Mu ntchito yawo, akatswiri azamakompyuta amakumana ndi milandu nthawi zonse pakafunika kuti atsegule foni yamakono mwachangu. Mwachitsanzo, deta yochokera pa foni ikufunika ndi kufufuza kuti mumvetse zifukwa zodzipha wachinyamata. Munjira ina, athandizira kutsata gulu la zigawenga zomwe zikuukira oyendetsa magalimoto. Pali, ndithudi, nkhani zokongola - makolo anaiwala achinsinsi kwa chida, ndipo panali kanema ndi masitepe oyambirira a mwana wawo, koma, mwatsoka, pali ochepa chabe. Koma amafunikiranso njira yaukadaulo pankhaniyi. M'nkhaniyi Igor Mikhailov, katswiri wa Gulu-IB Computer Forensics Laboratory, imakamba za njira zomwe zimalola akatswiri azamalamulo kuti azilambalala loko ya foni yamakono.
Zofunika: Nkhaniyi idalembedwa kuti iwunikire chitetezo cha mawu achinsinsi ndi mawonekedwe azithunzi omwe eni ake amafoni am'manja amagwiritsa ntchito. Ngati mwaganiza zotsegula foni yam'manja pogwiritsa ntchito njira zomwe zafotokozedwazi, kumbukirani kuti mumachita zonse kuti mutsegule zida mwakufuna kwanu komanso pachiwopsezo chanu. Mukamagwiritsa ntchito zida zam'manja, mutha kukiya chipangizocho, kufufuta data ya ogwiritsa ntchito, kapena kupangitsa kuti chipangizocho chizivuta. Malangizo amaperekedwanso kwa ogwiritsa ntchito momwe angawonjezere chitetezo cha zida zawo.
Chifukwa chake, njira yodziwika bwino yoletsa kupeza zambiri za ogwiritsa ntchito zomwe zili mu chipangizocho ndikutseka chinsalu cha foni yam'manja. Chida choterocho chikalowa mu labotale yazamalamulo, kugwira nawo ntchito kumatha kukhala kovuta, chifukwa pazida zotere sikutheka kuyambitsa mawonekedwe a USB debugging (pazida za Android), ndizosatheka kutsimikizira chilolezo kuti kompyuta yoyesa igwirizane ndi izi. chipangizo (pazida zam'manja za Apple), ndipo, chifukwa chake, ndizosatheka kupeza deta yosungidwa mu kukumbukira kwa chipangizocho.
Mfundo yakuti FBI ya US idalipira ndalama zambiri kuti itsegule iPhone ya chigawenga Syed Farouk, m'modzi mwa omwe adachita nawo zigawenga mumzinda wa California ku San Bernardino, zikuwonetsa kuchuluka kwa loko yotchinga mwachizolowezi cha foni yam'manja kumalepheretsa akatswiri kuchotsa deta kuchokera mmenemo [1].
Mobile Chipangizo Screen Tsegulani Njira
Monga lamulo, kutseka chinsalu cha foni yam'manja kumagwiritsidwa ntchito:
- Chizindikiro chachinsinsi
- Chithunzi chachinsinsi
Komanso, njira zaukadaulo za SmartBlock zitha kugwiritsidwa ntchito kuti mutsegule chinsalu cha zida zingapo zam'manja:
- Kutsegula zala
- Kutsegula kumaso (ukadaulo wa FaceID)
- Tsegulani chipangizo ndi kuzindikira iris
Njira zamagulu zotsegulira foni yam'manja
Kuphatikiza pazaukadaulo, pali njira zina zopezera kapena kuthana ndi PIN code kapena graphic code (chitsanzo) cha loko yotchinga. Nthawi zina, njira zachitukuko zimatha kukhala zogwira mtima kuposa njira zaukadaulo ndikuthandizira kumasula zida zomwe zakhudzidwa ndi zomwe zidachitika kale.
Gawoli lifotokoza njira zotsegula chinsalu cha foni yam'manja zomwe sizifuna (kapena zimangofunika pang'ono, pang'ono) kugwiritsa ntchito njira zaukadaulo.
Kuti muwononge anthu, muyenera kuphunzira psychology ya mwiniwake wa chipangizo chotsekedwa mozama momwe mungathere, kuti mumvetsetse mfundo zomwe amapanga ndikusunga mapasiwedi kapena zithunzi. Komanso, wofufuzayo adzafunika dontho lamwayi.
Mukamagwiritsa ntchito njira zokhudzana ndi kulosera mawu achinsinsi, ziyenera kukumbukiridwa kuti:
- Kulowetsa mawu achinsinsi khumi olakwika pazida zam'manja za Apple kungapangitse kuti deta ya wosuta ifufutidwe. Izi zimatengera makonda achitetezo omwe wogwiritsa ntchito wakhazikitsa;
- pazida zam'manja zomwe zimagwiritsa ntchito pulogalamu ya Android, ukadaulo wa Root of Trust ukhoza kugwiritsidwa ntchito, zomwe zingapangitse kuti mutalowa mapasiwedi olakwika 30, deta ya ogwiritsa ntchito mwina siyipezeka kapena kufufutidwa.
Njira 1: funsani achinsinsi
Zingawoneke zachilendo, koma mukhoza kupeza mawu achinsinsi otsegula mwa kungofunsa mwiniwake wa chipangizocho. Ziwerengero zikuwonetsa kuti pafupifupi 70% ya eni ake am'manja ali okonzeka kugawana mawu achinsinsi awo. Makamaka ngati idzafupikitsa nthawi yofufuza ndipo, motero, mwiniwakeyo adzalandira chipangizo chake mofulumira. Ngati sizingatheke kufunsa mwiniwake chinsinsi (mwachitsanzo, mwiniwake wa chipangizocho wamwalira) kapena akukana kuulula, mawu achinsinsi angapezeke kwa achibale ake apamtima. Monga lamulo, achibale amadziwa mawu achinsinsi kapena angapereke njira zomwe zingatheke.
Malangizo a Chitetezo: Mawu achinsinsi a foni yanu ndi kiyi yapadziko lonse lapansi ya data yonse, kuphatikiza data yolipira. Kulankhula, kutumiza, kuzilemba mu amithenga apompopompo ndi lingaliro loipa.
Njira 2: peep password
Achinsinsi akhoza peeped panthawi pamene mwiniwake ntchito chipangizo. Ngakhale mutakumbukira mawu achinsinsi (makhalidwe kapena zithunzi) pang'ono, izi zidzachepetsa kwambiri kuchuluka kwa zosankha zomwe zingatheke, zomwe zidzakuthandizani kuti muganizire mofulumira.
Kusiyana kwa njirayi ndi kugwiritsa ntchito zithunzi za CCTV zosonyeza mwini wake akutsegula chipangizocho pogwiritsa ntchito mawu achinsinsi achinsinsi [2]. Ma algorithm omwe afotokozedwa m'ntchito "Cracking Android Pattern Lock mu Mayesero Asanu" [2], popenda zojambulira makanema, amakulolani kuti muganizire zomwe mungasankhe ndikutsegula chipangizocho poyesera kangapo (monga lamulo, izi sizikufunikanso. kuposa kuyesa kasanu). Malinga ndi olembawo, "ndizovuta kwambiri mawu achinsinsi, zimakhala zosavuta kuti atenge."
Malangizo a Chitetezo: Kugwiritsa ntchito kiyi yojambula si lingaliro labwino kwambiri. Mawu achinsinsi a alphanumeric ndi ovuta kwambiri kuti ayang'ane.
Njira 3: pezani mawu achinsinsi
Mawu achinsinsi amapezeka m'mabuku a mwiniwake wa chipangizocho (mafayilo apakompyuta, muzolemba, pazidutswa za mapepala zomwe zili m'mabuku). Ngati munthu amagwiritsa ntchito zida zingapo zam'manja ndipo ali ndi mawu achinsinsi osiyanasiyana, ndiye nthawi zina m'chipinda cha batri chazidazi kapena m'malo pakati pa foni yam'manja ndi mlandu, mutha kupeza mapepala okhala ndi mawu achinsinsi:
Malangizo a Chitetezo: palibe chifukwa chosunga "notebook" yokhala ndi mawu achinsinsi. Ili ndi lingaliro loipa, pokhapokha mawu achinsinsiwa amadziwika kuti ndi abodza kuti achepetse kuchuluka kwa zoyesa zotsegula.
Njira 4: zisindikizo zala (Smudge attack)
Njirayi imakupatsani mwayi wozindikira zowona zamanja zamafuta otuluka thukuta pachiwonetsero cha chipangizocho. Mutha kuwawona pochiza chophimba cha chipangizocho ndi chala chopepuka chala (m'malo mwa ufa wapadera waukatswiri, mutha kugwiritsa ntchito ufa wamwana kapena ufa wina wosagwira ntchito wamtundu woyera kapena wotuwa) kapena poyang'ana pazenera la chipangizo mu cheza oblique kuwala. Kusanthula malo achibale a zisindikizo pamanja ndi kukhala ndi zambiri zokhudza mwiniwake wa chipangizocho (mwachitsanzo, podziwa chaka chake chobadwa), mungayesere kulingalira malemba kapena mawu achinsinsi. Umu ndi momwe kuyika kwamafuta a thukuta kumawonekera pawonekedwe la foni yam'manja mwachilembo cha Z:
Malangizo a Chitetezo: Monga tidanenera, mawu achinsinsi si lingaliro labwino, monga magalasi okhala ndi zokutira za oleophobic.
Njira 5: chala chopangira
Ngati chipangizochi chikhoza kutsegulidwa ndi chala, ndipo wofufuzayo ali ndi zitsanzo za mwiniwake wa chipangizocho, ndiye kuti kopi ya 3D ya chala cha mwiniwakeyo ikhoza kupangidwa pa printer ya 3D ndikugwiritsidwa ntchito kutsegula chipangizocho [XNUMX]:
Kwa kutsanzira kokwanira kwa chala cha munthu wamoyo - mwachitsanzo, pamene chojambula chala cha foni yamakono chimawonabe kutentha - chitsanzo cha 3D chimayikidwa (kutsamira) chala cha munthu wamoyo.
Mwiniwake wa chipangizocho, ngakhale atayiwala mawu achinsinsi otseka zenera, akhoza kutsegula yekha chipangizocho pogwiritsa ntchito chala chake. Izi zitha kugwiritsidwa ntchito nthawi zina pomwe mwiniwake sangathe kupereka mawu achinsinsi koma ali wokonzeka kuthandiza wofufuzayo kuti atsegule chipangizo chawo.
Wofufuzayo ayenera kukumbukira mibadwo ya masensa omwe amagwiritsidwa ntchito pamitundu yosiyanasiyana ya zida zam'manja. Zitsanzo zakale za masensa zimatha kuyambitsidwa ndi pafupifupi chala chilichonse, osati mwiniwake wa chipangizocho. Masiku ano akupanga masensa, m'malo mwake, jambulani mozama komanso momveka bwino. Kuphatikiza apo, masensa angapo amakono apansi pa sikirini amangokhala makamera a CMOS omwe sangathe kusanthula kuya kwa chithunzicho, zomwe zimawapangitsa kukhala osavuta kupusitsa.
Malangizo a Chitetezo: Ngati chala, ndiye akupanga kachipangizo kokha. Koma musaiwale kuti kuyika chala chotsutsana ndi chifuniro chanu ndikosavuta kuposa nkhope.
Njira 6: "kugwedeza" (kuukira kwa mug)
Njirayi ikufotokozedwa ndi apolisi aku Britain [4]. Zimapangidwa ndi kuyang'aniridwa mobisa kwa wokayikira. Nthawi yomwe woganiziridwayo amatsegula foni yake, wovala yunifolomuyo amailanda m'manja mwa mwini wake ndikuletsa chipangizocho kuti chisatsekenso mpaka chikaperekedwa kwa akatswiri.
Malangizo a Chitetezo: Ndikuganiza kuti ngati izi zikugwiritsidwa ntchito motsutsana nanu, ndiye kuti zinthu ndi zoyipa. Koma apa muyenera kumvetsetsa kuti kutsekereza mwachisawawa kumatsitsa njira iyi. Ndipo, mwachitsanzo, kukanikiza mobwerezabwereza batani lokhoma pa iPhone kumayambitsa mawonekedwe a SOS, omwe kuwonjezera pa chilichonse amazimitsa FaceID ndipo amafuna passcode.
Njira 7: zolakwika mu ma algorithms owongolera zida
M'nkhani zazinthu zapadera, nthawi zambiri mumatha kupeza mauthenga osonyeza kuti zochita zina ndi chipangizocho zimatsegula zenera lake. Mwachitsanzo, loko skrini ya zida zina imatha kutsegulidwa ndi foni yomwe ikubwera. Choyipa cha njirayi ndikuti zofooka zomwe zadziwika, monga lamulo, zimachotsedwa mwachangu ndi opanga.
Chitsanzo cha njira yotsegula pazida zam'manja zomwe zidatulutsidwa chaka cha 2016 chisanachitike ndi kukhetsa kwa batri. Batire ikachepa, chipangizocho chidzatsegula ndikukulimbikitsani kuti musinthe makonzedwe amagetsi. Pankhaniyi, muyenera kupita patsamba ndi zoikamo chitetezo ndi kuletsa loko chophimba [5].
Malangizo a Chitetezo: musaiwale kusintha OS ya chipangizo chanu munthawi yake, ndipo ngati sichikuthandizidwanso, sinthani foni yamakono yanu.
Njira 8: Zowonongeka pamapulogalamu a gulu lachitatu
Zowopsa zomwe zimapezeka m'mapulogalamu ena omwe adayikidwa pachipangizo zitha kuperekanso mwayi wopeza data yachchipangizo chokhoma kwathunthu kapena pang'ono.
Chitsanzo cha chiopsezo chotere ndi kuba kwa deta kuchokera ku iPhone ya Jeff Bezos, mwiniwake wamkulu wa Amazon. Chiwopsezo cha messenger ya WhatsApp, yomwe idagwiritsidwa ntchito ndi anthu osadziwika, idayambitsa kuba kwa data yachinsinsi yomwe idasungidwa muchikumbutso cha chipangizocho [6].
Zowopsa zotere zitha kugwiritsidwa ntchito ndi ofufuza kuti akwaniritse zolinga zawo - kuchotsa deta kuchokera ku zida zokhoma kapena kuzitsegula.
Malangizo a Chitetezo: Muyenera kusintha osati OS yokha, komanso mapulogalamu omwe mumagwiritsa ntchito.
Njira 9: foni yamakampani
Zida zam'manja zamakampani zitha kutsegulidwa ndi oyang'anira makina akampani. Mwachitsanzo, zida za Windows Phone zamakampani zimalumikizidwa ndi akaunti yakampani ya Microsoft Exchange ndipo zitha kutsegulidwa ndi oyang'anira makampani. Pazida zamakampani za Apple, pali ntchito ya Mobile Device Management yofanana ndi Microsoft Exchange. Oyang'anira ake amathanso kutsegula chipangizo chamakampani cha iOS. Kuphatikiza apo, zida zam'manja zamakampani zitha kulumikizidwa ndi makompyuta ena omwe atchulidwa ndi woyang'anira pazokonda pazida zam'manja. Choncho, popanda kuyanjana ndi oyang'anira machitidwe a kampani, chipangizo choterocho sichingagwirizane ndi kompyuta ya ofufuza (kapena mapulogalamu ndi hardware dongosolo la deta yazamalamulo).
Malangizo a Chitetezo: MDM ndi yoyipa komanso yabwino pankhani yachitetezo. Woyang'anira MDM amatha kuyimitsanso chipangizo patali. Mulimonsemo, simuyenera kusunga zidziwitso zaumwini pazida zamakampani.
Njira 10: zambiri kuchokera ku masensa
Kusanthula zomwe mwalandira kuchokera ku masensa a chipangizocho, mutha kulingalira mawu achinsinsi ku chipangizocho pogwiritsa ntchito algorithm yapadera. Adam J. Aviv adawonetsa kuthekera kwa kuukira kotereku pogwiritsa ntchito deta yochokera ku accelerometer ya foni yamakono. Pakafukufuku, wasayansiyo adakwanitsa kudziwa bwino mawu achinsinsi mu 43% ya milandu, ndi mawu achinsinsi - mu 73% [7].
Malangizo a Chitetezo: Samalani ndi mapulogalamu omwe mumapereka chilolezo kuti azitha kuyang'anira masensa osiyanasiyana.
Njira 11: tsegulani nkhope
Monga momwe zimakhalira ndi chala, kupambana kwa kutsegula chipangizo pogwiritsa ntchito luso la FaceID kumatengera masensa omwe amagwiritsidwa ntchito pa chipangizo china cham'manja. Choncho, mu ntchito "Gezichtsherkenning op smartphone niet altijd veilig" [8], ofufuzawo adawonetsa kuti ena mwa mafoni omwe adaphunzirawo adatsegulidwa pongowonetsa chithunzi cha mwiniwake ku kamera ya foni yamakono. Izi ndizotheka ngati kamera yakutsogolo imodzi yokha imagwiritsidwa ntchito potsegula, yomwe ilibe luso lojambula zakuya kwazithunzi. Samsung, pambuyo pa zofalitsa ndi makanema apamwamba kwambiri pa YouTube, adakakamizika kuwonjezera chenjezo ku firmware ya mafoni ake. Face Unlock Samsung:
Mitundu yapamwamba kwambiri ya mafoni a m'manja imatha kutsegulidwa pogwiritsa ntchito chigoba kapena kudziphunzirira pazida. Mwachitsanzo, iPhone X imagwiritsa ntchito ukadaulo wapadera wa TrueDepth [9]: purojekitala ya chipangizocho, pogwiritsa ntchito makamera awiri ndi choyimira cha infrared, imapanga gululi wokhala ndi mfundo zopitilira 30 pankhope ya eni ake. Chipangizo choterocho chimatha kutsegulidwa pogwiritsa ntchito chigoba chomwe mizere yake imatengera mawonekedwe a nkhope ya wovalayo. iPhone unlock mask [000]:
Popeza dongosolo loterolo ndi lovuta kwambiri ndipo siligwira ntchito pansi pazikhalidwe zabwino (kukalamba kwachibadwa kwa mwiniwake kumachitika, kusintha kwa mawonekedwe a nkhope chifukwa cha kusonyeza maganizo, kutopa, thanzi, etc.), amakakamizika kudziphunzira nthawi zonse. Choncho, ngati munthu wina agwira chipangizo chosatsegulidwa kutsogolo kwake, nkhope yake idzakumbukiridwa ngati nkhope ya mwiniwake wa chipangizocho ndipo m'tsogolomu adzatha kutsegula foni yamakono pogwiritsa ntchito luso la FaceID.
Malangizo a Chitetezo: osatsegula ndi "chithunzi" - makina okhawo okhala ndi zojambulira nkhope zonse (FaceID yochokera ku Apple ndi ma analogue pazida za Android).
Mfundo yaikulu sikuyang'ana kamera, ingoyang'anani kumbali. Ngakhale mutatseka diso limodzi, mwayi wotsegula umatsika kwambiri, monga ndi kukhalapo kwa manja pa nkhope. Kuphatikiza apo, kuyesa 5 kokha kumaperekedwa kuti mutsegule ndi nkhope (FaceID), pambuyo pake mudzafunika kulowa passcode.
Njira 12: Kugwiritsa Ntchito Zotayikira
Mawu achinsinsi otsikiridwa ndi njira yabwino yomvetsetsa psychology ya eni chipangizocho (pongoganiza kuti wofufuzayo ali ndi chidziwitso cha ma adilesi a imelo a eni ake). Muchitsanzo pamwambapa, kusaka adilesi ya imelo kunabweretsa mawu achinsinsi awiri ofanana omwe adagwiritsidwa ntchito ndi eni ake. Zitha kuganiziridwa kuti mawu achinsinsi 21454162 kapena zotumphukira zake (mwachitsanzo, 2145 kapena 4162) zitha kugwiritsidwa ntchito ngati chikhomo cha loko ya foni yam'manja. (Kufufuza adilesi ya imelo ya eni ake m'malo otayikira kumawonetsa mawu achinsinsi omwe mwiniwake akanagwiritsa ntchito, kuphatikiza kutseka foni yake yam'manja.)
Malangizo a Chitetezo: chitanipo kanthu, tsatirani zomwe zatsitsidwa ndikusintha mapasiwedi omwe awonedwa pakutulutsa munthawi yake!
Njira 13: Mawu achinsinsi otsekera zida
Monga lamulo, palibe foni yam'manja yomwe imalandidwa kwa eni ake, koma angapo. Nthawi zambiri pamakhala zida zambiri zotere. Pankhaniyi, mutha kulingalira mawu achinsinsi a chipangizo chomwe chili pachiwopsezo ndikuyesa kugwiritsa ntchito mafoni ena ndi mapiritsi omwe adagwidwa ndi eni ake.
Mukasanthula deta yotengedwa kuchokera kuzipangizo zam'manja, deta yotereyi imawonetsedwa m'mapulogalamu azamalamulo (nthawi zambiri ngakhale pochotsa deta pazida zokhoma pogwiritsa ntchito zovuta zosiyanasiyana).
Monga mukuwonera pachithunzi cha gawo lazenera logwira ntchito la pulogalamu ya UFED Physical Analyzer, chipangizocho chatsekedwa ndi PIN code yachilendo ya fgkl.
Musanyalanyaze zida zina zogwiritsa ntchito. Mwachitsanzo, posanthula mawu achinsinsi osungidwa mu msakatuli wapakompyuta ya eni ake a foni yam'manja, mutha kumvetsetsa mfundo zopanga mawu achinsinsi omwe mwiniwake amatsatira. Mutha kuwona mapasiwedi osungidwa pakompyuta yanu pogwiritsa ntchito NirSoft utility [11].
Komanso, pa kompyuta (laputopu) ya mwiniwake wa foni yam'manja, pakhoza kukhala mafayilo a Lockdown omwe angathandize kuti azitha kupeza foni yotsekedwa ya Apple. Njirayi idzakambidwa motsatira.
Malangizo a Chitetezo: gwiritsani ntchito mawu achinsinsi osiyanasiyana, apadera kulikonse.
Njira 14: Ma PIN Odziwika
Monga tanena kale, ogwiritsa ntchito nthawi zambiri amagwiritsa ntchito mawu achinsinsi: manambala a foni, makadi aku banki, ma PIN. Zoterezi zitha kugwiritsidwa ntchito kuti mutsegule chipangizocho.
Zina zonse zikakanika, mutha kugwiritsa ntchito izi: ofufuzawo adasanthula ndikupeza ma PIN odziwika kwambiri (ma PIN code omwe adapatsidwa amaphimba 26,83% ya mapasiwedi onse) [12]:
Pin
pafupipafupi,%
1234
10,713
1111
6,016
0000
1,881
1212
1,197
7777
0,745
1004
0,616
2000
0,613
4444
0,526
2222
0,516
6969
0,512
9999
0,451
3333
0,419
5555
0,395
6666
0,391
1122
0,366
1313
0,304
8888
0,303
4321
0,293
2001
0,290
1010
0,285
Kugwiritsa ntchito mndandanda wa ma PIN code pachida chokhoma kudzatsegula ndi kuthekera kwa ~ 26%.
Malangizo a Chitetezo: yang'anani PIN yanu molingana ndi gome lomwe lili pamwambapa ndipo ngakhale silikugwirizana, sinthani, chifukwa manambala 4 ndi ochepa kwambiri malinga ndi miyezo ya 2020.
Njira 15: Mawu achinsinsi azithunzi
Monga tafotokozera pamwambapa, kukhala ndi deta yochokera ku makamera omwe mwiniwake wa chipangizocho amayesera kuti atsegule, mukhoza kutenga chitsanzo chotsegula mukuyesera kasanu. Kuphatikiza apo, monga pali ma PIN amtundu wamba, palinso ma generic omwe angagwiritsidwe ntchito kumasula zida zam'manja zokhoma [13, 14].
Zitsanzo zosavuta [14]:
Mipangidwe ya zovuta zapakatikati [14]:
Mawonekedwe ovuta [14]:
Mndandanda wama chart odziwika kwambiri malinga ndi wofufuza Jeremy Kirby [15].
3>2>5>8>7
1>4>5>6>9
1>4>7>8>9
3>2>1>4>5>6>9>8>7
1>4>7>8>9>6>3
1>2>3>5>7>8>9
3>5>6>8
1>5>4>2
2>6>5>3
4>8>7>5
5>9>8>6
7>4>1>2>3>5>9
1>4>7>5>3>6>9
1>2>3>5>7
3>2>1>4>7>8>9
3>2>1>4>7>8>9>6>5
3>2>1>5>9>8>7
1>4>7>5>9>6>3
7>4>1>5>9>6>3
3>6>9>5>1>4>7
7>4>1>5>3>6>9
5>6>3>2>1>4>7>8>9
5>8>9>6>3>2>1>4>7
7>4>1>2>3>6>9
1>4>8>6>3
1>5>4>6
2>4>1>5
7>4>1>2>3>6>5
Pazida zina zam'manja, kuphatikiza pazithunzi, PIN khodi yowonjezera ikhoza kukhazikitsidwa. Pankhaniyi, ngati sikutheka kupeza graphic code, wofufuza akhoza dinani batani PIN khodi yowonjezera (PIN yachiwiri) mutalowetsa chithunzi cholakwika ndikuyesa kupeza PIN yowonjezera.
Malangizo a Chitetezo: Ndibwino kuti musagwiritse ntchito makiyi azithunzi konse.
Njira 16: Mawu achinsinsi a Alphanumeric
Ngati mawu achinsinsi a alphanumeric angagwiritsidwe ntchito pa chipangizocho, ndiye kuti mwiniwakeyo atha kugwiritsa ntchito mawu achinsinsi otsatirawa ngati loko loko [16]:
- 123456
- achinsinsi
- 123456789
- 12345678
- 12345
- 111111
- 1234567
- dzuwa
- qwerty
- ndimakukondani
- Princess
- boma
- olandiridwa
- 666666
- abc123
- mpira
- 123123
- nyani
- 654321
- ! @ # $% ^ & *
- Charlie
- aa123456
- Donald
- password1
- qwerty123
Malangizo a Chitetezo: gwiritsani ntchito mapasiwedi ovuta, apadera omwe ali ndi zilembo zapadera komanso milandu yosiyanasiyana. Chongani ngati mukugwiritsa ntchito mawu achinsinsi pamwamba. Ngati mugwiritsa ntchito - sinthani kukhala wodalirika kwambiri.
Njira 17: mtambo kapena kusungirako kwanuko
Ngati sizingatheke kuchotsa deta pachipangizo chotsekedwa, zigawenga zimatha kufufuza makope ake osungira pa makompyuta a mwiniwake wa chipangizocho kapena mumtambo wosungiramo mitambo.
Nthawi zambiri, eni mafoni a Apple, powalumikiza pamakompyuta awo, samazindikira kuti kopi yosunga zobwezeretsera yakomweko kapena yamtambo imatha kupangidwa panthawiyi.
Kusungirako mitambo ya Google ndi Apple sikungathe kusunga deta kuchokera kuzipangizo, komanso mapasiwedi osungidwa ndi chipangizocho. Kuchotsa mawu achinsinsiwa kungathandize kulosera loko ya foni yam'manja.
Kuchokera ku Keychain yosungidwa mu iCloud, mutha kuchotsa mawu achinsinsi osunga zosunga zobwezeretsera omwe adakhazikitsidwa ndi eni ake, omwe angafanane ndi PIN yotseka pazenera.
Ngati omvera malamulo atembenukira ku Google ndi Apple, makampani amatha kusamutsa deta yomwe ilipo, zomwe zingachepetse kwambiri kufunika kotsegula chipangizocho, popeza omvera malamulo adzakhala ndi deta.
Mwachitsanzo, zigawenga zitachitika ku Pensocon, zolemba zomwe zidasungidwa mu iCloud zidaperekedwa ku FBI. Kuchokera ku mawu a Apple:
"M'maola ochepa chabe a FBI atapempha koyamba, pa Disembala 6, 2019, tidapereka zidziwitso zambiri zokhudzana ndi kafukufukuyu. Kuyambira pa Disembala 7 mpaka Disembala 14, tidalandira zopempha zina zisanu ndi chimodzi zazamalamulo ndikupereka zambiri poyankha, kuphatikiza zosunga zobwezeretsera za iCloud, zambiri zamaakaunti, ndi zochitika zamaakaunti angapo.
Tinkayankha mwamsanga pempho lililonse, nthawi zambiri patangopita maola ochepa, tinkakambirana ndi maofesi a FBI ku Jacksonville, Pensacola, ndi New York. Pempho la kafukufukuyu, zambiri za gigabytes zidapezeka, zomwe tidapereka kwa ofufuza. " [ 17, 18, 19 ]
Malangizo a Chitetezo: Chilichonse chomwe mungatumize chosabisika kumtambo chingagwiritsidwe ntchito motsutsana nanu.
Njira 18: Akaunti ya Google
Njirayi ndiyoyenera kuchotsa mawu achinsinsi omwe amatseka chinsalu cha foni yam'manja yomwe ikugwiritsa ntchito pulogalamu ya Android. Kuti mugwiritse ntchito njirayi, muyenera kudziwa dzina lolowera ndi mawu achinsinsi a akaunti ya Google ya eni ake. Chikhalidwe chachiwiri: chipangizocho chiyenera kulumikizidwa ndi intaneti.
Ngati motsatizana kulowa cholakwika chithunzi achinsinsi kangapo motsatana, chipangizo adzadzipereka bwererani achinsinsi. Pambuyo pake, muyenera kulowa muakaunti ya ogwiritsa ntchito, yomwe imatsegula chinsalu cha chipangizocho [5].
Chifukwa cha mitundu yosiyanasiyana ya mayankho a hardware, machitidwe opangira Android, ndi zina zowonjezera zotetezera, njirayi imagwira ntchito pazida zingapo zokha.
Ngati wofufuzayo alibe mawu achinsinsi a akaunti ya Google ya mwiniwake wa chipangizocho, atha kuyesa kuchibwezeretsanso pogwiritsa ntchito njira zobwezeretsa mawu achinsinsi pamaakaunti otere.
Ngati chipangizocho sichinagwirizane ndi intaneti panthawi yophunzira (mwachitsanzo, SIM khadi yatsekedwa kapena palibe ndalama zokwanira), ndiye kuti chipangizo choterocho chikhoza kulumikizidwa ndi Wi-Fi pogwiritsa ntchito malangizo awa:
- dinani chizindikiro "Emergency call"
- imbani *#*#7378423#*#*
- kusankha Service Test - Wlan
- kulumikizana ndi netiweki ya Wi-Fi yomwe ilipo [5]
Malangizo a Chitetezo: musaiwale kugwiritsa ntchito kutsimikizika kwazinthu ziwiri kulikonse kumene kuli kotheka, ndipo pakadali pano, ndibwino ndi ulalo wogwiritsa ntchito, osati ma code kudzera pa SMS.
Njira 19: akaunti ya alendo
Zida zam'manja zomwe zimagwiritsa ntchito Android 5 ndi pamwambapa zitha kukhala ndi maakaunti angapo. Zambiri zaakaunti sizingatsekedwe ndi PIN kapena pateni. Kuti musinthe, muyenera dinani chizindikiro cha akaunti pakona yakumanja yakumanja ndikusankha akaunti ina:
Pa akaunti yowonjezera, mwayi wopeza deta kapena mapulogalamu ena akhoza kukhala oletsedwa.
Malangizo a Chitetezo: ndikofunikira kusintha OS. M'mitundu yamakono ya Android (9 mpaka Julayi 2020), akaunti ya alendo nthawi zambiri simapereka zosankha.
Njira 20: ntchito zapadera
Makampani omwe amapanga mapulogalamu apadera azamalamulo, mwa zina, amapereka ntchito zotsegula zida zam'manja ndikuchotsamo zidziwitso [20, 21]. Mwayi wa mautumiki otere ndi osangalatsa chabe. Atha kugwiritsidwa ntchito kuti atsegule mitundu yapamwamba yazida za Android ndi iOS, komanso zida zomwe zili munjira yobwezeretsa (zomwe chipangizocho chimalowera chitatha kupitilira kuchuluka kwa zoyesa zolowera mawu achinsinsi). Kuipa kwa njirayi ndi kukwera mtengo.
Kagawo kakang'ono kuchokera patsamba latsamba la Cellebrite lomwe limafotokoza zida zomwe angapezeko deta. Chipangizocho chitha kutsegulidwa mu labotale ya wopanga (Cellebrite Advanced Service (CAS)) [20]:
Pantchito yotereyi, chipangizocho chiyenera kuperekedwa ku ofesi yachigawo (kapena mutu) wa kampaniyo. Kuchoka kwa katswiri kwa kasitomala ndizotheka. Monga lamulo, kuphwanya code loko yotchinga kumatenga tsiku limodzi.
Malangizo a Chitetezo: ndizosatheka kudziteteza, kupatula kugwiritsa ntchito mawu achinsinsi a alphanumeric komanso kusintha kwapachaka kwa zida.
Akatswiri a PS Group-IB Laboratory amalankhula za milandu iyi, zida ndi zina zambiri zothandiza pantchito yaukadaulo wamakompyuta ngati gawo la maphunziro. . Akamaliza maphunziro a masiku 5 kapena 7, omaliza maphunziro azitha kuchita bwino kwambiri kafukufuku wazamalamulo ndikuletsa zochitika za cyber m'mabungwe awo.
Ntchito ya PPS zachitetezo chazidziwitso, obera, APT, kuwukira kwa cyber, scammers ndi achifwamba. Kufufuza kwapang'onopang'ono, milandu yothandiza pogwiritsa ntchito matekinoloje a Gulu-IB ndi malingaliro amomwe mungakhalire ozunzidwa. Lumikizani!
Zotsatira
- Guixin Yey, Zhanyong Tang, Dingyi Fangy, Xiaojiang Cheny, Kwang Kimz, Ben Taylorx, Zheng Wang.
- Dominic Casciani, Gaetan Portal.
- Anatoly Alizar.
- Maria Nefedova.
- Anton Makarov. Lambalala dzina lachinsinsi pazida za Android
- Jeremy Kirby.
- Andrey Smirnov.
- Maria Nefedova.
Source: www.habr.com