{"id":99587,"date":"2021-03-27T10:22:57","date_gmt":"2021-03-27T08:22:57","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vo-freebsd-13-chut-ne-okazalas-halturnaya-realizacziya-wireguard-s-narusheniem-liczenzii-i-uyazvimostyami"},"modified":"2021-03-27T10:22:57","modified_gmt":"2021-03-27T08:22:57","slug":"vo-freebsd-13-chut-ne-okazalas-halturnaya-realizacziya-wireguard-s-narusheniem-liczenzii-i-uyazvimostyami","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/vo-freebsd-13-chut-ne-okazalas-halturnaya-realizacziya-wireguard-s-narusheniem-liczenzii-i-uyazvimostyami","title":{"rendered":"\u00cen FreeBSD 13 a existat o implementare nesatisf\u0103c\u0103toare a WireGuard, cu \u00eenc\u0103lc\u0103ri de licen\u021b\u0103 \u0219i vulnerabilit\u0103\u021bi.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Din baza de cod pe care s-a fundamentat lansarea FreeBSD 13, a fost eliminat, cu scandal, codul implement\u0103rii protocolului VPN WireGuard, dezvoltat la cererea companiei Netgate, f\u0103r\u0103 consultarea dezvoltatorilor originali ai WireGuard, \u0219i deja inclus \u00een versiunile stabile ale distribu\u021biei pfSense. Dup\u0103 o verificare a codului efectuat\u0103 de Jason A. Donenfeld, autorul original al WireGuard, s-a constatat c\u0103 implementarea propus\u0103 pentru FreeBSD era un exemplu de cod de calitate inferioar\u0103, plin de dep\u0103\u0219iri de buffer \u0219i \u00eenc\u0103lc\u00e2nd licen\u021ba GPL. <\/p>\n

Implementarea a prezentat deficien\u021be catastrofale \u00een codul criptografiei, o parte a protocolului WireGuard a fost omis\u0103, au fost prezente erori care duceau la crash-uri de kernel \u0219i la ocolirea metodelor de protec\u021bie, iar pentru datele de intrare au fost folosite buffere de dimensiuni fixe. Despre calitatea codului prea multe spun prezen\u021ba stub-urilor \u00een loc de verific\u0103ri, care returneaz\u0103 mereu valoarea \u201etrue\u201d, precum \u0219i printf-uri de debug uitate care afi\u0219eaz\u0103 parametrii utiliza\u021bi pentru criptare \u0219i utilizarea func\u021biei sleep pentru a preveni condi\u021biile de competi\u021bie. <\/p>\n

Unele p\u0103r\u021bi din cod, cum ar fi func\u021bia crypto_xor, au fost transferate, \u00een \u00eenc\u0103lcarea licen\u021bei GPL, din implementarea WireGuard dezvoltat\u0103 pentru Linux. \u00cen final, Jason Donenfeld \u00eempreun\u0103 cu Kyle Evans \u0219i Matt Dunwoodie, autorul portului WireGuard pentru OpenBSD, s-au apucat de refacerea implement\u0103rii problematice \u0219i \u00een decurs de o s\u0103pt\u0103m\u00e2n\u0103 au \u00eenlocuit complet tot codul dezvoltat de Netgate. Varianta ref\u0103cut\u0103 a fost lansat\u0103 sub form\u0103 de set de patch-uri, plasat\u0103 \u00een depozitul proiectului WireGuard \u0219i p\u00e2n\u0103 acum nu a fost inclus\u0103 \u00een FreeBSD. <\/p>\n

Este interesant c\u0103, ini\u021bial, nimic nu prevestea problemele. Compania Netgate, care dorea s\u0103 integreze WireGuard \u00een distribu\u021bia pfSense, l-a angajat pe Matthew Macy, un expert \u00een nucleul \u0219i stiva de re\u021bea FreeBSD, implicat \u00een corectarea erorilor \u0219i av\u00e2nd experien\u021b\u0103 \u00een dezvoltarea driverelor de re\u021bea pentru acest sistem de operare. Macy a avut un program flexibil, f\u0103r\u0103 termene limit\u0103 \u0219i verific\u0103ri intermediare. Dezvoltatorii care au colaborat cu Macy pe FreeBSD l-au descris ca pe un programator talentat \u0219i profesionist, care nu f\u0103cea mai multe gre\u0219eli dec\u00e2t al\u021bii \u0219i reac\u021biona adecvat la critici. Calitatea slab\u0103 a codului implement\u0103rii WireGuard pentru FreeBSD a fost o surpriz\u0103 pentru ei. <\/p>\n

Dup\u0103 9 luni de munc\u0103, \u00een decembrie anul trecut, Macy a ad\u0103ugat implementarea sa \u00een ramura HEAD, utilizat\u0103 pentru generarea versiunii FreeBSD 13, f\u0103r\u0103 a finaliza revizuirea \u0219i testarea din partea participan\u021bilor externi. Dezvoltarea a fost realizat\u0103 f\u0103r\u0103 interac\u021biune cu dezvoltatorii originali ai WireGuard \u0219i porturilor pentru OpenBSD \u0219i NetBSD. \u00cen februarie, compania Netgate a integrat WireGuard \u00een versiunea stabil\u0103 pfSense 2.5.0 \u0219i a \u00eenceput livrarea firewall-urilor pe baza acesteia. Dup\u0103 identificarea problemelor, codul WireGuard a fost eliminat din pfSense. <\/p>\n

\u00cen codul ad\u0103ugat au fost identificate vulnerabilit\u0103\u021bi critice, care au fost utilizate \u00een exploat\u0103ri 0-day. Totu\u0219i, Netgate nu a recunoscut ini\u021bial existen\u021ba acestor vulnerabilit\u0103\u021bi \u0219i a \u00eencercat s\u0103-l acuze pe dezvoltatorul original al WireGuard de atacuri \u0219i prejudec\u0103\u021bi, ceea ce a afectat negativ reputa\u021bia sa. Dezvoltatorul portului a negat ini\u021bial acuza\u021biile legate de calitatea codului, consider\u00e2ndu-le exagerate, \u00eens\u0103 dup\u0103 demonstrarea erorilor, a recunoscut c\u0103 cea mai important\u0103 problem\u0103 era lipsa unei revizuiri adecvate a calit\u0103\u021bii codului \u00een FreeBSD, deoarece problemele au r\u0103mas neobservate timp de c\u00e2teva luni (reprezentan\u021bii Netgate au men\u021bionat c\u0103 revizuirea public\u0103 a fost lansat\u0103 \u00eenc\u0103 din august 2020, dar dezvoltatorii individuali ai FreeBSD au observat c\u0103 revizuirea \u00een Phabricator a fost \u00eenchis\u0103 de Macy f\u0103r\u0103 a fi realizat\u0103 \u0219i ignor\u00e2nd comentariile). Echipa FreeBSD Core Team a reac\u021bionat la incident promi\u021b\u00e2nd s\u0103 \u00eembun\u0103t\u0103\u021beasc\u0103 procesele de verificare a codului. <\/p>\n

Matthew Maisey, dezvoltatorul portului problematic pentru FreeBSD, a comentat situa\u021bia spun\u00e2nd c\u0103 a f\u0103cut o mare gre\u0219eal\u0103 accept\u00e2nd s\u0103 lucreze la acest proiect, fiind nepreg\u0103tit s\u0103-l realizeze. Rezultatul ob\u021binut de Maisey este explicat prin epuizarea emo\u021bional\u0103 \u0219i prin efectele problemelor ap\u0103rute din cauza sindromului post-COVID. De asemenea, Maisey nu a g\u0103sit curajul de a renun\u021ba la angajamentele deja asumate \u0219i a \u00eencercat s\u0103 duc\u0103 proiectul la bun sf\u00e2r\u0219it. <\/p>\n

Starea lui Maisey a fost, de asemenea, influen\u021bat\u0103 de recentul s\u0103u termen de \u00eenchisoare, pe care l-a primit pentru fapte ilegale \u00een \u00eencercarea de a evacua chiria\u0219ii din casa achizi\u021bionat\u0103 de el, care refuzau s\u0103 p\u0103r\u0103seasc\u0103 locuin\u021ba \u00een mod voluntar. \u00cempreun\u0103 cu so\u021bia sa, au t\u0103iat grinzi de suport \u0219i au f\u0103cut g\u0103uri \u00een podea pentru a face casa nelocuibil\u0103, \u00eencerc\u00e2nd totodat\u0103 s\u0103 intimideze chiria\u0219ii, au spart apartamentele \u00eenchiriate \u0219i au furat bunurile acestora (ac\u021biunea a fost calificat\u0103 drept furt prin efrac\u021bie). Pentru a evita responsabilitatea pentru faptele comise, Maisey \u0219i so\u021bia sa au fugit \u00een Italia, dar au fost extradati \u00een SUA \u0219i au stat mai bine de patru ani \u00een \u00eenchisoare.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0437 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u044b, \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 FreeBSD 13, \u0431\u044b\u043b \u0441\u043e \u0441\u043a\u0430\u043d\u0434\u0430\u043b\u043e\u043c \u0443\u0434\u0430\u043b\u0451\u043d \u043a\u043e\u0434 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 VPN WireGuard, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0439 \u043f\u043e \u0437\u0430\u043a\u0430\u0437\u0443 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Netgate \u0431\u0435\u0437 \u043a\u043e\u043d\u0441\u0443\u043b\u044c\u0442\u0430\u0446\u0438\u0439 \u0441 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e WireGuard, \u0438 \u0443\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u043e\u0439 \u0432 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 pfSense. \u041f\u043e\u0441\u043b\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043a\u043e\u0434\u0430 \u0414\u0436\u0435\u0439\u0441\u043e\u043d\u043e\u043c \u0414\u043e\u043d\u0435\u043d\u0444\u0438\u043b\u0434\u043e\u043c (Jason A. Donenfeld), \u0430\u0432\u0442\u043e\u0440\u043e\u043c \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u043e\u0433\u043e WireGuard, \u0432\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u0430\u044f \u0434\u043b\u044f FreeBSD […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-99587","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u00cen FreeBSD 13 aproape a fost inclus\u0103 o implementare necorect\u0103 a WireGuard, cu \u00eenc\u0103lc\u0103ri de licen\u021b\u0103 \u0219i vulnerabilit\u0103\u021bi | ProHoster","description":"Din baza de cod pe care s-a fundamentat lansarea FreeBSD 13, a fost eliminat scandalos codul care implementa protocolul VPN WireGuard, dezvoltat la comand\u0103 pentru compania Netgate, f\u0103r\u0103 consultarea dezvoltatorilor.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/vo-freebsd-13-chut-ne-okazalas-halturnaya-realizacziya-wireguard-s-narusheniem-liczenzii-i-uyazvimostyami","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u043e FreeBSD 13 \u0447\u0443\u0442\u044c \u043d\u0435 \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0445\u0430\u043b\u0442\u0443\u0440\u043d\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f WireGuard \u0441 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u0435\u043c \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0438 \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 | ProHoster","og:description":"\u0418\u0437 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u044b, \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 FreeBSD 13, \u0431\u044b\u043b \u0441\u043e \u0441\u043a\u0430\u043d\u0434\u0430\u043b\u043e\u043c \u0443\u0434\u0430\u043b\u0451\u043d \u043a\u043e\u0434 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 VPN WireGuard, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0439 \u043f\u043e \u0437\u0430\u043a\u0430\u0437\u0443 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Netgate \u0431\u0435\u0437 \u043a\u043e\u043d\u0441\u0443\u043b\u044c\u0442\u0430\u0446\u0438\u0439 \u0441 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/vo-freebsd-13-chut-ne-okazalas-halturnaya-realizacziya-wireguard-s-narusheniem-liczenzii-i-uyazvimostyami","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-03-27T08:22:57+00:00","article:modified_time":"2021-03-27T08:22:57+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"99587","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-27 08:46:10","updated":"2022-09-28 06:57:15","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/99587","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=99587"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/99587\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=99587"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=99587"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=99587"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}