{"id":72851,"date":"2020-03-05T02:41:57","date_gmt":"2020-03-04T23:41:57","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vozmozhnost-registraczii-fishingovyh-domenov-s-pohozhimi-unicode-simvolami-v-imeni"},"modified":"2020-03-05T02:41:57","modified_gmt":"2020-03-04T23:41:57","slug":"vozmozhnost-registraczii-fishingovyh-domenov-s-pohozhimi-unicode-simvolami-v-imeni","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/vozmozhnost-registraczii-fishingovyh-domenov-s-pohozhimi-unicode-simvolami-v-imeni","title":{"rendered":"Mund\u00ebsia p\u00ebr regjistrimin e domain-eve phishing me simbole unicode t\u00eb ngjashme n\u00eb em\u00ebr","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

K\u00ebrkuesit nga kompania Soluble identifikuan<\/a><\/noindex> nj\u00eb m\u00ebnyr\u00eb t\u00eb re p\u00ebr regjistrimin e domain-eve me omoglif\u00eb<\/a><\/noindex>, t\u00eb cilat duken t\u00eb ngjashme me domain-e t\u00eb tjera, por n\u00eb t\u00eb v\u00ebrtet\u00eb dallohet p\u00ebr shkak t\u00eb pranish\u00ebm t\u00eb simboleve me kuptim tjet\u00ebr. Domain-et e tilla t\u00eb internacionalizuara (IDN<\/a><\/noindex>) mund t\u00eb duken ndryshe nga domain-et e kompanive dhe sh\u00ebrbimeve t\u00eb njohura, duke lejuar p\u00ebrdorimin e tyre p\u00ebr phishing, duke p\u00ebrfshir\u00eb marrjen e certifikatave TLS t\u00eb sakta.<\/p>\n

Klasik\u00eb e z\u00ebvend\u00ebsimit p\u00ebrmes nj\u00eb domaini IDN q\u00eb duket t\u00eb jet\u00eb i ngjash\u00ebm, \u00ebsht\u00eb bllokuar p\u00ebr nj\u00eb koh\u00eb t\u00eb gjat\u00eb n\u00eb shfletues dhe regjistrues, fal\u00eb ndalimit t\u00eb p\u00ebrzierjes s\u00eb simboleve nga alfabete t\u00eb ndryshme. P\u00ebr shembull, nj\u00eb domen i dyt\u00eb aapple.com (xn--pple-43d.com) nuk do t\u00eb mund t\u00eb krijohej duke z\u00ebvend\u00ebsuar latin\u00ebn 'a' (U+0061) me ciriliken '\u0430' (U+0430), pasi p\u00ebrzierja e shkronjave nga alfabete t\u00eb ndryshme nuk lejohet. N\u00eb vitin 2017, ishte gjetur<\/a><\/noindex> nj\u00eb m\u00ebnyr\u00eb p\u00ebr t\u00eb anashkaluar k\u00ebt\u00eb mbrojtje p\u00ebrmes p\u00ebrdorimit t\u00eb vet\u00ebm simboleve unicode n\u00eb domain, pa p\u00ebrdorur latinisht (p\u00ebr shembull, duke p\u00ebrdorur simbole t\u00eb gjuh\u00ebs me simbole t\u00eb ngjashme me ato latine).<\/p>\n

Tani \u00ebsht\u00eb gjetur nj\u00eb tjet\u00ebr metod\u00eb p\u00ebr t\u00eb anashkaluar mbrojtjen, e bazuar n\u00eb faktin se regjistruesit bllokojn\u00eb p\u00ebrzierjen e latinishtes dhe Unicode-it, por n\u00ebse simbolet Unicode t\u00eb p\u00ebrmendura n\u00eb domain i p\u00ebrkasin grupit t\u00eb simboleve latine, kjo p\u00ebrzierje lejohet, pasi simbolet i p\u00ebrkasin nj\u00eb alfabeti. Problemi \u00ebsht\u00eb se n\u00eb zgjerimin Unicode Latin IPA<\/a><\/noindex> kan\u00eb omoglif\u00eb, t\u00eb cilat duken si simbole t\u00eb tjera t\u00eb alfabetit latin:
\nsimboli '\u02bd<\/a><\/noindex>' i ngjan 'a', '\u0289<\/a><\/noindex>' \u2014 'g', '\u0297<\/a><\/noindex>' \u2014 'l'. <\/p>\n

\"Mund\u00ebsia<\/a><\/noindex><\/center><\/p>\n

Mund\u00ebsia p\u00ebr regjistrimin e domain-eve n\u00eb t\u00eb cilat latinishtja p\u00ebrzihet me simbolet e dh\u00ebna Unicode \u00ebsht\u00eb zbuluar te regjistruesi Verisign (regjistruesit e tjer\u00eb nuk u kontrolluan), dhe nsubdomain-e u arrit t\u00eb krijoheshin n\u00eb sh\u00ebrbimet Amazon, Google, Wasabi dhe DigitalOcean. Problemi u gjet n\u00eb n\u00ebntor t\u00eb vitit t\u00eb kaluar dhe, ndon\u00ebse u d\u00ebrguan njoftime, pas tre muajsh problemi u eliminua vet\u00ebm n\u00eb Amazon dhe Verisign.<\/p>\n

N\u00eb eksperiment, k\u00ebrkuesit harxhuan 400 dollar\u00eb p\u00ebr t\u00eb regjistruar te Verisign domain-et e m\u00ebposhtme:<\/p>\n