Sakin sabon reshe na Tor 0.4.2

Ƙaddamar da saki kayan aiki Tor 0.4.2.5, ana amfani da shi don tsara ayyukan cibiyar sadarwar Tor da ba a san sunansu ba. An gane Tor 0.4.2.5 a matsayin farkon barga na sakin reshen 0.4.2, wanda ke ci gaba tsawon watanni huɗu da suka gabata. A lokaci guda, an gabatar da sabuntawa don tsofaffin rassan 0.4.1.7, 0.4.0.6 da 0.3.5.9. Za a kiyaye reshe na 0.4.2 a matsayin wani ɓangare na sake zagayowar kulawa na yau da kullun - za a dakatar da sabuntawa bayan watanni 9 ko watanni 3 bayan sakin reshen 0.4.3.x. Ana ba da tallafi na dogon lokaci (LTS) don reshen 0.3.5, sabuntawa wanda za a sake shi har zuwa 1 ga Fabrairu, 2022. Za a dakatar da rassan 0.4.0.x da 0.2.9.x a farkon shekara mai zuwa.

Manyan sabbin abubuwa:

• An kunna akan sabar adireshi tarewa haɗa nodes waɗanda ke amfani da tsoffin sakewa na Tor, tallafin wanda aka dakatar da shi (duk nodes waɗanda ba sa amfani da rassan yanzu 0.2.9, 0.3.5, 0.4.0, 0.4.1 da 0.4.2 za a toshe su). Toshewa zai ba da damar, yayin da tallafi ga rassan da ke gaba ya daina, don ware kai tsaye daga nodes ɗin cibiyar sadarwa waɗanda ba su canza zuwa sabuwar software cikin lokaci ba.

  Kasancewar nodes a cikin hanyar sadarwa tare da tsohuwar software yana tasiri mara kyau ga kwanciyar hankali kuma yana haifar da ƙarin haɗarin tsaro. Idan mai gudanarwa bai ci gaba da sabunta Tor ba, da alama za su yi sakaci wajen sabunta tsarin da sauran aikace-aikacen uwar garken, wanda ke ƙara haɗarin kamuwa da kumburin ta hanyar kai hari. Samun nodes da ke gudana maras tallafi kuma yana hana mahimman kwari gyarawa, yana hana rarraba sabbin fasalolin yarjejeniya, kuma yana rage haɓakar hanyar sadarwa. An sanar da masu gudanar da tsarin gado game da shirin toshewa a watan Satumba.

• Don boyayyun ayyuka ana bayarwa na nufin kariya daga hare-haren DoS. Wuraren zaɓin haɗin kai (makin gabatarwa) yanzu na iya iyakance ƙarfin buƙatun daga abokin ciniki ta amfani da sigogi waɗanda sabis ɗin ɓoye ya aika a cikin tantanin halitta ESTABLISH_INTRO. Idan sabis ɗin ɓoye bai yi amfani da sabon tsawo ba, to, wurin zaɓin haɗin zai kasance jagora ta sigogin yarjejeniya.
• A wuraren zaɓin haɗin kai, an haramta haɗa abokan ciniki masu aikawa kai tsaye (single-hop), waɗanda aka yi amfani da su don gudanar da sabis na Tor2web, tallafi wanda ya daɗe ya daina. Toshewa zai rage nauyin da ke kan hanyar sadarwa daga abokan cinikin spamer.
• Don ɓoyayyun ayyuka, an aiwatar da guga mai ƙima, ta amfani da ƙira ɗaya wanda za a iya amfani da shi don yaƙar hare-haren DoS.
• Yanayin "MAFI KYAU" a cikin umarnin ADD_ONION yanzu ya ɓace zuwa sabis na ED25519-V3 (v3) maimakon RSA1024 (v2).
• Ƙara ikon raba bayanan sanyi tsakanin abubuwa da yawa zuwa lambar daidaitawa.
• An yi gyare-gyare mai mahimmanci.

source: budenet.ru