Osati VPN yokha. Cheat sheet pa momwe mungadzitetezere nokha ndi deta yanu

Pa Habr.

Izi ndi ife, ntchito ya VPN BisaniMy.name. Pakali pano tikugwira ntchito kwakanthawi pa galasi la HideMyna.me. Chifukwa chiyani? Pa Julayi 20, 2018 Roskomnadzor adatiwonjezera pamndandanda wazinthu zoletsedwa chifukwa cha chigamulo cha Khoti Lachigawo la Medvedevsky ku Yoshkar-Ola. Khotilo lidagamula kuti alendo obwera patsamba lathu ali ndi mwayi wopeza zinthu monyanyira #withoutregistrationisms, ndipo mwanjira ina adapeza buku la "Mein Kampf" lolembedwa ndi Adolf Hitler pamenepo. Mwachiwonekere, chifukwa chodalirika.

Chisankhochi chinatidabwitsa kwambiri, koma tikupitirizabe kugwira ntchito pa hidemyna.me, hidemyname.org, .one, .biz, etc. Kukangana kwanthawi yaitali ndi Roskomnadzor sikunabweretse zotsatira. Pomwe maloya anga ndi ine tikutsutsa kutsekereza ndi chigamulo cha khothi lamatsenga, tikugawana nanu malangizo ofunikira osungira zinsinsi pa intaneti komanso nkhani pamutuwu.

Osati VPN yokha. Cheat sheet pa momwe mungadzitetezere nokha ndi deta yanu
Edward Snowden amakonda National Security Agency (mwina)

Si chinsinsi kuti mautumiki otchuka aku Russia ndi osatetezeka. Makalata anu nthawi iliyonse akhoza kubwera kwa apolisi apakhomo. Tikukuuzani zomwe muyenera kukumbukira mukamalankhulana kudzera m'njira zosiyanasiyana.

SORM ndi ORI

pali zambiri zosiyana njira zolumikizira foni yanu. Ovomerezeka ndi ovomerezeka - SORM, njira yaukadaulo yowonetsetsa kuti ntchito zofufuzira zikugwira ntchito. Mwalamulo mu Russian Federation, onse oyendetsa ma cellular amayenera kukhazikitsa dongosolo loterolo pa ma PBX awo ngati sakufuna kutaya chilolezo. Pali mitundu itatu ya SORM: yoyamba idapangidwa m'zaka za m'ma 80, yachiwiri idayamba kukhazikitsidwa m'ma 2014, ndipo akhala akuyesera kukakamiza lachitatu kwa ogwira ntchito kuyambira XNUMX. Malinga ndi RBC, ambiri ogwira ntchito amagwiritsa ntchito mtundu wachiwiri, koma mu 70% ya milandu dongosolo siligwira ntchito bwino kapena silikugwira ntchito konse. Komabe, ndibwino kuti tisakambirane nkhani zovuta pafoni yapamtunda kapena kuyimba foni pafupipafupi.

Osati VPN yokha. Cheat sheet pa momwe mungadzitetezere nokha ndi deta yanu
Chiwembu cha ntchito ya SORM-2 (Source: mfisoft.ru)

Malinga ndi 97-FZ, amithenga aliwonse, mautumiki ndi masamba omwe amagwira ntchito ku Russia ayenera kuphatikizidwa mu kaundula. Okonza zofalitsa uthenga. Ndi "Lamulo la Yarovaya"Ayenera kusunga zidziwitso zonse za ogwiritsa ntchito, kuphatikiza mawu ojambulira ndi makalata, kwa miyezi isanu ndi umodzi. Mwa njira, ARI ilinso ndi Habrahabr.

Kachitidwe ka registry akufotokozedwa mwatsatanetsatane apa pogwiritsa ntchito Threema monga chitsanzo, koma mfundo yaikulu ndi iyi: tsopano, popempha akuluakulu a boma la Russia, chidziwitso chilichonse chokhudza inu chikhoza kukhala m'mabungwe azamalamulo. Chifukwa chake, chinthu choyamba kuchita kuti musunge chinsinsi ndikusamutsa mafoni ndi mauthenga kwa amithenga apompopompo, omwe sali mu registry ya ARI. Kapena omwe alipo, koma amakana kusamutsa deta kwa akuluakulu - monga Threema ndi Telegalamu.

Thandizo: Kungokhala m'kaundula wa ARI sikutsimikizira kuti deta idzasamutsidwa kwa akuluakulu. Muyenera kuyang'anitsitsa nkhanizo nthawi zonse ndikuyang'ana momwe mthengayo amachitira pamene "abwera" kwa iye.

Kuimba ndi mauthenga

Zokambirana zathu ndi mauthenga athu amatha kutetezedwa kuti asasokonezedwe ndi gulu lachitatu polemba kumapeto mpaka kumapeto, chifukwa chake amithenga omwe ali ndi E2E amaonedwa kuti ndi otetezeka kwambiri. Koma izi sizowona kwathunthu: tiyeni tiwone zosankha zotchuka.

uthengawo zogwiriziza kubisa komaliza mpaka kumapeto muzokambirana zawo Zachinsinsi ndikusunga zidziwitso zamakalata anu pamtambo, zomwe zimabalalika m'maiko osiyanasiyana omwe ali ndi ulamuliro "otetezeka". Koma pambuyo zolemba pa HabrΓ© mutha kuyamba kukayikira chinyengo chachitetezo cha Telegraph Passport ku E2E kuchokera ku Durov.

Zachidziwikire, Macheza achinsinsi akadali njira yabwino kwa anthu omwe ali ndi vuto. Seva sichimakhudzidwa konse ndi kubisa kwawo: mauthenga amatumizidwa kwa anzawo, ndiye kuti, mwachindunji pakati pa omwe akutenga nawo mbali pamakalatawo. Kuti muwonjezere mtendere wamumtima, mutha kugwiritsa ntchito nthawi yodziwononga yokha. Koma simuyenera kudalira mwachimbulimbuli pa Telegraph. Kuti mukhale otetezeka pang'ono, inu ndi wolandira wanu muyenera kupita ku zoikamo za messenger ndikuchita zinthu ziwiri:

  • Khazikitsani mawu achinsinsi mukalowa mu pulogalamuyi (Ubwino ndi Kutetezeka -> Passcode);
  • Yambitsani kutsimikizira kwa magawo awiri (Ubwino ndi Kutetezeka -> Kutsimikizika Kwamagawo Awiri).

Pambuyo pake, kuwonjezera pa nambala yochokera ku SMS, mukamalowa kuchokera ku chipangizo chatsopano, pulogalamuyo idzafunsa mawu achinsinsi omwe inu nokha mumadziwa.

Pakadali pano, kutsimikizira kolowera kokha kudzera pa SMS sikuteteza mwanjira iliyonse munthu amene amagwiritsa ntchito SIM khadi yaku Russia. Milandu yobera maakaunti a Telegraph kudzera pa meseji ya SMS yomwe idalandidwa imadziwika kale - mu 2016, owukira. adapeza mwayi kumakalata a otsutsa angapo, komanso mu 2017 adabedwa nkhani ya mtolankhani wa Dozhd Mikhail Rubin.

Osati VPN yokha. Cheat sheet pa momwe mungadzitetezere nokha ndi deta yanu
WhatsApp pakuti tsopano imapewa kaundula wa ORI komanso imagwiritsa ntchito kubisa-kumapeto, koma zonse sizili bwino nazo. Tasindikiza posachedwa nkhani za anthu okhala ku Magadan omwe anali ndi mlandu wotsutsa meya wa mzindawu. Nkhaniyi, mwamwayi, inatha ndi chindapusa chanthawi zonse. Koma idatsimikizira mantha a ogwiritsa ntchito: sikuli bwino kuyankhulana pamagulu a WhatsApp.

Kodi chidzachitike n'chiyani?

  • Mukangolemba meseji, nambala yanu yafoni ipezeka kwa onse amgulu. Ndipo chizindikiritso chanu chikhoza kuzindikirika mosavuta ndi nambala.

Chochita?

  • Yankho likhoza kukhala SIM khadi "lamanzere" kapena nambala yachilendo - makamaka ku Ulaya.

Ngati mugwiritsa ntchito khadi yaku Russia yolembetsedwa m'dzina lanu, pewani ndemanga zonyoza m'magulu omwe ali ndi mayina ngati "Resign Meya": ndibwino kusiya makalata okha ndikuyimbira WhatsApp.

Viber sichinalembedwenso m'kaundula wa ORI, koma imasunga kulumikizana ndi akuluakulu aku Russia (mu nthawi yake yaulere kutumiza sipamu). Mthenga uyu anali m'modzi mwa oyamba kutsatira zomwe boma likufuna: imasunga ma logins ndi manambala a foni a ogwiritsa ntchito aku Russia m'gawo la Russian Federation, koma amapereka uthenga wa data. amakana - amatanthauza zimango za kubisa komaliza mpaka kumapeto ndi ndondomeko yamakampani.

apulo imagwiritsanso ntchito kumapeto mpaka kumapeto, koma polembetsa ndi iMessage imapanga awiriawiri ofunikira: payekha komanso pagulu. Uthenga womwe mumalandira kuchokera kwa mwiniwake wa chipangizo cha apulo umatumizidwa kwa inu ndi encryption, yomwe imagwiritsa ntchito kiyi yapagulu. Ikhoza kusinthidwa kokha pogwiritsa ntchito kiyi yachinsinsi ya wolandirayo, yomwe imasungidwa pa chipangizo chake. Mutha kuwerenga za momwe Apple imawonera zinsinsi za ogwiritsa ntchito komanso zomwe ingachite ngati italandira pempho kuchokera ku boma pano. Sipanakhalepo milandu yojambulidwa ya kampani yomwe imasamutsa deta kuchokera kwa ogwiritsa ntchito aku Russia kupita ku maboma aku Russia.

Osati VPN yokha. Cheat sheet pa momwe mungadzitetezere nokha ndi deta yanu
Source: https://www.apple.com/business/docs/iOS_Security_Guide.pdf


Koma iMessage ili ndi zovuta ziwiri:

  • Mutha kulemba kapena kuyimba kudzera panjirazi kwa mwiniwake wa Apple;
  • Ngati muli ndi vuto ndi intaneti yanu, uthengawo umadutsa pa tchanelo chanthawi zonse ndikukhala ma SMS osavuta omwe amatha kulandidwa mosavuta.

Kupewa iMessage kusandutsidwa SMS, mutha kuletsa izi mu Zikhazikiko.

Osati VPN yokha. Cheat sheet pa momwe mungadzitetezere nokha ndi deta yanu
Ofufuza ochokera ku Electronic Frontier Foundation Funsani kuti palibe njira imodzi yotetezeka ya mafoni ndi mauthenga. Ngati amithenga ena amaletsa akuluakulu kuti asapeze zidziwitso zanu zachinsinsi, izi sizikutanthauza kuti obera (kapena boma, omwe angagwiritse ntchito ntchito zawo) sangathe kuchita izi pophwanya malamulo. Kupatsa wosuta chidaliro kuti palibe munthu wapakati, Telegalamu ili ndi mawonekedwe abwino: poyimba foni, onse omwe alandila amatha kuwonetsetsa kuti akuwona emoji yomweyi pakona yakumanja kwa chinsalu - izi zitsimikizira kusowa kwa "kulowerera" mu mgwirizano.

Osati VPN yokha. Cheat sheet pa momwe mungadzitetezere nokha ndi deta yanu

Ngati mukuyang'ana njira yotetezeka yolankhulirana, timalimbikitsa kuyang'ana kupyola macheza achinsinsi, mawu achinsinsi, ndi masitepe awiri/ziwiri-ziwiri kumapulogalamu ochepera otchuka monga niche. Tsimikizirani kapena Chizindikiro.

Osati VPN yokha. Cheat sheet pa momwe mungadzitetezere nokha ndi deta yanu
Ndimagwiritsa ntchito Signal tsiku lililonse. #notesforFBI (Spoiler: amadziwa kale)

imelo

Makampani otchuka omwe amalola kugwiritsa ntchito makasitomala awo a imelo (ku Russia awa ndi Yandex, Mail.Ru ndi Rambler) aphatikizidwa kale mu registry ya ARI, zomwe zikutanthauza kuti sali otetezeka kwambiri. Inde, Mail.Ru Group kuyimba kuyimitsa milandu kwa memes ndi chikhululukiro kwa iwo olakwa, koma akhoza kupereka zambiri za deta yanu kwa akuluakulu pa pempho.

Ngakhale mutagwiritsa ntchito makasitomala a imelo aku Western monga Gmail kapena Outlook, khalani ndi kutsimikizika kwazinthu ziwiri, ndipo dziwani kuti imelo yanu yasungidwa pogwiritsa ntchito protocol yotetezedwa ya SSL/TLS, simungatsimikize kuti imelo ya wolandirayo imatetezedwa chimodzimodzi.

Zosankha zachitetezo:

  • Mukatumiza zidziwitso zachinsinsi, sungani maimelo pogwiritsa ntchito Pretty Good Privacy (PGP). Pulogalamuyi imathandiza kutembenuza deta kuchokera ku chilembo kukhala zilembo zopanda tanthauzo kwa aliyense kupatula wotumiza ndi wolandira;
  • Mukamatumiza zambiri zofunika, nthawi zonse samalani ndi dera la wolandirayo ndipo musalembe ku adilesi yokayikitsa;
  • Fufuzani pasadakhale ndi wolandirayo ngati wakonza zotumiza kapena kusonkhanitsa makalata kudzera mu ofesi ya positi yaku Russia.

Pankhani yamakampani apakhomo kuchokera ku registry ya ORI, palibe kubisa kumbali ya ogwiritsa ntchito, makamaka, kungathandize. Chidziwitso sichimaloledwa, koma chimasungidwa ndi kutumizidwa ndi mapeto - mautumiki ofanana. Yankho lokhalo lingakhale kuwasintha ndi ma analogue otetezeka kwambiri monga ProtonMail, Tutanota kapena Hushmail. Maimelo ena otere angapezeke pa izi tsamba.

Malo ochezera

Choyamba, kuchepetsa kupezeka kwanu pa malo otchuka Russian ochezera pa Intaneti - "My World", "Odnoklassniki" ndi "VKontakte". Osachepera Facebook sapereka deta yanu ku mabungwe anzeru aku Russia. Osachepera, palibe milandu yotereyi yomwe yalembedwa.

Osati VPN yokha. Cheat sheet pa momwe mungadzitetezere nokha ndi deta yanu

Koma ndizosangalatsa kuti mu 2017, kampaniyo idakwaniritsabe 85% ya zopempha kuchokera ku boma la US:

Osati VPN yokha. Cheat sheet pa momwe mungadzitetezere nokha ndi deta yanuZithunzi kuchokera Facebook Transparency Report

Ngati mumakonda kwambiri VK, koma simukufuna kukafika padoko, samalani zinthu zingapo:

  • zithunzi zanu zosungidwa;
  • zolemba, ndemanga ndi mauthenga omwe mumalemba;
  • zolemba zomwe mumakonda;
  • zolemba zomwe mumagawana;
  • ogwiritsa omwe mumacheza nawo.

M’zonse zimene tatchulazi, ndi bwino kupewa chilichonse chimene chingaoneke kuti n’chokhumudwitsa kapena chonyanyira. Nthawi zonse muzikumbukira kuti β€œkugawana” kumatanthauza kufotokozera zinthu β€œzosaloledwa” kwa munthu mmodzi. Loya wa bungwe loona za ufulu wa anthu padziko lonse "Agora" Damir Gainutdinov akuti malinga ndi lamulo, ORI. wokakamizika kusunga ndi kufalitsa ngakhale zolemba za mauthenga omwe sanatumizidwe ku mabungwe azamalamulo. Werengani zambiri za momwe musagwiritsire ntchito reposting pano.

Mwa njira, kwa kanthawi tsopano aliyense amene ali ndi nambala yanu ya foni akhoza kukupezani pa VKontakte mwachisawawa, ngakhale tsambalo silikuwululira zenizeni zanu.

Mutha kuletsa anthu kukupezani ndi manambala pazokonda zanu (Zikhazikiko -> Zazinsinsi -> Nditumizireni). Koma izi, ndithudi, sizingakupulumutseni ku mautumiki apadera. Osagwiritsa ntchito mafoni ndi makanema pa VKontakte: sizikudziwika ngati maukonde amawatsekera kumapeto mpaka kumapeto, monga momwe oyang'anira amanenera.

Chitetezo cha Webusaiti

Nkhani yabwino yokha ndi imeneyo kuposa theka Masamba onse otchuka pa intaneti ali kale ndi mtundu wa https kapena asinthiratu kugwiritsa ntchito mitundu ya https yokha. Zambiri zolandilidwa ndi kutumizidwa pamasamba otere zimabisidwa ndipo sizingawerengedwe ndi anthu ena. Zida zotere zimayikidwa zobiriwira ndi mawu oti "otetezedwa".

Ndi pamene uthenga wabwino umathera. Ngakhale ma protocol a https, kuchezera tsamba lotere ndi zopempha za DNS (zambiri zomwe mudapeza) zikuwonekerabe kwa omwe amapereka intaneti.

Koma nkhani ina ndiyoipa kwambiri: theka lotsala la malowa limagwira ntchito pogwiritsa ntchito http protocol, ndiko kuti, popanda kubisa deta. Yankho likhoza kukhala VPN, yomwe imabisa zonse zomwe zalandilidwa ndikutumizidwa kuti pasakhale chidziwitso chowerengeka kumbali ya wopereka intaneti ndi aliyense amene amayesa kulowerera pakati panu ndi malo otsiriza. Chinthu chokha chomwe chidzawonekere ndicho kulumikiza ku adilesi inayake ya IP pa intaneti (ndiko kuti, ku seva ya VPN). Ndipo palibe chinanso.

Tidzakhala osangalala ngati moyo mwadzidzidzi ukhala wosavuta: yatsani VPN ndikuyiwala za kutulutsa kwa chidziwitso chachinsinsi. Koma si zoona. Yang'anani nthawi zonse ngati chida chomwe mumakonda chikuphatikizidwa mu kaundula wa ARI, kuwunika momwe amalumikizirana ndi aboma, yang'anani maulalo omwe amalumikizana nawo nthawi yomweyo ndi malo ochezera a pa Intaneti ndikukhazikitsanso zokayikitsa (ndipo onetsetsani kuti mwasintha mawu achinsinsi).

padziko lonse lapansi

Pogwira ntchito ndi njira zoyankhulirana ndi kusamutsa deta, njira yokhayo yowonjezera chitetezo ndi chinsinsi ndizomveka. Tsatirani zochitika zachitetezo pa intaneti panjira yathu ya Telegraph @hidemyname_ru, Pa intaneti Roskomsvoboda ndi pazinthu zina zoperekedwa ku zochitika pa intaneti komanso RuNet makamaka.

Mukuchitapo chiyani pachitetezo?

Source: www.habr.com

Kuwonjezera ndemanga