Ongorora mhedzisiro yeTor Browser uye Tor zvivakwa zvezvikamu

Vagadziri veTor network isingazivikanwe vakaburitsa mhedzisiro yekuongororwa kweTor Browser uye OONI Probe, rdsys, BridgeDB uye Conjure maturusi akagadzirwa neprojekiti, anoshandiswa kunzvenga censorship. Ongororo iyi yakaitwa neCure53 kubva munaNovember 2022 kusvika Kubvumbi 2023.

Munguva yekuongorora, 9 kusadzivirirwa kwakaonekwa, maviri acho akaverengerwa senjodzi, imwe yakapihwa yepakati nhanho yengozi, uye 6 yakarongedzerwa sematambudziko ane diki nhanho yengozi. Uyewo munheyo yekodhi, matambudziko e10 akawanikwa akarondedzerwa seasina kuchengeteka ane chokuita nezvikanganiso. Kazhinji, kodhi yeTor Project inozivikanwa kuti ienderane nemaitiro akachengeteka ekuronga.

Kusagadzikana kwekutanga kwengozi kwaive kuseri kweiyo rdsys yakagoverwa system, iyo inova nechokwadi chekuendeswa kwezviwanikwa senge proxy rondedzero uye kudhawunirodha malink kune vashandisi vakaongororwa. Kusagadzikana uku kunokonzerwa nekushaikwa kwechokwadi kana uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge uchinge watendera ega kunyoresa zviwanikwa zvake zvisizvo kuti zviendeswe kuvashandisi. Operation inodzika kusvika pakutumira chikumbiro cheHTTP kune rdsys mubato.

Ongorora mhedzisiro yeTor Browser uye Tor zvivakwa zvezvikamu

Kusagadzikana kwechipiri kwengozi kwakawanikwa muTor Browser uye kwakakonzerwa nekushaikwa kwedijitari siginecha yekusimbisa pakutora rondedzero yemabhiriji node kuburikidza nerdsys uye BridgeDB. Sezvo rondedzero yaiswa mubrowser padanho isati yabatana kune isingazivikanwe yeTor network, kushaikwa kwekusimbisa kwekriptographic siginecha yedhijitari kwakabvumira munhu anorwisa kutsiva zviri murondedzero, semuenzaniso, nekubvuta chinongedzo kana kubira server. kuburikidza iyo rondedzero inogoverwa. Muchiitiko chekurwiswa kwakabudirira, anorwisa anogona kuronga kuti vashandisi vabatane kuburikidza neyavo yakakanganiswa bhiriji node.

Kusagadzikana kwepakati-kusimba kwaivepo mune rdsys subsystem mumusangano wekutumira script uye yakabvumira munhu anorwisa kusimudza ropafadzo dzake kubva kumunhu asiri mushandisi kuenda kumushandisi werdsys, kana aikwanisa kuwana sevha uye kugona kunyora kune dhairekitori kwenguva pfupi. mafaira. Kushandisa kusazvibata kunosanganisira kutsiva faira rinogoneka riri mu/tmp dhairekitori. Kuwana rdsys kodzero dzevashandisi kunobvumira anorwisa kuti aite shanduko kune anoteeka mafaera akatangwa kuburikidza nerdsys.

Kusagadzikana kwakaderera kwakakonzerwa zvikuru nekushandiswa kwezvinotsamira zvechinyakare izvo zvine kusagona kunozivikanwa kana mukana wekunyimwa sevhisi. Kusagadzikana kudiki muTor Browser kunosanganisira kugona kunzvenga JavaScript kana mwero wekuchengetedza waiswa padanho repamusoro, kushomeka kwezvirambidzo pakurodha mafaera, uye kuburitswa kweruzivo kuburikidza nepeji remusha remushandisi, zvichibvumira vashandisi kuteverwa pakati pekutangazve.

Parizvino, kusasimba kwese kwakagadziriswa; pakati pezvimwe zvinhu, huchokwadi hwaitwa kune vese rdsys vanobata uye kutarisa mazita akaiswa muTor Browser nedhijitari siginicha yakawedzerwa.

Pamusoro pezvo, tinogona kucherechedza kuburitswa kweTor Browser 13.0.1. Kuburitswa kwacho kunowiriraniswa neFirefox 115.4.0 ESR codebase, inogadzirisa 19 kusasimba (13 inoonekwa seine njodzi). Kugadziriswa kwekusagadzikana kubva kuFirefox bazi 13.0.1 kwaendeswa kuTor Browser 119 yeAroid.

Source: opennet.ru

Voeg