Thaum encryption yuav tsis pab: peb tham txog lub cev nkag mus rau lub cuab yeej

Thaum Lub Ob Hlis, peb tau tshaj tawm tsab xov xwm "Tsis yog VPN ib leeg. Daim ntawv qhia txog kev tiv thaiv koj tus kheej thiab koj cov ntaub ntawv li cas. " Ib qho ntawm cov lus pom tau hais kom peb sau ib tsab xov xwm txuas ntxiv mus. Qhov no yog ib qho kev ywj pheej ntawm cov ntaub ntawv, tab sis peb tseem xav kom koj nyeem ob nqe lus.

Ib qho kev tshaj tawm tshiab tau mob siab rau qhov teeb meem ntawm kev ruaj ntseg cov ntaub ntawv (sau ntawv, duab, yeeb yaj kiab, uas yog tag nrho) hauv cov neeg xa xov tam sim thiab cov khoom siv lawv tus kheej uas siv los ua haujlwm nrog cov ntawv thov.

Cov tub txib

Telegram

Rov qab rau Lub Kaum Hli 2018, thawj xyoo Wake Technical College tus tub ntxhais kawm Nathaniel Sachi tau tshawb pom tias Telegram tus xa xov xwm khaws cov lus thiab cov ntaub ntawv xov xwm ntawm lub khoos phis tawj hauv zos hauv cov ntawv ntshiab.

Cov tub ntxhais kawm tuaj yeem nkag mus rau nws tus kheej cov ntaub ntawv, suav nrog cov ntawv sau thiab duab. Txhawm rau ua qhov no, nws kawm txog daim ntawv thov databases khaws cia hauv HDD. Nws muab tawm tias cov ntaub ntawv nyuaj nyeem, tab sis tsis encrypted. Thiab lawv tuaj yeem nkag tau txawm tias tus neeg siv tau teeb tsa tus password rau daim ntawv thov.

Hauv cov ntaub ntawv tau txais, cov npe thiab xov tooj ntawm cov neeg sib tham tau pom, uas, yog tias xav tau, tuaj yeem sib piv. Cov ntaub ntawv los ntawm kev sib tham kaw kuj tseem khaws cia hauv hom ntawv meej.

Durov tom qab hais tias qhov no tsis yog teeb meem, vim tias yog tus neeg tawm tsam nkag mus rau tus neeg siv lub PC, nws yuav tuaj yeem tau txais cov yuam sij encryption thiab decrypt tag nrho cov ntawv tsis muaj teeb meem. Tab sis ntau tus kws paub txog kev ruaj ntseg cov ntaub ntawv sib cav tias qhov no tseem hnyav heev.


Tsis tas li ntawd, Telegram tau dhau los ua qhov yooj yim rau kev tawm tsam tub sab nyiag, uas pom Hab siv. Koj tuaj yeem hack cov lej code hauv zos ntawm txhua qhov ntev thiab nyuaj.

WhatsApp

Raws li peb paub, tus tub txib no tseem khaws cov ntaub ntawv ntawm lub khoos phis tawj disk hauv daim ntawv tsis muaj ntaub ntawv. Raws li, yog tias tus neeg tawm tsam tau nkag mus rau tus neeg siv lub cuab yeej, ces tag nrho cov ntaub ntawv tseem qhib.

Tab sis muaj teeb meem thoob ntiaj teb ntau dua. Tam sim no, tag nrho cov thaub qab ntawm WhatsApp tau nruab rau hauv cov khoom siv nrog Android OS tau khaws cia hauv Google Drive, raws li Google thiab Facebook tau pom zoo rau xyoo tas los. Tab sis backups ntawm kev sau ntawv, xov xwm ntaub ntawv thiab lwm yam khaws cia unencrypted. Raws li ib tug yuav txiav txim, tub ceev xwm ntawm tib lub US muaj kev nkag mus rau Google Drive, yog li muaj peev xwm ua kom muaj kev ruaj ntseg tuaj yeem saib cov ntaub ntawv khaws cia.

Nws muaj peev xwm encrypt cov ntaub ntawv, tab sis ob lub tuam txhab tsis ua qhov no. Tej zaum tsuas yog vim tias tsis muaj ntaub ntawv thaub qab tuaj yeem hloov pauv tau yooj yim thiab siv los ntawm cov neeg siv lawv tus kheej. Feem ntau yuav, tsis muaj encryption tsis yog vim nws nyuaj rau kev siv: ntawm qhov tsis sib xws, koj tuaj yeem tiv thaiv cov thaub qab yam tsis muaj teeb meem. Qhov teeb meem yog tias Google muaj nws tus kheej vim li cas rau kev ua haujlwm nrog WhatsApp - lub tuam txhab xav tias txheeb xyuas cov ntaub ntawv khaws cia hauv Google Drive servers thiab siv lawv los tso saib kev tshaj tawm tus kheej. Yog tias Facebook dheev qhia txog kev encryption rau WhatsApp thaub qab, Google yuav tam sim poob kev txaus siab hauv kev sib koom tes, poob ib qho tseem ceeb ntawm cov ntaub ntawv hais txog kev nyiam ntawm WhatsApp cov neeg siv. Qhov no, ntawm chav kawm, tsuas yog ib qho kev xav, tab sis muaj feem ntau hauv ntiaj teb ntawm kev lag luam hi-tech.

Raws li rau WhatsApp rau iOS no, thaub qab tau txais kev cawmdim rau iCloud huab. Tab sis ntawm no, ib yam nkaus, cov ntaub ntawv khaws cia rau hauv daim ntawv tsis muaj ntaub ntawv, uas tau teev tseg txawm nyob rau hauv daim ntawv thov. Txawm hais tias Apple txheeb xyuas cov ntaub ntawv no lossis tsis paub tsuas yog lub tuam txhab nws tus kheej xwb. Muaj tseeb, Cupertino tsis muaj kev tshaj tawm xov xwm zoo li Google, yog li peb tuaj yeem xav tias qhov yuav tshwm sim ntawm lawv txheeb xyuas cov ntaub ntawv tus kheej ntawm WhatsApp cov neeg siv tsawg dua.

Txhua yam uas tau hais tseg tuaj yeem tsim tau raws li hauv qab no - yog, tsis yog koj tsuas yog nkag mus rau koj cov ntawv sau WhatsApp.

TikTok thiab lwm tus tub txib

Qhov kev pabcuam video luv luv no tuaj yeem nrov sai heev. Cov neeg tsim khoom tau cog lus tias yuav ua kom tiav kev ruaj ntseg ntawm lawv cov neeg siv cov ntaub ntawv. Raws li nws muab tawm, qhov kev pabcuam nws tus kheej siv cov ntaub ntawv no yam tsis tau ceeb toom rau cov neeg siv. Qhov phem tshaj: qhov kev pabcuam tau sau cov ntaub ntawv tus kheej los ntawm cov menyuam yaus hnub nyoog qis dua 13 xyoos yam tsis tau tso cai los ntawm niam txiv. Cov ntaub ntawv ntiag tug ntawm cov menyuam yaus - npe, emails, xov tooj, duab thiab yeeb yaj kiab - tau tshaj tawm rau pej xeem.

kev pab cuam raug nplua rau ntau lab daus las, cov tswj hwm kuj tau thov kom tshem tawm tag nrho cov yeeb yaj kiab tsim los ntawm cov menyuam yaus hnub nyoog qis dua 13 xyoos. TikTok ua raws. Txawm li cas los xij, lwm cov tub txib thiab cov kev pabcuam siv cov neeg siv cov ntaub ntawv tus kheej rau lawv tus kheej lub hom phiaj, yog li koj tsis tuaj yeem paub tseeb txog lawv txoj kev nyab xeeb.

Daim ntawv teev npe no tuaj yeem txuas ntxiv mus tsis kawg - feem ntau cov neeg xa xov tam sim muaj ib lossis lwm qhov tsis zoo uas tso cai rau cov neeg tawm tsam tuaj yeem mloog cov neeg siv (piv txwv zoo - Viber, txawm hais tias txhua yam zoo li tau kho nyob ntawd) lossis nyiag lawv cov ntaub ntawv. Tsis tas li ntawd, yuav luag txhua daim ntawv thov los ntawm sab saum toj 5 khaws cov neeg siv cov ntaub ntawv hauv daim ntawv tsis muaj kev tiv thaiv ntawm lub khoos phis tawj hard drive lossis hauv lub xov tooj nco. Thiab qhov no tsis nco qab txog cov kev pabcuam kev txawj ntse ntawm ntau lub tebchaws, uas tuaj yeem nkag mus rau cov neeg siv cov ntaub ntawv ua tsaug rau txoj cai. Tib yam Skype, VKontakte, TamTam thiab lwm tus muab cov ntaub ntawv hais txog ib tus neeg siv raws li qhov kev thov ntawm cov tub ceev xwm (piv txwv li Lavxias Federation).

Kev ruaj ntseg zoo ntawm qib raws tu qauv? Tsis muaj teeb meem, peb tawg lub cuab yeej

Ib txhia xyoo dhau los kev sib cav sib ceg nruab nrab ntawm Apple thiab tsoomfwv Meskas. Lub tuam txhab tsis kam qhib lub xov tooj ntawm tes encrypted uas tau koom nrog cov neeg ua phem tawm tsam hauv nroog San Bernardino. Thaum lub sijhawm, qhov no zoo li qhov teeb meem tiag tiag: cov ntaub ntawv tau raug tiv thaiv zoo, thiab kev nyiag lub xov tooj smartphone yog qhov ua tsis tau lossis nyuaj heev.

Tam sim no tej yam txawv. Piv txwv li, lub tuam txhab Israeli Cellebrite muag rau cov koom haum raug cai hauv Russia thiab lwm lub teb chaws software thiab kho vajtse system uas tso cai rau koj los nyiag tag nrho iPhone thiab Android qauv. Xyoo tas los muaj phau ntawv tshaj tawm tshaj tawm nrog cov ncauj lus kom ntxaws txog lub ncauj lus no.

Thaum encryption yuav tsis pab: peb tham txog lub cev nkag mus rau lub cuab yeej
Magadan forensic investigator Popov hacks ib lub smartphone siv tib lub tshuab siv los ntawm US Federal Bureau of Investigation. Source: BBC

Cov cuab yeej no pheej yig los ntawm tsoomfwv cov qauv. Rau UFED Touch2, Volgograd department ntawm Pawg Neeg Tshawb Fawb tau them 800 txhiab rubles, Khabarovsk department - 1,2 lab rubles. Nyob rau hauv 2017, Alexander Bastrykin, tus thawj coj ntawm pawg neeg soj ntsuam ntawm Lavxias teb sab Federation, tau lees tias nws department. siv cov kev daws teeb meem Israeli tuam txhab.

Sberbank tseem yuav cov khoom siv no - txawm li cas los xij, tsis yog rau kev tshawb nrhiav, tab sis rau kev sib ntaus cov kab mob ntawm cov khoom siv nrog Android OS. "Yog tias cov khoom siv txawb tau xav tias muaj tus kab mob uas tsis paub txog cov software tsis zoo, thiab tom qab tau txais kev tso cai yuav tsum tau tso cai los ntawm cov tswv ntawm cov xov tooj muaj tus kab mob, kev tshuaj xyuas yuav raug coj los tshawb nrhiav qhov tshwm sim tas li thiab hloov cov kab mob tshiab siv ntau yam cuab yeej, suav nrog kev siv. ntawm UFED Touch2, "- hais hauv tuam txhab.

Cov neeg Amelikas kuj muaj cov thev naus laus zis uas tso cai rau lawv los nyiag txhua lub xov tooj smartphone. Grayshift cog lus tias yuav nyiag 300 lub xov tooj smartphones rau $ 15 ($ 50 ib chav piv rau $ 1500 rau Cellbrite).

Nws zoo li cybercriminals kuj muaj cov cuab yeej zoo sib xws. Cov cuab yeej no tau txhim kho tas li - lawv qhov loj me thiab lawv qhov kev ua tau zoo nce.

Tam sim no peb tab tom tham txog ntau dua lossis tsawg dua cov xov tooj zoo los ntawm cov tuam txhab loj uas txhawj xeeb txog kev tiv thaiv cov ntaub ntawv ntawm lawv cov neeg siv. Yog tias peb tab tom tham txog cov tuam txhab me lossis cov koom haum tsis muaj npe, ces qhov no cov ntaub ntawv raug tshem tawm yam tsis muaj teeb meem. HS-USB hom ua haujlwm txawm tias thaum lub bootloader kaw. Cov kev pabcuam feem ntau yog "rov qab qhov rooj" los ntawm cov ntaub ntawv tuaj yeem rov qab tau. Yog tias tsis yog, koj tuaj yeem txuas mus rau JTAG chaw nres nkoj lossis tshem tawm eMMC nti tag nrho thiab muab tso rau hauv ib qho pheej yig adapter. Yog hais tias cov ntaub ntawv tsis yog encrypted, los ntawm lub xov tooj tuaj yeem rub tawm txhua yam nyob rau hauv dav dav, suav nrog authentication tokens uas muab kev nkag mus rau huab cia thiab lwm yam kev pabcuam.

Yog hais tias ib tug neeg muaj tus kheej nkag mus rau lub smartphone nrog cov ntaub ntawv tseem ceeb, ces lawv tuaj yeem nyiag nws yog tias lawv xav tau, txawm tias cov tuam txhab hais dab tsi.

Nws yog qhov tseeb tias txhua yam uas tau hais tseg siv tsis yog rau cov xov tooj smartphones nkaus xwb, tab sis kuj rau cov khoos phis tawj thiab khoos phis tawj uas khiav ntau OSes. Yog tias koj tsis siv cov kev tiv thaiv siab tshaj plaws, tab sis muaj cov ntsiab lus nrog cov txheej txheem xws li lo lus zais thiab nkag mus, cov ntaub ntawv yuav nyob twj ywm. Ib tus neeg paub txog hacker nrog lub cev nkag mus rau lub cuab yeej yuav tuaj yeem tau txais yuav luag txhua yam ntaub ntawv - nws tsuas yog lub sijhawm.

Yog li yuav ua li cas?

Ntawm Habre, qhov teeb meem ntawm cov ntaub ntawv kev ruaj ntseg ntawm tus kheej cov khoom siv tau raug tsa ntau dua ib zaug, yog li peb yuav tsis rov tsim lub log dua. Peb tsuas yog qhia txog cov txheej txheem tseem ceeb uas txo qis qhov tshwm sim ntawm cov neeg thib peb tau txais koj cov ntaub ntawv:

  • Nws yog qhov yuav tsum tau siv cov ntaub ntawv encryption ntawm koj lub smartphone thiab PC. Cov kev khiav hauj lwm sib txawv feem ntau muab cov yam ntxwv zoo. Piv txwv - kev tsim ntawm crypto thawv hauv Mac OS siv cov cuab yeej txheem.

  • Teem passwords nyob txhua qhov chaw thiab txhua qhov chaw, suav nrog keeb kwm ntawm kev sau ntawv hauv Telegram thiab lwm tus xa xov tam sim. Lawm, passwords yuav tsum complex.

  • Ob qhov kev lees paub qhov tseeb - yog, nws tuaj yeem tsis yooj yim, tab sis yog tias kev ruaj ntseg los ua ntej, koj yuav tsum muab tso rau.

  • Saib xyuas lub cev kev ruaj ntseg ntawm koj cov khoom siv. Coj lub tuam txhab PC mus rau lub tsev noj mov thiab tsis nco qab nws nyob ntawd? Classic. Cov qauv kev nyab xeeb, suav nrog cov neeg koom tes, tau sau nrog lub kua muag ntawm cov neeg raug tsim txom ntawm lawv tus kheej tsis saib xyuas.

Cia peb saib hauv cov lus ntawm koj txoj hauv kev los txo qhov kev pheej hmoo ntawm cov ntaub ntawv nyiag nkas thaum tus neeg thib peb nkag mus rau lub cev lub cev. Peb mam li ntxiv cov txheej txheem npaj rau hauv tsab xov xwm lossis tshaj tawm lawv hauv peb xov tooj cua channel, qhov twg peb niaj hnub sau txog kev nyab xeeb, lub neej hacks rau kev siv peb VPN thiab Internet censorship.

Tau qhov twg los: www.hab.com

Ntxiv ib saib