{"id":113257,"date":"2024-01-31T01:41:06","date_gmt":"2024-01-30T23:41:06","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/rezultaty-vtorogo-audita-bezopasnosti-razrabotok-proekta-tor"},"modified":"2024-01-31T01:41:06","modified_gmt":"2024-01-30T23:41:06","slug":"rezultaty-vtorogo-audita-bezopasnosti-razrabotok-proekta-tor","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/rezultaty-vtorogo-audita-bezopasnosti-razrabotok-proekta-tor","title":{"rendered":"Rezultatet e auditit t\u00eb dyt\u00eb t\u00eb siguris\u00eb p\u00ebr zhvillimet e projektit Tor","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Zhvilluesit e rrjetit anonim Tor publikuan rezultatet e auditit t\u00eb dyt\u00eb, i cili u realizua nga kompania Radically Open Security nga prilli deri n\u00eb gusht 2023 (m\u00eb par\u00eb, nga n\u00ebntori 2022 deri n\u00eb prillin 2023, auditimin e par\u00eb e b\u00ebri kompania Cure53). Kontrolli p\u00ebrfshiu kodin p\u00ebr sigurin\u00eb e funksionimit t\u00eb nyjeve dal\u00ebse, shfletuesin Tor Browser, komponentet e infrastruktur\u00ebs (mblodhjen e metrikave, SWBS, API Onionoo) dhe mjetet p\u00ebr testim. Objektivi kryesor i rishikimit t\u00eb p\u00ebrs\u00ebritur ishte vler\u00ebsimi i ndryshimeve t\u00eb b\u00ebra p\u00ebr t\u00eb p\u00ebrmir\u00ebsuar shpejt\u00ebsin\u00eb dhe besueshm\u00ebrin\u00eb e rrjetit Tor, si\u00e7 \u00ebsht\u00eb protokoli i ndarjes s\u00eb trafikut Conflux i shtuar n\u00eb versionin Tor 0.4.8 dhe metodat mbrojt\u00ebse t\u00eb sh\u00ebrbimeve Onion nga sulmet DoS t\u00eb bazuara n\u00eb prov\u00ebn e kryerjes s\u00eb pun\u00ebs. <\/p>\n
Gjat\u00eb auditit u identifikuan 17 vulnerabilitete, vet\u00ebm nj\u00eb prej t\u00eb cilave u klasifikua si rrezikshme. Kat\u00ebr vulnerabilitete mor\u00ebn nivelin mesatar t\u00eb rrezikshm\u00ebris\u00eb, 12 u klasifikuan si probleme me nivel t\u00eb vog\u00ebl rreziku. Vulnerabiliteti m\u00eb i rreziksh\u00ebm u identifikua n\u00eb aplikacionin onbasca (Onion Bandwidth Scanner), i p\u00ebrdorur p\u00ebr t\u00eb skanuar kapacitetin e nyjeve t\u00eb rrjetit. <\/p>\n
Vulnerabiliteti \u00ebsht\u00eb shkaktuar nga mund\u00ebsia e d\u00ebrgimit t\u00eb k\u00ebrkesave p\u00ebrmes metod\u00ebs HTTP GET, t\u00eb cilat lejojn\u00eb ekzekutimin e z\u00ebvend\u00ebsimeve t\u00eb k\u00ebrkesave n\u00ebp\u00ebrmjet sitit nga ana e nj\u00eb p\u00ebrdoruesi tjet\u00ebr (CSRF, Cross-Site Request Forgery), duke i dh\u00ebn\u00eb sulmuesit mund\u00ebsin\u00eb p\u00ebr t\u00eb shtuar nyjat e tij n\u00eb baz\u00ebn e t\u00eb dh\u00ebnave p\u00ebrmes manipulimit me parametrin «bridge_lines». P\u00ebr shembull, sulmuesi mund t\u00eb vendos\u00eb nj\u00eb faqe web me kodin JavaScript fetch(«http:\/\/127.0.0.1:8000\/bridge-state\/? bridge_lines=obfs4+0.0.0.000000+AAA+cert0+iat-mode0», dhe n\u00ebse kjo faqe hapet nga nj\u00eb p\u00ebrdorues me nj\u00eb seanc\u00eb aktive n\u00eb Onion Bandwidth Scanner, at\u00ebher\u00eb nga emri i tij do t\u00eb shtohet n\u00eb baz\u00ebn e t\u00eb dh\u00ebnave IP «0.0.0.0». <\/p>\n
Problemet me nivel mesatar rreziku: <\/p>\n
\n
Refuzimi i sh\u00ebrbimit n\u00eb metrics-lib p\u00ebrmes d\u00ebrgimit t\u00eb nj\u00eb skedari t\u00eb madh t\u00eb kompresuar \u2014 pasi skedari shkarkohet n\u00eb memorien operative, \u00ebsht\u00eb e mundur t\u00eb d\u00ebrgohet nj\u00eb version i zip-bomb\u00ebs (p\u00ebr shembull, mund t\u00eb paketoni 600 MB zeros n\u00eb 0.0006 MB) dhe t\u00eb shkaktoni shterimin e memories s\u00eb disponueshme.\n
P\u00ebrdorimi n\u00eb tor-android-service (i p\u00ebrdorur n\u00eb Tor browser p\u00ebr Android) t\u00eb modulit t\u00eb jasht\u00ebm tun2socks, mb\u00ebshtetje e t\u00eb cilit \u00ebsht\u00eb nd\u00ebrprer\u00eb.\n
Shkrimi i bajt\u00ebve zero p\u00ebrtej kufijve t\u00eb memories s\u00eb rezervuar n\u00eb klientin Tor p\u00ebr shkak t\u00eb p\u00ebrdorimit t\u00eb funksionit read_file_to_str_until_eof, q\u00eb kthen madh\u00ebsin\u00eb pa marr\u00eb parasysh simbolin zero.\n
Nj\u00eb dob\u00ebsi n\u00eb sbws (Simple Bandwidth Scanner), e cila lejon rikthimin e lidhjes HTTPS n\u00eb HTTP, duke p\u00ebrdorur ridrejtimin n\u00eb HTTP. Nj\u00eb nyje daljeje e kontrolluar nga sulmuesi n\u00eb Tor potencialisht mund ta shfryt\u00ebzoj\u00eb k\u00ebt\u00eb dob\u00ebsi p\u00ebr t\u00eb organizuar rrjedhjen e tokeneve t\u00eb API-s\u00eb. <\/ul>\n