{"id":91733,"date":"2020-08-17T19:42:21","date_gmt":"2020-08-17T17:42:21","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/doklad-soveta-bezopasnosti-tor-vredonosnye-vyhodnye-uzly-ispolzovali-sslstrip"},"modified":"2020-08-17T19:42:21","modified_gmt":"2020-08-17T17:42:21","slug":"doklad-soveta-bezopasnosti-tor-vredonosnye-vyhodnye-uzly-ispolzovali-sslstrip","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/doklad-soveta-bezopasnosti-tor-vredonosnye-vyhodnye-uzly-ispolzovali-sslstrip","title":{"rendered":"A Tor biztons\u00e1gi tan\u00e1csad\u00f3 jelent\u00e9se: a rosszindulat\u00fa kimeneti csom\u00f3pontok haszn\u00e1lj\u00e1k a sslstrip-et.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"


\n \"A<\/p>\n

<\/a><\/p>\n

<\/p>\n

Az esem\u00e9ny l\u00e9nyege<\/b><\/p>\n

2020 m\u00e1jus\u00e1ban felfedeztek egy csoport kimen\u0151 csom\u00f3pontot, amelyek beavatkoztak a kimen\u0151 kapcsolatokba. K\u00fcl\u00f6n\u00f6sen szinte az \u00f6sszes kapcsolatot \u00e9rintetlen\u00fcl hagyt\u00e1k, de egy kisebb sz\u00e1m\u00fa kriptovaluta-t\u0151zsd\u00e9re ir\u00e1nyul\u00f3 kapcsolatokat elfogtak. Ha a felhaszn\u00e1l\u00f3k a weboldal HTTP-verzi\u00f3j\u00e1t l\u00e1togatt\u00e1k (teh\u00e1t nem titkos\u00edtott \u00e9s nem hiteles\u00edtett), a rosszindulat\u00fa csom\u00f3pontok megakad\u00e1lyozt\u00e1k a HTTPS-verzi\u00f3ra (teh\u00e1t titkos\u00edtott \u00e9s hiteles\u00edtett) t\u00f6rt\u00e9n\u0151 \u00e1tir\u00e1ny\u00edt\u00e1st. Ha a felhaszn\u00e1l\u00f3 nem vette \u00e9szre a cser\u00e9t (p\u00e9ld\u00e1ul a b\u00f6ng\u00e9sz\u0151 c\u00edmsor\u00e1ban a lakat ikon hi\u00e1nya), \u00e9s elkezdett fontos inform\u00e1ci\u00f3kat k\u00fcldeni, ez az inform\u00e1ci\u00f3 a t\u00e1mad\u00f3 \u00e1ltal elkobozhat\u00f3v\u00e1 v\u00e1lt.<\/p>\n

A Tor projekt 2020 m\u00e1jus\u00e1ban kiz\u00e1rta ezeket a csom\u00f3pontokat a h\u00e1l\u00f3zatb\u00f3l. 2020 j\u00falius\u00e1ban egy \u00fajabb \u00e1tj\u00e1tsz\u00f3 csoportot azonos\u00edtottak, amely hasonl\u00f3 t\u00e1mad\u00e1st hajtott v\u00e9gre, \u00edgy \u0151ket is kiz\u00e1rt\u00e1k. M\u00e9g mindig nem vil\u00e1gos, hogy siker\u00fclt-e b\u00e1rkinek is megt\u00e1madnia a rendszer\u00e9t, de a t\u00e1mad\u00e1s m\u00e9rt\u00e9k\u00e9b\u0151l \u00e9s abb\u00f3l, hogy a t\u00e1mad\u00f3 megism\u00e9telte a k\u00eds\u00e9rletet (az els\u0151 eset a kimen\u0151 csom\u00f3pontok \u00f6sszes s\u00e1vsz\u00e9less\u00e9g\u00e9nek 23%-\u00e1t \u00e9rintette, a m\u00e1sodik k\u00f6r\u00fclbel\u00fcl 19%-ot), \u00e9sszer\u0171 felt\u00e9telezni, hogy a t\u00e1mad\u00f3 \u00fagy gondolta, hogy a t\u00e1mad\u00e1s k\u00f6lts\u00e9gei meg\u00e9rik az \u00e1r\u00e1t.<\/p>\n

Ez az eset j\u00f3 eml\u00e9keztet\u0151 arra, hogy a HTTP k\u00e9r\u00e9sek nem titkos\u00edtottak \u00e9s nem hiteles\u00edtettek, ez\u00e9rt tov\u00e1bbra is sebezhet\u0151ek. A Tor b\u00f6ng\u00e9sz\u0151 tartalmazza az HTTPS-Everywhere kiterjeszt\u00e9st, amely kifejezetten az ilyen t\u00e1mad\u00e1sok megel\u0151z\u00e9s\u00e9re szolg\u00e1l, de a hat\u00e9konys\u00e1ga korl\u00e1tozott, mivel a lista nem terjed ki az \u00f6sszes weboldalra a vil\u00e1gon. A felhaszn\u00e1l\u00f3k, amikor a weboldalak HTTP verzi\u00f3j\u00e1t l\u00e1togatj\u00e1k, mindig vesz\u00e9lyben vannak.<\/p>\n

Az ilyen t\u00e1mad\u00e1sok j\u00f6v\u0151beni megel\u0151z\u00e9se<\/b><\/p>\n

A t\u00e1mad\u00e1sok megel\u0151z\u00e9s\u00e9nek m\u00f3djai k\u00e9t r\u00e9szre oszthat\u00f3k: az els\u0151 azok az int\u00e9zked\u00e9sek, amelyeket a felhaszn\u00e1l\u00f3k \u00e9s a weboldalak adminisztr\u00e1torai foganatos\u00edthatnak a biztons\u00e1guk fokoz\u00e1sa \u00e9rdek\u00e9ben, m\u00edg a m\u00e1sodik a rosszindulat\u00fa csom\u00f3pontok azonos\u00edt\u00e1sa \u00e9s id\u0151ben t\u00f6rt\u00e9n\u0151 felfedez\u00e9se.<\/p>\n

Aj\u00e1nlott int\u00e9zked\u00e9sek weboldalakt\u00f3l: <\/p>\n

1. HTTPS aktiv\u00e1l\u00e1sa (ingyenes tan\u00fas\u00edtv\u00e1nyokat biztos\u00edt) Let’s Encrypt<\/a>) <\/p>\n

<\/noindex><\/p>\n

2. Redirect rules should be added to the HTTPS-Everywhere list so that users can proactively establish a secure connection instead of relying on a redirect after establishing an insecure connection. Additionally, if web service administration wants to avoid interaction with exit nodes altogether, they may provide an onion version of the site<\/a>.<\/p>\n

<\/noindex><\/p>\n

Currently, the Tor project is considering a complete shutdown of insecure HTTP in the Tor Browser. A few years ago, such a measure seemed unthinkable (too many resources only had unsecured HTTP), but HTTPS-Everywhere and the upcoming version of Firefox have an experimental option to use HTTPS by default for the first connection, with the possibility to revert to HTTP if necessary. It is still unclear how this approach will affect Tor Browser users, so it will first be tested at higher levels of browser security (the shield icon).<\/p>\n

A Tor h\u00e1l\u00f3zatb\u00f3l \u00f6nk\u00e9ntesek figyelik az \u00e1tj\u00e1tsz\u00f3k viselked\u00e9s\u00e9t, \u00e9s jelentik az eseteket, \u00edgy a rosszindulat\u00fa csom\u00f3pontok kiz\u00e1rhat\u00f3k a gy\u00f6k\u00e9rszerverek \u00e1ltal. B\u00e1r az ilyen jelent\u00e9seket \u00e1ltal\u00e1ban gyorsan elb\u00edr\u00e1lj\u00e1k, \u00e9s a rosszindulat\u00fa csom\u00f3pontokat azonnal lekapcsolj\u00e1k, a h\u00e1l\u00f3zat folyamatos megfigyel\u00e9s\u00e9re nincsenek elegend\u0151 er\u0151forr\u00e1sok. Ha siker\u00fclt \u00e9szlelni egy rosszindulat\u00fa \u00e1tj\u00e1tsz\u00f3t \u2013 jelentheti a projektnek, az utas\u00edt\u00e1s are available at this link<\/a>.<\/p>\n

<\/noindex><\/p>\n

The current approach has two fundamental problems: <\/p>\n

1. When evaluating an unknown relay, it's challenging to prove its maliciousness. If no attacks have been observed from it, should it be left in place? Mass attacks affecting many users are easier to detect, but if attacks only affect a small number of sites and users, the attacker may act preemptively<\/a>. Maga a Tor h\u00e1l\u00f3zat t\u00f6bb ezer \u00e1tj\u00e1tsz\u00f3b\u00f3l \u00e1ll, amelyek vil\u00e1gszerte elhelyezkednek, \u00e9s ez a k\u00fcl\u00f6nf\u00e9les\u00e9g (\u00e9s az ebb\u0151l k\u00f6vetkez\u0151 decentraliz\u00e1l\u00e1s) az egyik er\u0151ss\u00e9ge. <\/p>\n

<\/noindex><\/p>\n

2. When considering a group of unknown relays, it's difficult to prove their interconnectedness (i.e., whether they are conducting a Sybil attack<\/a>). Sok \u00f6nk\u00e9ntes \u00fajraoszt\u00f3k ugyanazokat az olcs\u00f3 h\u00e1l\u00f3zatokat v\u00e1lasztj\u00e1k, mint p\u00e9ld\u00e1ul a Hetzner, OVH, Online, Frantech, Leaseweb stb., \u00e9s ha t\u00f6bb \u00faj \u00fajraoszt\u00f3t \u00e9szlelnek, neh\u00e9z lesz egy\u00e9rtelm\u0171en felt\u00e9telezni, hogy t\u00f6bb \u00faj \u00fczemeltet\u0151 jelent meg, vagy csak egy, aki az \u00f6sszes \u00faj \u00fajraoszt\u00f3t ir\u00e1ny\u00edtja.<\/p>\n

<\/noindex><\/noindex><\/p>\n

Forr\u00e1s: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u0443\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u0434\u0448\u0435\u0433\u043e \u0412 \u043c\u0430\u0435 2020 \u0433\u043e\u0434\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0433\u0440\u0443\u043f\u043f\u0430 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0445 \u0443\u0437\u043b\u043e\u0432, \u0432\u043c\u0435\u0448\u0438\u0432\u0430\u0432\u0448\u0438\u0445\u0441\u044f \u0432 \u0438\u0441\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f. \u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043e\u043d\u0438 \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0438 \u043d\u0435\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u043c\u0438 \u043f\u043e\u0447\u0442\u0438 \u0432\u0441\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f, \u043d\u043e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u043b\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u043c\u0443 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0443 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u043d\u044b\u0445 \u0431\u0438\u0440\u0436. \u0415\u0441\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u0441\u0435\u0449\u0430\u043b\u0438 HTTP-\u0432\u0435\u0440\u0441\u0438\u044e \u0441\u0430\u0439\u0442\u0430 (\u0442.\u0435. \u043d\u0435\u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0438 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e), \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0443\u0437\u043b\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0430\u043b\u0438 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0430 HTTPS-\u0432\u0435\u0440\u0441\u0438\u044e (\u0442.\u0435. \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e). \u0415\u0441\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043d\u0435 \u0437\u0430\u043c\u0435\u0447\u0430\u043b \u043f\u043e\u0434\u043c\u0435\u043d\u044b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":91734,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-91733","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47A Tor biztons\u00e1gi tan\u00e1cs\u00e1nak besz\u00e1mol\u00f3ja: a rosszindulat\u00fa kimeneti csom\u00f3pontok sslstrip-et haszn\u00e1ltak. | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/doklad-soveta-bezopasnosti-tor-vredonosnye-vyhodnye-uzly-ispolzovali-sslstrip","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0414\u043e\u043a\u043b\u0430\u0434 \u0441\u043e\u0432\u0435\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Tor: \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435 \u0443\u0437\u043b\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 sslstrip. | ProHoster","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/doklad-soveta-bezopasnosti-tor-vredonosnye-vyhodnye-uzly-ispolzovali-sslstrip","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-17T17:42:21+00:00","article:modified_time":"2020-08-17T17:42:21+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"91733","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:22:22","updated":"2022-10-05 06:28:17","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/91733","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=91733"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/91733\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media\/91734"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=91733"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=91733"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=91733"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}