{"id":102530,"date":"2021-12-09T15:36:49","date_gmt":"2021-12-09T13:36:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-tor-browser-11-0-2-rasshirenie-blokirovki-sajtov-tor-vozmozhnye-ataki-na-tor"},"modified":"2021-12-09T15:36:49","modified_gmt":"2021-12-09T13:36:50","slug":"vypusk-tor-browser-11-0-2-rasshirenie-blokirovki-sajtov-tor-vozmozhnye-ataki-na-tor","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-tor-browser-11-0-2-rasshirenie-blokirovki-sajtov-tor-vozmozhnye-ataki-na-tor","title":{"rendered":"Lansarea Tor Browser 11.0.2. Extensia pentru blocarea site-urilor Tor. Posibile atacuri asupra Tor","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A fost lansat\u0103 versiunea specializat\u0103 a browserului Tor Browser 11.0.2, dedicat\u0103 asigur\u0103rii anonimatului, siguran\u021bei \u0219i intimit\u0103\u021bii. Utiliz\u00e2nd Tor Browser, tot traficul este redirec\u021bionat exclusiv prin re\u021beaua Tor, iar accesul direct prin conexiunea de re\u021bea standard a sistemului curent nu este posibil, ceea ce \u00eempiedic\u0103 urm\u0103rirea adresei IP reale a utilizatorului (\u00een cazul unui atac asupra browserului, atacatorii pot ob\u021bine acces la parametrii sistemului de re\u021bea, astfel c\u0103 pentru a bloca complet posibilele scurgeri, ar trebui folosite produse precum Whonix). Versiunile Tor Browser sunt preg\u0103tite pentru Linux, Windows \u0219i macOS. <\/p>\n

Pentru a asigura o protec\u021bie suplimentar\u0103, Tor Browser include extensia HTTPS Everywhere, care permite criptarea traficului pe toate site-urile unde acest lucru este posibil. Pentru a reduce amenin\u021b\u0103rile provenite din atacurile bazate pe JavaScript \u0219i pentru a bloca pe deplin pluginurile, se furnizeaz\u0103 extensia NoScript. Pentru a combate blocarea \u0219i inspectarea traficului, se folosesc transporturi alternative. Pentru a preveni expunerea caracteristicilor specifice fiec\u0103rui vizitator, API-urile WebGL, WebGL2, WebAudio, Social, SpeechSynthesis, Touch, AudioContext, HTMLMediaElement, Mediastream, Canvas, SharedWorker, WebAudio, Permissions, MediaDevices.enumerateDevices \u0219i screen.orientation sunt dezactivate sau restric\u021bionate, iar func\u021biile de trimitere a telemetriei, Pocket, Reader View, HTTP Alternative-Services, MozTCPSocket, «link rel=preconnect» sunt, de asemenea, dezactivate, fiind modificat libmdns. <\/p>\n

\u00cen noua versiune a fost realizat\u0103 sincronizarea cu baza de cod a versiunii Firefox 91.4.0, \u00een care au fost corectate 15 vulnerabilit\u0103\u021bi, dintre care 10 sunt etichetate ca periculoase. 7 vulnerabilit\u0103\u021bi sunt cauzate de probleme cu gestionarea memoriei, cum ar fi suprasatur\u0103rile buferilor \u0219i accesul la zone de memorie deja eliberate, av\u00e2nd poten\u021bialul de a permite executarea codului mali\u021bios atunci c\u00e2nd sunt deschise pagini special concepute. Din compilarea pentru platforma Linux au fost excluse anumite fonturi ttf, utilizarea c\u0103rora provoca perturb\u0103ri \u00een redarea textului \u00een elementele interfa\u021bei \u00een Fedora Linux. Setarea «network.proxy.allow_bypass», care controleaz\u0103 activitatea protec\u021biei \u00eempotriva utiliz\u0103rii necorespunz\u0103toare a API-ului Proxy \u00een extensii, a fost dezactivat\u0103. Pentru transportul obfs4, un nou gateway «deusexmachina» a fost activat implicit. <\/p>\n

\u00centre timp, povestea despre blocarea Tor \u00een Federa\u021bia Rus\u0103 continu\u0103. Roskomnadzor a modificat \u00een registrul site-urilor interzise masca blocat\u0103 domenii<\/a> de «www.torproject.org» la «*.torproject.org» \u0219i a extins lista de adrese IP care trebuie blocate. Din cauza schimb\u0103rii, majoritatea subdomeniilor proiectului Tor au fost blocate, inclusiv blog.torproject.org, gettor.torproject.org \u0219i support.torproject.org. forum.torproject.net, g\u0103zduit \u00een infrastructura Discourse, r\u0103m\u00e2ne disponibil. gitlab.torproject.org \u0219i lists.torproject.org sunt par\u021bial accesibile, acestea fiind ini\u021bial indisponibile, dar ulterior accesul a fost restabilit, probabil dup\u0103 schimbarea adreselor IP (gitlab este acum direc\u021bionat c\u0103tre gazda gitlab-02.torproject.org). <\/p>\n

Totu\u0219i, nu s-au mai \u00eenregistrat bloc\u0103ri ale gateway-urilor \u0219i nodurilor re\u021belei Tor, precum \u0219i a gazdei ajax.aspnetcdn.com (CDN Microsoft), utilizat\u0103 \u00een transportul meek-asure. Se pare c\u0103 experimentele de blocare a nodurilor re\u021belei Tor au \u00eencetat dup\u0103 blocarea site-ului Tor. Situa\u021bia este complicat\u0103 cu oglinda tor.eff.org, care continu\u0103 s\u0103 func\u021bioneze. Problema este c\u0103 oglinda tor.eff.org este legat\u0103 de acela\u0219i adresa IP<\/a>, care este folosit pentru domeniul eff.org al organiza\u021biei EFF (Electronic Frontier Foundation), astfel c\u0103 blocarea tor.eff.org va conduce la o par\u021bial\u0103 blocare a site-ului cunoscutei organiza\u021bii pentru drepturile omului.

\"Lansarea<\/center> <\/p>\n

De asemenea, merit\u0103 men\u021bionat publicarea unui nou raport despre posibilele \u00eencerc\u0103ri de atacuri de deanonimizare a utilizatorilor Tor, asociate cu grupul KAX17, identificat printr-un email de contact fictiv specific \u00een parametrii nodurilor. \u00cen lunile septembrie \u0219i octombrie, proiectul Tor a blocat 570 de noduri poten\u021bial d\u0103un\u0103toare. \u00cen v\u00e2rf, grupul KAX17 a reu\u0219it s\u0103 controleze 900 de noduri \u00een re\u021beaua Tor, g\u0103zduite de 50 de diferi\u021bi furnizori, ceea ce reprezint\u0103 aproximativ 14% din num\u0103rul total de relaye-uri (spre compara\u021bie, \u00een 2014, atacatorii au reu\u0219it s\u0103 ob\u021bin\u0103 controlul asupra aproape jum\u0103tate din relaye-urile Tor, iar \u00een 2020, asupra 23,95% din nodurile de ie\u0219ire).

\"Lansarea<\/center> <\/p>\n

Plasarea unui num\u0103r mare de noduri controlate de un singur operator permite deanonimizarea utilizatorilor printr-un atac de tip Sybil, care poate fi efectuat dac\u0103 atacatorii controleaz\u0103 primul \u0219i ultimul nod din lan\u021bul de anonimizare. Primul nod din lan\u021bul Tor cunoa\u0219te adresa IP a utilizatorului, iar ultimul \u0219tie adresa IP a resursei solicitate, ceea ce permite deanonimizarea cererii prin ad\u0103ugarea, pe partea nodului de intrare, a unei anumite m\u0103rci ascunse \u00een anteturile pachetelor, care r\u0103m\u00e2n neschimbate pe parcursul \u00eentregului lan\u021b de anonimizare \u0219i analiza acestei m\u0103rci pe partea nodului de ie\u0219ire. \u00cen prezen\u021ba nodurilor de ie\u0219ire controlate, atacatorii pot, de asemenea, s\u0103 fac\u0103 modific\u0103ri \u00een traficul necriptat, cum ar fi eliminarea redirec\u021bion\u0103rilor c\u0103tre versiunile HTTPS ale site-urilor \u0219i interceptarea con\u021binutului necriptat. <\/p>\n

Conform reprezentan\u021bilor re\u021belei Tor, majoritatea nodurilor \u00eendep\u0103rtate \u00een toamn\u0103 au fost folosite doar ca noduri intermediare, neutilizate pentru procesarea cererilor de intrare \u0219i ie\u0219ire. Anumi\u021bi cercet\u0103tori subliniaz\u0103 c\u0103 nodurile apar\u021bineau tuturor categoriilor, iar probabilitatea ca utilizatorul s\u0103 ajung\u0103 la un nod de intrare controlat de grupul KAX17 era de 16%, iar la unul de ie\u0219ire - 5%. Dar chiar dac\u0103 este a\u0219a, probabilitatea global\u0103 ca utilizatorul s\u0103 ajung\u0103 simultan la un nod de intrare \u0219i unul de ie\u0219ire din grupul de 900 de noduri controlate KAX17 este estimat\u0103 la 0,8%. Dovezile directe ale utiliz\u0103rii nodurilor KAX17 pentru atacuri lipsesc, dar astfel de atacuri nu pot fi excluse \u00een mod poten\u021bial.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Tor Browser 11.0.2, \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0441\u0442\u0438, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u043e\u0441\u0442\u0438. \u041f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 Tor Browser \u0432\u0435\u0441\u044c \u0442\u0440\u0430\u0444\u0438\u043a \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0447\u0435\u0440\u0435\u0437 \u0441\u0435\u0442\u044c Tor, \u0430 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u0447\u0435\u0440\u0435\u0437 \u0448\u0442\u0430\u0442\u043d\u043e\u0435 \u0441\u0435\u0442\u0435\u0432\u043e\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0442\u0435\u043a\u0443\u0449\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0447\u0442\u043e \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0442\u0441\u043b\u0435\u0434\u0438\u0442\u044c \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0439 IP-\u0430\u0434\u0440\u0435\u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f (\u0432 \u0441\u043b\u0443\u0447\u0430\u0435 \u0432\u0437\u043b\u043e\u043c\u0430 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c \u0441\u0435\u0442\u0438, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":102531,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-102530","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Lansarea Tor Browser 11.0.2. Extinderea bloc\u0103rii site-urilor Tor. Posibile atacuri asupra Tor | ProHoster","description":"A fost lansat\u0103 versiunea browserului specializat Tor Browser 11.0.2, axat\u0103 pe asigurarea anonimatului, securit\u0103\u021bii \u0219i privatiz\u0103rii.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-tor-browser-11-0-2-rasshirenie-blokirovki-sajtov-tor-vozmozhnye-ataki-na-tor","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a Tor Browser 11.0.2. \u0420\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0435 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0441\u0430\u0439\u0442\u043e\u0432 Tor. \u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 Tor | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u0440\u0435\u043b\u0438\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Tor Browser 11.0.2, \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0441\u0442\u0438, \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u043e\u0441\u0442\u0438.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-tor-browser-11-0-2-rasshirenie-blokirovki-sajtov-tor-vozmozhnye-ataki-na-tor","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-12-09T13:36:50+00:00","article:modified_time":"2021-12-09T13:36:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"102530","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-12-09 13:38:05","updated":"2026-02-11 11:12:05","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/102530","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=102530"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/102530\/revisions"}],"predecessor-version":[{"id":160563,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/102530\/revisions\/160563"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/102531"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=102530"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=102530"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=102530"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}