{"id":91733,"date":"2020-08-17T19:42:21","date_gmt":"2020-08-17T17:42:21","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/doklad-soveta-bezopasnosti-tor-vredonosnye-vyhodnye-uzly-ispolzovali-sslstrip"},"modified":"2020-08-17T19:42:21","modified_gmt":"2020-08-17T17:42:21","slug":"doklad-soveta-bezopasnosti-tor-vredonosnye-vyhodnye-uzly-ispolzovali-sslstrip","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/doklad-soveta-bezopasnosti-tor-vredonosnye-vyhodnye-uzly-ispolzovali-sslstrip","title":{"rendered":"Raportul consiliului de securitate Tor: nodurile de ie\u0219ire mali\u021bioase au folosit sslstrip.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"


\n \"Raportul<\/p>\n

<\/a><\/p>\n

<\/p>\n

Esenta celor \u00eent\u00e2mplate<\/b><\/p>\n

\u00cen mai 2020, a fost descoperit un grup de noduri de ie\u0219ire care intervenea \u00een conexiunile de ie\u0219ire. \u00cen special, acestea l\u0103sau aproape toate conexiunile netulburate, dar interceptau conexiunile c\u0103tre un num\u0103r mic de burse de criptomonede. Dac\u0103 utilizatorii vizitau versiunea HTTP a site-ului (adic\u0103, necriptat\u0103 \u0219i neautentificat\u0103), nodurile mali\u021bioase preveneau redirec\u021bionarea c\u0103tre versiunea HTTPS (adic\u0103, criptat\u0103 \u0219i autentificat\u0103). Dac\u0103 utilizatorul nu observa substitu\u021bia (de exemplu, absen\u021ba semnului de lac\u0103t \u00een browser) \u0219i \u00eencepea s\u0103 transmit\u0103 informa\u021bii importante, aceste informa\u021bii puteau fi interceptate de atacator.<\/p>\n

Proiectul Tor a exclus aceste noduri din re\u021bea \u00een mai 2020. \u00cen iulie 2020 a fost descoperit\u0103 o nou\u0103 grupare de relayoare care desf\u0103\u0219urau un atac similar, dup\u0103 care au fost, de asemenea, excluse. P\u00e2n\u0103 \u00een prezent, nu este clar dac\u0103 au fost atacate cu succes vreo utilizator, dar av\u00e2nd \u00een vedere amploarea atacului \u0219i faptul c\u0103 atacatorul a repetat tentativa (prima situa\u021bie a afectat 23% din capacitatea total\u0103 a nodurilor de ie\u0219ire, a doua aproximativ 19%), este rezonabil s\u0103 presupunem c\u0103 infractorul a considerat c\u0103 costurile atacului sunt justificate.<\/p>\n

Acest incident este un bun reminder c\u0103 cererile HTTP nu sunt criptate \u0219i neautentificate, \u0219i din acest motiv r\u0103m\u00e2n vulnerabile. Tor Browser vine cu o extensie HTTPS-Everywhere, special conceput\u0103 pentru a preveni astfel de atacuri, dar eficien\u021ba sa este limitat\u0103 de lista de site-uri care nu acoper\u0103 toate site-urile din lume. Utilizatorii care viziteaz\u0103 versiunile HTTP ale site-urilor vor fi \u00eentotdeauna expu\u0219i riscului.<\/p>\n

Prevenirea unor astfel de atacuri \u00een viitor<\/b><\/p>\n

Metodele de prevenire a atacurilor se \u00eempart \u00een dou\u0103 p\u0103r\u021bi: prima include m\u0103surile pe care le pot lua utilizatorii \u0219i administratorii de site-uri pentru a-\u0219i \u00eent\u0103ri securitatea, \u00een timp ce a doua se refer\u0103 la identificarea \u0219i detectarea \u00een timp util a nodurilor mali\u021bioase din re\u021bea.<\/p>\n

Ac\u021biuni recomandate din partea site-urilor: <\/p>\n

1. Activarea HTTPS (certificatul gratuit este oferit Let’s Encrypt<\/a>) <\/p>\n

<\/noindex><\/p>\n

2. Ad\u0103ugarea de reguli de redirec\u021bionare \u00een lista HTTPS-Everywhere, astfel \u00eenc\u00e2t utilizatorii s\u0103 poat\u0103 stabili proactiv o conexiune sigur\u0103, \u00een loc s\u0103 se bazeze pe redirec\u021bion\u0103ri dup\u0103 stabilirea unei conexiuni nesigure. \u00cen plus, dac\u0103 administra\u021bia serviciilor web dore\u0219te s\u0103 evite complet interac\u021biunea cu nodurile de ie\u0219ire, aceasta poate furniza o versiune onion a site-ului<\/a>.<\/p>\n

<\/noindex><\/p>\n

\u00cen prezent, proiectul Tor ia \u00een considerare dezactivarea complet\u0103 a HTTP-ului nesecurizat \u00een Tor Browser. Acum c\u00e2\u021biva ani, o astfel de m\u0103sur\u0103 p\u0103rea de neimaginat (prea multe resurse aveau doar HTTP nesecurizat), dar cu HTTPS-Everywhere \u0219i cu viitoarea versiune Firefox exist\u0103 o posibilitate experimental\u0103 de a utiliza HTTPS \u00een mod implicit pentru prima conexiune, av\u00e2nd op\u021biunea de a reveni la HTTP dac\u0103 este necesar. Este \u00eenc\u0103 neclar cum va afecta acest approach utilizatorii Tor Browser, a\u0219a c\u0103 va fi testat mai \u00eent\u00e2i la niveluri de securitate mai ridicate ale browserului (iconi\u021b\u0103 de scut).<\/p>\n

Din partea re\u021belei Tor exist\u0103 voluntari care observ\u0103 comportamentul relayoarelor \u0219i raporteaz\u0103 incidentele, datorit\u0103 c\u0103rora nodurile d\u0103un\u0103toare pot fi excluse de serverele de catalogare. De\u0219i astfel de rapoarte sunt de obicei analizate rapid \u0219i nodurile d\u0103un\u0103toare sunt deconectate imediat dup\u0103 descoperire, resursele pentru monitorizarea constant\u0103 a re\u021belei sunt insuficiente. Dac\u0103 a\u021bi reu\u0219it s\u0103 descoperi\u021bi un relayoar d\u0103un\u0103tor - pute\u021bi raporta acest lucru proiectului, instruc\u021biunile. sunt disponibile la acest link<\/a>.<\/p>\n

<\/noindex><\/p>\n

Abordarea actual\u0103 are dou\u0103 probleme fundamentale: <\/p>\n

1. \u00cen evaluarea unui releu necunoscut, este greu de dovedit mali\u021biozitatea acestuia. Dac\u0103 nu s-au observat atacuri din partea sa, ar trebui s\u0103 r\u0103m\u00e2n\u0103 acolo? Atacurile \u00een mas\u0103, care afecteaz\u0103 mul\u021bi utilizatori, sunt mai u\u0219or de detectat, dar dac\u0103 atacurile afecteaz\u0103 doar un num\u0103r mic de site-uri \u0219i utilizatori, atacatorul poate ac\u021biona preventiv<\/a>Re\u021beaua Tor \u00een sine const\u0103 din mii de relayoare situate \u00een \u00eentreaga lume, iar aceast\u0103 diversitate (\u0219i descentralizarea rezultat\u0103) este unul dintre punctele ei forte. <\/p>\n

<\/noindex><\/p>\n

2. \u00cen evaluarea unui grup de relee necunoscute, este greu de dovedit interconectivitatea acestora (adic\u0103, efectueaz\u0103 atacuri Sybil<\/a>). Mul\u021bi operatori de retransmisie voluntari aleg acelea\u0219i re\u021bele ieftine pentru g\u0103zduire, precum Hetzner, OVH, Online, Frantech, Leaseweb etc., \u0219i dac\u0103 se vor descoperi mai mul\u021bi retransmi\u021b\u0103tori noi, va fi dificil s\u0103 se determine clar dac\u0103 au ap\u0103rut mai mul\u021bi operatori noi sau doar unul, care administreaz\u0103 to\u021bi noii retransmi\u021b\u0103tori.<\/p>\n

<\/noindex><\/noindex><\/p>\n

Sursa: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u0443\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u0434\u0448\u0435\u0433\u043e \u0412 \u043c\u0430\u0435 2020 \u0433\u043e\u0434\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0433\u0440\u0443\u043f\u043f\u0430 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0445 \u0443\u0437\u043b\u043e\u0432, \u0432\u043c\u0435\u0448\u0438\u0432\u0430\u0432\u0448\u0438\u0445\u0441\u044f \u0432 \u0438\u0441\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f. \u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043e\u043d\u0438 \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0438 \u043d\u0435\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u043c\u0438 \u043f\u043e\u0447\u0442\u0438 \u0432\u0441\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f, \u043d\u043e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u043b\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u043c\u0443 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0443 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u043d\u044b\u0445 \u0431\u0438\u0440\u0436. \u0415\u0441\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u0441\u0435\u0449\u0430\u043b\u0438 HTTP-\u0432\u0435\u0440\u0441\u0438\u044e \u0441\u0430\u0439\u0442\u0430 (\u0442.\u0435. \u043d\u0435\u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0438 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e), \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0443\u0437\u043b\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0430\u043b\u0438 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0430 HTTPS-\u0432\u0435\u0440\u0441\u0438\u044e (\u0442.\u0435. \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e). \u0415\u0441\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043d\u0435 \u0437\u0430\u043c\u0435\u0447\u0430\u043b \u043f\u043e\u0434\u043c\u0435\u043d\u044b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":91734,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-91733","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Raportul consiliului de securitate Tor: nodurile de ie\u0219ire mali\u021bioase au folosit sslstrip. | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/doklad-soveta-bezopasnosti-tor-vredonosnye-vyhodnye-uzly-ispolzovali-sslstrip","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0414\u043e\u043a\u043b\u0430\u0434 \u0441\u043e\u0432\u0435\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Tor: \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435 \u0443\u0437\u043b\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 sslstrip. | ProHoster","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/doklad-soveta-bezopasnosti-tor-vredonosnye-vyhodnye-uzly-ispolzovali-sslstrip","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-17T17:42:21+00:00","article:modified_time":"2020-08-17T17:42:21+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"91733","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:22:22","updated":"2022-10-05 06:28:17","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/91733","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=91733"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/91733\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/91734"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=91733"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=91733"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=91733"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}