{"id":31944,"date":"2019-10-31T21:44:09","date_gmt":"2019-10-31T18:44:09","guid":{"rendered":"https:\/\/prohoster.info\/blog\/kogda-shifrovanie-ne-pomozhet-rasskazyvaem-pro-fizicheskij-dostup-k-ustrojstvu\/"},"modified":"2019-10-31T21:44:09","modified_gmt":"2019-10-31T18:44:09","slug":"kogda-shifrovanie-ne-pomozhet-rasskazyvaem-pro-fizicheskij-dostup-k-ustrojstvu","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/kogda-shifrovanie-ne-pomozhet-rasskazyvaem-pro-fizicheskij-dostup-k-ustrojstvu","title":{"rendered":"Kur enkriptimi nuk ndihmon: flasim p\u00ebr qasjen fizike n\u00eb pajisje","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb shkurt publikuan nj\u00eb artikull \"Jo vet\u00ebm me VPN. Nj\u00eb udh\u00ebzues p\u00ebr t\u00eb mbrojtur veten dhe t\u00eb dh\u00ebnat tuaja\". Nj\u00eb nga komentet<\/a><\/noindex> na nxit\u00ebn t\u00eb shkruajm\u00eb nj\u00eb vazhdim t\u00eb artikullit. Kjo pjes\u00eb \u00ebsht\u00eb nj\u00eb burim informacioni mjaft autonom, megjithat\u00eb, rekomandojm\u00eb t\u00eb shqyrtoni t\u00eb dy postimet.<\/p>\n

Postimi i ri merret me \u00e7\u00ebshtjen e siguris\u00eb s\u00eb t\u00eb dh\u00ebnave (korrespondenca, foto, video, etj.) n\u00eb mesazher\u00ebt dhe t\u00eb vet\u00eb pajisjeve q\u00eb p\u00ebrdoren p\u00ebr t\u00eb punuar me aplikacionet.<\/a><\/noindex><\/p>\n

Mesazher\u00ebt<\/h3>\n

\n Telegram<\/b><\/p>\n

Q\u00eb nga tetori 2018, studenti i vitit t\u00eb par\u00eb n\u00eb Wake Technical College, Nathaniel Sachi, kishte zbuluar se mesazheri Telegram ruante mesazhet dhe skedar\u00ebt multimedia n\u00eb diskut lokal t\u00eb kompjuterit n\u00eb format t\u00eb hapur.<\/p>\n

Studenti arriti t\u00eb aksesonte korrespondenc\u00ebn e tij, p\u00ebrfshir\u00eb tekstin dhe imazhet. P\u00ebr k\u00ebt\u00eb, ai studioi bazat e t\u00eb dh\u00ebnave t\u00eb aplikacionit, t\u00eb ruajtura n\u00eb HDD. Doli se t\u00eb dh\u00ebnat jan\u00eb t\u00eb v\u00ebshtira p\u00ebr t'u lexuar, por jo t\u00eb koduara. Dhe mund t\u00eb qasen edhe n\u00ebse p\u00ebrdoruesi kishte vendosur nj\u00eb fjal\u00ebkalim p\u00ebr aplikacionin.<\/p>\n

N\u00eb t\u00eb dh\u00ebnat e marra u gjet\u00ebn emra dhe numra telefonash t\u00eb biseduesve, t\u00eb cilat mund t\u00eb korrespodojn\u00eb n\u00ebse d\u00ebshirohet. Informacioni nga bisedat e mbyllura gjithashtu ruhet n\u00eb format t\u00eb hapur.<\/p>\n

M\u00eb von\u00eb, Durov deklaroi se kjo nuk \u00ebsht\u00eb nj\u00eb problem, pasi n\u00ebse nj\u00eb sulmues ka akses n\u00eb PC-n\u00eb e p\u00ebrdoruesit, ai mund t\u00eb marr\u00eb \u00e7el\u00ebsat e kodimit dhe t\u00eb zbuloj\u00eb t\u00eb gjith\u00eb korrespondenc\u00ebn. Por shum\u00eb specialist\u00eb t\u00eb siguris\u00eb informatike b\u00ebjn\u00eb t\u00eb ditur se kjo \u00ebsht\u00eb ende nj\u00eb \u00e7\u00ebshtje e r\u00ebnd\u00ebsishme.<\/p>\n

\r\n \"Luaj\r\n
<\/div>\r\n <\/div><\/center>
\nP\u00ebr m\u00eb tep\u00ebr, Telegram rezultoi t\u00eb jet\u00eb i ndjesh\u00ebm ndaj sulmeve p\u00ebr vjedhjen e \u00e7el\u00ebsave, q\u00eb zbuloi<\/noindex> p\u00ebrdoruesi Habr. Mund t\u00eb thyehet kodi lokal i fjal\u00ebkalimit t\u00eb \u00e7do gjat\u00ebsie dhe nd\u00ebrlikimi.<\/p>\n

WhatsApp<\/b><\/p>\n

Sa dihet, ky mesazher gjithashtu ruan t\u00eb dh\u00ebnat n\u00eb diskun e kompjuterit n\u00eb format t\u00eb hapur. Prandaj, n\u00ebse nj\u00eb sulmues ka akses n\u00eb pajisjen e p\u00ebrdoruesit, t\u00eb gjitha t\u00eb dh\u00ebnat jan\u00eb gjithashtu t\u00eb hapura.<\/p>\n

Por ka nj\u00eb problem m\u00eb t\u00eb gjer\u00eb. Aktualisht, t\u00eb gjitha kopjet rezerv\u00eb nga WhatsApp, t\u00eb instaluara n\u00eb pajisjet me Android OS, ruhen n\u00eb Google Drive, p\u00ebr t\u00eb cilin Google dhe Facebook ran\u00eb dakord vitin e kaluar. Por kopjet rezerv\u00eb t\u00eb korrespondenc\u00ebs, skedar\u00ebve multimedia dhe t\u00eb tjera ruhen n\u00eb format t\u00eb hapur<\/a><\/noindex>. Sa mund t\u00eb gjykohet, agjent\u00ebt e forcave t\u00eb rendit t\u00eb SHBA kan\u00eb akses n\u00eb Google Drive<\/a><\/noindex>, prandaj ekziston nj\u00eb mund\u00ebsi q\u00eb forcat e mb\u00ebshtetjes mund t\u00eb shohin \u00e7do t\u00eb dh\u00ebn\u00eb t\u00eb ruajtur.<\/p>\n

T\u00eb dh\u00ebnat mund t\u00eb kodohen, por asnj\u00eb nga dy kompanit\u00eb nuk e b\u00ebn k\u00ebt\u00eb. Mbase vet\u00ebm sepse kopjet rezerv\u00eb pa kodim mund t\u00eb transferohen dhe p\u00ebrdoren pa probleme nga vet\u00eb p\u00ebrdoruesit. Ka shum\u00eb gjasa q\u00eb mungesa e kodimit t\u00eb mos jet\u00eb p\u00ebr shkak t\u00eb v\u00ebshtir\u00ebsis\u00eb teknike: p\u00ebrkundrazi, mbrojtja e kopjeve rezerv\u00eb \u00ebsht\u00eb e leht\u00eb p\u00ebr t'u realizuar. Problemi \u00ebsht\u00eb se Google ka arsyet e veta p\u00ebr t\u00eb bashk\u00ebpunuar me WhatsApp - kompania, supozohet, analizon t\u00eb dh\u00ebnat e ruajtura n\u00eb server\u00ebt e Google Drive<\/a><\/noindex> dhe i p\u00ebrdor ato p\u00ebr t\u00eb treguar reklama t\u00eb personalizuara. N\u00ebse Facebook do t\u00eb vendoste papritmas kodimin p\u00ebr kopjet rezerv\u00eb t\u00eb WhatsApp, Google do t\u00eb humbiste menj\u00ebher\u00eb interesin p\u00ebr nj\u00eb partneritet t\u00eb till\u00eb, duke humbur nj\u00eb burim t\u00eb \u00e7muar t\u00eb t\u00eb dh\u00ebnave n\u00eb lidhje me preferencat e p\u00ebrdoruesve t\u00eb WhatsApp. Kjo, natyrisht, \u00ebsht\u00eb vet\u00ebm nj\u00eb supozim, por shum\u00eb e mundshme n\u00eb bot\u00ebn e marketingut hi-tech. <\/p>\n

Sa i p\u00ebrket WhatsApp p\u00ebr iOS, kopjet rezerv\u00eb ruhen n\u00eb cloud iCloud. Por edhe k\u00ebtu informacioni ruhet n\u00eb format t\u00eb hapur, si\u00e7 n\u00ebnvizohet n\u00eb cil\u00ebsimet e aplikacionit. N\u00ebse Apple i analizon k\u00ebto t\u00eb dh\u00ebna apo jo, e din\u00eb vet\u00ebm vet\u00eb korporata. Megjithat\u00eb, Cupertino s\u2019ka nj\u00eb rrjet reklamash si Google, k\u00ebshtu q\u00eb mund t\u00eb supozojm\u00eb se mund\u00ebsia e analiz\u00ebs s\u00eb t\u00eb dh\u00ebnave personale t\u00eb p\u00ebrdoruesve t\u00eb WhatsApp nga ata \u00ebsht\u00eb shum\u00eb m\u00eb e ul\u00ebt. <\/p>\n

T\u00eb gjitha k\u00ebto mund t\u00eb p\u00ebrmblidhen k\u00ebshtu \u2014 po, ndiheni se askush tjet\u00ebr nuk ka qasje te korrespondenca juaj WhatsApp p\u00ebrve\u00e7 jush.<\/p>\n

TikTok dhe mesazher\u00ebt e tjer\u00eb<\/b><\/p>\n

Ky sh\u00ebrbim i shk\u00ebmbimit t\u00eb videove t\u00eb shkurtra mund t\u00eb b\u00ebhet shum\u00eb shpejt i njohur. Zhvilluesit premtojn\u00eb t\u00eb garantojn\u00eb siguri t\u00eb plot\u00eb p\u00ebr t\u00eb dh\u00ebnat e p\u00ebrdoruesve t\u00eb tyre. Si\u00e7 rezultoi, sh\u00ebrbimi ka p\u00ebrdorur k\u00ebto t\u00eb dh\u00ebna pa njoftimin e p\u00ebrdoruesve. M\u00eb keq, sh\u00ebrbimi ka mbledhur t\u00eb dh\u00ebna personale t\u00eb f\u00ebmij\u00ebve n\u00ebn 13 vje\u00e7 pa miratimin e prind\u00ebrve. Informacioni personal i t\u00eb miturve \u2014 emrat, e-mail, numrat e telefonit, fotot dhe videot, ka rezultuar t\u00eb jet\u00eb n\u00eb akses t\u00eb hapur.<\/p>\n

Sh\u00ebrbimi u d\u00ebnuar<\/a><\/noindex> me disa milion dollar\u00eb, rregullator\u00ebt gjithashtu k\u00ebrkuan q\u00eb t\u00eb fshiheshin t\u00eb gjitha videot e xhiruara nga f\u00ebmij\u00ebt n\u00ebn 13 vje\u00e7. TikTok u bind. Megjithat\u00eb, t\u00eb dh\u00ebnat personale t\u00eb p\u00ebrdoruesve shfryt\u00ebzohen p\u00ebr interesat e tjera nga mesazher\u00eb dhe sh\u00ebrbime t\u00eb tjera, k\u00ebshtu q\u00eb nuk mund t\u00eb jeni t\u00eb sigurt n\u00eb sigurin\u00eb e tyre.<\/p>\n

Ky list\u00eb mund t\u00eb vazhdoj\u00eb pafund\u00ebsisht \u2014 shumica e mesazher\u00ebve kan\u00eb ndonj\u00eb an\u00eb t\u00eb ndjeshme, e cila lejon sulmuesit t\u00eb p\u00ebrgjojn\u00eb p\u00ebrdoruesit (nj\u00eb shembull i shk\u00eblqyer<\/a><\/noindex> \u2014 Viber, megjith\u00ebse duket se atje e kan\u00eb rregulluar) ose t\u00eb vjedh\u00ebsh t\u00eb dh\u00ebnat e tyre. P\u00ebr m\u00eb tep\u00ebr, pothuajse t\u00eb gjitha aplikacionet n\u00eb top-5 ruajn\u00eb t\u00eb dh\u00ebnat e p\u00ebrdoruesve n\u00eb nj\u00eb format t\u00eb pap\u00ebrgatitur n\u00eb hard diskun e kompjuterit ose n\u00eb geheugen e telefonit. Dhe kjo, n\u00ebse nuk e p\u00ebrmendim agjencit\u00eb e ndryshme t\u00eb p\u00ebrgjimit q\u00eb mund t\u00eb ken\u00eb akses n\u00eb t\u00eb dh\u00ebnat e p\u00ebrdoruesve p\u00ebrmes legjislacionit. Po ashtu, Skype, VKontakte, TamTam dhe t\u00eb tjera ofrojn\u00eb \u00e7do informacion p\u00ebr \u00e7do p\u00ebrdorues me k\u00ebrkes\u00ebn e autoriteteve (p\u00ebr shembull, t\u00eb Rusis\u00eb).<\/p>\n

Mbrojtje e mir\u00eb n\u00eb nivel protokolli? Nuk \u00ebsht\u00eb problem, do t\u00eb thyejm\u00eb pajisjen<\/h3>\n

\nDisa vite m\u00eb par\u00eb ndodhi nj\u00eb konflikt<\/a><\/noindex> mes Apple dhe qeveris\u00eb amerikane. Korporata refuzonte t\u00eb zhbllokonte nj\u00eb smartphone t\u00eb enkriptuar, i cili ishte pjes\u00eb e nj\u00eb rasti p\u00ebr atentatet n\u00eb qytetin San Bernardino. At\u00ebher\u00eb kjo dukej si nj\u00eb problem real: t\u00eb dh\u00ebnat ishin shum\u00eb t\u00eb mbrojtura, dhe t\u00eb thyheshe smartphone-in ishte ose e pamundur, ose shum\u00eb e v\u00ebshtir\u00eb.<\/p>\n

Tani gj\u00ebrat kan\u00eb ndryshuar. P\u00ebr shembull, kompania izraeliase Cellebrite shet organeve ligjore t\u00eb Rusis\u00eb dhe vendeve t\u00eb tjera nj\u00eb kompleks programo-hardware q\u00eb lejon thyerjen e t\u00eb gjitha modeleve t\u00eb iPhone dhe Android. Vitin e kaluar u botua nj\u00eb broshur\u00eb reklamuese<\/a><\/noindex> me informacion relativisht t\u00eb detajuar mbi k\u00ebt\u00eb tem\u00eb.<\/p>\n

\"Kur
\nI hetuesi kriminal i Magadanit, Popov, thyen smartphone-in me teknologjin\u00eb e nj\u00ebjt\u00eb q\u00eb p\u00ebrdor FBI-ja amerikane. Burimi: BBC<\/i><\/p>\n

Pajisja kushton relativisht pak sipas standardeve t\u00eb shtetit. P\u00ebr UFED Touch2, drejtoria e SKR n\u00eb Volgograd pagoi 800 mij\u00eb rubla, nd\u00ebrsa n\u00eb Habarovsk \u2014 1,2 milion rubla. N\u00eb vitin 2017, Aleksand\u00ebr Bastrykin, kreu i Komitetit t\u00eb Hetimit t\u00eb Rusis\u00eb, konfirmoi se departamenti i tij p\u00ebrdor zgjidhje<\/noindex> t\u00eb kompanis\u00eb israeliase. <\/p>\n

T\u00eb tilla pajisje po blejn\u00eb edhe \"Sberbank\" \u2014 megjithat\u00eb, jo p\u00ebr t\u00eb kryer hetime, por p\u00ebr t\u00eb luftuar viruset n\u00eb pajisjet me sistemin operativ Android. \"Me dyshimin p\u00ebr infektimin e pajisjeve mobile me kode t\u00eb d\u00ebmshme t\u00eb panjohura dhe pas marrjes s\u00eb miratimit t\u00eb detyruesh\u00ebm nga pronar\u00ebt e telefon\u00ebve t\u00eb infektuar, do t\u00eb kryhet analiza p\u00ebr t\u00eb gjetur viruse t\u00eb reja q\u00eb shfaqen dhe ndryshojn\u00eb, duke p\u00ebrdorur mjete t\u00eb ndryshme, p\u00ebrfshir\u00eb edhe UFED Touch2\", \u2014 n\u00eb deklaruan<\/a><\/noindex> n\u00eb kompanin\u00eb.<\/p>\n

Amerikan\u00ebt gjithashtu kan\u00eb teknologji q\u00eb lejojn\u00eb thyerjen e \u00e7do smartphone. Kompania Grayshift premton t\u00eb thyej\u00eb 300 smartphone p\u00ebr 15,000 dollar\u00eb amerikan\u00eb (kjo \u00ebsht\u00eb $50 p\u00ebr nj\u00ebsi n\u00eb krahasim me $1500 t\u00eb Cellebrite).<\/p>\n

Mund\u00ebsia q\u00eb pajisje t\u00eb tilla t\u00eb jen\u00eb gjithashtu n\u00eb duar t\u00eb kriminel\u00ebve kibernetik\u00eb \u00ebsht\u00eb shum\u00eb e mundur. K\u00ebto pajisje vazhdimisht p\u00ebrmir\u00ebsohen \u2014 zvog\u00eblohet madh\u00ebsia, rritet performanca.<\/p>\n

Tani po flasim p\u00ebr telefona m\u00eb ose m\u00eb pak t\u00eb njohur nga prodhuesit e m\u00ebdhenj q\u00eb shqet\u00ebsohen p\u00ebr mbrojtjen e t\u00eb dh\u00ebnave t\u00eb p\u00ebrdoruesve t\u00eb tyre. N\u00ebse flasim p\u00ebr kompani m\u00eb t\u00eb vogla ose organizata pa em\u00ebr, at\u00ebher\u00eb n\u00eb k\u00ebt\u00eb rast t\u00eb dh\u00ebnat jan\u00eb t\u00eb lehta p\u00ebr t'u marr\u00eb. Rezira HS-USB funksionon edhe kur ngarkuesi \u00ebsht\u00eb i bllokuar. Rejimet sh\u00ebrbyese, zakonisht, jan\u00eb \"kalime t\u00eb zeza\", p\u00ebrmes t\u00eb cilave mund t\u00eb nxirren t\u00eb dh\u00ebnat. N\u00ebse jo, mund t\u00eb lidhemi me portin JTAG ose madje t\u00eb nxjerrim \u00e7ipin eMMC, pastaj ta vendosim n\u00eb nj\u00eb adapter t\u00eb lir\u00eb. N\u00ebse t\u00eb dh\u00ebnat nuk jan\u00eb t\u00eb enkriptuara, mund t\u00eb nxirren p\u00ebrgjith\u00ebsisht gjith\u00e7ka, duke p\u00ebrfshir\u00eb marker\u00ebt e autentifikimit q\u00eb japin akses n\u00eb shkarkimet n\u00eb cloud dhe sh\u00ebrbime t\u00eb tjera.<\/a><\/noindex> N\u00ebse dikush ka akses t\u00eb privuar n\u00eb nj\u00eb smartphone me informacion t\u00eb r\u00ebnd\u00ebsish\u00ebm, at\u00ebher\u00eb, p\u00ebr sa koh\u00eb q\u00eb d\u00ebshiron ta thyej\u00eb, \u00ebsht\u00eb e mundur, pavar\u00ebsisht se \u00e7far\u00eb thon\u00eb prodhuesit.<\/p>\n

\u00cbsht\u00eb e qart\u00eb se \u00e7far\u00eb u tha nuk p\u00ebrfshin vet\u00ebm smartphone-t, por edhe kompjuter\u00ebt dhe laptop\u00ebt me sisteme operative t\u00eb ndryshme. N\u00ebse nuk p\u00ebrdoren masa t\u00eb avancuara mbrojt\u00ebse, dhe vet\u00ebm metodat e zakonshme si emri i p\u00ebrdoruesit dhe fjal\u00ebkalimi mjaftojn\u00eb, at\u00ebher\u00eb t\u00eb dh\u00ebnat do t\u00eb mbeten t\u00eb rrezikuara. Nj\u00eb sulmues i njohur, me qasje fizike n\u00eb pajisje, mund t\u00eb marr\u00eb pothuajse \u00e7do informacion \u2014 kjo \u00ebsht\u00eb vet\u00ebm nj\u00eb \u00e7\u00ebshtje kohe.<\/p>\n

\u00c7far\u00eb duhet b\u00ebr\u00eb tani?<\/p>\n

N\u00eb Habr diskutimi mbi sigurin\u00eb e t\u00eb dh\u00ebnave n\u00eb pajisjet personale \u00ebsht\u00eb p\u00ebrmendur disa her\u00eb, prandaj nuk do t\u00eb shpikim s\u00ebrish biciklet\u00ebn. Thjesht do t\u00eb p\u00ebrmendim metodat kryesore q\u00eb ulin probabilitetin e marrjes s\u00eb t\u00eb dh\u00ebnave tuaja nga persona t\u00eb tjer\u00eb:<\/h3>\n

\nPatjet\u00ebr q\u00eb duhet t\u00eb p\u00ebrdorni enkriptimin e t\u00eb dh\u00ebnave si n\u00eb smartphone, ashtu edhe n\u00eb PC. Sistemet e ndryshme operative shpesh ofrojn\u00eb mjete t\u00eb mira nga vet\u00eb. Nj\u00eb shembull \u2014<\/p>\n