Zomvetsa chisoni ndi satellite chitetezo pa intaneti

Pamsonkhano wotsiriza Black Hat inaperekedwa lipotilo, yodzipatulira ku zovuta zachitetezo mu makina ofikira pa intaneti a satana. Wolemba lipotilo, pogwiritsa ntchito cholandila chotsika mtengo cha DVB, adawonetsa kuthekera koletsa kuchuluka kwa anthu pa intaneti omwe amafalitsidwa kudzera panjira zoyankhulirana za satellite.

Makasitomala amatha kulumikizana ndi satelayiti kudzera pamayendedwe asymmetric kapena ma symmetric. Pankhani ya njira ya asymmetric, magalimoto otuluka kuchokera kwa kasitomala amatumizidwa kudzera mwa wothandizira wapadziko lapansi ndikulandilidwa kudzera pa satellite. Mu maulalo ofananirako, magalimoto otuluka ndi obwera amadutsa pa satellite. Mapaketi otumizidwa kwa kasitomala amatumizidwa kuchokera ku satellite pogwiritsa ntchito kuwulutsa komwe kumaphatikizapo kuchuluka kwa magalimoto kuchokera kwa makasitomala osiyanasiyana, mosasamala za komwe amakhala. Sizinali zovuta kuletsa magalimoto oterowo, koma kuletsa magalimoto obwera kuchokera kwa kasitomala kudzera pa satellite sikunali kophweka.

Kusinthanitsa deta pakati pa satelayiti ndi wothandizira, kufala kwachindunji kumagwiritsidwa ntchito nthawi zambiri, zomwe zimafuna kuti wowukirayo akhale makilomita makumi angapo kuchokera kumalo opangira chithandizo, komanso amagwiritsa ntchito maulendo osiyanasiyana ndi mawonekedwe a encoding, kusanthula komwe kumafuna zipangizo zogulira mtengo. . Koma ngakhale woperekayo akugwiritsa ntchito Ku-band mwachizolowezi, monga lamulo, maulendo a maulendo osiyanasiyana ndi osiyana, zomwe zimafuna kugwiritsa ntchito mbale yachiwiri ya satana ndikuthetsa vuto la kugwirizanitsa mtsinje kuti mutenge mbali zonse ziwiri.

Zinkaganiziridwa kuti kukonzekera kuthamangitsidwa kwa mauthenga a satellite pankafunika zida zapadera, zomwe zimawononga madola masauzande ambiri, koma kwenikweni kuukira koteroko kunachitika pogwiritsa ntchito. wokhazikika DVB-S chochunira cha satellite TV (TBS 6983/6903) ndi mlongoti parabolic. Mtengo wonse wa zida zowukirazo unali pafupifupi $300. Kuti aloze mlongoti pa satelayiti, zidziwitso zopezeka poyera za malo a satelayiti zidagwiritsidwa ntchito, ndikuzindikira njira zoyankhulirana, ntchito yokhazikika yopangidwira kufufuza ma satellite TV. Mlongoti unalozedwera pa satelayiti ndipo ntchito yosanthula inayamba Ku-band.

Makanema adazindikirika pozindikira nsonga zama radio frequency spectrum zomwe zidawoneka ndi phokoso lakumbuyo. Pambuyo pozindikira pachimake, khadi ya DVB idakonzedwa kuti imasulire ndi kujambula chizindikirocho ngati kanema wanthawi zonse wa digito pawailesi yakanema. Mothandizidwa ndi zoyeserera zoyeserera, kuchuluka kwa magalimoto kunatsimikizika ndipo deta yapaintaneti idalekanitsidwa ndi kanema wawayilesi (kufufuza kwa banal kudagwiritsidwa ntchito potaya komwe adatulutsidwa ndi khadi la DVB pogwiritsa ntchito chigoba cha "HTTP", ngati chapezeka, chimaganiziridwa kuti. njira yokhala ndi data ya intaneti idapezeka).

Kafukufuku wamagalimoto adawonetsa kuti onse omwe amawunikidwa pa intaneti sagwiritsa ntchito kubisa mwachisawawa, zomwe zimalola kuti anthu azingoyang'ana mosasamala. Ndizofunikira kudziwa kuti machenjezo okhudzana ndi zovuta zachitetezo pa intaneti pa satellite zosindikizidwa zaka khumi zapitazo, koma kuyambira pamenepo zinthu sizinasinthe, ngakhale kuyambitsidwa kwa njira zatsopano zotumizira deta. Kusintha kwa protocol yatsopano ya GSE (Generic Stream Encapsulation) yophatikizira kuchuluka kwa anthu pa intaneti komanso kugwiritsa ntchito njira zovuta zosinthira monga 32-dimensional amplitude modulation ndi APSK (Phase Shift Keying) sizinapangitse kuukira kukhala kovuta, koma mtengo wa zida zolumikizira. tsopano yatsika kuchoka pa $50000 kufika pa $300.

Chotsalira chachikulu potumiza deta kudzera pa njira zoyankhulirana za satellite ndi kuchedwa kwakukulu kwa paketi (~ 700 ms), komwe kumakhala kokulirapo kachulukidwe kambiri kuposa kuchedwa potumiza mapaketi kudzera panjira zoyankhulirana zapadziko lapansi. Mbaliyi ili ndi zovuta ziwiri zazikulu pachitetezo: kusowa kwa kugwiritsidwa ntchito kwa VPN komanso kusowa kwa chitetezo ku spoofing (packet substitution). Zimadziwika kuti kugwiritsa ntchito VPN kumachepetsa kufala kwa pafupifupi 90%, komwe, poganizira kuchedwa kwakukulu komweko, kumapangitsa VPN kukhala yosagwiritsidwa ntchito ndi ma satellite.

Chiwopsezo cha spoofing chikufotokozedwa ndikuti wowukirayo amatha kumvetsera kwathunthu magalimoto omwe akubwera kwa wozunzidwayo, zomwe zimapangitsa kuti zitheke kudziwa manambala otsatizana m'mapaketi a TCP omwe amazindikiritsa kulumikizana. Mukatumiza paketi yabodza kudzera panjira yapadziko lapansi, zimatsimikizika kuti zifika paketi yeniyeni yotumizidwa kudzera pa tchanelo cha satellite ndikuchedwa kwanthawi yayitali komanso kudutsa wopereka zoyendera.

Zolinga zosavuta zowukira ogwiritsa ntchito ma satelayiti ndi kuchuluka kwa magalimoto a DNS, ma HTTP osadziwika ndi maimelo, omwe nthawi zambiri amagwiritsidwa ntchito ndi makasitomala osasungidwa. Kwa DNS, ndikosavuta kukonza zotumiza mayankho abodza a DNS omwe amalumikiza dera ndi seva ya wowukirayo (wowukirayo atha kuyankha zabodza atangomva pempho la magalimoto, pomwe pempho lenileni liyenera kupitilira kudzera mwa omwe akupereka. satellite traffic). Kusanthula kwa kuchuluka kwa maimelo kumakupatsani mwayi wopeza zinsinsi, mwachitsanzo, mutha kuyambitsa njira yobwezeretsa mawu achinsinsi patsamba lawebusayiti ndikuyang'ana pamayendedwe uthenga wotumizidwa ndi imelo ndi nambala yotsimikizira za ntchitoyi.

Pakuyesa, pafupifupi 4 TB ya data yofalitsidwa ndi ma satelayiti 18 idalumikizidwa. Kukonzekera kogwiritsidwa ntchito muzochitika zina sikunapereke kulumikizidwa kodalirika kwa maulumikizi chifukwa cha chiŵerengero chapamwamba cha phokoso ndi kulandila mapaketi osakwanira, koma chidziwitso chosonkhanitsidwa chinali chokwanira kuti chigwirizane. Zitsanzo zina za zomwe zidapezeka mu data yolandidwa:

• Chidziwitso choyenda ndi ma avionics ena omwe amatumizidwa ku ndege adalandiridwa. Chidziwitsochi sichinangoperekedwa popanda kubisa, komanso munjira yomweyi ndi kuchuluka kwa magalimoto apamtunda, omwe apaulendo amatumiza makalata ndikusakatula masamba.
• Gawo Cookie wa woyang'anira jenereta ya mphepo kum'mwera kwa France, yemwe adalumikizana ndi dongosolo lolamulira popanda kubisa, adagwidwa.
• Kusinthana kwa chidziwitso chokhudzana ndi zovuta zaukadaulo pa tanki yamafuta yaku Egypt kudapezeka. Kuphatikiza pa chidziwitso chakuti sitimayo sidzatha kuyenda panyanja kwa mwezi umodzi, zambiri zinalandiridwa za dzina ndi nambala ya pasipoti ya injiniya yemwe adakonza vutoli.
• Sitimayo inali kutumiza zidziwitso zodziwika bwino za netiweki yake yapa Windows, kuphatikiza ma data olumikizidwa omwe amasungidwa ku LDAP.
• Loya waku Spain adatumizira kasitomalayo kalata yofotokoza za mlandu womwe ukubwera.
• Panthawi yomwe anthu ambiri amapita ku bwato la bilionea wachi Greek, mawu achinsinsi obwezeretsa akaunti omwe amatumizidwa ndi imelo mu mautumiki a Microsoft adagwidwa.

Source: opennet.ru