{"id":31944,"date":"2019-10-31T21:44:09","date_gmt":"2019-10-31T18:44:09","guid":{"rendered":"https:\/\/prohoster.info\/blog\/kogda-shifrovanie-ne-pomozhet-rasskazyvaem-pro-fizicheskij-dostup-k-ustrojstvu\/"},"modified":"2019-10-31T21:44:09","modified_gmt":"2019-10-31T18:44:09","slug":"kogda-shifrovanie-ne-pomozhet-rasskazyvaem-pro-fizicheskij-dostup-k-ustrojstvu","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/kogda-shifrovanie-ne-pomozhet-rasskazyvaem-pro-fizicheskij-dostup-k-ustrojstvu","title":{"rendered":"Kur criptimi nuk ndihmon: flasim p\u00ebr aksesin fizik n\u00eb pajisje","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb shkurt, ne publikuan nj\u00eb artikull \u00abJo vet\u00ebm VPN. Nj\u00eb udh\u00ebzues p\u00ebr m\u00ebnyrat e sigurimit t\u00eb vetes dhe t\u00eb dh\u00ebnave tuaja\u00bb. Nj\u00eb nga komentet<\/a><\/noindex> na nxiti t\u00eb shkruanim vazhdimin e artikullit. Kjo pjes\u00eb \u00ebsht\u00eb nj\u00eb burim informacioni mjaft autonom, por megjithat\u00eb rekomandojm\u00eb t\u00eb konsultoheni me t\u00eb dyja postimet.<\/p>\n

Posti i ri i kushtohet \u00e7\u00ebshtjes s\u00eb siguris\u00eb s\u00eb t\u00eb dh\u00ebnave (mesazhe, foto, video, etj.) n\u00eb mesazher\u00ebt dhe pajisjet e veta q\u00eb p\u00ebrdoren p\u00ebr t\u00eb punuar me aplikacionet.<\/a><\/noindex><\/p>\n

Mesazher\u00ebt<\/h3>\n

\n Telegram<\/b><\/p>\n

Q\u00eb nga tetori 2018, studentit t\u00eb vitit t\u00eb par\u00eb t\u00eb kolegjit Wake Technical, Nathaniel Sachi, iu arrit t\u00eb zbuloj\u00eb se mesazheri Telegram ruan mesazhet dhe mediat n\u00eb diskun lokal t\u00eb kompjuterit n\u00eb form\u00eb t\u00eb hapur.<\/p>\n

Studenti arriti t\u00eb merrte qasje n\u00eb mesazhet e tij, duke p\u00ebrfshir\u00eb tekstet dhe imazhet. P\u00ebr k\u00ebt\u00eb, ai studoi bazat e t\u00eb dh\u00ebnave t\u00eb aplikacionit, t\u00eb ruajtura n\u00eb HDD. Doli q\u00eb t\u00eb dh\u00ebnat ishin t\u00eb v\u00ebshtira p\u00ebr t'u lexuar, por nuk ishin t\u00eb kriptuara. Mund t\u00eb arrihet qasje n\u00eb to edhe n\u00ebse p\u00ebrdoruesi kishte vendosur nj\u00eb fjal\u00ebkalim p\u00ebr aplikacionin.<\/p>\n

N\u00eb t\u00eb dh\u00ebnat e marra, u gjet\u00ebn emra dhe numra telefonash t\u00eb biseduesve, t\u00eb cilat mund t\u00eb p\u00ebrputhen sipas d\u00ebshires. Informacioni nga bisedat e mbyllura gjithashtu ruhet n\u00eb form\u00eb t\u00eb hapur.<\/p>\n

M\u00eb von\u00eb, Durov deklaroi q\u00eb kjo nuk \u00ebsht\u00eb nj\u00eb problem, sepse n\u00ebse nj\u00eb sulmues ka qasje n\u00eb kompjuterin e p\u00ebrdoruesit, ai mund t\u00eb marr\u00eb \u00e7el\u00ebsat e kriptimit dhe t\u00eb zb\u00ebrthej\u00eb leht\u00ebsisht t\u00eb gjitha mesazhet. Por shum\u00eb specialist\u00eb t\u00eb siguris\u00eb informatike pretendojn\u00eb se kjo \u00ebsht\u00eb gjithsesi serioze.<\/p>\n

\r\n \"Luaj\r\n
<\/div>\r\n <\/div><\/center>
\nP\u00ebr m\u00eb tep\u00ebr, Telegram rezultoi i ndjesh\u00ebm ndaj sulmeve p\u00ebr vjedhjen e \u00e7el\u00ebsave, q\u00eb zbuloi<\/noindex> p\u00ebrdoruesi i Habra. Nj\u00eb kod lokal fjal\u00ebkalimi i \u00e7do gjat\u00ebsie dhe v\u00ebshtir\u00ebsie mund t\u00eb thyehet.<\/p>\n

WhatsApp<\/b><\/p>\n

Sipas informacioneve, ky mesazher gjithashtu ruan t\u00eb dh\u00ebnat n\u00eb diskun e kompjuterit n\u00eb form\u00eb t\u00eb pa kriptuar. Sipas k\u00ebsaj, n\u00ebse nj\u00eb sulmues ka qasje n\u00eb pajisjen e p\u00ebrdoruesit, at\u00ebher\u00eb t\u00eb dh\u00ebnat gjithashtu jan\u00eb t\u00eb hapura.<\/p>\n

Por ka nj\u00eb problem m\u00eb t\u00eb madh. Tani t\u00eb gjitha kopjet rezerv\u00eb nga WhatsApp, t\u00eb instaluara n\u00eb pajisjet me Android OS, ruhen n\u00eb Google Drive, p\u00ebr t\u00eb cilin Google dhe Facebook u dakorduan vitin e kaluar. Por backupet e mesazheve, mediave dhe t\u00eb tjera ruhen n\u00eb form\u00eb t\u00eb pa kriptuar.<\/a><\/noindex>Sa duket, stafi i agjencive t\u00eb siguris\u00eb amerikane ka akses n\u00eb Google Drive<\/a><\/noindex>, p\u00ebr shkak se ekziston mund\u00ebsia q\u00eb agjent\u00ebt e siguris\u00eb mund t\u00eb shohin \u00e7do t\u00eb dh\u00ebn\u00eb t\u00eb ruajtur.<\/p>\n

\u00cbsht\u00eb e mundur t\u00eb kriptohen t\u00eb dh\u00ebnat, por asnj\u00ebra kompani nuk e b\u00ebn k\u00ebt\u00eb. Ndoshta, thjesht sepse backup-et pa kriptim mund t\u00eb transferohen dhe p\u00ebrdoren pa probleme nga vet\u00eb p\u00ebrdoruesit. Probabiliteti \u00ebsht\u00eb q\u00eb nuk ka kriptim jo sepse \u00ebsht\u00eb e v\u00ebshtir\u00eb ta realizosh teknologjikisht: p\u00ebrkundrazi, mbrojtja e backup-eve mund t\u00eb b\u00ebhet pa asnj\u00eb v\u00ebshtir\u00ebsi. Problemi \u00ebsht\u00eb se Google ka arsyet e veta p\u00ebr t\u00eb punuar me WhatsApp \u2014 kompania, supozohet, analizon t\u00eb dh\u00ebnat e ruajtura n\u00eb server\u00ebt Google Drive<\/a><\/noindex> dhe i p\u00ebrdor ato p\u00ebr t\u00eb treguar reklama t\u00eb personalizuara. N\u00ebse Facebook do t\u00eb b\u00ebnte papritur kriptimin p\u00ebr backup-et e WhatsApp, Google do t\u00eb humbiste menj\u00ebher\u00eb interesin p\u00ebr nj\u00eb partneritet t\u00eb till\u00eb, duke humbur nj\u00eb burim t\u00eb \u00e7muar t\u00eb t\u00eb dh\u00ebnave mbi preferencat e p\u00ebrdoruesve t\u00eb WhatsApp. Kjo, sigurisht, \u00ebsht\u00eb vet\u00ebm nj\u00eb supozim, por mjaft e mundshme n\u00eb bot\u00ebn e marketingut hi-tech. <\/p>\n

Sa i p\u00ebrket WhatsApp p\u00ebr iOS, backup-et ruhen n\u00eb cloud-in iCloud. Por edhe k\u00ebtu, informacioni ruhet n\u00eb form\u00eb t\u00eb pa kriptuar, si\u00e7 thuhet edhe n\u00eb cil\u00ebsimet e aplikacionit. N\u00ebse Apple analizon k\u00ebto t\u00eb dh\u00ebna apo jo, dihet vet\u00ebm nga vet\u00eb korporata. E v\u00ebrteta \u00ebsht\u00eb se kinse, ata nuk kan\u00eb nj\u00eb rrjet reklamuese si Google, k\u00ebshtu q\u00eb mund t\u00eb supozojm\u00eb se probabiliteti i analiz\u00ebs s\u00eb t\u00eb dh\u00ebnave personale t\u00eb p\u00ebrdoruesve t\u00eb WhatsApp prej tyre \u00ebsht\u00eb ndjesh\u00ebm m\u00eb i ul\u00ebt. <\/p>\n

E gjith\u00eb kjo mund t\u00eb formulohet k\u00ebshtu \u2014 po, dikush tjet\u00ebr p\u00ebrve\u00e7 jush ka qasje n\u00eb bisedat tuaja n\u00eb WhatsApp.<\/p>\n

TikTok dhe mesazher\u00eb t\u00eb tjer\u00eb<\/b><\/p>\n

Ky sh\u00ebrbim shk\u00ebmbimi videosh t\u00eb shkurtra mund t\u00eb b\u00ebhet shum\u00eb shpejt popullor. Zhvilluesit premtuan t\u00eb sigurojn\u00eb mbrojtjen e plot\u00eb t\u00eb t\u00eb dh\u00ebnave t\u00eb p\u00ebrdoruesve t\u00eb tyre. Si\u00e7 rezultoi, sh\u00ebrbimi vet\u00eb p\u00ebrdorte k\u00ebto t\u00eb dh\u00ebna pa e informuar p\u00ebrdoruesin. E keqja \u00ebsht\u00eb se: sh\u00ebrbimi mbledhte t\u00eb dh\u00ebna personale t\u00eb f\u00ebmij\u00ebve n\u00ebn 13 vje\u00e7 pa p\u00eblqimin e prind\u00ebrve. Informacioni personal i t\u00eb miturve \u2014 emrat, e-mailat, numrat e telefonit, fotot dhe videot ishin t\u00eb aksesueshme publikisht.<\/p>\n

Sh\u00ebrbimi u d\u00ebnua<\/a><\/noindex> me disa miliona dollar\u00eb, rregullator\u00ebt gjithashtu k\u00ebrkuan t\u00eb fshihen t\u00eb gjitha videot e xhiruara nga f\u00ebmij\u00ebt n\u00ebn 13 vje\u00e7. TikTok iu p\u00ebrmbajt k\u00ebrkesave. Megjithat\u00eb, t\u00eb dh\u00ebnat personale t\u00eb p\u00ebrdoruesve p\u00ebrdoren p\u00ebr q\u00ebllimet e tyre nga mesazher\u00eb dhe sh\u00ebrbime t\u00eb tjera, k\u00ebshtu q\u00eb nuk mund t\u00eb jeni t\u00eb sigurt p\u00ebr sigurin\u00eb e tyre.<\/p>\n

Ky list\u00eb mund t\u00eb vazhdoj\u00eb pafund\u00ebsisht \u2014 shumica e mesazher\u00ebve kan\u00eb nj\u00eb ose tjet\u00ebr ndjeshm\u00ebri q\u00eb lejon sulmuesit t\u00eb p\u00ebrgjojn\u00eb p\u00ebrdoruesit.shembull i shk\u00eblqyer<\/a><\/noindex> \u2014 Viber, ndon\u00ebse duket q\u00eb \u00e7do gj\u00eb \u00ebsht\u00eb rregulluar atje) ose t\u00eb vjedhin t\u00eb dh\u00ebnat e tyre. P\u00ebr m\u00eb tep\u00ebr, praktikisht t\u00eb gjitha aplikacionet n\u00eb top-5 ruajn\u00eb t\u00eb dh\u00ebnat e p\u00ebrdoruesve n\u00eb form\u00eb t\u00eb pakProtected n\u00eb hard diskun e kompjuterit ose n\u00eb memorien e telefonit. Dhe kjo \u00ebsht\u00eb n\u00ebse nuk p\u00ebrmendim sh\u00ebrbimet e specializuara t\u00eb vendeve t\u00eb ndryshme, t\u00eb cilat mund t\u00eb ken\u00eb qasje n\u00eb t\u00eb dh\u00ebnat e p\u00ebrdoruesve fal\u00eb legjislacionit. Nj\u00ebsoj, Skype, VKontakte, TamTam dhe t\u00eb tjer\u00eb ofrojn\u00eb \u00e7do informacion p\u00ebr \u00e7do p\u00ebrdorues me k\u00ebrkes\u00eb t\u00eb autoriteteve (p\u00ebr shembull, Rusi).<\/p>\n

Mbrojtje e mir\u00eb n\u00eb nivelin e protokollit? Asnj\u00eb problem, e thyejm\u00eb pajisjen<\/h3>\n

\nDisa vite m\u00eb par\u00eb ndodhi nj\u00eb konflikt<\/a><\/noindex> midis Apple dhe qeveris\u00eb amerikane. Korporata refuzoi t\u00eb zhbllokonte nj\u00eb smartphone t\u00eb kriptuar, i cili ishte pjes\u00eb e nj\u00eb rasti t\u00eb sulmeve n\u00eb qytetin San Bernardino. At\u00ebher\u00eb kjo dukej nj\u00eb problem real: t\u00eb dh\u00ebnat ishin t\u00eb mbrojtura mir\u00eb, dhe t\u00eb thyhej smartphone ishte ose e pamundur, ose shum\u00eb e v\u00ebshtir\u00eb.<\/p>\n

Tani situata \u00ebsht\u00eb ndryshe. P\u00ebr shembull, kompania izraelite Cellebrite shet subjekteve ligjore n\u00eb Rusi dhe vende t\u00eb tjera nj\u00eb kompleks softueriko-hardueri q\u00eb lejon thyerjen e t\u00eb gjitha modeleve t\u00eb iPhone dhe Android. Vitin e kaluar u publikua nj\u00eb broshur\u00eb reklamash<\/a><\/noindex> me informacione relativisht t\u00eb detajuara mbi k\u00ebt\u00eb tem\u00eb.<\/p>\n

\"Kur
\nEksperti i kriminalistik\u00ebs nga Magadan, Popov, thyen smartphone me t\u00eb nj\u00ebjt\u00ebn teknologji si Zyra Federal\u00eb e Hetimit t\u00eb SHBA. Burimi: BBC<\/i><\/p>\n

Pajisja \u00ebsht\u00eb e lir\u00eb sipas standardeve shtet\u00ebrore. P\u00ebr UFED Touch2, drejtoria e Krimit t\u00eb Volgogradit paguante 800 mij\u00eb rubla, drejtoria e Habarovsk \u2014 1,2 milion rubla. N\u00eb vitin 2017, Aleksand\u00ebr Bastrykin, kreu i Komitetit t\u00eb Hetimor t\u00eb RF, konfirmoi se organi i tij p\u00ebrdor zgjidhje<\/noindex> nga kompania izraelite. <\/p>\n

K\u00ebto pajisje i blejn\u00eb edhe \"Sberbank\" \u2014 p\u00ebr fat t\u00eb keq, jo p\u00ebr kryerjen e hetimeve, por p\u00ebr t\u00eb luftuar viruset n\u00eb pajisjet me OS Android. \"N\u00eb rast t\u00eb dyshimit p\u00ebr infektim t\u00eb pajisjeve mobile me kod t\u00eb panjohur t\u00eb keq, dhe pas marrjes s\u00eb miratimit t\u00eb obliguar nga pronar\u00ebt e telefon\u00ebve t\u00eb infektuar, do t\u00eb b\u00ebhet analiza p\u00ebr t\u00eb k\u00ebrkuar viruse t\u00eb reja q\u00eb shfaqen dhe ndryshojn\u00eb vazhdimisht duke p\u00ebrdorur mjete t\u00eb ndryshme, duke p\u00ebrfshir\u00eb aplikimin e UFED Touch2,\" \u2014 konfirmuan<\/a><\/noindex> n\u00eb kompanin\u00eb.<\/p>\n

Amerikan\u00ebt gjithashtu kan\u00eb teknologji q\u00eb lejojn\u00eb t\u00eb hakojn\u00eb \u00e7do smartphone. Kompania Grayshift premton t\u00eb hakoj\u00eb 300 smartphone p\u00ebr 15,000 dollar\u00eb amerikan\u00eb (kjo \u00ebsht\u00eb 50 dollar\u00eb p\u00ebr nj\u00ebsi krahasuar me 1500 dollar\u00eb nga Cellbrite).<\/p>\n

\u00cbsht\u00eb krejt e mundshme q\u00eb pajisje t\u00eb tilla t\u00eb ken\u00eb edhe kriminel\u00ebt kibernetik\u00eb. K\u00ebto pajisje p\u00ebrmir\u00ebsohen vazhdimisht \u2014 zvog\u00eblohet madh\u00ebsia, rritet performanca.<\/p>\n

Aktualisht po flasim p\u00ebr telefona m\u00eb ose m\u00eb pak t\u00eb njohur nga prodhuesit e m\u00ebdhenj, t\u00eb cil\u00ebt shqet\u00ebsohen p\u00ebr mbrojtjen e t\u00eb dh\u00ebnave t\u00eb p\u00ebrdoruesve t\u00eb tyre. N\u00ebse \u00ebsht\u00eb fjala p\u00ebr kompani m\u00eb pak t\u00eb njohura ose organizata pa em\u00ebr, at\u00ebher\u00eb n\u00eb k\u00ebt\u00eb rast t\u00eb dh\u00ebnat nxirren pa probleme. Reagimi HS-USB funksionon madje edhe kur \u00ebsht\u00eb bllokuar bootloaderi. Re\u017eimet e sh\u00ebrbimit, zakonisht, jan\u00eb \u2018sht\u00ebpia e zez\u00eb\u2019, p\u00ebrmes s\u00eb cil\u00ebs mund t\u00eb nxirren t\u00eb dh\u00ebnat. N\u00ebse jo, mund t\u00eb lidhesh me portin JTAG ose madje t\u00eb nxjerr\u00ebsh \u00e7ipin eMMC, p\u00ebr ta vendosur pastaj n\u00eb nj\u00eb adapter t\u00eb lir\u00eb. N\u00ebse t\u00eb dh\u00ebnat nuk jan\u00eb t\u00eb koduara, nga telefoni mund t\u00eb nxirren<\/a><\/noindex> t\u00eb gjitha, duke p\u00ebrfshir\u00eb shenjat e autentifikimit q\u00eb japin qasje n\u00eb ruajtjet n\u00eb re dhe sh\u00ebrbime t\u00eb tjera.<\/p>\n

N\u00ebse dikush ka qasje personale n\u00eb nj\u00eb smartphone me informacion t\u00eb r\u00ebnd\u00ebsish\u00ebm, at\u00ebher\u00eb d\u00ebshira p\u00ebr ta hakuar \u00ebsht\u00eb e mundur, pavar\u00ebsisht \u00e7far\u00eb thon\u00eb prodhuesit.<\/p>\n

Kjo \u00ebsht\u00eb e qart\u00eb, gjith\u00e7ka e th\u00ebn\u00eb i p\u00ebrket jo vet\u00ebm smartphone-ve, por edhe kompjuter\u00ebve dhe laptop\u00ebve me sisteme operative t\u00eb ndryshme. N\u00ebse nuk i n\u00ebnshtrohemi masave t\u00eb avancuara t\u00eb siguris\u00eb, dhe jemi t\u00eb k\u00ebnaqur me metoda t\u00eb zakonshme si\u00e7 jan\u00eb password dhe login, at\u00ebher\u00eb t\u00eb dh\u00ebnat do t\u00eb mbeten n\u00eb rrezik. Nj\u00eb haker i trajnuar me qasje fizike n\u00eb pajisje mund t\u00eb marr\u00eb pothuajse \u00e7do informacion \u2014 kjo \u00ebsht\u00eb vet\u00ebm nj\u00eb \u00e7\u00ebshtje kohe.<\/p>\n

\u00c7far\u00eb t\u00eb b\u00ebjm\u00eb tani?<\/h3>\n

\nN\u00eb Habr, \u00e7\u00ebshtja e siguris\u00eb s\u00eb t\u00eb dh\u00ebnave n\u00eb pajisjet personale \u00ebsht\u00eb prekur jo nj\u00ebher\u00eb, prandaj nuk do t\u00eb shpikim p\u00ebrs\u00ebri bi\u00e7iklet\u00ebn. Do t\u00eb theksojm\u00eb vet\u00ebm metodat kryesore q\u00eb reduktojn\u00eb mund\u00ebsit\u00eb q\u00eb t\u00eb tjer\u00ebt t\u00eb fitojn\u00eb qasje n\u00eb t\u00eb dh\u00ebnat tuaja:<\/p>\n