{"id":55546,"date":"2020-01-23T00:00:00","date_gmt":"2020-01-22T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/otkryt-kod-klientskih-prilozhenij-protonvpn"},"modified":"2020-02-18T14:03:40","modified_gmt":"2020-02-18T11:03:40","slug":"otkryt-kod-klientskih-prilozhenij-protonvpn","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/otkryt-kod-klientskih-prilozhenij-protonvpn","title":{"rendered":"Codul aplica\u021biilor client pentru ProtonVPN este deschis","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Compania Proton Technologies, care dezvolt\u0103 un serviciu de email securizat \u0219i VPN, a anun\u021bat<\/a><\/noindex> a anun\u021bat codului surs\u0103<\/a><\/noindex> lansarea programelor client ProtonVPN pentru Windows<\/a><\/noindex>, macOS<\/a><\/noindex>, Android<\/a><\/noindex> \u0219i iOS<\/a><\/noindex> (client console Linux a fost deschis ini\u021bial). Codul este disponibil sub licen\u021ba GPLv3. De asemenea, au fost publicate rapoarte de audit independente pentru aplica\u021biile men\u021bionate. Nu au fost g\u0103site probleme care ar putea conduce la decriptarea traficului VPN sau la cre\u0219terea privilegiilor \u00een timpul auditului.<\/a><\/noindex> Codul este deschis \u00een cadrul ini\u021biativei de transparen\u021b\u0103 a proiectului pentru ca exper\u021bi independen\u021bi s\u0103 poat\u0103 verifica conformitatea codului cu specifica\u021biile declarate \u0219i s\u0103 controleze corectitudinea auditului de securitate. \u00cen cadrul colabor\u0103rii cu Mozilla, care<\/p>\n

este un serviciu VPN pl\u0103tit, inginerii Mozilla au avut acces \u0219i la alte tehnologii ale ProtonVPN pentru audit. Se men\u021bioneaz\u0103 c\u0103 urm\u0103torul pas va fi deschiderea altor aplica\u021bii ProtonVPN. dezvolt\u0103<\/a><\/noindex> Printre incidentele anterioare cu ProtonVPN, se poate men\u021biona <\/p>\n

o vulnerabilitate \u00een aplica\u021bia pentru Windows, care permitea utilizatorului s\u0103-\u0219i ridice privilegiile \u00een sistem p\u00e2n\u0103 la administrator (vulnerabilitatea a fost cauzat\u0103 de interac\u021biunea incorect\u0103 \u00eentre clientul GUI neprivilegiat \u0219i serviciul de sistem). amenin\u021b\u0103rilor legate de securitate \u00een software-ul open-source,<\/a><\/noindex> vulnerabilit\u0103\u021bi<\/a><\/noindex> Auditul codului aplica\u021biei pentru Windows, finalizat acum c\u00e2teva zile, a identificat <\/p>\n

4 vulnerabilit\u0103\u021bi (dou\u0103 de gravitate medie \u0219i dou\u0103 minore): stocarea token-urilor de sesiune \u0219i a datelor de autentificare \u00een memoria procesului, cheile serverului VPN predefinite \u00een fi\u0219ierul de configurare (care nu sunt utilizate pentru autentificare), activarea informa\u021biilor de depanare \u0219i acceptarea conexiunilor pe toate interfe\u021bele de re\u021bea.<\/a><\/noindex> \u00cen versiunea pentru <\/p>\n

nu au fost identificate vulnerabilit\u0103\u021bi. \u00cen versiunea pentru iOS au fost g\u0103site dou\u0103 vulnerabilit\u0103\u021bi minore macOS<\/a><\/noindex> (nu se utilizeaz\u0103 leg\u0103tura certificatului SSL \u0219i nu se blocheaz\u0103 func\u021bionarea pe dispozitivele dup\u0103 jailbreak). \u00cen versiunea pentru Android vulnerabilit\u0103\u021bi<\/a><\/noindex> au fost identificate patru probleme minore (activarea mesajelor de depanare, lipsa bloc\u0103rii backup-ului prin utilitarul ADB, criptarea set\u0103rilor cu o cheie predefinit\u0103, lipsa leg\u0103turii certificatului SSL) \u0219i o vulnerabilitate de gravitate medie (\u00eencheierea incomplet\u0103 a sesiunii care permite reutilizarea token-urilor de sesiune). au fost g\u0103site<\/a><\/noindex> patru probleme minore (activarea mesajelor de diagnosticare, absen\u021ba bloc\u0103rii backup-ului cu ajutorul utilitarului ADB, criptarea set\u0103rilor cu o cheie prestabilit\u0103, absen\u021ba leg\u0103turii cu certificatul SSL) \u0219i o vulnerabilitate de severitate medie (\u00eencheiere incomplet\u0103 a sesiunii, permi\u021b\u00e2nd reutilizarea token-urilor de sesiune).<\/p>\n

Amintim c\u0103 Proton Technologies a fost \u00eenfiin\u021bat\u0103 de mai mul\u021bi cercet\u0103tori de la CERN (Organiza\u021bia European\u0103 pentru Cercet\u0103ri Nucleare) \u0219i este \u00eenregistrat\u0103 \u00een elve\u021bia, care are o legisla\u021bie strict\u0103 \u00een domeniul protec\u021biei vie\u021bii private, \u00eempiedic\u00e2nd autorit\u0103\u021bile s\u0103 controleze informa\u021biile. Proiectul ProtonVPN ofer\u0103 un nivel ridicat de protec\u021bie a canalului de comunicare (fluxul este criptat folosind AES-256, schimbul de chei se efectueaz\u0103 pe baza cheilor RSA de 2048 bi\u021bi \u0219i HMAC, autentificarea se face folosind SHA-256, exist\u0103 protec\u021bie \u00eempotriva atacurilor bazate pe corela\u021bia fluxurilor de date), renun\u021b\u0103 la p\u0103strarea jurnalelor \u0219i nu este orientat spre profit, ci spre cre\u0219terea securit\u0103\u021bii \u0219i intimit\u0103\u021bii \u00een web (proiectul este finan\u021bat de fondul FONGIT, sus\u021binut de Comisia European\u0103). <\/p>\n

<\/a><\/noindex><\/p>\n

Sursa: opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Proton Technologies, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0439 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0438 VPN, \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c ProtonVPN \u0434\u043b\u044f Windows, macOS, Android \u0438 iOS (\u043a\u043e\u043d\u0441\u043e\u043b\u044c\u043d\u044b\u0439 Linux-\u043a\u043b\u0438\u0435\u043d\u0442 \u043e\u0442\u043a\u0440\u044b\u0442 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e). \u041a\u043e\u0434 \u043e\u0442\u043a\u0440\u044b\u0442 \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GPLv3. \u041e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043e\u0442\u0447\u0451\u0442\u044b \u043e \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u041f\u0440\u043e\u0431\u043b\u0435\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0435 VPN-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0438\u043b\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0432 \u0445\u043e\u0434\u0435 \u0430\u0443\u0434\u0438\u0442\u0430 \u043d\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-55546","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Codul aplica\u021biilor client ProtonVPN este deschis | ProHoster","description":"Compania Proton Technologies, care dezvolt\u0103 un serviciu de email securizat \u0219i VPN, a anun\u021bat deschiderea","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/otkryt-kod-klientskih-prilozhenij-protonvpn","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0442\u043a\u0440\u044b\u0442 \u043a\u043e\u0434 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 ProtonVPN | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Proton Technologies, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0439 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0438 VPN, \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/otkryt-kod-klientskih-prilozhenij-protonvpn","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-22T21:00:00+00:00","article:modified_time":"2020-02-18T11:03:40+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55546","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:42:37","updated":"2022-10-07 23:49:44","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/55546","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=55546"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/55546\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=55546"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=55546"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=55546"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}