Msonkhano wa BLACK HAT USA. Kulemera Kapena Kufa: Kupanga Ndalama Paintaneti Pogwiritsa Ntchito Njira Zachipewa Zakuda. Gawo 1

Zitsogozo: Amayi ndi abambo, nkhani iyi ndi yoseketsa komanso yosangalatsa kwambiri, lero tikambirana zinthu zenizeni zomwe zimawonedwa pa intaneti. Zokambiranazi ndizosiyana pang'ono ndi zomwe tidazolowera pamisonkhano ya Black Hat chifukwa tikambirana momwe owukira amapangira ndalama pakuwukira kwawo.

Tikuwonetsani zowukira zosangalatsa zomwe zingapangitse phindu, ndikukuwuzani za kuwukira komwe kunachitika usiku womwe tidapita ku Jägermeister ndikukambirana. Zinali zosangalatsa, koma titakhazikika pang'ono, tidalankhula ndi anthu a SEO ndipo tidaphunzira kuti anthu ambiri akupanga ndalama pazowukirazi.

Ndine woyang'anira wapakati wopanda ubongo, ndiye ndisiya mpando wanga ndikukudziwitsani kwa Jeremy ndi Trey, omwe ali anzeru kuposa ine. Ndiyenera kukhala ndi mawu oyambira anzeru komanso osangalatsa, koma sinditero, ndiye ndikuwonetsa zithunzizi m'malo mwake.

Zithunzi zosonyeza Jeremy Grossman ndi Trey Ford zikuwonetsedwa pazenera.
Jeremy Grossman ndiye woyambitsa komanso mkulu waukadaulo wa WhiteHat Security, yemwe adatchulidwa m'modzi mwa ma CTO 2007 apamwamba kwambiri ndi InfoWorld mu 25, woyambitsa nawo Web Application Security Consortium, komanso wolemba nawo za kuwukira kwapatsamba.

Trey Ford ndi Mtsogoleri wa Architectural Solutions ku WhiteHat Security, yemwe ali ndi zaka 6 zachidziwitso monga wothandizira zachitetezo kumakampani a Fortune 500 komanso m'modzi mwa omwe amapanga muyeso wa chitetezo cha PCI DSS khadi.

Ndikuganiza kuti zithunzizi zimandipangitsa kukhala wopanda nthabwala. Mulimonsemo, ndikukhulupirira kuti mumasangalala ndi ulaliki wawo ndikumvetsetsa momwe ziwonetserozi zimagwiritsidwira ntchito pa intaneti kupanga ndalama.

Jeremy Grossman: Masana abwino, zikomo aliyense chifukwa chobwera. Uku kudzakhala kukambirana kosangalatsa kwambiri, ngakhale simudzawona ziro zamasiku kapena umisiri watsopano wabwino. Tidzangoyesera kuti zikhale zosangalatsa ndi kukambirana za zinthu zenizeni zomwe zimachitika tsiku ndi tsiku zomwe zimalola anthu oipa kupanga ndalama zambiri.

Msonkhano wa BLACK HAT USA. Kulemera Kapena Kufa: Kupanga Ndalama Paintaneti Pogwiritsa Ntchito Njira Zachipewa Zakuda. Gawo 1

Sitikufuna kukusangalatsani ndi zomwe zikuwonetsedwa pazithunzizi, koma fotokozani zomwe kampani yathu imachita. Chifukwa chake, White Hat Sentinel, kapena "Guardian White Hat" ndi:

  • chiwerengero chopanda malire cha kuwunika - kulamulira ndi kasamalidwe ka akatswiri a malo a kasitomala, kutha kuyang'ana malo mosasamala za kukula kwawo ndi kusintha kwafupipafupi;
  • kufalikira kwakukulu - kuyang'ana kovomerezeka kwa masamba kuti azindikire zovuta zaukadaulo ndikuyesa kwa ogwiritsa ntchito kuti azindikire zolakwika m'mabizinesi omwe sanaululidwe;
  • kuchotsa zabwino zabodza - gulu lathu logwira ntchito limawunikanso zotsatira ndikuyika kuopsa koyenera ndi kuwopseza;
  • chitukuko ndi kuyang'anira khalidwe - kachitidwe ka WhiteHat Satellite Appliance imatilola kuti tigwiritse ntchito machitidwe a kasitomala kudzera pa intaneti yamkati;
  • kukonza ndi kukonza - kusanthula kwenikweni kumakupatsani mwayi wosinthira makinawo mwachangu komanso moyenera.

Chifukwa chake, timasanthula tsamba lililonse padziko lapansi, tili ndi gulu lalikulu kwambiri la ogwiritsa ntchito intaneti, timayesa 600-700 sabata iliyonse, ndipo zonse zomwe muwona munkhani iyi zimachokera ku zomwe takumana nazo pogwira ntchito yamtunduwu. .
Pa slide yotsatira mukuwona mitundu 10 yodziwika kwambiri yowukira mawebusayiti apadziko lonse lapansi. Izi zikuwonetsa kuchuluka kwa kusatetezeka kuzinthu zina. Monga mukuwonera, 65% yamasamba onse ali pachiwopsezo cholembedwa pamasamba, 40% amalola kutayikira kwa chidziwitso, ndipo 23% ali pachiwopsezo chosokonekera. Kuphatikiza pa kulemba pamasamba, jakisoni wa SQL komanso chinyengo chodziwika bwino chapamalo ochezera, chomwe sichinaphatikizidwe m'magawo athu khumi apamwamba, ndizofala. Koma mndandandawu uli ndi ziwopsezo zokhala ndi mayina a esoteric, omwe amafotokozedwa pogwiritsa ntchito zilankhulo zosamveka bwino komanso zomwe zimapangidwira makampani ena.

Msonkhano wa BLACK HAT USA. Kulemera Kapena Kufa: Kupanga Ndalama Paintaneti Pogwiritsa Ntchito Njira Zachipewa Zakuda. Gawo 1

Izi ndi zolakwika zotsimikizira, zolakwika za njira zololeza, kutayikira kwa chidziwitso, ndi zina zotero.

slide yotsatira ikukamba za kuwukira pamalingaliro abizinesi. Magulu a QA omwe akukhudzidwa ndi chitsimikizo cha khalidwe nthawi zambiri samawamvera. Amayesa zomwe pulogalamuyo iyenera kuchita, osati zomwe ingachite, ndiyeno mutha kuwona chilichonse chomwe mukufuna. Makatani, onsewa Mabokosi Oyera / Akuda / Otuwa, mabokosi onse amitundu yambiri sangathe kuzindikira zinthu izi nthawi zambiri, chifukwa amangokhazikitsidwa pazomwe kuukirako kungakhale kapena zomwe zimachitika zofanana zikachitika. Iwo alibe luntha ndipo sadziwa ngati chirichonse chinagwira ntchito konse kapena ayi.

Zomwezo zimapitanso ndi ma firewall a IDS ndi WAF, omwe amalepheranso kuzindikira zolakwika zamabizinesi chifukwa zopempha za HTTP zimawoneka ngati zachilendo. Tikuwonetsani kuti ziwopsezo zokhudzana ndi zolakwika zamabizinesi zimangochitika mwachilengedwe, palibe obera, palibe ma metacharacts kapena zovuta zina, zikuwoneka ngati zochitika mwachilengedwe. Chachikulu n’chakuti anthu oipa amakonda zinthu zimenezi chifukwa zolakwika zimene zili m’lingaliro la bizinesi zimawapangitsa kukhala ndi ndalama. Amagwiritsa ntchito XSS, SQL, CSRF, koma ziwopsezo zamtunduwu zikukhala zovuta kwambiri kuchita, ndipo tawona kuti zatsika pazaka 3-5 zapitazi. Koma sizidzazimiririka paokha, monga momwe kusefukira kwa chitetezo sikudzatha. Komabe, anyamata oyipa akuganiza za momwe angagwiritsire ntchito zida zovuta kwambiri chifukwa amakhulupirira kuti "oyipa enieni" nthawi zonse amayang'ana kuti apeze ndalama pakuwukira kwawo.

Ndikufuna kukuwonetsani zidule zenizeni zomwe mungatenge ndikuzigwiritsa ntchito m'njira yoyenera kuteteza bizinesi yanu. Cholinga china cha ulaliki wathu ndikuti mwina mukudabwa za makhalidwe abwino.

Msonkhano wa BLACK HAT USA. Kulemera Kapena Kufa: Kupanga Ndalama Paintaneti Pogwiritsa Ntchito Njira Zachipewa Zakuda. Gawo 1

Mavoti a pa intaneti ndi mavoti

Chifukwa chake, kuti tiyambe kukambirana za zolakwika zamabizinesi, tiyeni tikambirane za kafukufuku wapaintaneti. Mavoti a pa intaneti ndi njira yodziwika kwambiri yodziwira kapena kukopa malingaliro a anthu. Tidzayamba ndi phindu la $ 0 ndiyeno tiyang'ane zotsatira za 5, 6, 7 miyezi ya ziwembu zachinyengo. Tiyeni tiyambe ndikuchita kafukufuku wosavuta kwambiri. Mukudziwa kuti tsamba lililonse latsopano, blog iliyonse, tsamba lililonse lazankhani limachita kafukufuku pa intaneti. Izi zati, palibe niche yayikulu kwambiri kapena yopapatiza, koma tikufuna kuwona malingaliro a anthu m'malo enaake.

Ndikufuna kukuitanani ku kafukufuku wina womwe unachitika ku Austin, Texas. Chifukwa chimbalangondo cha ku Austin chinapambana pa Westminster Dog Show, mkulu wa ku Austin America Statesman adaganiza zopanga kafukufuku wapa intaneti wa Austin's Best in Show kwa eni ake agalu aku Central Texas. Eni ake zikwizikwi adatumiza zithunzi ndikuvotera omwe amawakonda. Monga kafukufuku wina wochuluka, panalibe mphotho ina koma kudzitamandira kwa chiweto chanu.

Pulogalamu ya Web 2.0 idagwiritsidwa ntchito povota. Munadina "inde" ngati mumakonda galuyo ndikupeza ngati anali galu wabwino kwambiri pamtunduwu kapena ayi. Chifukwa chake mudavotera mazana angapo agalu omwe adayikidwa patsambalo ngati omwe adzapambana pawonetsero.

Ndi njira yovota iyi, mitundu itatu yachinyengo idatheka. Choyamba ndi voti yosatha, kumene mumavotera galu yemweyo mobwerezabwereza. Ndi zophweka kwambiri. Njira yachiwiri ndiyo kuvota koyipa, komwe mumavota kangapo motsutsana ndi galu yemwe akupikisana naye. Njira yachitatu inali yakuti, kwenikweni pamphindi yomaliza ya mpikisano, mudayika galu watsopano, adavotera, kotero kuti mwayi wolandira mavoti olakwika unali wochepa, ndipo munapambana polandira mavoti abwino a 3%.

Msonkhano wa BLACK HAT USA. Kulemera Kapena Kufa: Kupanga Ndalama Paintaneti Pogwiritsa Ntchito Njira Zachipewa Zakuda. Gawo 1

Komanso, chigonjetsocho chinatsimikiziridwa ngati peresenti, osati ndi chiwerengero chonse cha mavoti, ndiye kuti, simunathe kudziwa kuti ndi galu ati amene adalandira chiwerengero chochuluka cha mavoti abwino, chiwerengero chokha cha mavoti abwino ndi oipa a galu wina adawerengedwa. . Galu yemwe ali ndi chiŵerengero chabwino kwambiri cha zabwino/zoipa wapambana.

Mnzake Robert "RSnake" Hansen mnzake adamupempha kuti amuthandize Chihuahua Tiny kupambana mpikisano. Mukudziwa Robert, ndi waku Austin. Iye, ngati wowononga kwambiri, adakonza projekiti ya Burp ndikutsata njira yochepetsera kukana. Anagwiritsa ntchito njira yachinyengo #1, ndikuyiyendetsa kudzera pa Burp loop ya zopempha mazana angapo kapena zikwi, ndipo izi zinabweretsa galuyo mavoti 2000 ndikumubweretsa pamalo oyamba.

Msonkhano wa BLACK HAT USA. Kulemera Kapena Kufa: Kupanga Ndalama Paintaneti Pogwiritsa Ntchito Njira Zachipewa Zakuda. Gawo 1

Kenako, anagwiritsa ntchito njira yachinyengo nambala 2 motsutsana ndi mpikisano wa Tiny, wotchedwa Chuchu. M'mphindi zomaliza za mpikisano, adaponya mavoti 450 motsutsana ndi Chuchu, zomwe zinalimbitsanso malo a Tiny pa malo a 1 ndi mavoti oposa 2: 1, koma malinga ndi kuchuluka kwa ndemanga zabwino ndi zoipa, Tiny adatayabe. Pa slide iyi mukuwona nkhope yatsopano ya zigawenga za pa intaneti, zokhumudwitsidwa ndi zotsatirazi.

Msonkhano wa BLACK HAT USA. Kulemera Kapena Kufa: Kupanga Ndalama Paintaneti Pogwiritsa Ntchito Njira Zachipewa Zakuda. Gawo 1

Inde, zinali zochititsa chidwi, koma ndikuganiza kuti mnzanga sanakonde izi. Mumangofuna kupambana mpikisano wa Chihuahua ku Austin, koma panali wina yemwe anayesa kukuberani ndikuchita zomwezo. Chabwino, tsopano ndikupereka foni kwa Trey.

Kupanga zofuna zopangira ndikupanga ndalama pa izo

Trey Ford: Lingaliro la "DoS yopangira" limatanthawuza zochitika zingapo zosangalatsa tikamagula matikiti pa intaneti. Mwachitsanzo, posungira mpando wapadera pa ndege. Izi zitha kugwira ntchito pamtundu uliwonse wa tikiti, monga zochitika zamasewera kapena konsati.

Msonkhano wa BLACK HAT USA. Kulemera Kapena Kufa: Kupanga Ndalama Paintaneti Pogwiritsa Ntchito Njira Zachipewa Zakuda. Gawo 1

Pofuna kupewa kugula zinthu mobwerezabwereza zinthu zosowa monga mipando ya ndege, zinthu zakuthupi, mayina olowera, ndi zina zambiri, pulogalamuyo imatseka chinthucho kwakanthawi kuti apewe mikangano. Ndipo apa pakubwera chiwopsezo chokhudzana ndi kuthekera kosungiratu china chake pasadakhale.

Tonse tikudziwa za kutha kwa nthawi, tonse tikudziwa za kutha kwa gawoli. Koma cholakwika chanzeru chimenechi chimatilola kusankha mpando paulendo wa pandege kenako n’kubwerera kukasankhanso popanda kulipira kalikonse. Zowonadi ambiri a inu nthawi zambiri mumayenda maulendo abizinesi, koma kwa ine iyi ndi gawo lofunikira la ntchito. Tayesa njira iyi m'malo ambiri: mumasankha ulendo wa pandege, kusankha mpando, ndipo pokhapo mukakonzeka m'pamene mumalemba zambiri zolipirira. Ndiko kuti, mutasankha malo, amasungidwa kwa nthawi inayake - kuchokera maminiti angapo mpaka maola angapo, ndipo panthawiyi palibe wina aliyense amene angasungire malowa. Chifukwa cha nthawi yodikirayi, muli ndi mwayi weniweni wosunga mipando yonse mundege mwa kungobwerera ku webusaitiyi ndikusunga mipando yomwe mukufuna.

Chifukwa chake, njira yowukira ya DoS ikuwoneka: bwerezani kuzungulira uku pampando uliwonse pa ndege.

Msonkhano wa BLACK HAT USA. Kulemera Kapena Kufa: Kupanga Ndalama Paintaneti Pogwiritsa Ntchito Njira Zachipewa Zakuda. Gawo 1

Tayesa izi pa ndege zazikulu ziwiri. Mutha kupeza chiopsezo chofanana ndi kusungitsa kwina kulikonse. Uwu ndi mwayi wabwino wokwezera mitengo ya matikiti anu kwa iwo omwe akufuna kuwagulitsanso. Kuti achite izi, ongoyerekeza amangofunika kusungitsa matikiti otsalawo popanda chiwopsezo cha kutaya ndalama. Mwanjira imeneyi, mutha "kuwonongeka" malonda a e-commerce omwe amagulitsa zinthu zofunika kwambiri - masewera a kanema, masewera otonthoza, ma iPhones, ndi zina zotero. Ndiko kuti, cholakwika chomwe chilipo pakusungitsa kapena kusungitsa pa intaneti chimalola wowukira kupanga ndalama kapena kuwononga omwe akupikisana nawo.

Kusintha kwa Captcha

Jeremy Grossman: Tsopano tiyeni tikambirane za captcha. Aliyense amadziwa zithunzi zosasangalatsa zomwe zimawononga intaneti ndipo zimagwiritsidwa ntchito polimbana ndi sipamu. Mwachidziwikire, mutha kupanganso phindu kuchokera ku captcha. Captcha ndi kuyesa kwathunthu kwa Turing komwe kumakupatsani mwayi wosiyanitsa munthu weniweni ndi bot. Ndidapeza zinthu zambiri zosangalatsa ndikufufuza kugwiritsa ntchito captcha.

Msonkhano wa BLACK HAT USA. Kulemera Kapena Kufa: Kupanga Ndalama Paintaneti Pogwiritsa Ntchito Njira Zachipewa Zakuda. Gawo 1

Captcha idagwiritsidwa ntchito koyamba kuzungulira 2000-2001. Spammers akufuna kuchotsa captcha kuti alembetse maimelo aulere a Gmail, Yahoo Mail, Windows Live Mail, MySpace, FaceBook, ndi zina zambiri. ndi kutumiza spam. Popeza captcha imagwiritsidwa ntchito kwambiri, msika wonse wamautumiki wawonekera womwe umapereka mwayi wodutsa captcha yomwe ili paliponse. Pamapeto pake, izi zimabweretsa phindu - chitsanzo chingakhale kutumiza sipamu. Pali njira zitatu zolambalala captcha, tiyeni tiwone.

Choyamba ndi zolakwika pakukhazikitsa lingaliro, kapena zofooka pakugwiritsa ntchito captcha.
Chifukwa chake, mayankho a mafunso ali ndi entropy yaying'ono, monga "lembani zomwe 4+1 ikufanana nazo." Mafunso omwewo akhoza kubwerezedwa kangapo, ndipo mayankho otheka amakhala ochepa.

Mphamvu ya captcha imawunikidwa motere:

  • kuyesako kumayenera kuchitika pomwe munthu ndi seva ali kutali ndi mnzake,
    mayeso sayenera kukhala ovuta kwa munthu;
  • funso liyenera kukhala loti munthu akhoza kuliyankha mkati mwa masekondi angapo,
    Ndi yekhayo amene funso lifunsidwa ayenera kuyankha;
  • kuyankha funso kuyenera kukhala kovuta kwa kompyuta;
  • chidziwitso cha mafunso am'mbuyomu, mayankho kapena kuphatikiza kwawo sayenera kukhudza kulosera kwa mayeso otsatira;
  • mayeso asasankhe anthu omwe ali ndi vuto losaona kapena kumva;
  • mayeso sayenera kutengera malo, chikhalidwe kapena zinenero.

Zotsatira zake, kupanga captcha "yolondola" ndizovuta kwambiri.

Choyipa chachiwiri cha captcha ndikuthekera kogwiritsa ntchito kuzindikira mawonekedwe a OCR. Chidutswa cha kachidindo chimatha kuwerenga chithunzi cha captcha mosasamala kanthu kuti chili ndi phokoso lotani, onani zilembo kapena manambala omwe amapanga, ndikusintha ndondomeko yozindikiritsa. Kafukufuku wasonyeza kuti ma captcha ambiri amatha kusweka mosavuta.

Ndipereka ndemanga kuchokera kwa akatswiri ochokera ku School of Computer Science ku yunivesite ya Newcastle, UK. Amalankhula za kumasuka kwa Microsoft Captcha: "kuukira kwathu kunatha kukwaniritsa gawo la 92%, zomwe zikutanthauza kuti dongosolo la MSN captcha litha kusweka mu 60% yamilandu pogawa chithunzicho ndikuchizindikira. ” Kuphwanya captcha ya Yahoo kunali kophweka: "kuukira kwathu kwachiwiri kunapambana 33,4%. Chifukwa chake, pafupifupi 25,9% ya ma captcha amatha kusweka. Kafukufuku wathu akusonyeza kuti anthu ochita zachinyengo sayenera kugwiritsa ntchito anthu otsika mtengo kuti alambalale captcha ya Yahoo, koma kudalira kuwukira kotsika mtengo. "

Njira yachitatu yodutsa captcha imatchedwa "Mechanical Turk", kapena "Turk". Tinayesa motsutsana ndi Captcha ya Yahoo titangosindikizidwa, ndipo mpaka lero sitikudziwa, ndipo palibe amene akudziwa, momwe tingatetezere ku chiwonongeko choterocho.

Msonkhano wa BLACK HAT USA. Kulemera Kapena Kufa: Kupanga Ndalama Paintaneti Pogwiritsa Ntchito Njira Zachipewa Zakuda. Gawo 1

Umu ndi momwe muli ndi munthu woyipa yemwe amayendetsa tsamba la "wamkulu" kapena masewera apaintaneti komwe ogwiritsa ntchito amafunsira zina. Asanaone chithunzi chotsatira, tsamba lomwe wobera ali nalo lipanga pempho lakumbuyo ku pulogalamu yapaintaneti yomwe mumaidziwa, kunena kuti Yahoo kapena Google, gwirani captcha kuchokera pamenepo ndikuyiyika kwa wogwiritsa ntchito. Ndipo wogwiritsa ntchito atangoyankha funsoli, wowonongayo amatumiza captcha yomwe yaganiziridwa kumalo omwe akufuna ndikuwonetsa wogwiritsa ntchito chithunzi chomwe adafunsidwa kuchokera patsamba lake. Ngati muli ndi tsamba lodziwika bwino lomwe lili ndi zinthu zambiri zosangalatsa, mutha kulimbikitsa gulu lonse la anthu omwe amangodzaza ma captcha a anthu ena. Ichi ndi chinthu champhamvu kwambiri.

Komabe, si anthu okha amene amayesa kulambalala ma captcha; mabizinesi amagwiritsanso ntchito njirayi. Robert "RSnake" Hansen kamodzi analankhula pa blog yake ndi Romanian "captcha solver" yemwe adanena kuti akhoza kuthetsa kuchokera ku 300 mpaka 500 captchas pa ola pa mlingo wa 9 ku madola a 15 pa ma captchas okwana chikwi.

Msonkhano wa BLACK HAT USA. Kulemera Kapena Kufa: Kupanga Ndalama Paintaneti Pogwiritsa Ntchito Njira Zachipewa Zakuda. Gawo 1

Akunena mwachindunji kuti mamembala a gulu lake amagwira ntchito maola 12 patsiku, kuthetsa ma captchas pafupifupi 4800 panthawiyi, ndipo malingana ndi momwe ma captchas ali ovuta, amatha kulandira mpaka $ 50 patsiku pa ntchito yawo. Ili linali positi yosangalatsa, koma chosangalatsa kwambiri ndi ndemanga zomwe ogwiritsa ntchito mabulogu adasiya pansi pa izi. Uthenga unawonekera nthawi yomweyo kuchokera ku Vietnam, kumene Quang Hung wina adanena za gulu lake la anthu a 20, omwe adagwirizana kuti azigwira ntchito $ 4 pa 1000 captchas anaganiza.

Uthenga wotsatira unali wochokera ku Bangladesh: “Moni! Ndikukhulupirira muli bwino! Ndife kampani yotsogola yaku Bangladesh. Pakadali pano, ogwiritsa ntchito athu 30 amatha kuthana ndi ma captchas opitilira 100000 patsiku. Timapereka zinthu zabwino kwambiri komanso mtengo wotsika - $2 pazithunzi zongoyerekeza 1000 kuchokera kumasamba a Yahoo, Hotmail, Mayspace, Gmail, Facebook, ndi zina. Tikuyembekezera mgwirizano wina. "

Uthenga wina wosangalatsa unatumizidwa ndi Babu wina: “Ndimakonda ntchito imeneyi, chonde ndiimbireni foni.”

Kotero ndizosangalatsa. Titha kutsutsana kuti ntchitoyi ndi yovomerezeka kapena yosaloledwa, koma zoona zake n’zakuti anthu amapezadi ndalama.

Kupeza mwayi wamaakaunti a anthu ena

Trey Ford: Nkhani yotsatira yomwe tikambirane ndi kupanga ndalama polanda akaunti ya munthu wina.

Msonkhano wa BLACK HAT USA. Kulemera Kapena Kufa: Kupanga Ndalama Paintaneti Pogwiritsa Ntchito Njira Zachipewa Zakuda. Gawo 1

Aliyense amaiwala mawu achinsinsi, ndipo pakuyesa chitetezo cha pulogalamu, kuyikanso mawu achinsinsi ndikulembetsa pa intaneti kumayimira njira ziwiri zosiyana zamabizinesi. Pali kusiyana kwakukulu pakati pa kumasuka kwa kukhazikitsanso mawu achinsinsi ndi kumasuka kwa kusaina, kotero muyenera kuyesetsa kuti ndondomeko yokonzanso mawu achinsinsi ikhale yosavuta momwe mungathere. Koma ngati tiyesa kufewetsa, vuto limakhalapo chifukwa chosavuta ndikukhazikitsanso mawu achinsinsi, osatetezeka kwambiri.

Imodzi mwamilandu yapamwamba kwambiri idakhudza kulembetsa pa intaneti pogwiritsa ntchito ntchito yotsimikizira ogwiritsa ntchito a Sprint. Mamembala awiri a timu ya White Hat adagwiritsa ntchito Sprint polembetsa pa intaneti. Pali zinthu zingapo zomwe muyenera kutsimikizira kuti ndiwe, kuyambira ndi chinthu chosavuta monga nambala yanu yafoni. Muyenera kulembetsa pa intaneti pazinthu monga kuyang'anira akaunti yanu yakubanki, kulipira ntchito, ndi zina zotero. Kugula mafoni ndikosavuta ngati mutha kuzichita kuchokera ku akaunti ya munthu wina ndikugula ndikuchita zina zambiri. Chimodzi mwazosankha zachinyengo ndikusintha adilesi yolipira, kuyitanitsa gulu lonse la mafoni am'manja ku adilesi yanu, ndipo wozunzidwayo adzakakamizika kuwalipira. Stalking maniacs amalotanso mwayi uwu: kuwonjezera magwiridwe antchito a GPS pama foni a omwe akuzunzidwa ndikutsata zomwe akuchita kuchokera pakompyuta iliyonse.

Chifukwa chake, Sprint imapereka mafunso osavuta kuti atsimikizire kuti ndinu ndani. Monga tikudziwira, chitetezo chikhoza kutsimikiziridwa ndi mitundu yosiyanasiyana ya entropy, kapena ndi nkhani zapadera kwambiri. Ndikuwerengerani gawo la kulembetsa kwa Sprint chifukwa entropy ndiyotsika kwambiri. Mwachitsanzo, pali funso: "sankhani mtundu wagalimoto wolembetsedwa pa adilesi iyi," ndipo zosankha zamtundu ndi Lotus, Honda, Lamborghini, Fiat, ndi "palibe zomwe zili pamwambapa." Ndiuzeni, ndani mwa inu amene ali ndi chilichonse mwa izi? Monga mukuwonera, chithunzi chovutachi ndi mwayi chabe kuti wophunzira waku koleji apeze mafoni otsika mtengo.

Funso lachiwiri: “Ndani mwa anthu otsatirawa amene amakhala nanu kapena amene amakhala pa adiresi ili pansipa”? Ndikosavuta kuyankha funsoli, ngakhale simukumudziwa konse munthuyu. Jerry Stifliin - dzina lomaliza ili ndi "ays" atatu mmenemo, tifika kwachiwiri - Ralph Argen, Jerome Ponicki ndi John Pace. Chosangalatsa pamindandanda iyi ndikuti mayina omwe aperekedwa ndiwachisawawa, ndipo onse amatengera mtundu womwewo. Ngati muwerengera, ndiye kuti simudzakhala ndi vuto lozindikira dzina lenileni, chifukwa limasiyana ndi mayina osankhidwa mwachisawawa muzinthu zina, pamenepa zilembo zitatu "i". Chifukwa chake, Stayfliin mwachiwonekere si dzina lachisawawa, ndipo ndikosavuta kuganiza, munthu uyu ndiye chandamale chanu. Ndi zophweka kwambiri.

Funso lachitatu: "Mumizinda iti yomwe yatchulidwa simunakhalepo kapena simunagwiritsepo ntchito mzindawu mu adilesi yanu?" - Longmont, North Hollywood, Genoa kapena Butte? Tili ndi madera atatu okhala ndi anthu ambiri kuzungulira Washington DC, kotero yankho lodziwikiratu ndi North Hollywood.

Pali zinthu zingapo zomwe muyenera kusamala nazo pakulembetsa kwa Sprint pa intaneti. Monga ndidanenera kale, mutha kukhumudwa kwambiri ngati wowukira atha kusintha adilesi yotumizira kuti agule muzolipira zanu. Chomwe chili chowopsa ndichakuti tili ndi ntchito ya Mobile Locator.

Msonkhano wa BLACK HAT USA. Kulemera Kapena Kufa: Kupanga Ndalama Paintaneti Pogwiritsa Ntchito Njira Zachipewa Zakuda. Gawo 1

Ndi izo, mutha kuyang'anira mayendedwe a antchito anu, monga anthu amagwiritsa ntchito mafoni am'manja ndi GPS, ndipo mutha kuwona pamapu omwe ali. Chifukwa chake pali zinthu zina zosangalatsa zomwe zimachitika munjira iyi.

Monga mukudziwira, mukakhazikitsanso mawu achinsinsi, imelo adilesi imakhala patsogolo kuposa njira zina zotsimikizira ndi mafunso achitetezo. Slide yotsatira ikuwonetsa mautumiki ambiri omwe amapereka kuwonetsa imelo yanu ngati wogwiritsa ntchito akuvutikira kulowa muakaunti yake.

Msonkhano wa BLACK HAT USA. Kulemera Kapena Kufa: Kupanga Ndalama Paintaneti Pogwiritsa Ntchito Njira Zachipewa Zakuda. Gawo 1

Tikudziwa kuti anthu ambiri amagwiritsa ntchito imelo ndipo ali ndi akaunti ya imelo. Mwadzidzidzi anthu ankafuna kupeza njira yopezera ndalama. Nthawi zonse mudzapeza adilesi ya imelo ya wozunzidwayo, lowetsani mu mawonekedwe, ndipo mudzakhala ndi mwayi wokonzanso mawu achinsinsi pa akaunti yomwe mukufuna kusokoneza. Mukamagwiritsa ntchito pa netiweki yanu, ndipo bokosi lamakalata limakhala chipinda chanu chagolide, malo akulu momwe mungabere maakaunti ena onse a wozunzidwayo. Mudzalandira kulembetsa konse kwa wozunzidwayo potenga bokosi la makalata limodzi lokha. Siyani kumwetulira, izi ndizovuta!

Chithunzi chotsatira chikuwonetsa kuchuluka kwa anthu mamiliyoni ambiri omwe amagwiritsa ntchito maimelo ofanana. Anthu amagwiritsa ntchito Gmail, Yahoo Mail, Hotmail, AOL Mail mwachangu, koma simuyenera kukhala owononga kwambiri kuti mutengere maakaunti awo, mutha kusunga manja anu oyera potumiza kunja. Mutha kunena kuti palibe chochita nazo, simunachite chilichonse chonga icho.

Msonkhano wa BLACK HAT USA. Kulemera Kapena Kufa: Kupanga Ndalama Paintaneti Pogwiritsa Ntchito Njira Zachipewa Zakuda. Gawo 1

Chifukwa chake, ntchito yapaintaneti "Kubwezeretsa Achinsinsi" idakhazikitsidwa ku China, komwe mumalipira kuti awononge akaunti yanu. Kwa 300 yuan, yomwe ili pafupi $43, mutha kuyesanso chinsinsi cha bokosi la makalata lakunja ndi kupambana kwa 85%. Kwa 200 yuan, kapena $29, mudzakhala ndi chipambano cha 90% pakukhazikitsanso password yanu yamakalata a imelo. Zimatengera ma yuan chikwi, kapena $143, kuthyola makalata akampani iliyonse, koma kupambana sikutsimikizika. Mukhozanso outsource achinsinsi akulimbana ntchito 163, 126, QQ, Yahoo, Sohu, Sina, TOM, Hotmail, MSN, etc.

Msonkhano wa BLACK HAT USA. Pezani chuma kapena kufa: pangani ndalama pa intaneti pogwiritsa ntchito njira za Black Hat. Part 2 (link ipezeka mawa)

Zotsatsa zina 🙂

Zikomo chifukwa chokhala nafe. Kodi mumakonda zolemba zathu? Mukufuna kuwona zambiri zosangalatsa? Tithandizeni potipatsa oda kapena kulimbikitsa anzathu, mtambo VPS kwa opanga kuchokera ku $ 4.99, 30% kuchotsera kwa ogwiritsa ntchito a Habr pa analogi yapadera yamaseva olowera, omwe tinapangira inu: Chowonadi chonse chokhudza VPS (KVM) E5-2650 v4 (6 Cores) 10GB DDR4 240GB SSD 1Gbps kuchokera $20 kapena momwe mungagawire seva? (ikupezeka ndi RAID1 ndi RAID10, mpaka 24 cores mpaka 40GB DDR4).

Dell R730xd 2 nthawi zotsika mtengo? Pokhapokha 2 x Intel TetraDeca-Core Xeon 2x E5-2697v3 2.6GHz 14C 64GB DDR4 4x960GB SSD 1Gbps 100 TV kuchokera $199 ku Netherlands! Dell R420 - 2x E5-2430 2.2Ghz 6C 128GB DDR3 2x960GB SSD 1Gbps 100TB - kuchokera $99! Werengani za Momwe mungamangire Infrastructure Corp. kalasi pogwiritsa ntchito ma seva a Dell R730xd E5-2650 v4 ofunika ma euro 9000 pa khobiri?

Source: www.habr.com

Kuwonjezera ndemanga