{"id":123252,"date":"2025-04-02T21:05:22","date_gmt":"2025-04-02T19:05:22","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-sistemy-rezervnogo-kopirovaniya-restic-0-18-ataka-na-cdc"},"modified":"2025-04-02T21:05:22","modified_gmt":"2025-04-02T19:05:22","slug":"vypusk-sistemy-rezervnogo-kopirovaniya-restic-0-18-ataka-na-cdc","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/vypusk-sistemy-rezervnogo-kopirovaniya-restic-0-18-ataka-na-cdc","title":{"rendered":"L\u00ebshimi i sistemit t\u00eb kopjimit Restic 0.18. Sulmi ndaj CDC","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

U prezantua l\u00ebshimi i sistemit t\u00eb kopjimit Restic 0.18, i cili lejon ruajtjen e kopjeve rezerv\u00eb n\u00eb form\u00eb t\u00eb enkriptuar n\u00eb nj\u00eb depozit\u00eb versioni me mb\u00ebshtetje p\u00ebr deduplication. Sistemi \u00ebsht\u00eb fillimisht i dizajnuar p\u00ebr t\u00eb ruajtur kopje rezerv\u00eb n\u00eb mjedise q\u00eb nuk t\u00eb votojn\u00eb, dhe nj\u00eb kopje rezerv\u00eb q\u00eb p\u00ebrfundon n\u00eb duar t\u00eb huaja nuk duhet t\u00eb kompromentoj\u00eb sistemin. Gjat\u00eb krijimit t\u00eb kopjes rezerv\u00eb, \u00ebsht\u00eb e mundur t\u00eb p\u00ebrcaktohen rregulla fleksibile p\u00ebr p\u00ebrfshirjen dhe p\u00ebrjashtimin e skedareve dhe direktiveve (formati i rregullave \u00ebsht\u00eb i ngjash\u00ebm me rsync ose gitignore). Mb\u00ebshtetet puna n\u00eb Linux, macOS, Windows dhe sistemet BSD. Kodi i projektit \u00ebsht\u00eb shkruar n\u00eb gjuh\u00ebn Go dhe shp\u00ebrndahet n\u00ebn licenc\u00ebn BSD. <\/p>\n

Kopjet rezerv\u00eb mund t\u00eb ruajn\u00eb n\u00eb sistemin lokal t\u00eb skedar\u00ebve, n\u00eb t\u00eb jashtme \u0441\u0435\u0440\u0432\u0435\u0440\u0435<\/a> me akses p\u00ebr SFTP\/SSH ose HTTP REST, n\u00eb cloud-et Amazon S3, OpenStack Swift, BackBlaze B2, Microsoft Azure Blob Storage dhe Google Cloud Storage, si dhe n\u00eb \u00e7do depo q\u00eb ka backend-e rclone. P\u00ebr ruajtje mund t\u00eb p\u00ebrdoret gjithashtu projekti i zhvilluar nga rest server, i cili ofron performanc\u00eb m\u00eb t\u00eb lart\u00eb n\u00eb krahasim me backend-et e tjera dhe \u00ebsht\u00eb n\u00eb gjendje t\u00eb punoj\u00eb n\u00eb nj\u00eb modalitet vet\u00ebm p\u00ebr plot\u00ebsim, q\u00eb nuk lejon fshirjen ose ndryshimin e kopjeve rezerv\u00eb n\u00eb rast t\u00eb kompromitimit t\u00eb serverit burimor dhe qasjes n\u00eb \u00e7el\u00ebsat e enkriptimit. <\/p>\n

Sistemi mb\u00ebshtet snapshot-e q\u00eb reflektojn\u00eb gjendjen e hierarkis\u00eb s\u00eb drejtorive n\u00eb koh\u00eb t\u00eb ndryshme (snapshot-et krijohen automatikisht p\u00ebr \u00e7do kopje rezerv\u00eb). \u00cbsht\u00eb e mundur kopjimi i snapshot-eve midis depozitave t\u00eb ndryshme. P\u00ebr t\u00eb kursyer trafik, gjat\u00eb krijimit t\u00eb kopjeve rezerv\u00eb kopjohen vet\u00ebm t\u00eb dh\u00ebnat e ndryshuara. Snapshot-i me kopjen rezerv\u00eb mund t\u00eb montohet n\u00eb form\u00ebn e nj\u00eb ndarjeje virtuale (montimi b\u00ebhet me ndihm\u00ebn e FUSE). Gjithashtu ofrohen komandat p\u00ebr analizimin e ndryshimeve dhe p\u00ebr nxjerrjen selektive t\u00eb skedar\u00ebve. <\/p>\n

Depozita e kopjeve rezerv\u00eb n\u00eb Restic manipulohet jo me skedar\u00eb t\u00eb t\u00ebr\u00eb, por me blloqe me madh\u00ebsi t\u00eb l\u00ebvizshme, t\u00eb zgjedhura duke p\u00ebrdorur n\u00ebnshkrimin Rabin. Informacioni ruhet n\u00eb lidhje me p\u00ebrmbajtjen, jo emrat e skedar\u00ebve (emrat dhe objektet q\u00eb lidhen me t\u00eb dh\u00ebnat p\u00ebrkufizohen n\u00eb nivelin e t\u00eb dh\u00ebnave t\u00eb bllokut). P\u00ebr t\u00eb kursyer hap\u00ebsir\u00eb n\u00eb depo dhe p\u00ebr t\u00eb p\u00ebrjashtuar kopjimin e tepric\u00ebs s\u00eb t\u00eb dh\u00ebnave, b\u00ebhet deduplication. <\/p>\n

\u041d\u0430 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u0432 \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0432\u0438\u0434\u0435 — \u0434\u043b\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0441\u0443\u043c\u043c \u0438 \u0434\u0435\u0434\u0443\u043f\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0445\u044d\u0448\u0438 SHA-256, \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f — \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c AES-256-CTR, \u0430 \u0434\u043b\u044f \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 — \u043a\u043e\u0434\u044b \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Poly1305-AES. \u041f\u0440\u0435\u0434\u0443\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0439 \u043a\u043e\u043f\u0438\u0438 \u043f\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u044b\u043c \u0441\u0443\u043c\u043c\u0430\u043c \u0438 \u043a\u043e\u0434\u0430\u043c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0434\u043b\u044f \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f, \u0447\u0442\u043e \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0444\u0430\u0439\u043b\u043e\u0432 \u043d\u0435 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0430. <\/p>\n

N\u00eb versionin e ri \u00ebsht\u00eb eliminuar mund\u00ebsia e kryerjes s\u00eb nj\u00eb sulmi (PDF) p\u00ebr t\u00eb p\u00ebrcaktuar pranin\u00eb e skedar\u00ebve t\u00eb caktuar n\u00eb magazin\u00ebn e enkriptuar t\u00eb kopjeve rezerv\u00eb. Sulmi lejon t\u00eb p\u00ebrcaktohet n\u00ebse n\u00eb backupin e enkriptuar ndodhet ndonj\u00eb skedar specifik, duke aksesuar magazin\u00ebn e kopjeve rezerv\u00eb ose duke analizuar trafikun rrjetor me kopjet rezerv\u00eb. P\u00ebr shembull, nj\u00eb administrator serveri, ku ruhen backupet, nj\u00eb ofrues interneti, ose sh\u00ebrbime sekrete q\u00eb kan\u00eb marr\u00eb qasje n\u00eb \u0441\u0435\u0440\u0432\u0435\u0440\u0443<\/a> ose trafikun. Q\u00ebllimi i kryerjes s\u00eb sulmit mund t\u00eb jet\u00eb hetimi i nj\u00eb rrjedhjeje informacioni, n\u00eb t\u00eb cilin sh\u00ebrbimet sekrete do t\u00eb mund t\u00eb vler\u00ebsojn\u00eb pranin\u00eb e dokumenteve t\u00eb interesuara n\u00eb magazin\u00ebn e kopjeve rezerv\u00eb. <\/p>\n

P\u00ebr t\u00eb shfryt\u00ebzuar vulnerabilitetin, sulmuesi duhet t\u00eb arrij\u00eb t\u00eb shtoj\u00eb t\u00eb dh\u00ebnat e tij n\u00eb kopjen rezerv\u00eb t\u00eb viktim\u00ebs ose t\u00eb dij\u00eb se nj\u00eb skedar i njohur ndodhet n\u00eb kopjen rezerv\u00eb. N\u00ebse n\u00eb kopjen rezerv\u00eb ka nj\u00eb skedar t\u00eb njohur nga sulmuesi (p\u00ebr shembull, ndonj\u00eb p\u00ebrmbajtje tipike sistemore ose multimediale), at\u00ebher\u00eb duke aksesuar magazin\u00ebn e enkriptuar, sulmuesi mund t\u00eb p\u00ebrcaktoj\u00eb n\u00ebse brenda saj ndodhen skedar\u00eb t\u00eb tjer\u00eb q\u00eb e interesojn\u00eb. <\/p>\n

Metoda bazohet n\u00eb at\u00eb q\u00eb, duke marr\u00eb parasysh karakteristikat e kompresimit t\u00eb p\u00ebrmbajtjes, mund t\u00eb p\u00ebrcaktohen parametrat e blloqeve t\u00eb p\u00ebrdorura gjat\u00eb ndarjes s\u00eb p\u00ebrmbajtjes. P\u00ebr t\u00eb p\u00ebrcaktuar k\u00ebto parametra, mjafton t\u00eb identifikoni 3 blloqe t\u00eb enkriptuara q\u00eb p\u00ebrmbajn\u00eb t\u00eb dh\u00ebna t\u00eb njohura p\u00ebr sulmuesin. <\/p>\n

\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0435 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u0430 \u0434\u043b\u044f Restic \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0433\u043e \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u0437\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0431\u043b\u043e\u043a\u0438 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0442\u0435\u0445\u043d\u0438\u043a\u0438 CDC (Content-Defined Chunking), \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a BorgBackup, Tarsnap, Bupstash \u0438 Duplicacy. \u0412 Tarsnap \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 1.0.41, \u0432 BorgBackup \u0432\u0435\u0434\u0451\u0442\u0441\u044f \u0440\u0430\u0431\u043e\u0442\u0430 \u043d\u0430\u0434 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043d\u0430\u043c\u0435\u0440\u0435\u043d\u044b \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u0432 \u0432\u0435\u0442\u043a\u0443 borg 2. \u0412 Bupstash \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0431\u044b\u043b\u043e 2 \u0433\u043e\u0434\u0430 \u043d\u0430\u0437\u0430\u0434, \u0430 \u0432 Duplicacy — 4 \u043c\u0435\u0441\u044f\u0446\u0430 \u043d\u0430\u0437\u0430\u0434. <\/p>\n

\u0414\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0434\u0435\u0434\u0443\u043f\u043b\u0438\u043a\u0430\u0446\u0438\u044e, \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0442\u044c \u0441\u0432\u043e\u0438 \u0444\u0430\u0439\u043b\u044b \u0432 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u0443\u044e \u043a\u043e\u043f\u0438\u044e \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0441\u0442\u0443\u043f\u0438\u0442\u044c \u043f\u0440\u043e\u0449\u0435 \u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0443\u044e\u0449\u0438\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u043a\u043e\u0441\u0432\u0435\u043d\u043d\u044b\u043c \u043f\u0443\u0442\u0451\u043c. \u041f\u043e\u0441\u043b\u0435 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u043c\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u043c\u043e\u0436\u043d\u043e \u043e\u0446\u0435\u043d\u0438\u0442\u044c \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0440\u0430\u0437\u043c\u0435\u0440\u0430 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430 — \u0435\u0441\u043b\u0438 \u0444\u0430\u0439\u043b \u0443\u0436\u0435 \u0438\u043c\u0435\u0435\u0442\u0441\u044f \u0432 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435, \u0442\u043e \u0435\u0433\u043e \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0435 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0438\u0437-\u0437\u0430 \u0434\u0435\u0434\u0443\u043f\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043d\u0435 \u043f\u0440\u0438\u0432\u0435\u0434\u0451\u0442 \u043a \u0434\u043e\u043b\u0436\u043d\u043e\u043c\u0443 \u0443\u0432\u0435\u043b\u0438\u0447\u0435\u043d\u0438\u044e \u0440\u0430\u0437\u043c\u0435\u0440\u0430. <\/p>\n

P\u00ebrve\u00e7 zgjidhjes s\u00eb dob\u00ebsive n\u00eb Restic 0.18, jan\u00eb propozuar gjithashtu disa risit\u00eb: <\/p>\n