{"id":99236,"date":"2021-02-22T22:22:43","date_gmt":"2021-02-22T20:22:43","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-passwdqc-2-0-0-s-podderzhkoj-vneshnih-filtrov"},"modified":"2021-02-22T22:22:43","modified_gmt":"2021-02-22T20:22:43","slug":"vypusk-passwdqc-2-0-0-s-podderzhkoj-vneshnih-filtrov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-passwdqc-2-0-0-s-podderzhkoj-vneshnih-filtrov","title":{"rendered":"Lansarea passwdqc 2.0.0 cu suport pentru filtre externe","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A fost lansat\u0103 o nou\u0103 versiune a passwdqc \u2014 un set de instrumente pentru controlul complexit\u0103\u021bii parolelor \u0219i a frazelor de parol\u0103, care include modulul pam_passwdqc, programele pwqcheck, pwqfilter (ad\u0103ugat \u00een aceast\u0103 versiune) \u0219i pwqgen pentru utilizare manual\u0103 sau din scripturi, precum \u0219i biblioteca libpasswdqc. Suport\u0103 at\u00e2t sistemele cu PAM (cea mai mare parte a Linux, FreeBSD, DragonFly BSD, Solaris, HP-UX), c\u00e2t \u0219i cele f\u0103r\u0103 PAM (se suport\u0103 interfa\u021ba passwordcheck \u00een OpenBSD, exist\u0103 un wrapper disponibil pentru utilizarea pwqcheck din PHP, exist\u0103 o versiune pl\u0103tit\u0103 pentru Windows, iar programele \u0219i biblioteca pot fi folosite \u0219i pe alte sisteme). <\/p>\n

Comparativ cu versiunile anterioare, s-a ad\u0103ugat suport pentru fi\u0219iere externe de filtrare a parolelor, inclusiv fi\u0219iere binare, care sunt acum o implementare a unui filtru de tip cuckoo \u00eembun\u0103t\u0103\u021bit. Acest filtru garanteaz\u0103 c\u0103 nu va l\u0103sa s\u0103 treac\u0103 nicio parol\u0103 interzis\u0103, dar poate duce ocazional la fals pozitive, probabilitatea acestora fiind \u00eentr-at\u00e2t de mic\u0103 \u00een configura\u021biile \u0219i algoritmul utilizat \u00een passwdqc. Verificarea parolei pentru a vedea dac\u0103 se afl\u0103 \u00een filtru necesit\u0103 nu mai mult de dou\u0103 acces\u0103ri aleatorii de citire de pe disc, ceea ce este foarte rapid \u0219i, \u00een general, nu genereaz\u0103 o \u00eenc\u0103rcare excesiv\u0103. server<\/a>. <\/p>\n

Pentru a crea \u0219i a lucra cu filtrele binare \u00een passwdqc, a fost ad\u0103ugat programul pwqfilter. Acesta poate crea un filtru fie dintr-o list\u0103 de parole, fie din hash-uri MD4 sau NTLM. Suportul pentru hash-uri NTLM permite importarea parolilor din lista HIBP (Pwned Passwords), distribuit\u0103 \u00een aceast\u0103 form\u0103. S-a depus mult efort \u00een optimizarea pwqfilter-ului pentru performan\u021b\u0103, compactitatea filtrelor ob\u021binute, precum \u0219i nivelul de fals pozitive. De exemplu, crearea unui filtru de tip cuckoo cu un coeficient de utilizare de 98% din fi\u0219ierul pwned-passwords-ntlm-ordered-by-hash-v7.txt de 21 GiB (22 GB) \u0219i care con\u021bine mai mult de 613 milioane de linii dureaz\u0103 aproximativ 8 minute pe procesorul Core i7-4770K. Filtrul rezultat ocup\u0103 2.3 GiB (2.5 GB) \u0219i are un nivel de fals pozitive de aproximativ 1 la 1.15 miliarde. Cu un coeficient de utilizare \u021bintit mai mic, filtrul poate fi creat mult mai repede \u0219i va avea un nivel de fals pozitive \u0219i mai sc\u0103zut, \u00eens\u0103 dimensiunea lui va fi mai mare. <\/p>\n

passwdqc se descurc\u0103 foarte bine \u00een a nu permite parole slabe \u0219i f\u0103r\u0103 utilizarea fi\u0219ierelor externe. Utilizarea acestora poate cre\u0219te eficien\u021ba passwdqc \u0219i mai mult, f\u0103r\u0103 a provoca aproape niciun inconvenient utilizatorilor, sau poate permite sl\u0103birea altor restric\u021bii. Verificarea parolelor alese de utilizatori \u00eempotriva scurgerilor cunoscute este recomandat\u0103 de NIST. Pentru proiectul Openwall, aceasta este o oportunitate poten\u021bial\u0103 de finan\u021bare pentru dezvoltarea passwdqc (\u0219i nu numai) prin v\u00e2nzarea filtrelor gata f\u0103cute, f\u0103r\u0103 a restric\u021biona utilizatorii \u00een a crea filtre personalizate utiliz\u00e2nd programul pwqfilter, eliberat sub o licen\u021b\u0103 liber\u0103. <\/p>\n

pwqfilter lucreaz\u0103 cu \u0219iruri arbitrare \u0219i poate fi utilizat \u00een loc de grep pentru multe scopuri, chiar \u0219i pentru cei care nu sunt legate de parole \u0219i securitate. Av\u00e2nd \u00een vedere acest lucru, pwqfilter are mai multe op\u021biuni similare celor existente \u00een grep, evit\u0103 utilizarea denumirilor de op\u021biuni care ar contrazice cele din grep \u0219i folose\u0219te acelea\u0219i coduri de returnare ca \u00een grep. <\/p>\n

Pentru sarcinile \u00een care alarm\u0103rile false sunt extrem de nedorite, nivelul acestora poate fi redus, de exemplu, la una la quintilion (milion de miliarde) cu un coeficient de \u00eenc\u0103rcare de p\u00e2n\u0103 la 44%. (Filtru clasic cuckoo nu ofer\u0103 o reducere semnificativ\u0103 a nivelului alarm\u0103rilor false atunci c\u00e2nd coeficientul de \u00eenc\u0103rcare este redus. \u00cen passwdqc, acest lucru este realizat prin \u00eembun\u0103t\u0103\u021biri ale algoritmului).
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f passwdqc — \u043d\u0430\u0431\u043e\u0440\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438 \u043f\u0430\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0440\u0430\u0437, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u043c\u043e\u0434\u0443\u043b\u044c pam_passwdqc, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b pwqcheck, pwqfilter (\u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u044d\u0442\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438) \u0438 pwqgen \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u0438\u043b\u0438 \u0438\u0437 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 libpasswdqc. \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 PAM (\u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e Linux, FreeBSD, DragonFly BSD, Solaris, HP-UX), \u0442\u0430\u043a \u0438 \u0431\u0435\u0437 PAM (\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 passwordcheck […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-99236","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Lansare passwdqc 2.0.0 cu suport pentru filtre externe | ProHoster","description":"A fost lansat\u0103 o nou\u0103 versiune passwdqc - un set de instrumente pentru controlul complexit\u0103\u021bii parolelor \u0219i frazelor de parol\u0103, incluz\u00e2nd modulul pam_passwdqc, programele pwqcheck, pwqfilter (ad\u0103ugat \u00een aceast\u0103 versiune) \u0219i pwqgen.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-passwdqc-2-0-0-s-podderzhkoj-vneshnih-filtrov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a passwdqc 2.0.0 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0444\u0438\u043b\u044c\u0442\u0440\u043e\u0432 | ProHoster","og:description":"\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f passwdqc - \u043d\u0430\u0431\u043e\u0440\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438 \u043f\u0430\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0440\u0430\u0437, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u043c\u043e\u0434\u0443\u043b\u044c pam_passwdqc, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b pwqcheck, pwqfilter (\u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u044d\u0442\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438) \u0438 pwqgen \u0434\u043b\u044f.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/vypusk-passwdqc-2-0-0-s-podderzhkoj-vneshnih-filtrov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-02-22T20:22:43+00:00","article:modified_time":"2021-02-22T20:22:43+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"99236","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[],"defaultGraph":"","defaultPostTypeGraph":""},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 09:53:59","updated":"2026-02-22 15:29:50","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/99236","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=99236"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/99236\/revisions"}],"predecessor-version":[{"id":162219,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/99236\/revisions\/162219"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=99236"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=99236"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=99236"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}