{"id":54865,"date":"2020-01-06T00:00:00","date_gmt":"2020-01-05T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/o-bezopasnosti-v-seti"},"modified":"2020-02-18T14:02:55","modified_gmt":"2020-02-18T11:02:55","slug":"o-bezopasnosti-v-seti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/o-bezopasnosti-v-seti","title":{"rendered":"Par dro\u0161\u012bbu t\u012bkl\u0101","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Par<\/p>\n

<\/p>\n

\u0160is raksts tika uzrakst\u012bts pirms da\u017eiem gadiem, kad Telegram zi\u0146apmessenger blo\u0137\u0113\u0161ana akt\u012bvi tika apspriesta kopien\u0101, un taj\u0101 ir mani domu uz \u0161\u0101du t\u0113mu. Un, lai gan \u0161odien \u0161\u012b t\u0113ma jau ir gandr\u012bz aizmirsta, es ceru, ka, iesp\u0113jams, tas joproj\u0101m k\u0101dam b\u016bs interesanti.<\/em><\/p>\n

<\/p>\n

\u0160is teksts rad\u0101s man\u0101m p\u0101rdom\u0101m par digit\u0101lo dro\u0161\u012bbu, un es ilgi \u0161aub\u012bjos, vai to public\u0113t. Par laimi, past\u0101v milz\u012bgs skaits speci\u0101listu, kuri pareizi izprot visu probl\u0113mu, un vi\u0146iem es neko jaunu nevaru pazi\u0146ot. Tom\u0113r papildus vi\u0146iem ir v\u0113l liels skaits \u017eurn\u0101listu un citu blogeru, kuri ne tikai pa\u0161i kl\u016bp mald\u012bb\u0101s, bet ar\u012b ar saviem rakstiem izplata milz\u012bgu m\u012btu daudzumu. <\/p>\n

<\/a><\/noindex><\/p>\n

Nevienam nav nosl\u0113pums, ka p\u0113d\u0113j\u0101 laik\u0101 digit\u0101laj\u0101 kar\u0101 ir izc\u0113lies milz\u012bgs juceklis. M\u0113s, protams, run\u0101jam par vienu no visvair\u0101k apspriestaj\u0101m t\u0113m\u0101m Krievijas m\u016bsdien\u0101s, proti, Telegram zi\u0146apmessenger blo\u0137\u0113\u0161anu.<\/p>\n

<\/p>\n

Pretinieki \u0161os notikumus uztver k\u0101 cilv\u0113ka un valsts, br\u012bv\u012bbas un tot\u0101la kontroles p\u0101r person\u012bbu pretest\u012bbu. Atbalst\u012bt\u0101ji, savuk\u0101rt, balst\u0101s uz sabiedrisk\u0101s dro\u0161\u012bbas apsv\u0113rumiem un c\u012b\u0146u pret noziedz\u012bg\u0101m un teroristisk\u0101m strukt\u016br\u0101m.<\/p>\n

<\/p>\n

S\u0101ksim ar to, k\u0101 tie\u0161i darbojas Telegram zi\u0146apmessenger. M\u0113s varam apmekl\u0113t vi\u0146u m\u0101jaslapu un izlas\u012bt, k\u0101 vi\u0146i pa\u0161i sevi pozicion\u0113. Viens no galvenajiem \u0161\u012b risin\u0101juma izmanto\u0161anas priek\u0161roc\u012bb\u0101m b\u016bs uzsv\u0113rts bezkompromisa fokuss uz gala lietot\u0101ja dro\u0161\u012bbu. Bet ko tie\u0161i tas noz\u012bm\u0113?<\/p>\n

<\/p>\n

K\u0101 jau daudzos citos publiskos pakalpojumos, j\u016bsu dati tiek p\u0101rs\u016bt\u012bti \u0161ifr\u0113t\u0101 veid\u0101, bet tikai l\u012bdz centr\u0101lajiem serveriem<\/a>, kur tie atrodas piln\u012bb\u0101 atkl\u0101t\u0101 veid\u0101, un jebkur\u0161 administrators, ja vi\u0146\u0161 to \u013coti v\u0113l\u0113sies, bez gr\u016bt\u012bb\u0101m redz\u0113s visu j\u016bsu saraksti. \u0160aub\u0101ties? Tad padom\u0101jiet par to, k\u0101 tiek \u012bstenota sinhroniz\u0101cijas funkcija starp ier\u012bc\u0113m. Ja dati ir slepeni, k\u0101d\u0101 veid\u0101 tie non\u0101k tre\u0161aj\u0101 ier\u012bc\u0113? Galu gal\u0101 j\u016bs nenododat nek\u0101das \u012bpa\u0161as klientu atsl\u0113gas dekod\u0113\u0161anai.<\/p>\n

<\/p>\n

Piem\u0113ram, k\u0101 tas tiek dar\u012bts e-pasta pakalpojum\u0101 ProtonMail, kur, lai izmantotu pakalpojumu, jums ir j\u0101sniedz atsl\u0113ga, kas tiek glab\u0101ta j\u016bsu viet\u0113j\u0101 ier\u012bc\u0113 un ko p\u0101rl\u016bks izmanto, lai at\u0161ifr\u0113tu zi\u0146ojumus j\u016bsu e-pasta kast\u0113.<\/p>\n

<\/p>\n

Bet nav viss tik vienk\u0101r\u0161i. Papildus parastajiem t\u0113rz\u0113\u0161anas sarun\u0101m ir ar\u012b slepen\u0101s t\u0113rz\u0113\u0161anas. \u0160eit sarakste patie\u0161\u0101m notiek tikai starp div\u0101m ier\u012bc\u0113m, un par jebk\u0101du sinhroniz\u0101ciju nav ne runas. \u0160\u012b funkcija ir pieejama tikai mobilajiem klientiem, turkl\u0101t ekr\u0101nuz\u0146\u0113mumu uz\u0146em\u0161ana t\u0113rz\u0113\u0161an\u0101 tiek blo\u0137\u0113ta lietotnes l\u012bmen\u012b, un t\u0113rz\u0113\u0161ana tiek izn\u012bcin\u0101ta noteikt\u0101 laik\u0101. Tehnisk\u0101 zi\u0146\u0101 datu pl\u016bsma joproj\u0101m iet cauri centr\u0101lajiem serveriem, tom\u0113r tajos netiek saglab\u0101ta. Turkl\u0101t pati saglab\u0101\u0161ana ir bezj\u0113dz\u012bga, jo tikai klienti ir at\u0161ifr\u0113\u0161anas atsl\u0113gu \u012bpa\u0161nieki, bet \u0161ifr\u0113ta satiksme nerada \u012bpa\u0161u v\u0113rt\u012bbu.<\/p>\n

<\/p>\n

\u0160\u012b sh\u0113ma darbosies, kam\u0113r klienti un serveris to godpr\u0101t\u012bgi \u012bstenos, un kam\u0113r ier\u012bc\u0113 nav da\u017e\u0101du programmu, kas bez j\u016bsu zi\u0146as nos\u016bta ekr\u0101nuz\u0146\u0113mumus tre\u0161\u0101m person\u0101m. Varb\u016bt iemesls nev\u0113l\u0113\u0161an\u0101s uz Telegram no ties\u012bbaizsardz\u012bbas iest\u0101d\u0113m ir slepenaj\u0101s sarun\u0101s? Tie\u0161i taj\u0101, manupr\u0101t, sl\u0113pjas galven\u0101 da\u013ca cilv\u0113ku nesapratnes. Un m\u0113s l\u012bdz galam nesp\u0113sim noskaidrot \u0161\u012bs nesapratnes iemeslu, l\u012bdz nesaprat\u012bsim, kas visp\u0101r ir \u0161ifr\u0113\u0161ana un no k\u0101 t\u0101 ir paredz\u0113ta, lai pasarg\u0101tu j\u016bsu datus.<\/p>\n

<\/p>\n

Iedom\u0101simies, ka k\u0101ds \u013caunpr\u0101t\u012bgs lietot\u0101js v\u0113las nos\u016bt\u012bt slepenu zi\u0146u saviem draugiem. Tik svar\u012bgu, ka ir v\u0113rts piev\u0113rst uzman\u012bbu un nodro\u0161in\u0101t sevi. Vai Telegram ir tik veiksm\u012bgs izv\u0113les variants inform\u0101cijas dro\u0161\u012bbas speci\u0101lista ac\u012bm? N\u0113, nav. Es apgalvoju, ka jebkura no popul\u0101raj\u0101m zi\u0146ojumapmai\u0146as lietotn\u0113m ir slikt\u0101kais variants, ko var izv\u0113l\u0113ties.<\/p>\n

<\/p>\n

Galven\u0101 probl\u0113ma ir zi\u0146ojumu sist\u0113mas izmanto\u0161ana, kur\u0101 j\u016bsu saraksti vispirms mekl\u0113s. Un pat ja t\u0101 ir pietiekami labi aizsarg\u0101ta, pats t\u0101s esam\u012bbas fakts var j\u016bs kompromit\u0113t. Atg\u0101din\u0101m, ka klientu savienojumi joproj\u0101m notiek caur centr\u0101laj\u0101m serveriem, un vismaz fakts par zi\u0146ojuma nos\u016bt\u012b\u0161anu starp diviem lietot\u0101jiem joproj\u0101m var tikt pier\u0101d\u012bts. T\u0101p\u0113c nav j\u0113gas izmantot e-pastu, soci\u0101los t\u012bklus un citas publiskas pakalpojumu platformas.<\/p>\n

<\/p>\n

K\u0101 tad organiz\u0113t saraksti, kas atbilst vis\u0101m dro\u0161\u012bbas pras\u012bb\u0101m? M\u016bsu apskat\u0101 m\u0113s apzin\u0101ti noraid\u012bsim visus nelikum\u012bgos vai pretrun\u012bgos metodus, lai par\u0101d\u012btu, ka uzdevumu var atrisin\u0101t tikai likuma ietvaros. Neb\u016bs nepiecie\u0161ama nek\u0101da spiego\u0161anas, hakeru vai gr\u016bti pieejama programmat\u016bra.
\nGandr\u012bz visi r\u012bki ir iek\u013cauti standarta util\u012btu komplekt\u0101, kas tiek pieg\u0101d\u0101ts ar jebkuru GNU\/Linux oper\u0113t\u0101jsist\u0113mu, un to aizlieg\u0161ana noz\u012bm\u0113tu datoru k\u0101 t\u0101du aizlieg\u0161anu.<\/p>\n

<\/p>\n

Pasaules t\u012bmeklis atg\u0101dina milz\u012bgu serveru t\u012bklu, kas parasti darbojas ar GNU\/Linux oper\u0113t\u0101jsist\u0113mu un pakot\u0146u mar\u0161rut\u0113\u0161anas noteikumiem starp \u0161iem serveriem. Liel\u0101k\u0101 da\u013ca \u0161\u0101du serveru nav pieejami tie\u0161ai piesl\u0113g\u0161anai, tom\u0113r papildus tam past\u0101v miljoniem serveru ar piln\u012bgi pieejamiem adres\u0113m, kas apkalpo m\u016bs visus, p\u0101rvad\u0101jot milz\u012bgu daudzumu datu pl\u016bsmas. Un j\u016bsu sarakste starp visu \u0161o haosu nekad netiks mekl\u0113ta, it \u012bpa\u0161i, ja t\u0101 uz kop\u0113jo fona nek\u0101d\u0101 zi\u0146\u0101 neizce\u013cas.<\/p>\n

<\/p>\n

Tie, kas v\u0113las organiz\u0113t slepeno sakaru kan\u0101lu, vienk\u0101r\u0161i ieg\u0101d\u0101sies VPS (virtu\u0101lo ma\u0161\u012bnu m\u0101ko\u0146os) no viena no simtiem sp\u0113l\u0113t\u0101ju, kas darbojas tirg\u016b. Cena, k\u0101 nav gr\u016bti p\u0101rliecin\u0101ties, ir da\u017ei dol\u0101ri m\u0113nes\u012b. Protams, to izdar\u012bt anon\u012bmi neizdosies, un \u0161\u012b virtu\u0101l\u0101 ma\u0161\u012bna vienm\u0113r b\u016bs saist\u012bta ar j\u016bsu maks\u0101juma l\u012bdzekli, t\u0101tad ar\u012b ar j\u016bsu identit\u0101ti. Tom\u0113r vairums hostinga pakalpojumu sniedz\u0113ju neuztrauc tas, ko j\u016bs dar\u0101t vi\u0146u aparat\u016br\u0101, kam\u0113r p\u0101rsniedzat vi\u0146u pamata ierobe\u017eojumus, piem\u0113ram, datu p\u0101rraides vai savienojumu skaitu uz 23. portu.<\/p>\n

<\/p>\n

Lai gan \u0161\u0101da iesp\u0113ja past\u0101v, vi\u0146am nav izdev\u012bgi t\u0113r\u0113t tos da\u017eus dol\u0101rus, ko vi\u0146\u0161 ir nopeln\u012bjis uz jums, lai v\u0113l ar\u012b sekotu jums.
\nPat ja vi\u0146\u0161 v\u0113l\u0113tos vai b\u016btu spiests to izdar\u012bt, vispirms vi\u0146am b\u016btu j\u0101izprot, k\u0101da veida programmat\u016bra tiek izmantota tie\u0161i jums, un, pamatojoties uz \u0161o zin\u0101\u0161anu, j\u0101rada uzraudz\u012bbas infrastrukt\u016bra. To izdar\u012bt manu\u0101li nav gr\u016bti, bet \u0161o procesu automatiz\u0113t b\u016bs \u0101rk\u0101rt\u012bgi sare\u017e\u0123\u012bti. T\u0101d\u0113\u013c saglab\u0101t visu trafiku, kas pl\u016bst cauri j\u016bsu serverim, ekonomiski nav izdev\u012bgi, ja vien j\u016bs iepriek\u0161 neiek\u013c\u016bstat attiec\u012bgo strukt\u016bru redzeslok\u0101, kas v\u0113l\u0113sies to izdar\u012bt.<\/p>\n

<\/p>\n

N\u0101kamais solis b\u016bs izveidot dro\u0161u kan\u0101lu ar vienu no daudzajiem eso\u0161ajiem veidiem. <\/p>\n

<\/p>\n