Chilichonse chomwe mumafuna kudziwa chokhudza kubwezeretsanso mawu achinsinsi otetezeka. Gawo 1

Posachedwa ndidakhala ndi nthawi yoganiziranso momwe ntchito yokhazikitsira mawu achinsinsi iyenera kugwirira ntchito, poyamba ndikamapanga izi ASafaWeb, ndiyeno akathandiza munthu wina kuchita zofanana ndi zimenezi. Pankhani yachiwiri, ndimafuna kumupatsa ulalo wopezeka patsamba lovomerezeka ndi tsatanetsatane wa momwe angakhazikitsire ntchito yokonzanso mosamala. Komabe, vuto ndiloti gwero loterolo palibe, osachepera palibe chomwe chimalongosola zonse zomwe zimawoneka zofunika kwa ine. Choncho ndinaganiza zolemba ndekha.

Mukuwona, dziko la mawu achinsinsi oiwalika kwenikweni ndi lachinsinsi. Pali malingaliro osiyanasiyana, ovomerezeka kwathunthu ndi ambiri owopsa. Mwayi mwakumana nawo nthawi zambiri ngati wogwiritsa ntchito; kotero ndiyesera kugwiritsa ntchito zitsanzozi kuti ndiwonetse yemwe akuchita bwino, yemwe sali, ndi zomwe muyenera kuyang'ana kwambiri kuti pulogalamu yanu ikhale yoyenera.

Chilichonse chomwe mumafuna kudziwa chokhudza kubwezeretsanso mawu achinsinsi otetezeka. Gawo 1

Kusunga mawu achinsinsi: hashing, encryption ndi (kupuma!) mawu osavuta

Sitingathe kukambirana zoyenera kuchita ndi mawu achinsinsi oiwalika tisanakambirane momwe tingawasungire. Mawu achinsinsi amasungidwa mu database mu imodzi mwa mitundu itatu:

  1. Mawu osavuta. Pali mawu achinsinsi, omwe amasungidwa m'mawu osavuta.
  2. Zosungidwa. Nthawi zambiri pogwiritsa ntchito symmetric encryption (kiyi imodzi imagwiritsidwa ntchito pobisa komanso kubisa), ndipo mawu achinsinsi osungidwa amasungidwanso pamndandanda womwewo.
  3. Hashed. Njira yanjira imodzi (achinsinsi akhoza kuthamangitsidwa, koma sangathe kuchotsedwa); password, Ndikufuna kuyembekezera, wotsatiridwa ndi mchere, ndipo chilichonse chili m’danga lake.

Tiyeni tibwere ku funso losavuta: Osasunga mawu achinsinsi m'mawu osavuta! Ayi. Chiwopsezo chimodzi chokha ku jakisoni, zosunga zobwezeretsera zosasamala, kapena zolakwika zina zingapo zosavuta - ndipo ndizomwezo, masewera, mapasiwedi anu onse - ndiye pepani, mawu achinsinsi a makasitomala anu onse adzakhala poyera. Inde, izi zingatanthauze mwayi waukulu kuti mapasiwedi awo onse kuchokera ku akaunti zawo zonse mu machitidwe ena. Ndipo lidzakhala vuto lanu.

Kubisa ndikwabwinoko, koma kuli ndi zofooka zake. Vuto ndi kubisa ndi decryption; titha kutenga zilembo zowoneka mopengazi ndikuzisintha kukhala mawu osavuta, ndipo izi zikachitika timabwerera ku mawu achinsinsi owerengeka ndi anthu. Kodi izi zimachitika bwanji? Cholakwika chaching'ono chimalowa mu code yomwe imachotsa mawu achinsinsi, kuwapangitsa kuti azipezeka poyera - iyi ndi njira imodzi. Hackers amapeza makina omwe deta yosungidwa imasungidwa - iyi ndi njira yachiwiri. Njira inanso, ndikubera zosunga zobwezeretsera ndipo wina amapeza kiyi ya encryption, yomwe nthawi zambiri imasungidwa mosatetezeka.

Ndipo izi zimatifikitsa ku hashing. Lingaliro kumbuyo kwa hashing ndikuti ndi njira imodzi; njira yokhayo yofananizira mawu achinsinsi omwe alowetsedwa ndi wogwiritsa ntchito ndi mtundu wake wa hashi ndiyo kuthamangitsa zomwe alowetsa ndikuziyerekeza. Kuti tipewe kuukira kwa zida monga matebulo a utawaleza, timayika ndondomekoyi mwachisawawa (werengani my positi za cryptographic storage). Pamapeto pake, ngati agwiritsidwa ntchito moyenera, titha kukhala ndi chidaliro kuti mawu achinsinsi a hashi sadzakhalanso mawu omveka bwino (ndilankhula za ubwino wa ma aligorivimu osiyanasiyana mu positi ina).

Mkangano wofulumira wokhudza hashing vs. encryption: chifukwa chokha chomwe mungafunikire kubisa osati mawu achinsinsi ndi pomwe muyenera kuwona mawu achinsinsi m'mawu osavuta, ndi suyenera konse kuzifuna izi, osachepera pa tsamba lawebusayiti. Ngati mukufuna izi, ndiye kuti mwina mukuchita zolakwika!

Chonde chonde!

Pansipa m'mawu a positi pali gawo la chithunzi cha zolaula patsamba la AlotPorn. Zimakonzedwa bwino kotero kuti palibe chomwe simungachiwone pamphepete mwa nyanja, koma ngati chikhoza kuyambitsa mavuto, musapitirire pansi.

Nthawi zonse sinthani mawu achinsinsi anu palibe musamukumbutse

Kodi mudafunsidwapo kuti mupange ntchito zikumbutso password? Bwererani mmbuyo ndikuganiza za pempholi mosintha: chifukwa chiyani "chikumbutso" chili chofunikira? Chifukwa wosuta anaiwala mawu achinsinsi. Kodi kwenikweni tikufuna kuchita chiyani? Muthandizeni kuti alowenso.

Ndikuzindikira kuti mawu oti "chikumbutso" amagwiritsidwa ntchito (nthawi zambiri) mwanjira yodziwika bwino, koma zomwe tikuyesera kuchita ndi Thandizani wogwiritsa ntchito kukhalanso pa intaneti. Popeza timafunikira chitetezo, pali zifukwa ziwiri zomwe chikumbutso (i.e. kutumiza wosuta mawu ake achinsinsi) sizoyenera:

  1. Imelo ndi njira yopanda chitetezo. Monga momwe sitinatumizire chilichonse chovuta pa HTTP (tikadagwiritsa ntchito HTTPS), sitiyenera kutumiza chilichonse chovuta pa imelo chifukwa mayendedwe ake ndi osatetezeka. Ndipotu, izi ndizoipa kwambiri kuposa kungotumiza chidziwitso pa ndondomeko yoyendetsa galimoto yosatetezeka, chifukwa makalata nthawi zambiri amasungidwa pa chipangizo chosungirako, chofikira kwa olamulira a dongosolo, kutumizidwa ndi kugawidwa, kupezeka kwa pulogalamu yaumbanda, ndi zina zotero. Imelo yosasungidwa ndi njira yosatetezeka kwambiri.
  2. Simukuyenera kukhala ndi mwayi wopeza mawu achinsinsi. Werenganinso gawo lapitalo pazosungirako - muyenera kukhala ndi mawu achinsinsi (okhala ndi mchere wabwino kwambiri), kutanthauza kuti simuyenera kutulutsa mawu achinsinsi mwanjira iliyonse ndikutumiza makalata.

Ndiroleni ndiwonetse vutolo ndi chitsanzo usoutdoor.com: Nali tsamba lolowera:

Chilichonse chomwe mumafuna kudziwa chokhudza kubwezeretsanso mawu achinsinsi otetezeka. Gawo 1
Mwachiwonekere, vuto loyamba ndiloti tsamba lolowera silikulowetsa pa HTTPS, koma tsambalo limakupangitsani kuti mutumize mawu achinsinsi ("Tumizani Mawu Achinsinsi"). Ichi chikhoza kukhala chitsanzo cha kugwiritsiridwa ntchito kofanana kwa mawu omwe tawatchulawa, kotero tiyeni tipite patsogolo ndikuwona zomwe zikuchitika:

Chilichonse chomwe mumafuna kudziwa chokhudza kubwezeretsanso mawu achinsinsi otetezeka. Gawo 1
Izo sizikuwoneka bwino kwambiri, mwatsoka; ndipo imelo imatsimikizira kuti pali vuto:

Chilichonse chomwe mumafuna kudziwa chokhudza kubwezeretsanso mawu achinsinsi otetezeka. Gawo 1
Izi zikutiuza zinthu ziwiri zofunika za usoutdoor.com:

  1. Tsambali lilibe mawu achinsinsi. Ngakhale zili choncho, ndi zobisika, koma zikuoneka kuti zasungidwa m’mawu osavuta kumva; Sitikuona umboni wotsutsa zimenezi.
  2. Tsambali limatumiza mawu achinsinsi anthawi yayitali (titha kubwerera ndikuigwiritsa ntchito mobwerezabwereza) panjira yosatetezedwa.

Popanda izi, tiyenera kuyang'ana ngati ndondomeko yokonzanso ikuchitika motetezeka. Chinthu choyamba kuchita izi ndikuwonetsetsa kuti wopemphayo ali ndi ufulu wokonzanso. Mwa kuyankhula kwina, izi zisanachitike tiyenera cheke; tiyeni tiwone zomwe zimachitika munthu akatsimikiziridwa popanda kutsimikizira kaye kuti wopemphayo ndiye mwini akauntiyo.

Kulemba mayina olowera ndi momwe zimakhudzira anthu osadziwika

Vutoli limawonetsedwa bwino m'maso. Vuto:

Chilichonse chomwe mumafuna kudziwa chokhudza kubwezeretsanso mawu achinsinsi otetezeka. Gawo 1
Mukuona? Samalani uthengawo "Palibe wogwiritsa ntchito imelo iyi." Vuto mwachiwonekere limakhalapo ngati malo oterowo akutsimikizira kupezeka wolembetsa wolembetsedwa ndi imelo yotereyi. Bingo - mwapeza kumene zolaula za amuna anu/bwana/mnzako!

Zoonadi, zolaula ndi chitsanzo chodziwika bwino cha kufunikira kwachinsinsi, koma kuopsa kwa kugwirizanitsa munthu ndi tsamba linalake ndilokulirapo kuposa momwe zingakhalire zovuta zomwe tafotokozazi. Choopsa chimodzi ndi luso la anthu; Ngati wowukirayo angafanane ndi munthu ndi ntchitoyo, ndiye kuti adzakhala ndi chidziwitso chomwe angagwiritse ntchito. Mwachitsanzo, angalankhule ndi munthu amene amadzinenera kuti ndi woimira webusaitiyi ndikupempha zina zowonjezera pofuna kuyesa mkondo phishing.

Mchitidwe woterewu umabweretsanso kuopsa kwa "kuwerengera mayina," pomwe munthu angatsimikizire kukhalapo kwa mndandanda wonse wa mayina olowera kapena ma adilesi a imelo pa webusayiti pongofunsa mafunso amagulu ndikuwunika mayankho awo. Kodi muli ndi mndandanda wama adilesi a imelo a antchito onse ndi mphindi zochepa kuti mulembe script? Ndiye mukuwona chomwe chavuta!

M'malo mwake ndi chiyani? M'malo mwake, ndizosavuta, ndipo zimakhazikitsidwa modabwitsa Entropay:

Chilichonse chomwe mumafuna kudziwa chokhudza kubwezeretsanso mawu achinsinsi otetezeka. Gawo 1
Apa Entropay sawulula chilichonse chokhudza kukhalapo kwa imelo pamakina ake kwa wina yemwe alibe adilesi iyi. Ngati inu zake adilesi iyi ndipo kulibe mu dongosolo, ndiye mudzalandira imelo monga chonchi:

Chilichonse chomwe mumafuna kudziwa chokhudza kubwezeretsanso mawu achinsinsi otetezeka. Gawo 1
Zoonadi, pangakhale mikhalidwe yovomerezeka imene munthu wina amaganizazomwe mwalembetsa pa webusayiti. koma sizili choncho, kapena ndidachita kuchokera ku imelo ina. Chitsanzo chomwe chili pamwambachi chimagwira bwino ntchito zonse ziwiri. Mwachiwonekere, ngati adilesiyo ikugwirizana, mudzalandira imelo yopangitsa kukhala kosavuta kukonzanso mawu anu achinsinsi.

Kuchenjera kwa yankho losankhidwa ndi Entropay ndikuti chizindikiritso chimachitika molingana ndi e-mail musanatsimikizire chilichonse pa intaneti. Mawebusayiti ena amafunsa ogwiritsa ntchito yankho ku funso lachitetezo (zambiri pa izi pansipa) mpaka momwe kukonzanso kungayambire; komabe, vuto ndi izi ndikuti mukuyenera kuyankha funsoli popereka chizindikiritso (imelo kapena lolowera), zomwe zimapangitsa kuti zikhale zosatheka kuyankha mwachidziwitso popanda kuwulula kukhalapo kwa akaunti ya wosuta.

Ndi njira iyi pali yaying'ono yachepetsa kugwiritsa ntchito chifukwa ngati muyesa kukonzanso akaunti yomwe mulibe, palibe mayankho anthawi yomweyo. Inde, ndiyo mfundo yonse yotumizira imelo, koma kuchokera kwa wogwiritsa ntchito mapeto enieni, ngati alowetsa adilesi yolakwika, adzangodziwa kwa nthawi yoyamba pamene alandira imelo. Izi zingayambitse mikangano kumbali yake, koma izi ndi mtengo wochepa wolipirira njira yachilendo ngati imeneyi.

Chidziwitso china, chomwe chili pamutu pang'ono: ntchito zothandizira zolowera zomwe zimawulula ngati dzina lolowera kapena imelo ndi lolondola ali ndi vuto lomwelo. Nthawi zonse muyankhe wogwiritsa ndi meseji "Kuphatikiza dzina lanu lolowera ndi mawu achinsinsi ndikolakwika" m'malo motsimikizira kuti zidziwitso zilipo (mwachitsanzo, "dzina lolowera ndi lolondola, koma mawu achinsinsi ndiolakwika").

Kutumizanso mawu achinsinsi motsutsana ndi kutumiza ulalo wokonzanso

Lingaliro lotsatira lomwe tiyenera kukambirana ndi momwe mungakhazikitsire mawu achinsinsi anu. Pali mayankho awiri otchuka:

  1. Kupanga mawu achinsinsi atsopano pa seva ndikutumiza ndi imelo
  2. Tumizani imelo yokhala ndi ulalo wapadera kuti kukonzanso kukhale kosavuta

Ngakhale otsogolera ambiri, mfundo yoyamba siyenera kugwiritsidwa ntchito. Vuto ndi izi ndikuti zikutanthauza kuti alipo mawu achinsinsi osungidwa, yomwe mungabwerere ndikugwiritsanso ntchito nthawi iliyonse; idatumizidwa panjira yopanda chitetezo ndipo imakhalabe mubokosi lanu. Mwayi ndi woti ma inboxes amalumikizidwa pazida zam'manja ndi kasitomala wa imelo, kuphatikizanso amatha kusungidwa pa intaneti mu imelo yapaintaneti kwa nthawi yayitali. Mfundo ndi yakuti bokosi la makalata silingaganizidwe ngati njira yodalirika yosungiramo nthawi yaitali.

Koma pambali pa izi, mfundo yoyamba ili ndi vuto lina lalikulu - ilo amachepetsa momwe angathere kuletsa akaunti ndi zolinga zoyipa. Ngati ndidziwa adilesi ya imelo ya munthu yemwe ali ndi akaunti pawebusaiti, ndiye kuti nditha kuwaletsa nthawi ina iliyonse pokhazikitsanso mawu achinsinsi; Uku ndikukana kuukira kwautumiki komwe kumaperekedwa m'mbale yasiliva! Ichi ndichifukwa chake kukonzanso kuyenera kuchitika kokha pambuyo potsimikizira bwino za ufulu wa wopemphayo.

Tikakamba za ulalo wokonzanso, tikutanthauza adilesi ya webusayiti yomwe ili wapadera pazochitika izi zakukonzanso. Zachidziwikire, izikhala mwachisawawa, zisakhale zophweka kuzilingalira, komanso zisakhale ndi maulalo akunja aakaunti omwe amapangitsa kuti kuyikhazikanso kosavuta. Mwachitsanzo, ulalo wokonzanso sikuyenera kungokhala ngati "Bwezerani/?username=JohnSmith".

Tikufuna kupanga chizindikiro chapadera chomwe chingatumizedwe ngati ulalo wokonzanso, ndiyeno chikufanana ndi mbiri ya seva ya akaunti ya wogwiritsa ntchito, motero kutsimikizira kuti mwiniwake wa akauntiyo, ndiye munthu yemweyo yemwe akuyesera kukonzanso mawu achinsinsi . Mwachitsanzo, chizindikiro chikhoza kukhala "3ce7854015cd38c862cb9e14a1ae552b" ndikusungidwa patebulo pamodzi ndi ID ya wogwiritsa ntchito kukonzanso ndi nthawi yomwe chizindikirocho chinapangidwira (zambiri pa izi pansipa). Imelo ikatumizidwa, imakhala ndi ulalo ngati "Reset/?id=3ce7854015cd38c862cb9e14a1ae552b", ndipo wogwiritsa ntchito akaitsitsa, tsambalo limapangitsa kuti chizindikirocho chikhalepo, pambuyo pake chimatsimikizira zambiri za wogwiritsa ntchito ndikumulola kusintha. mawu achinsinsi.

Inde, popeza ndondomeko yomwe ili pamwambayi (mwachiyembekezo) imalola wogwiritsa ntchito kupanga mawu achinsinsi atsopano, tifunika kuonetsetsa kuti ulalo watsitsidwa pa HTTPS. Ayi, kutumiza ndi pempho la POST pa HTTPS sikokwanira, ulalo wa chizindikirochi uyenera kugwiritsa ntchito chitetezo chamtundu wamayendedwe kuti mawonekedwe achinsinsi atsopano asawukidwe Mtengo wa MITM ndipo mawu achinsinsi opangidwa ndi ogwiritsa ntchito adatumizidwa pa intaneti yotetezeka.

Komanso pa URL yokonzanso muyenera kuwonjezera malire a nthawi ya chizindikiro kuti ndondomeko yokonzanso ikhoza kutha mkati mwa nthawi inayake, kunena mkati mwa ola limodzi. Izi zimatsimikizira kuti zenera la nthawi yobwezeretsanso limakhala locheperako kotero kuti wolandila ulalo wokonzanso atha kuchitapo kanthu mkati mwawindo laling'onolo. Zachidziwikire, wowukirayo atha kuyambitsanso kukonzanso, koma adzafunika kupezanso ulalo wina wapadera wokonzanso.

Pomaliza, tiyenera kuonetsetsa kuti njirayi ndi yotayidwa. Ntchito yokonzanso ikatha, chizindikirocho chiyenera kuchotsedwa kuti URL yobwezeretsanso isagwirenso ntchito. Mfundo yam'mbuyo ndiyofunikira kuti muwonetsetse kuti wowukirayo ali ndi zenera laling'ono kwambiri pomwe amatha kugwiritsa ntchito URL yokonzanso. Kuphatikiza apo, kukonzanso kukakhala kopambana, chizindikiro sichikufunikanso.

Zina mwamasitepewa zitha kuwoneka ngati zosafunikira, koma sizimasokoneza magwiritsidwe ntchito komanso ndipotu kukonza chitetezo, ngakhale muzochitika zomwe tikuyembekeza kuti sizichitika kawirikawiri. Mu 99% yamilandu, wogwiritsa ntchitoyo amathandizira kukonzanso mkati mwa nthawi yochepa kwambiri ndipo sangakhazikitsenso mawu achinsinsi posachedwa.

Udindo wa CAPTCHA

O, CAPTCHA, gawo lachitetezo lomwe tonse timakonda kudana nalo! M'malo mwake, CAPTCHA si chida choteteza kwambiri chifukwa ndi chida chozindikiritsira - kaya ndinu munthu kapena loboti (kapena zolemba zokha). Cholinga chake ndikupewa kugonjera mawonekedwe, omwe, ndithudi, mungathe kugwiritsidwa ntchito ngati kuyesa kuswa chitetezo. Pankhani yakukhazikitsanso mawu achinsinsi, CAPTCHA imatanthawuza kuti kubwezeretsanso sikungakakamizidwe mwankhanza kwa wogwiritsa ntchito kapena kuyesa kudziwa kukhalapo kwa maakaunti (zomwe sizingatheke ngati mutatsatira malangizo omwe ali mugawoli. kutsimikizira ma ID).

Inde, CAPTCHA yokha si yangwiro; Pali zitsanzo zambiri za mapulogalamu ake "kubera" ndikupeza ndalama zokwanira (60-70%). Kuphatikiza apo, pali yankho lomwe likuwonetsedwa mu positi yanga Kubera kwa CAPTCHA kochitidwa ndi anthu, kumene mungathe kulipira anthu tizigawo ta senti kuti athetse CAPTCHA iliyonse ndikupeza bwino 94%. Ndiko kuti, ili pachiwopsezo, koma (pang'ono) imakweza chotchinga kulowa.

Tiyeni tiwone chitsanzo cha PayPal:

Chilichonse chomwe mumafuna kudziwa chokhudza kubwezeretsanso mawu achinsinsi otetezeka. Gawo 1
Pankhaniyi, kukonzanso sikungayambe mpaka CAPTCHA itathetsedwa, choncho theoretically n'kosatheka kupanga makina. Mwachidziwitso.

Komabe, pamapulogalamu ambiri apaintaneti izi zitha kukhala zochulukirapo komanso kulondola mwamtheradi zikuyimira kuchepa kwa kugwiritsidwa ntchito - anthu sakonda CAPTCHA! Kuphatikiza apo, CAPTCHA ndichinthu chomwe mutha kubwereranso mosavuta ngati kuli kofunikira. Ngati ntchitoyo iyamba kuwukiridwa (apa ndipamene kudula mitengo kumakhala kothandiza, koma zambiri pambuyo pake), ndiye kuwonjezera CAPTCHA sikungakhale kosavuta.

Mafunso ndi mayankho achinsinsi

Ndi njira zonse zomwe takambirana, tinatha kukonzanso mawu achinsinsi mwa kukhala ndi akaunti ya imelo. Ndimati "basi", koma, ndithudi, sikuloledwa kupeza akaunti ya imelo ya munthu wina. ayenera kukhala njira yovuta. Komabe sizikhala choncho nthawi zonse.

M'malo mwake, ulalo womwe uli pamwambapa pakubedwa kwa Sarah Palin's Yahoo! amakwaniritsa zolinga ziwiri; choyamba, zikuwonetsa momwe zimakhalira zosavuta kuthyolako (ena) maakaunti a imelo, ndipo chachiwiri, zikuwonetsa momwe mafunso oyipa achitetezo angagwiritsidwe ntchito ndi zolinga zoyipa. Koma tibwereranso ku izi pambuyo pake.

Vuto la XNUMX% lokhazikitsira mawu achinsinsi ndi imelo ndikuti kukhulupirika kwa akaunti ya tsamba lomwe mukuyesera kukonzanso kumakhala XNUMX% kudalira kukhulupirika kwa akaunti ya imelo. Aliyense amene ali ndi mwayi wopeza imelo yanu ali ndi mwayi wopeza akaunti iliyonse yomwe ingakhazikitsidwe pongolandira imelo. Pamaakaunti oterowo, imelo ndiye “kiyi ku zitseko zonse” za moyo wanu wapaintaneti.

Njira imodzi yochepetsera chiopsezochi ndikukhazikitsa funso lachitetezo ndi njira yoyankhira. Mosakayikira mwawawona kale: sankhani funso lomwe inu nokha mungayankhe ayenera dziwani yankho, ndiyeno mukakhazikitsanso password yanu mudzafunsidwa. Izi zikuwonjezera chidaliro kuti munthu amene akuyesa kukonzanso ndiye mwini akauntiyo.

Bwererani kwa Sarah Palin: cholakwika chinali chakuti mayankho a funso lake lachitetezo / mafunso atha kupezeka mosavuta. Makamaka mukakhala munthu wofunika kwambiri pagulu, kudziwa zambiri za dzina lachibwana la amayi anu, mbiri yamaphunziro, kapena komwe munthu wina adakhalako sizobisika. Ndipotu ambiri a iwo angapezeke pafupifupi aliyense. Izi ndi zomwe zinachitika ndi Sarah:

Wozembetsa David Kernell adapeza mwayi wopeza akaunti ya Palin pofufuza zambiri za mbiri yake, monga kuyunivesite yake ndi tsiku lobadwa, kenako kugwiritsa ntchito Yahoo!

Choyamba, ichi ndi cholakwika cha kapangidwe ka Yahoo! - pofotokoza mafunso osavuta otere, kampaniyo idasokoneza kufunikira kwa funso lachitetezo, motero chitetezo cha dongosolo lake. Zachidziwikire, kukhazikitsanso mapasiwedi a akaunti ya imelo nthawi zonse kumakhala kovuta chifukwa simungathe kutsimikizira umwini potumiza imelo kwa eni ake (popanda kukhala ndi adilesi yachiwiri), koma mwamwayi palibe ntchito zambiri popanga dongosolo lotere lero.

Tiyeni tibwerere ku mafunso otetezeka - pali mwayi wolola wogwiritsa ntchito kupanga mafunso awo. Vuto ndiloti izi zidzabweretsa mafunso omveka bwino:

Kodi kumwamba ndi mtundu wanji?

Mafunso omwe amachititsa anthu kukhala omasuka pamene funso lachitetezo likugwiritsidwa ntchito kuti lizindikire munthu (mwachitsanzo, pamalo oimbira foni):

Ndinagona ndi ndani pa Khrisimasi?

Kapena mafunso opusa:

Kodi mumalemba bwanji "password"?

Zikafika pamafunso achitetezo, ogwiritsa ntchito ayenera kupulumutsidwa kwa iwo okha! Mwa kuyankhula kwina, funso lachitetezo liyenera kutsimikiziridwa ndi tsamba lomwelo, kapena bwino lomwe, lafunsidwa mndandanda mafunso otetezeka omwe wogwiritsa ntchito angasankhe. Ndipo si zophweka kusankha один; ndiye kuti wogwiritsa ntchito asankhe mafunso awiri kapena kuposerapo zachitetezo pa nthawi yolembetsa akaunti, yomwe idzagwiritsidwa ntchito ngati njira yachiwiri yozindikiritsira. Kukhala ndi mafunso angapo kumawonjezera chidaliro pakutsimikizira, komanso kumapereka mwayi wowonjezera mwachisawawa (osati nthawi zonse kuwonetsa funso lomwelo), kuphatikizanso kumapereka kubwereza pang'ono ngati wogwiritsa ntchitoyo wayiwala mawu achinsinsi.

Kodi funso labwino lachitetezo ndi chiyani? Izi zimatengera zifukwa zingapo:

  1. Ziyenera kukhala mwachidule - funso liyenera kukhala lomveka komanso losamvetsetseka.
  2. Yankho liyenera kukhala mwachindunji - sitifuna funso limene munthu mmodzi angayankhe mosiyana
  3. Mayankho otheka akhale zosiyanasiyana - kufunsa mtundu womwe amakonda kumapereka mayankho ang'onoang'ono a mayankho
  4. Поиск yankho liyenera kukhala lovuta - ngati yankho lingapezeke mosavuta zilizonse (Kumbukirani anthu audindo), ndiye kuti ndi woipa
  5. Yankho liyenera kukhala chamuyaya m'kupita kwanthawi - ngati mufunsa filimu yomwe mumakonda kwambiri, ndiye kuti patapita chaka yankho likhoza kukhala losiyana

Zomwe zimachitika, pali tsamba lodzipatulira kufunsa mafunso abwino otchedwa GoodSecurityQuestions.com. Ena mwa mafunso akuwoneka bwino, ena samapambana ena mwa mayeso omwe tafotokozawa, makamaka "kufufuza kosavuta".

Ndiroleni ndiwonetse momwe PayPal imagwiritsira ntchito mafunso achitetezo komanso, makamaka khama lomwe tsambalo limapereka pakutsimikizira. Pamwambapa tidawona tsambali kuti tiyambitse ntchitoyi (ndi CAPTCHA), ndipo apa tikuwonetsa zomwe zimachitika mukalowetsa imelo yanu ndikuthetsa CAPTCHA:

Chilichonse chomwe mumafuna kudziwa chokhudza kubwezeretsanso mawu achinsinsi otetezeka. Gawo 1
Zotsatira zake, wogwiritsa amalandira kalata iyi:

Chilichonse chomwe mumafuna kudziwa chokhudza kubwezeretsanso mawu achinsinsi otetezeka. Gawo 1
Pakadali pano zonse ndizabwinobwino, koma izi ndi zomwe zabisika kuseri kwa URL yokonzanso:

Chilichonse chomwe mumafuna kudziwa chokhudza kubwezeretsanso mawu achinsinsi otetezeka. Gawo 1
Chifukwa chake, mafunso achitetezo amabwera. M'malo mwake, PayPal imakupatsaninso mwayi wokonzanso mawu anu achinsinsi potsimikizira nambala ya kirediti kadi yanu, kotero pali njira ina yomwe masamba ambiri satha kuyipeza. Sindingathe kusintha mawu achinsinsi popanda kuyankha zonse funso lachitetezo (kapena osadziwa nambala ya khadi). Ngakhale wina atabera imelo yanga, sangathe kuyikanso password yanga ya PayPal pokhapokha atadziwa zambiri za ine. Nkhani zotani? Nawa mayankho achitetezo omwe PayPal amapereka:

Chilichonse chomwe mumafuna kudziwa chokhudza kubwezeretsanso mawu achinsinsi otetezeka. Gawo 1
Funso la sukulu ndi lachipatala likhoza kukhala losavuta kufufuza, koma enawo si oipa kwambiri. Komabe, kuti muwonjezere chitetezo, PayPal imafuna chizindikiritso chowonjezera cha kusintha mayankho ku mafunso achitetezo:

Chilichonse chomwe mumafuna kudziwa chokhudza kubwezeretsanso mawu achinsinsi otetezeka. Gawo 1
PayPal ndi chitsanzo chodziwika bwino chokhazikitsanso mawu achinsinsi otetezedwa: imagwiritsa ntchito CAPTCHA kuti ichepetse kuopsa kwa ziwopsezo zankhanza, imafuna mafunso awiri achitetezo, kenako imafunikira chizindikiritso chosiyana kwambiri kuti musinthe mayankho - ndipo izi pambuyo pa wogwiritsa ntchito. adalowa kale. Inde, izi ndi zomwe ife kuyembekezera kuchokera ku PayPal; ndi bungwe lazachuma lomwe limachita ndi ndalama zambiri. Izi sizikutanthauza kuti kuyikanso mawu achinsinsi kulikonse kuyenera kutsatira izi—nthawi zambiri kumakhala kochulukira—koma ndi chitsanzo chabwino pamilandu yomwe chitetezo ndi bizinesi yayikulu.

Ubwino wamafunso achitetezo ndikuti ngati simunagwiritse ntchito nthawi yomweyo, mutha kuwonjezera pambuyo pake ngati mulingo wachitetezo umafuna. Chitsanzo chabwino cha izi ndi Apple, yomwe idangogwiritsa ntchito njirayi posachedwa [Nkhani yolembedwa mu 2012]. Nditayamba kukonzanso pulogalamu yanga pa iPad, ndidawona pempho ili:

Chilichonse chomwe mumafuna kudziwa chokhudza kubwezeretsanso mawu achinsinsi otetezeka. Gawo 1
Kenako ndidawona chinsalu pomwe ndimatha kusankha mafunso angapo achitetezo ndi mayankho, komanso imelo yopulumutsa:

Chilichonse chomwe mumafuna kudziwa chokhudza kubwezeretsanso mawu achinsinsi otetezeka. Gawo 1
Ponena za PayPal, mafunso amasankhidwa kale ndipo ena mwa iwo ndi abwino kwambiri:

Chilichonse chomwe mumafuna kudziwa chokhudza kubwezeretsanso mawu achinsinsi otetezeka. Gawo 1
Iliyonse mwa mafunso/mayankho awiriawiriwa imayimira magulu osiyanasiyana a mafunso omwe angatheke, kotero pali njira zambiri zosinthira akaunti.

Mbali ina yofunika kuiganizira poyankha funso lanu lachitetezo ndi yosungirako. Kukhala ndi nkhokwe ya mawu osamveka bwino mu nkhokwe kumabweretsa ziwopsezo zofanana ndi mawu achinsinsi, kutanthauza kuti kuwonetsa nkhokwe nthawi yomweyo kumawulula mtengo wake ndipo sikuyika pulogalamuyo pachiwopsezo, komanso mapulogalamu omwe angakhale osiyana kotheratu pogwiritsa ntchito mafunso achitetezo omwewo (ndi momwemonso. funso la acai berry). Njira imodzi ndi hashing yotetezeka (algorithm yolimba komanso mchere wosadziwika bwino), koma mosiyana ndi mawu ambiri osungira mawu achinsinsi, pangakhale chifukwa chomveka choti yankho liwoneke ngati mawu osavuta. Chochitika chodziwika bwino ndikutsimikizira kuti ndinu ndani ndi wogwiritsa ntchito pafoni. Zachidziwikire, hashing imagwiranso ntchito pankhaniyi (wogwiritsa ntchito amatha kungolowetsa yankho lotchulidwa ndi kasitomala), koma choyipa kwambiri, yankho lachinsinsi liyenera kukhala pamlingo wina wa kusungidwa kwa cryptographic, ngakhale kubisalira kofananira. . Chidule: samalira zinsinsi ngati zinsinsi!

Mbali imodzi yomaliza ya mafunso ndi mayankho achitetezo ndikuti ali pachiwopsezo chachikulu chaukadaulo wamagulu. Kuyesera kutulutsa mawu achinsinsi ku akaunti ya munthu wina ndi chinthu chimodzi, koma kuyambitsa kukambirana za mapangidwe ake (funso lodziwika bwino lachitetezo) ndilosiyana kwambiri. M'malo mwake, mutha kulankhulana bwino ndi munthu pazinthu zambiri za moyo wawo zomwe zitha kubweretsa funso lachinsinsi popanda kudzutsa kukayikira. Zachidziwikire, funso lenileni lachitetezo ndilakuti limakhudzana ndi zomwe munthu adakumana nazo pamoyo wake, ndiye kuti ndizosaiwalika, ndipo ndipamene vuto lagona - anthu amakonda kulankhula za moyo wawo! Pali zochepa zomwe mungachite pa izi, pokhapokha mutasankha zosankha za funso lachitetezo kotero kuti zikhale Zochepa mwina akhoza kukokedwa ndi social engineering.

[Zipitilizidwa.]

Pa Ufulu Wotsatsa

VDSina amapereka odalirika ma seva okhala ndi malipiro a tsiku ndi tsiku, seva iliyonse imalumikizidwa ndi njira yapaintaneti ya 500 Megabits ndipo imatetezedwa ku DDoS kwaulere!

Chilichonse chomwe mumafuna kudziwa chokhudza kubwezeretsanso mawu achinsinsi otetezeka. Gawo 1

Source: www.habr.com