{"id":101183,"date":"2021-09-03T10:22:53","date_gmt":"2021-09-03T08:22:53","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/opublikovany-rezultaty-audita-vpn-klienta-mozilla"},"modified":"2021-09-03T10:22:53","modified_gmt":"2021-09-03T08:22:53","slug":"opublikovany-rezultaty-audita-vpn-klienta-mozilla","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/opublikovany-rezultaty-audita-vpn-klienta-mozilla","title":{"rendered":"Jan\u00eb publikuar rezultatet e auditi t\u00eb klientit VPN t\u00eb Mozilla","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kompania Mozilla shpalli p\u00ebrfundimin e auditi t\u00eb pavarur p\u00ebr softuerin e klientit q\u00eb lidh t\u00eb sh\u00ebrbimeve t\u00eb Mozilla VPN. Gjat\u00eb auditi u analizua aplikacioni i ve\u00e7ant\u00eb i klientit, i shkruar me p\u00ebrdorimin e bibliotek\u00ebs Qt dhe ofruar p\u00ebr Linux, macOS, Windows, Android dhe iOS. Sh\u00ebrbimi i Mozilla VPN ka m\u00eb shum\u00eb se 400 server\u00eb nga ofruesi suedez i VPN-s\u00eb, Mullvad, t\u00eb vendosur n\u00eb m\u00eb shum\u00eb se 30 vende. Lidheni me VPN<\/a>-sh\u00ebrbimin p\u00ebrmes protokollit WireGuard. <\/p>\n

Auditi u krye nga Cure53, e cila m\u00eb par\u00eb ka kryer auditin e projekteve NTPsec, SecureDrop, Cryptocat, F-Droid dhe Dovecot. Auditi p\u00ebrfshinte kontrollin e kodit burimor dhe p\u00ebrfshinte kryerjen e testeve p\u00ebr identifikimin e mund\u00ebsive t\u00eb t\u00eb metave (p\u00ebr \u00e7\u00ebshtjet e lidhura me kriptografin\u00eb nuk u shqyrtuan). Gjat\u00eb kontrollit u identifikuan 16 probleme t\u00eb sigurimeve, 8 prej t\u00eb cilave kishin natyr\u00eb rekomandimi, 5 iu caktua nj\u00eb nivel i ul\u00ebt rreziku, dy - nj\u00eb nivel mesatar, dhe nj\u00eb - nj\u00eb nivel t\u00eb lart\u00eb. <\/p>\n

Megjithat\u00eb, vet\u00ebm nj\u00eb problem me nivel rreziku mesatar u klasifikua si nj\u00eb t\u00eb met\u00eb, pasi vet\u00ebm ajo ishte e vog\u00ebl p\u00ebr t'u shfryt\u00ebzuar. Problemi i p\u00ebrmendur \u00e7onte n\u00eb rrjedhjen e informacionit mbi p\u00ebrdorimin e VPN n\u00eb kodin p\u00ebr identifikimin e portalit t\u00eb kapur p\u00ebrmes d\u00ebrgimit t\u00eb k\u00ebrkesave t\u00eb drejtp\u00ebrdrejta t\u00eb pa enkriptuara p\u00ebrmes HTTP, t\u00eb d\u00ebrguara jasht\u00eb tunelit VPN dhe q\u00eb zbulojn\u00eb adres\u00ebn IP t\u00eb p\u00ebrdoruesit n\u00eb rast se sulmuesi mund t\u00eb kontrolloj\u00eb trafikun transit. Problemi zgjidhet duke \u00e7aktivizuar modalitetin e identifikimit t\u00eb portalit t\u00eb kapur n\u00eb cil\u00ebsimet. <\/p>\n

Problemi i dytë me nivel të mesëm rreziku lidhet me mungesën e pastrimit të duhur të vlerave jo-numerike në numrin e portit, çka lejon organizimin e rrjedhjes së parametrave të autentifikimit OAuth përmes zëvendësimit të numrit të portit me një varg si "1234@example.com", duke çuar në vendosjen e etiketës <img src="»http:\/\/127.0.0.1:1234@example.com\/?code=…»" alt="»»">, e cila i referohet example.com në vend të 127.0.0.1. <\/p>\n

Problemi i tret\u00eb, i markuar si i rreziksh\u00ebm, lejon \u00e7do aplikacion lokal pa autentifikim t\u00eb aksesoj\u00eb klientin VPN p\u00ebrmes WebSocket, i lidhur me localhost. Si shembull u tregua se, me klientin VPN aktiv, \u00e7do faqe mund t\u00eb organizonte krijimin dhe d\u00ebrgimin e nj\u00eb screenshot-i p\u00ebrmes gjenerimit t\u00eb ngjarjes screen_capture. Problemi nuk u klasifikua si nj\u00eb t\u00eb met\u00eb, pasi WebSocket p\u00ebrdorej vet\u00ebm n\u00eb nd\u00ebrtimet e brendshme testuese dhe p\u00ebrdorimi i k\u00ebtij kanali komunikimi ishte planifikuar vet\u00ebm n\u00eb t\u00eb ardhmen p\u00ebr t\u00eb organizuar bashk\u00ebpunimin me shtes\u00ebn e shfletuesit.
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0433\u043e \u041f\u041e \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0438\u0441\u0443 Mozilla VPN. \u0412 \u0445\u043e\u0434\u0435 \u0430\u0443\u0434\u0438\u0442\u0430 \u0431\u044b\u043b \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u0430\u043d\u0430\u043b\u0438\u0437 \u043e\u0431\u043e\u0441\u043e\u0431\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u043d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0433\u043e \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 Qt \u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u043c\u043e\u0433\u043e \u0434\u043b\u044f Linux, macOS, Windows, Android \u0438 iOS. \u0420\u0430\u0431\u043e\u0442\u0443 Mozilla VPN \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 400 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0448\u0432\u0435\u0434\u0441\u043a\u043e\u0433\u043e VPN-\u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430 Mullvad, \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d\u043d\u044b\u0445 \u0432 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 30 \u0441\u0442\u0440\u0430\u043d\u0430\u0445. \u041f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101183","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Rezultatet e auditit t\u00eb klientit VPN t\u00eb Mozilla jan\u00eb publikuar | ProHoster","description":"Kompania Mozilla shpalli p\u00ebrfundimin e nj\u00eb auditi t\u00eb pavarur t\u00eb softuerit klient p\u00ebr lidhjen me sh\u00ebrbimin Mozilla VPN.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/opublikovany-rezultaty-audita-vpn-klienta-mozilla","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0430\u0443\u0434\u0438\u0442\u0430 VPN-\u043a\u043b\u0438\u0435\u043d\u0442\u0430 Mozilla | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Mozilla \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0433\u043e \u041f\u041e \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0438\u0441\u0443 Mozilla VPN.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/opublikovany-rezultaty-audita-vpn-klienta-mozilla","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-09-03T08:22:53+00:00","article:modified_time":"2021-09-03T08:22:53+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101183","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-09-03 08:33:23","updated":"2026-02-04 14:42:04","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/101183","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=101183"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/101183\/revisions"}],"predecessor-version":[{"id":156742,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/101183\/revisions\/156742"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=101183"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=101183"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=101183"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}