Kuburitswa kwebrowser yakasarudzika, Tor Browser 11.0.2, yaunzwa, yakatarisana nekuona kusazivikanwa, kuchengetedzeka uye kuvanzika. Paunenge uchishandisa Tor Browser, traffic yese inotungamirwa chete kuburikidza neTor network, uye hazvigoneke kupinda zvakananga kuburikidza neyakajairwa network yekubatanidza yeyazvino system, iyo isingabvumire kuteedzera chaiyo IP kero yemushandisi (kana bhurawuza rakabiwa, vanorwisa. unogona kuwana mukana kune system network paramita, saka kuti upedze Kuvharisa kudonha kunokwanisika, unofanirwa kushandisa zvigadzirwa zvakaita seWhonix). Tor Browser inovaka yakagadzirirwa Linux, Windows uye macOS.
Kuti upe kumwe kuchengetedzeka, Tor Browser inosanganisira iyo HTTPS Kwese kwese yekuwedzera, iyo inokutendera iwe kushandisa traffic encryption pane ese masaiti pazvinogoneka. Kuti uderedze kutyisidzira kweJavaScript kurwiswa uye kuvhara plugins nekukasira, iyo NoScript yekuwedzera inosanganisirwa. Kurwisa kuvharika kwemigwagwa uye kuongorora, imwe nzira yekufambisa inoshandiswa. Kuti udzivirire kubva pakuratidzwa kwezvimiro zvevaenzi, iyo WebGL, WebGL2, WebAudio, Zvemagariro, SpeechSynthesis, Bata, AudioContext, HTMLMediaElement, Mediastream, Canvas, SharedWorker, WebAudio, Permissions, MediaDevices.enumerateDevices, uye screen.orientation API .telemetry kutumira maturusi, Pocket, Reader View, HTTP Alternative-Services, MozTCPSocket, "link rel=preconnect", yakagadziridzwa ne libmdns.
Iyo itsva vhezheni inowiriranisa neiyo kodhi base yeFirefox 91.4.0 kuburitswa, iyo yakagadzirisa gumi neshanu kusasimba, iyo gumi yainzi ine ngozi. 15 kusasimba kunokonzerwa nematambudziko nendangariro, senge buffer mafashama uye kuwana kune yakatosunungurwa ndangariro nzvimbo, uye zvinogona kutungamira mukuitwa kweanorwisa kodhi kana uchivhura mapeji akagadzirwa. Mamwe mafonti ettf akaiswa kunze kwekuvaka kwepuratifomu yeLinux, kushandiswa kwakakonzera kukanganisa kwemavara ekupa mune interface zvinhu muFedora Linux. Iyo "network.proxy.allow_bypass" yakavharwa, iyo inodzora basa rekudzivirira kubva pakushandisa zvisirizvo kweProxy API mukuwedzera. Kune iyo obfs10 yekufambisa, iyo nyowani gedhi "deusexmachina" inogoneswa nekusarudzika.
Zvichakadaro, nyaya yekuvhara Tor muRussian Federation inoenderera mberi. Roskomnadzor yakashandura mask yenzvimbo dzakavharika mu registry yemasaiti akarambidzwa kubva ku "www.torproject.org" kuenda ku "*.torproject.org" uye akawedzera rondedzero yeIP kero pasi pekuvharwa. Shanduko iyi yakakonzera kuti madomain mazhinji echirongwa cheTor avharwe, kusanganisira blog.torproject.org, gettor.torproject.org, uye support.torproject.org. forum.torproject.net, hosted on the Discourse infrastructure, inoramba iripo. Muchikamu gitlab.torproject.org uye lists.torproject.org, kwakatanga kurasika, asi ndokuzodzoreredzwa, pamwe mushure mekuchinja IP kero (gitlab ikozvino yanangidzirwa kumugadziri gitlab-02.torproject.org).
Panguva imwecheteyo, magedhi uye node dzeTor network, pamwe nemugamuchiri ajax.aspnetcdn.com (Microsoft CDN), yakashandiswa mukufambisa-nyoro-asure, yakanga isisavharwi. Sezviri pachena, kuyedza nekuvharira Tor network node mushure mekuvhara iyo Tor webhusaiti yakamira. Mamiriro ezvinhu akaoma anomuka ne tor.eff.org mirror, iyo inoramba ichishanda. Chokwadi ndechekuti tor.eff.org girazi rakasungirirwa kune imwecheteyo IP kero inoshandiswa kune eff.org domain yeEFF (Electronic Frontier Foundation), saka kuvharira tor.eff.org kunotungamira kuvharika kwechikamu. nzvimbo yesangano rinozivikanwa rekodzero dzevanhu.
Pamusoro pezvo, isu tinogona kucherechedza kuburitswa kweshumo nyowani pamusoro pezvinobvira kuedza kuita kurwiswa kudzima-kusazivikanwa vashandisi veTor vane hukama neboka reKAX17, rinozivikanwa nemaemail ekunyepedzera ekusangana mune node paramita. MunaGunyana naGumiguru, iyo Tor Project yakavharira 570 zvingangoita hutsinye node. Pamusoro payo, boka reKAX17 rakakwanisa kuwedzera nhamba yenzvimbo dzakadzorwa muTor network kusvika ku900, yakabatwa nevanopa makumi mashanu vakasiyana, iyo inoenderana ne50% yehuwandu hwehuwandu hwerelays (pakuenzanisa, muna 14, varwisi vakakwanisa. kuwana kutonga pamusoro peinoda hafu yeTor relays, uye muna 2014 pamusoro pe2020% yezvinobuda node).
Kuisa nhamba huru yemanodhi inodzorwa nemumwe mushandisi inoita kuti zvibvire ku-de-anonymize vashandisi vachishandisa Sybil class attack, iyo inogona kuitwa kana vanorwisa vane simba pamusoro pekutanga uye yekupedzisira nodes muanonymization cheni. Iyo yekutanga node muTor chain inoziva IP kero yemushandisi, uye wekupedzisira anoziva iyo IP kero yeyakakumbirwa sosi, izvo zvinoita kuti zvibvire kusazivikanwa chikumbiro nekuwedzera imwe yakavanzika label kune misoro yepakiti pa divi reiyo node yekupinda, iyo inoramba isina kuchinjika mukati mese kusingazivikanwe cheni, uye kuongorora iyi label padivi peinobuda node. Nemanodhi anodzorwa ekubuda, vanorwisa vanogonawo kuita shanduko kune isina kuvharwa traffic, sekubvisa redirect kune HTTPS shanduro dzesaiti uye kubata zvisina kuvharirwa zvinyorwa.
Sekureva kwevamiriri veTor network, mazhinji emanodhi akabviswa mukudonha akashandiswa chete sepakati node, asina kushandiswa kugadzirisa zvinopinda uye zvinobuda zvikumbiro. Vamwe vatsvakurudzi vanocherechedza kuti node dzaive dzezvikamu zvose uye mukana wekusvika kune node yekupinda inotungamirirwa neboka reKAX17 yaiva 16%, uye kune inobuda node - 5%. Asi kunyange kana izvi zviri izvo, saka mukana wose wemushandisi panguva imwe chete achirova mapikisi ekuisa uye kubuda eboka re900 nodes inodzorwa neKAX17 inofungidzirwa pa 0.8%. Iko hakuna humbowo hwakananga hweKAX17 node dziri kushandiswa kuita kurwisa, asi zvinogona kurwiswa zvakafanana hazvigone kubviswa.
Source: opennet.ru