgate'i tellitud VPN-protokolli WireGuard teostus, mis arendati ilma originaali WireGuard arendajatega konsulteerimata, ja mis oli juba kaasatud pfSense'i stabiilsetesse v\u00e4ljaannetesse. Jason A. Donenfeld, originaalse WireGuard'i autor, kontrollis koodi ning leidis, et FreeBSD jaoks pakutud WireGuard'i teostus oli madala kvaliteediga kood, mis oli t\u00e4is pufferi \u00fclet\u00e4itumisi ja rikkus GPL litsentsi. <\/p>\n

\u0412 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0431\u044b\u043b\u0438 \u043d\u0430\u0439\u0434\u0435\u043d\u044b \u043a\u0430\u0442\u0430\u0441\u0442\u0440\u043e\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043e\u0433\u0440\u0435\u0445\u0438 \u0432 \u043a\u043e\u0434\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0438, \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u043f\u0443\u0449\u0435\u043d\u0430 \u0447\u0430\u0441\u0442\u044c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 WireGuard, \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u043e\u0448\u0438\u0431\u043a\u0438, \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0432\u0448\u0438\u0435 \u043a \u043a\u0440\u0430\u0445\u0443 \u044f\u0434\u0440\u0430 \u0438 \u043e\u0431\u0445\u043e\u0434\u0443 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b, \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0431\u0443\u0444\u0435\u0440\u044b \u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u0437\u043c\u0435\u0440\u0430. \u041e \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043a\u043e\u0434\u0430 \u043c\u043d\u043e\u0433\u043e \u0433\u043e\u0432\u043e\u0440\u0438\u0442 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0437\u0430\u0433\u043b\u0443\u0448\u0435\u043a \u0432\u043c\u0435\u0441\u0442\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u043e\u043a, \u0432\u0441\u0435\u0433\u0434\u0430 \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u044e\u0449\u0438\u0445 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 «true», \u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0431\u044b\u0442\u044b\u0435 \u043e\u0442\u043b\u0430\u0434\u043e\u0447\u043d\u044b\u0435 printf \u0441 \u0432\u044b\u0432\u043e\u0434\u043e\u043c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 sleep \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0439 \u0433\u043e\u043d\u043a\u0438. <\/p>\n

M\u00f5ned koodiosad, nagu funktsioon crypto_xor, viidud GPL litsentsi rikkuvalt Linuxile arendatud WireGuard'i teostusest. L\u00f5puks asusid Jason Donenfeld koos Kyle Evans'i ja Matt Dunwoodie'ga (WireGuard'i porti autor OpenBSD-le) tegelema probleemse teostuse \u00fcmberkirjutamisega ning n\u00e4dala jooksul asendasid nad t\u00e4ielikult Netgate'i palgatud arendaja kogu koodi. \u00dcmber kirjutatud versioon avaldati eraldi plaastrites, mis on paigutatud WireGuard'i projekti hoidlasse ja ei ole veel FreeBSD-sse kaasatud. <\/p>\n

Huvitav on see, et alguses ei viidanud miski probleemidele. Ettev\u00f5te Netgate, kes soovis kasutada WireGuardi pfSense'i jaotises, palkas Matthew Mayci, kes tunneb h\u00e4sti FreeBSD tuuma ja v\u00f5rgu stack'i, osales vigade parandamises ning omab kogemusi v\u00f5rgu draivide arendamisel selle ops\u00fcsteemi jaoks. Maycile anti vaba ajakava ilma t\u00e4htp\u00e4evadeta ja vahekontrollideta. FreeBSD's Mayci kaastegevad arendajad iseloomustasid teda talendika ja professionaalse programmeerijana, kes teeb sama palju vigu kui teised ja reageerib kriitikale adekvaatselt. WireGuardi FreeBSD rakenduse halval kvaliteedil oli nende jaoks \u00fcllatus. <\/p>\n

P\u00e4rast 9 kuu t\u00f6\u00f6d, l\u00e4inud aasta detsembris, lisas Mayci oma rakenduse HEAD haru, mis oli FreeBSD 13 versiooni koostamiseks kasutusel, ilma kolmandate osapoolte \u00fclevaatuse ja testimiseta. Aretus toimus ilma alku WireGuardi ja OpenBSD ning NetBSD portide arendajatega \u00fchenduseta. Veebruaris integreeris Netgate WireGuardi stabiilsesse pfSense 2.5.0 v\u00e4ljalaskesse ja hakkas sellele p\u00f5hinevates tulekaitsetes tarnima. Probleemide ilmnemisel eemaldati WireGuardi kood pfSense'ist. <\/p>\n

Lisatud koodis avastati kriitilised haavatavused, mida kasutati 0-p\u00e4evastes eksploitides, kuid Netgate ei tunnustanud esialgu haavatavuste olemasolu ja p\u00fc\u00fcdis s\u00fc\u00fcdistada algse WireGuardi arendajat r\u00fcnnakutes ja eelarvamustes, mis m\u00f5jutas negatiivselt nende mainet. Porti arendaja l\u00fckkas esialgu tagasi koodikvaliteedi s\u00fc\u00fcdistused, pidades neid liialdatuks, kuid p\u00e4rast vigade demonstreerimist t\u00f5des ta, et t\u00f5eliselt oluline probleem on kvaliteedi \u00fclevaatamise puudumine FreeBSD-s, kuna probleemid j\u00e4id m\u00e4rkamatuks mitme kuu jooksul (Netgate'i esindajad m\u00e4rkisid, et avalik \u00fclevaatus algatati juba 2020. aasta augustis, kuid m\u00f5ned FreeBSD arendajad m\u00e4rkisid, et Phabricatoris l\u00f5petas Mayci \u00fclevaatuse t\u00e4itmist ja ignoreeris kommentaare). FreeBSD Core Team reageeris intsidendile lubadusega moderniseerida koodikontrolli protsesse. <\/p>\n

Matthew Maisey, the developer of the troubled port for FreeBSD, commented on the situation by stating that he made a significant mistake by taking on the job without being ready to implement the project. The outcome, according to Maisey, is explained by emotional burnout and issues arising from post-COVID syndrome. Nevertheless, Maisey did not find the resolve to withdraw from his commitments and attempted to see the project through to completion. <\/p>\n

Maisey's condition may have also been influenced by a recent prison sentence he received for illegal actions in an attempt to evict tenants from a house he purchased, who were unwilling to leave voluntarily. Together with his wife, they cut the beams of the ceiling and made holes in the floors to render the house uninhabitable, as well as attempted to intimidate the tenants, broke into occupied apartments, and removed the belongings (the act was classified as burglary). To avoid responsibility for these actions, Maisey and his wife fled to Italy, but he was extradited to the U.S. and served over four years in prison.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0437 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u044b, \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 FreeBSD 13, \u0431\u044b\u043b \u0441\u043e \u0441\u043a\u0430\u043d\u0434\u0430\u043b\u043e\u043c \u0443\u0434\u0430\u043b\u0451\u043d \u043a\u043e\u0434 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 VPN WireGuard, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0439 \u043f\u043e \u0437\u0430\u043a\u0430\u0437\u0443 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Netgate \u0431\u0435\u0437 \u043a\u043e\u043d\u0441\u0443\u043b\u044c\u0442\u0430\u0446\u0438\u0439 \u0441 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e WireGuard, \u0438 \u0443\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u0439 \u0432 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 pfSense. \u041f\u043e\u0441\u043b\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043a\u043e\u0434\u0430 \u0414\u0436\u0435\u0439\u0441\u043e\u043d\u043e\u043c \u0414\u043e\u043d\u0435\u043d\u0444\u0438\u043b\u0434\u043e\u043c (Jason A. Donenfeld), \u0430\u0432\u0442\u043e\u0440\u043e\u043c \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e WireGuard, \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u0430\u044f \u0434\u043b\u044f FreeBSD […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-99587","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47FreeBSD 13 nearly included a shoddy implementation of WireGuard with license violations and vulnerabilities | ProHoster","description":"From the codebase that formed the FreeBSD 13 release, the code implementing the VPN WireGuard protocol, developed at the request of Netgate without consultation with developers, was controversially removed.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/vo-freebsd-13-chut-ne-okazalas-halturnaya-realizacziya-wireguard-s-narusheniem-liczenzii-i-uyazvimostyami","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u043e FreeBSD 13 \u0447\u0443\u0442\u044c \u043d\u0435 \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0445\u0430\u043b\u0442\u0443\u0440\u043d\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f WireGuard \u0441 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435\u043c \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0438 \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 | ProHoster","og:description":"\u0418\u0437 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u044b, \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 FreeBSD 13, \u0431\u044b\u043b \u0441\u043e \u0441\u043a\u0430\u043d\u0434\u0430\u043b\u043e\u043c \u0443\u0434\u0430\u043b\u0451\u043d \u043a\u043e\u0434 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 VPN WireGuard, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0439 \u043f\u043e \u0437\u0430\u043a\u0430\u0437\u0443 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Netgate \u0431\u0435\u0437 \u043a\u043e\u043d\u0441\u0443\u043b\u044c\u0442\u0430\u0446\u0438\u0439 \u0441 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/vo-freebsd-13-chut-ne-okazalas-halturnaya-realizacziya-wireguard-s-narusheniem-liczenzii-i-uyazvimostyami","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-03-27T08:22:57+00:00","article:modified_time":"2021-03-27T08:22:57+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"99587","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-27 08:46:10","updated":"2022-09-28 06:57:15","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/99587","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=99587"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/99587\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=99587"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=99587"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=99587"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}