Zidziwitso zotetezedwa: kuchokera kumalingaliro kupita kukuchita

Pa Habr!

Lero ndikamba zomwe anzanga ndi ine takhala tikuchita kwa miyezi ingapo tsopano: zidziwitso zokankhira kwa amithenga apompopompo. Monga ndanenera kale, mukugwiritsa ntchito kwathu kutsindika kwakukulu ndi chitetezo. Chifukwa chake, tapeza ngati zidziwitso zokankhira zili ndi "zofooka" ndipo, ngati zili choncho, momwe tingazithandizire kuti tiwonjezere mwayi wothandizawu pautumiki wathu.

Ndikusindikiza kumasulira kwathu zolemba zochokera ku Medium ndikuwonjezera pang'ono kuchokera kwa ine. Lili ndi zotsatira za "kufufuza" ndi nkhani yokhudza momwe vutoli linathetsedwa.

Timasanthula zinthu

Muchitsanzo chapamwamba, zidziwitso zokankhira zimapangitsa amithenga kukhala pachiwopsezo cha MITM (Man-in-the-katikati). Mwachitsanzo, ndi Google, Microsoft, ndi mtundu wakale wa iMessage, pulogalamuyo imatumiza makiyi obisala ku maseva a Apple - pa seva, ogwiritsa ntchito amatsimikiziridwa ndipo mutu wa uthenga (kapena zomwe zili) watsitsidwa.

Chotsatira chake, pali mwayi wowerenga makalatawo mwa kupeza mwayi wopita ku seva yodziwitsira. Izi zikutanthauza kuti kusungitsa makalata kulikonse kuli kopanda ntchito: zidziwitso zokankhira zidzasiyabe kuthekera kowerengedwa ndi anthu ena. Olemba nkhaniyi adakambirana mwatsatanetsatane izi. "Lembani bwino" pa Xaker.ru, yoperekedwa ku njira zolembera mauthenga.

Ngati mukuganiza kuti ma seva a Apple ndi Google ndi otetezeka 100% motsutsana ndi makiyi obisala omwe akudumphira, ganizirani kuti antchito awo ali ndi mwayi wowapeza. Ndipo antchito ndi anthu.
Ngakhale zili pachiwopsezo cha zidziwitso zokankhira, amithenga ambiri "otetezedwa" pompopompo, kuphatikiza Signal ndi Telegraph, amawagwiritsa ntchito. Kupanda kutero, ogwiritsa ntchito amayenera "pamanja" kuyang'anira mauthenga atsopano mwa kulowa mu pulogalamuyi nthawi zonse. Zomwe zimakhala zovuta kwambiri, ndipo amithenga opikisana adzapeza mwayi.

Paranoia ndi nzeru

Mu ntchito yathu, tinakambirana nkhaniyi pafupifupi miyezi ingapo yapitayo. Tinkafunika kuwonjezera njira yodziwitsa anthu kuti tipikisane. Koma panthawi imodzimodziyo, musatsegule dzenje lachitetezo, chifukwa kutayikira kulikonse kudzasokoneza chidaliro mu polojekitiyi.

Komabe, tili ndi mwayi wofunikira kale: mthenga wathu amagawidwa (deta imasungidwa pa blockchain), ndipo antchito alibe mwayi wopeza maakaunti. Ogwiritsa ntchito okha omwe ali ndi makiyi obisala, ndipo makiyi apagulu a interlocutors amapezeka pa blockchain kuti atetezedwe ku MITM.

Mu mtundu woyamba wa zidziwitso zokankhira, tidaganiza zoyisewera motetezeka momwe tingathere osati kufalitsa uthengawo konse. Utumiki wokankhira sunalandire malemba a uthenga kuchokera ku node, koma chizindikiro chokha chokhudza kulandila kwake. Chifukwa chake, wogwiritsa ntchito adawona chidziwitso cha "Uthenga Watsopano wafika". Zinali zotheka kuziwerenga mwa mthenga basi.

Momwe zinagwirira ntchito: kanema.

Pambuyo pake, tidaphunzira kuti zidziwitso zaposachedwa za Apple zili ndi zida zatsopano zachitetezo. Iwo anamasulidwa UNNotificationServiceExtension, yomwe imalola opanga mapulogalamu kutumiza zidziwitso zosungidwa bwino pa APNS. Pulogalamu yomwe ili pachipangizo cha munthu womalizayo imasiya kubisa (kapena kutsitsa zina) ndikuwonetsa zidziwitso. Tinazitenga ngati maziko a mtundu wachiwiri wa zidziwitso zokankhira.

Tsopano tapanga mtundu wachiwiri wa zidziwitso zokankhira za iOS, zomwe zimakupatsani mwayi wowonetsa uthengawo popanda chiopsezo chachitetezo. Mu lingaliro latsopano, logic ikuwoneka motere:

• Ntchito yokankhira imatumiza zidziwitso zokankhira ndi nambala yamalonda (uthenga wobisidwa ukhoza kukhala waukulu kwambiri, ndipo kukula kwa zidziwitso ndikochepa)
• Chipangizochi chikalandira zidziwitso, chimayambitsa NotificationServiceExtension yathu - pulogalamu yaying'ono yomwe imapempha kusinthana kuchokera ku node ndi id, kuichotsa pogwiritsa ntchito mawu osungira osungidwa, ndikutumiza chidziwitso chatsopano ku dongosolo. Mawu achinsinsi amasungidwa m'malo otetezedwa.
• Dongosololi limawonetsa zidziwitso ndi uthenga wosasinthika kapena kumasulira.
• Makiyi samapita kulikonse, monga meseji wamba. Ntchito yokankhira ilibe njira yosinthira uthengawo.

Tidavomereza kuti mtundu uwu ukugwira ntchito ndikuugwiritsa ntchito posintha zaposachedwa kwambiri za pulogalamu ya iOS.
Omwe ali ndi chidwi ndi mbali yaukadaulo amatha kuwona khodi yoyambira: github.com/Adamant-im/adamant-notificationService.

Source: www.habr.com