{"id":99236,"date":"2021-02-22T22:22:43","date_gmt":"2021-02-22T20:22:43","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-passwdqc-2-0-0-s-podderzhkoj-vneshnih-filtrov"},"modified":"2021-02-22T22:22:43","modified_gmt":"2021-02-22T20:22:43","slug":"vypusk-passwdqc-2-0-0-s-podderzhkoj-vneshnih-filtrov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/vypusk-passwdqc-2-0-0-s-podderzhkoj-vneshnih-filtrov","title":{"rendered":"Lan\u00e7amento do passwdqc 2.0.0 com suporte a filtros externos","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Foi lan\u00e7ada uma nova vers\u00e3o do passwdqc \u2014 um conjunto de ferramentas para controle da complexidade de senhas e frases de senha, que inclui o m\u00f3dulo pam_passwdqc, os programas pwqcheck, pwqfilter (adicionado nesta vers\u00e3o) e pwqgen para uso manual ou em scripts, al\u00e9m da biblioteca libpasswdqc. Suporte tanto para sistemas com PAM (a maioria dos Linux, FreeBSD, DragonFly BSD, Solaris, HP-UX), quanto sem PAM (o interface passwordcheck em OpenBSD \u00e9 suportado, uma camada para uso do pwqcheck a partir do PHP est\u00e1 dispon\u00edvel, existe uma vers\u00e3o paga para Windows, e os programas e a biblioteca tamb\u00e9m podem ser utilizados em outros sistemas) <\/p>\n

Comparado com vers\u00f5es anteriores, foi adicionada a suportabilidade a arquivos externos de filtragem de senhas, incluindo bin\u00e1rios, que atualmente s\u00e3o implementa\u00e7\u00f5es de um filtro de cuco aprimorado. Esse filtro garantidamente n\u00e3o deixar\u00e1 passar nenhuma das senhas proibidas, mas pode ocasionalmente levar a falsos positivos, cuja probabilidade nas configura\u00e7\u00f5es e algoritmos utilizados no passwdqc \u00e9 desprezivelmente baixa. A verifica\u00e7\u00e3o de uma senha no filtro requer no m\u00e1ximo duas leituras aleat\u00f3rias do disco, o que \u00e9 muito r\u00e1pido e, geralmente, n\u00e3o causa carga excessiva. servidor<\/a>. <\/p>\n

Para criar e trabalhar com filtros bin\u00e1rios no passwdqc, foi adicionado o programa pwqfilter. Ele pode criar um filtro tanto a partir de uma lista de senhas quanto de seus hashes MD4 ou NTLM. A suportabilidade de hashes NTLM permite a importa\u00e7\u00e3o de senhas da lista HIBP (Pwned Passwords), distribu\u00edda dessa forma. Foi investido muito esfor\u00e7o na otimiza\u00e7\u00e3o do pwqfilter em termos de desempenho, compacta\u00e7\u00e3o dos filtros gerados e n\u00edvel de falsos positivos. Por exemplo, criar um filtro de cuco com uma taxa de preenchimento de 98% a partir do arquivo pwned-passwords-ntlm-ordered-by-hash-v7.txt com tamanho de 21 GiB (22 GB) e contendo mais de 613 milh\u00f5es de linhas leva cerca de 8 minutos em um processador Core i7-4770K. O filtro resultante ocupa 2,3 GiB (2,5 GB) e tem uma taxa de falsos positivos de cerca de 1 em 1,15 bilh\u00f5es. Com uma taxa de preenchimento alvo menor, o filtro pode ser criado muito mais r\u00e1pido e ter\u00e1 uma taxa de falsos positivos ainda mais baixa, mas seu tamanho ser\u00e1 maior. <\/p>\n

O passwdqc trabalha muito bem na preven\u00e7\u00e3o do uso de senhas fracas, mesmo sem o uso de arquivos externos. A implementa\u00e7\u00e3o deles pode aumentar ainda mais a efic\u00e1cia do passwdqc, causando praticamente nenhum inconveniente adicional aos usu\u00e1rios, ou pode permitir a flexibiliza\u00e7\u00e3o de outras restri\u00e7\u00f5es. A verifica\u00e7\u00e3o de senhas escolhidas pelos usu\u00e1rios por meio de vazamentos conhecidos \u00e9 recomendada pelo NIST. Para o projeto Openwall, esta \u00e9 uma oportunidade potencial de financiar o desenvolvimento do passwdqc (e n\u00e3o apenas isso) atrav\u00e9s da venda de filtros prontos, sem restringir os usu\u00e1rios de criar seus pr\u00f3prios filtros usando o programa pwqfilter disponibilizado sob uma licen\u00e7a livre. <\/p>\n

O pwqfilter trabalha com strings arbitr\u00e1rias e pode ser utilizado como uma alternativa ao grep para diversos fins, mesmo aqueles n\u00e3o relacionados a senhas e seguran\u00e7a. Considerando isso, o pwqfilter tem v\u00e1rias op\u00e7\u00f5es semelhantes \u00e0s dispon\u00edveis no grep, evita usar nomes de op\u00e7\u00f5es que contradigam os do grep e utiliza os mesmos c\u00f3digos de retorno do grep. <\/p>\n

Para tarefas em que falsos positivos s\u00e3o extremamente indesej\u00e1veis, seu n\u00edvel pode ser reduzido, por exemplo, para um por quintilh\u00e3o (um bilh\u00e3o de bilh\u00f5es) com um fator de carga de at\u00e9 44%. (Um filtro de Cuckoo cl\u00e1ssico n\u00e3o proporciona uma redu\u00e7\u00e3o t\u00e3o significativa na taxa de falsos positivos com a diminui\u00e7\u00e3o do fator de carga. No passwdqc, isso \u00e9 alcan\u00e7ado por melhorias no algoritmo).
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f passwdqc — \u043d\u0430\u0431\u043e\u0440\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438 \u043f\u0430\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0440\u0430\u0437, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u043c\u043e\u0434\u0443\u043b\u044c pam_passwdqc, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b pwqcheck, pwqfilter (\u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u044d\u0442\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438) \u0438 pwqgen \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u0438\u043b\u0438 \u0438\u0437 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 libpasswdqc. \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 PAM (\u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e Linux, FreeBSD, DragonFly BSD, Solaris, HP-UX), \u0442\u0430\u043a \u0438 \u0431\u0435\u0437 PAM (\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 passwordcheck […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-99236","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Lan\u00e7amento do passwdqc 2.0.0 com suporte a filtros externos | ProHoster","description":"Foi lan\u00e7ada uma nova vers\u00e3o do passwdqc - um conjunto de ferramentas para controle de complexidade de senhas e frases de senha, incluindo o m\u00f3dulo pam_passwdqc, os programas pwqcheck, pwqfilter (adicionado nesta vers\u00e3o) e pwqgen.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/vypusk-passwdqc-2-0-0-s-podderzhkoj-vneshnih-filtrov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a passwdqc 2.0.0 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0444\u0438\u043b\u044c\u0442\u0440\u043e\u0432 | ProHoster","og:description":"\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f passwdqc - \u043d\u0430\u0431\u043e\u0440\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438 \u043f\u0430\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0440\u0430\u0437, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u043c\u043e\u0434\u0443\u043b\u044c pam_passwdqc, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b pwqcheck, pwqfilter (\u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u044d\u0442\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438) \u0438 pwqgen \u0434\u043b\u044f.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/vypusk-passwdqc-2-0-0-s-podderzhkoj-vneshnih-filtrov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-02-22T20:22:43+00:00","article:modified_time":"2021-02-22T20:22:43+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"99236","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[],"defaultGraph":"","defaultPostTypeGraph":""},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 09:53:59","updated":"2026-02-22 15:29:50","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/99236","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=99236"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/99236\/revisions"}],"predecessor-version":[{"id":162219,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/99236\/revisions\/162219"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=99236"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=99236"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=99236"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}