Kwete VPN chete. Cheat sheet pamusoro pekuzvidzivirira iwe uye data rako

Hei Habr.

Isu isu, VPN sevhisi HideMy.zita. Isu tiri kushanda kwenguva pfupi pagirazi reHideMyna.me. Sei? Musi waChikunguru 20, 2018 Roskomnadzor akatiwedzera kune runyorwa rwezviwanikwa zvinorambidzwa nekuda kwechisarudzo cheMedvedevsky District Court muYoshkar-Ola. Dare rakapa mutongo wekuti vashanyi vesaiti yedu vawane mukana usingaperi wezvinhu zvinonyanyisa #withoutregistrationisms, uye neimwe nzira vakawana bhuku "Mein Kampf" naAdolf Hitler pairi. Sezviri pachena, nokuda kwekuvimbika.

Ichi chisarudzo chakatishamisa zvikuru, asi tinoramba tichishanda pa hidemyna.me, hidemyname.org, .one, .biz, nezvimwewo. Kukakavadzana kwenguva refu neRoskomnadzor hakuna kutungamirira kune chero chigumisiro. Nepo magweta angu neni tichipokana nekuvharisa uye nemutongo wedare remashiripiti, tiri kugoverana newe matipi akakosha ekuchengetedza zvakavanzika paInternet uye nhau nezvenyaya iyi.

Kwete VPN chete. Cheat sheet pamusoro pekuzvidzivirira iwe uye data rako
Edward Snowden anoda National Security Agency (pamwe)

Haisi chakavanzika kuti masevhisi eRussia anozivikanwa haana kuchengetedzeka. Tsamba dzako dzinogona kusvika chero nguva kune vezvemitemo vepamba. Tinokuudza zvaunofanira kuyeuka paunenge uchitaurirana kuburikidza nenzira dzakasiyana dzekutaurirana.

SORM uye ORI

kune zvakawanda zvakasiyana nzira dzekubaya foni yako. Zvepamutemo uye zviri pamutemo - SORM, hurongwa hwehunyanzvi nzira yekuonesa mabasa ekushanda ekuongorora zviitiko. Nemutemo muRussian Federation, vese vanoita zvemaserura vanosungirwa kuti vaise system yakadai pamaPBX avo kana vasingade kurasikirwa nerezinesi. Kune marudzi matatu eSORM: yekutanga yakagadzirwa mu80s, yechipiri yakatanga kushandiswa muma2014s, uye vanga vachiedza kumanikidza yechitatu kune vanoshanda kubva XNUMX. Maererano neRBC, vashandi vakawanda vanoshandisa rudzi rwechipiri, asi mu70% yematambudziko maitiro haashandi zvakanaka kana kuti haashandi zvachose. Nekudaro, zvichiri nani kuti tisakurukure misoro yakaoma parunhare rwepasi kana kuburikidza nekufona nguva dzose kubva parunhare mbozha.

Kwete VPN chete. Cheat sheet pamusoro pekuzvidzivirira iwe uye data rako
Scheme yekushanda kweSORM-2 (Source: mfisoft.ru)

Maererano ne97-FZ, chero vatumwa, masevhisi uye masaiti anoshanda muRussia anofanirwa kuverengerwa murejista. Vanoronga kufambiswa kwemashoko. Ne"Mutemo weYarovayaβ€œVanosungirwa kuchengetedza data rese remushandisi, kusanganisira marekodhi ekufona uye tsamba, kwemwedzi mitanhatu. Nenzira, ARI zvakare ine Habrahabr.

Kushanda kweregistry kunotsanangurwa zvakadzama pano uchishandisa Threema semuenzaniso, asi mhedziso huru ndeiyi: ikozvino, pakukumbirwa nevakuru veRussia, chero ruzivo nezvewe runogona kupedzisira rwave mumatare edzimhosva. Naizvozvo, chinhu chekutanga kuita kuchengetedza zvakavanzika kuendesa mafoni uye meseji kune vatumwa ipapo, izvo zvisiri muARI registry. Kana izvo zviripo, asi ramba kuendesa data kune zviremera - seThreema neTeregiramu.

Rubatsiro: Kungove muregistry yeARI hakuvimbise kuti data racho richaendeswa kune zviremera. Iwe unofanirwa kugara uchitarisa nhau uye kutarisa maitiro emutumwa kana "vauya" kwaari.

Mazwi ekufona uye mameseji

Hurukuro yedu uye mameseji anogona kuchengetedzwa kubva kune wechitatu-bato kukanganiswa nekuguma-kusvika-kumagumo encryption, ndosaka vatumwa vane E2E vachionekwa sevakachengetedzeka zvakanyanya. Asi ichi hachisi chokwadi zvachose: ngatitarisei sarudzo dzakakurumbira.

teregiramu zvitsigiso kuguma-kumagumo encryption muChat Chats yavo uye zvitoro zvakavharidzirwa nezvetsamba yako mugore, iyo yakapararira munyika dzakasiyana dzine "yakachengeteka" masimba. Asi mushure zvinyorwa paHabrΓ© unogona kutanga kukahadzika kunyengera kwekuchengetedzwa kweTeregiramu Passport muE2E kubva kuDurov.

Ehe, Chakavanzika Chats ichiri yakanaka sarudzo yeparanoid. Sevha haina kubatanidzwa mukunyorera kwavo zvachose: mameseji anofambiswa peer-to-peer, ndiko kuti, zvakananga pakati pevatori vechikamu mutsamba. Kuti uwedzere runyararo rwepfungwa, unogona kushandisa iyo timer meseji yekuzviparadza basa. Asi haufanirwe kuvimba neTeregiramu. Kuti uite kuti ive yakachengeteka zvishoma, iwe nemugamuchiri wako munofanira kuenda kune zvigadziriso zvemutumwa uye moita zvingangoita zvinhu zviviri:

  • Seta password paunenge uchipinda muapp (Privacy and Security -> Passcode);
  • Bvumira nhanho-mbiri yekusimbisa (Privacy and Security -> Nhanho mbiri-Dzeruzivo).

Mushure meizvi, mukuwedzera kune kodhi kubva kuSMS, kana uchipinda kubva kune chitsva chishandiso, chishandiso chinokumbira password yaunoziva iwe chete.

Parizvino, kusimbiswa kwekupinda chete kuburikidza neSMS hakuiti chero nzira kudzivirira munhu anoshandisa Russian SIM kadhi. Mhosva dzekubira maakaundi eTeregiramu kuburikidza nemeseji yakabatwa yeSMS dzave kutozivikanwa - muna 2016, vapambi. vakawana mukana kune tsamba dzevazhinji vanopikisa, uye muna 2017 was hacked nhoroondo yeDozhd mutori wenhau Mikhail Rubin.

Kwete VPN chete. Cheat sheet pamusoro pekuzvidzivirira iwe uye data rako
WhatsApp nokuti ikozvino inodzivirira iyo ORI registry uye inoshandisawo kupera-kusvika-kumagumo encryption, asi zvose hazvina kunaka nazvo. Isu takangoburitsa iyo nyaya nezve vagari veMagadan avo vaive pasi pemhosva yekutsoropodza meya weguta. Nyaya iyi, rombo rakanaka, yakapera nefaindi yakajairika. Asi zvakasimbisa kutya kwevashandisi: hazvina kuchengetedzeka kutaurirana muWhatsApp group chats.

Chii chichaitika?

  • Paunongonyora meseji, nhamba yako yefoni inobva yawanikwa kune vese veboka. Uye chitupa chako chinogona kutsanangurwa zviri nyore nenhamba.

Chii chandinofanira kuita?

  • Mhinduro yacho inogona kunge iri "kuruboshwe" SIM kadhi kana nhamba yekunze - zvichida yeEurope.

Kana iwe ukashandisa kadhi reRussia rakanyoreswa muzita rako, dzivisa mazwi ekunyomba mumapoka ane mazita akadai se "Rega kuna Meya": zviri nani kusiya tsamba yega yega uye kufonera WhatsApp.

Viber hainawo kunyorwa muORI registry, asi inochengetedza kutaurirana nevakuru veRussia (munguva yake yekusununguka kubva pakutumira spam). Nhume iyi yaive imwe yekutanga kutevedzera zvinodiwa nehurumende zvitsva: inochengeta masaini uye nhamba dzenhare dzevashandisi veRussia munharaunda yeRussian Federation, asi inopa meseji data. anoramba - inoreva mechanics ekupedzisira-kusvika-kumagumo encryption uye mutemo wekambani.

apuro inoshandisawo kupera-kusvika-kumagumo, asi kana uchinyoresa neMessage inogadzira maviri akakosha maviri: yakavanzika uye yeruzhinji. Mharidzo yaunogamuchira kubva kumuridzi mumwe chete weapuro mudziyo inotumirwa kwauri ne encryption, iyo inoshandisa kiyi yeruzhinji. Inogona kungodzikwa pachishandiswa kiyi yemugamuchiri, inochengetwa pachishandiswa chake. Unogona kuverenga nezvekuti Apple inoona sei kuvanzika kwevashandisi uye zvazvichaita kana ikagamuchira chikumbiro kubva kuhurumende pano. Pakave pasina nyaya dzakarekodhwa dzekambani yekuendesa data kubva kuvashandisi veRussia kuenda kuvakuru veRussia.

Kwete VPN chete. Cheat sheet pamusoro pekuzvidzivirira iwe uye data rako
Source: https://www.apple.com/business/docs/iOS_Security_Guide.pdf


Asi iMessage ine zvipingamupinyi zviviri:

  • Iwe unogona kunyora kana kufona kuburikidza neaya chiteshi chete kune mumwechete Apple muridzi;
  • Kana uine matambudziko neinternet yako yekubatanidza, meseji inoenda pamusoro peyakajairika cellular chiteshi uye ive iri nyore SMS inogona kubatwa zviri nyore.

Kuti udzivise iMessage kushanduka kuita SMS, unogona kudzima chimiro ichi muZvirongwa.

Kwete VPN chete. Cheat sheet pamusoro pekuzvidzivirira iwe uye data rako
Vatsvagiri kubva kuElectronic Frontier Foundation kudai kuti hapana zana muzana yakachengeteka sarudzo yekufona uye mameseji. Kana vamwe vatumwa vachidzivirira zviremera kubva pakuwana yako yakavanzika data, izvi hazvireve kuti matsotsi (kana nyika, inogona kushandisa masevhisi avo) haigone kuita izvi nekunzvenga mitemo. Kupa mushandisi chivimbo chekuti hakuna murume-pakati-pakati, Teregiramu ine yakanaka ficha: kana ichifona, vese vanogamuchira vanogona kuve nechokwadi chekuti vanoona emoji yakafanana mukona yekurudyi yekona - izvi zvinosimbisa kusavapo kwe "kupinda" mukubatana.

Kwete VPN chete. Cheat sheet pamusoro pekuzvidzivirira iwe uye data rako

Kana iwe uchitsvaga nzira yakachengetedzeka yekutaurirana, isu tinokurudzira kutarisa kupfuura zvakavanzika chats, mapassword, uye maviri-nhanho / maviri-chinhu chechokwadi kune isinganyanyozivikanwa niche maapplication senge. Taura kana Chiratidzo.

Kwete VPN chete. Cheat sheet pamusoro pekuzvidzivirira iwe uye data rako
Ndinoshandisa Signal mazuva ese. #notesforFBI (Spoiler: vanotoziva)

E-mail

Makambani akakurumbira anoita kuti zvikwanise kushandisa vatengi vavo veemail (muRussia aya maYandex, Mail.Ru uye Rambler) akatoiswa muchirongwa cheARI, zvinoreva kuti haana kuchengeteka zvakanyanya. Hongu, Mail.Ru Group anodana kumira mhosva dzememes uye kuregererwa kune avo vane mhosva, asi inogona kupa ruzivo nezve data rako kune zviremera pakukumbira.

Kunyangwe iwe ukashandisa Western email vatengi seGmail kana Outlook, iva neaviri-chinhu chechokwadi chakagoneswa, uye ziva kuti email yako yakavharidzirwa uchishandisa yakachengeteka SSL/TLS protocol, haugone kuve nechokwadi chekuti email yeanogamuchira yakachengetedzwa zvakaenzana.

Dziviriro sarudzo:

  • Pakutumira ruzivo rwakadzama, encrypt maemail uchishandisa Pretty Yakanaka Yakavanzika (PGP) Chirongwa ichi chinobatsira kushandura data kubva mutsamba kuita seti isina zvazvinoreva yemavara kune wese munhu kunze kweanotumira uye mugamuchiri;
  • Paunenge uchitumira ruzivo rwakakosha, nguva dzose teerera kune dunhu remugamuchiri uye usanyore kune kero inofungira;
  • Tarisa kune anogamuchira pachine nguva kuti akagadzira kutumira kana kuunganidzwa kwetsamba kuburikidza neRussia postal service.

Panyaya yemakambani epamba kubva kuORI registry, hapana encryption padivi remushandisi, mumusimboti, inobatsira. Ruzivo haruna kubatwa, asi rwunochengetwa uye rwunofambiswa nemagumo - akafanana masevhisi. Mhinduro chete inogona kuve yekuvatsiva nemamwe akachengeteka analogues seProtonMail, Tutanota kana Hushmail. Mamwe maemail masevhisi akadai anogona kuwanikwa pa izvi peji.

Social network

Kutanga, kuderedza kuvapo kwako pane yakakurumbira Russian social network - "Nyika Yangu", "Odnoklassniki" uye "VKontakte". Zvirinani Facebook haipe data rako kuRussia intelligence agency. Zvirinani, hapana nyaya dzakadai dzakarekodhwa.

Kwete VPN chete. Cheat sheet pamusoro pekuzvidzivirira iwe uye data rako

Asi zvinonakidza kuti muna 2017, kambani ichiri kugutsa 85% yezvikumbiro kubva kuhurumende yeUS:

Kwete VPN chete. Cheat sheet pamusoro pekuzvidzivirira iwe uye data rakoScreenshots kubva Facebook Transparency Report

Kana iwe wakanyanya kujaira kuVK, asi usingade kuguma uri muchiteshi, teerera kune zvishoma zvinhu:

  • mifananidzo yako yakachengetwa;
  • zvinotumirwa, makomendi nemameseji aunonyora;
  • zvinyorwa zvaunoda;
  • zvinyorwa zvaunogovera;
  • vashandisi vauri shamwari navo.

Mune zvose zviri pamusoro apa, zvakanakisisa kudzivisa chinhu chipi nechipi chinganzi chinonyangadza kana kuti chinonyanyisa. Gara uchiyeuka kuti β€œkugovera” zvinoreva kutaurira β€œzvisiri pamutemo” ruzivo kumunhu mumwe chete. Gweta reboka repasi rose rekodzero dzevanhu "Agora" Damir Gainutdinov anoti maererano nemutemo, ORI. inosungirwa kuchengeta uye kutumira kunyangwe zvinyorwa zvemashoko asina kutumirwa kune vezvemutemo. Verenga zvakawanda pamusoro pekuti usabatwa sei pakutumirazve pano.

Nenzira, kwechinguva ikozvino chero munhu ane nhamba yako yefoni anogona kukuwana iwe paVKontakte nekusarudzika, kunyangwe iyo peji pachayo isingaratidzi chitupa chako chaicho.

Unogona kudzivirira vanhu kuti vasakuwane nenhamba mune yako profilesetting (Settings -> Privacy -> Ndibate). Asi izvi, zvechokwadi, hazvizokuponese kubva kune akakosha masevhisi. Usashandise mafoni uye kutaurirana kwevhidhiyo paVKontakte: hazvizivikanwe kana network inovavharira kumagumo-kusvika-kumagumo, sekureva kunoita manejimendi.

Webhusaiti Chengetedzo

Mashoko akanaka chete ndiwo inopfuura hafu Mawebhusaiti ese ane mukurumbira paInternet atove nevhezheni yehttps kana kuti achinja zvachose kushandisa shanduro dze https chete. Ruzivo rwakagamuchirwa nekufambiswa panzvimbo dzakadai rwakavharirwa uye harugone kuverengwa nevechitatu mapato. Zvishandiso zvakadaro zvinoratidzwa negirini uye izwi rekuti "dzivirirwa".

Ndiko kunoperera mashoko akanaka. Kunyangwe iyo https protocol, chokwadi chekushanyira saiti yakadai uye zvikumbiro zveDNS (ruzivo rwekuti ndeapi madomasi awakawana) ichiri kuoneka kune mupi weInternet.

Asi chimwe chidimbu chenhau chakatonyanya kuipa: hafu yasara yemasaiti inoshanda uchishandisa yakajairwa http protocol, ndiko kuti, pasina data encryption. Mhinduro yacho inogona kunge iri VPN, iyo inovhara zvachose data yakagamuchirwa uye yakatumirwa kuitira kuti pasave neruzivo rwunoverengeka padivi remupi weInternet uye chero munhu anoedza kupinda pakati pako nenzvimbo yekupedzisira. Chinhu chimwe chete chichaonekwa ichokwadi chekubatanidza kune imwe IP kero paInternet (kureva, kune VPN server). Uye hapana chimwe.

Isu tichafara kana hupenyu hwakangoerekana hwave nyore: vhura VPN uye ukanganwe nezvekudonha kweruzivo rwakadzama. Asi ichocho hachisi chokwadi. Gara uchitarisa kana sosi yako yaunofarira inosanganisirwa muARI registry, tarisa kuti inodyidzana sei nevane masimba, tarisa mabatiro anoshanda mumasetirwo evatumwa vekukurumidza uye masocial network uye gadzirisa zvakare anofungira (uye wobva waita shuwa yekuchinja mapassword).

pasi rose

Paunenge uchishanda nematanho ekutaurirana uye kuendesa data, chete nzira yakazara yekuchengeteka uye kuvanzika inonzwisisika. Tevedza zviitiko zvekuchengetedza paInternet mune yedu Telegraph chiteshi @hidemyname_ru, Online Roskomsvoboda uye pane zvimwe zviwanikwa zvakatsaurirwa kune zviitiko paInternet uye RuNet kunyanya.

Ndeapi matanho ekuchengetedza auri kutora?

Source: www.habr.com

Voeg