{"id":74249,"date":"2020-03-15T20:42:16","date_gmt":"2020-03-15T17:42:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/issledovanie-dlya-bezopasnosti-shestiznachnye-pin-kody-ne-luchshe-chem-chetyrehznachnye"},"modified":"2020-03-15T20:42:16","modified_gmt":"2020-03-15T17:42:16","slug":"issledovanie-dlya-bezopasnosti-shestiznachnye-pin-kody-ne-luchshe-chem-chetyrehznachnye","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/issledovanie-dlya-bezopasnosti-shestiznachnye-pin-kody-ne-luchshe-chem-chetyrehznachnye","title":{"rendered":"Studimi: p\u00ebr sigurin\u00eb, PIN-et me gjasht\u00eb shifra nuk jan\u00eb m\u00eb mir\u00eb se\u00e7 ata me kat\u00ebr shifra","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nj\u00eb ekip gjerman-amerikan i hulumtuesve me pjes\u00ebmarrjen e vullnetar\u00ebve verifikoi<\/a><\/noindex> dhe krahasoi sigurin\u00eb e kod\u00ebve PIN me gjasht\u00eb dhe kat\u00ebr cifra p\u00ebr bllokimin e smartphone-ve. N\u00eb rast humbjeje ose vjedhjeje t\u00eb smartphone-it, \u00ebsht\u00eb m\u00eb mir\u00eb t\u00eb jesh i sigurt s\u00eb paku q\u00eb informacioni do t\u00eb mbetet i mbrojtur nga hyrjet e paautorizuara. A \u00ebsht\u00eb k\u00ebshtu?<\/p>\n

\"Studimi:<\/p>\n

Filip Markert nga Instituti i Siguris\u00eb IT t\u00eb Horst Giers t\u00eb Universitetit t\u00eb Ruhrit n\u00eb Bochum dhe Maximilian Golla nga Instituti i Siguris\u00eb dhe Privat\u00ebsis\u00eb Max Planck zbuluan se n\u00eb praktik\u00eb psikologjia ndikon m\u00eb shum\u00eb se matematika. Nga nj\u00eb pik\u00ebpamje matematikore, besueshm\u00ebria e kod\u00ebve PIN me gjasht\u00eb cifra \u00ebsht\u00eb ndjesh\u00ebm m\u00eb e lart\u00eb se ajo e kod\u00ebve me kat\u00ebr cifra. Por p\u00ebrdoruesit preferojn\u00eb kombinime specifike numrash, k\u00ebshtu q\u00eb disa PIN p\u00ebrdoren m\u00eb shpesh, gj\u00eb q\u00eb pothuajse fshin diferenc\u00ebn n\u00eb kompleksitet midis kod\u00ebve me gjasht\u00eb dhe kat\u00ebr figura.<\/p>\n

N\u00eb studim, pjes\u00ebmarr\u00ebsit e eksperimentit p\u00ebrdor\u00ebn pajisje Apple ose Android dhe vendos\u00ebn kode PIN kat\u00ebr- ose gjasht\u00eb cifre. N\u00eb pajisjet Apple, q\u00eb nga versioni iOS 9, \u00ebsht\u00eb futur nj\u00eb list\u00eb e zez\u00eb me kombinime numrash t\u00eb ndaluara p\u00ebr kodet PIN, t\u00eb cilat nuk lejohen automatikisht. Hulumtuesit pat\u00ebn n\u00eb duar si t\u00eb dyja listat e zez\u00eb (p\u00ebr kodet me 6 dhe 4 cifra), ashtu si\u00e7 ekzekutuan nj\u00eb prov\u00eb t\u00eb kombinimeve n\u00eb kompjuter. Lista e zez\u00eb e marr\u00eb nga Apple p\u00ebr kodet PIN me kat\u00ebr cifra p\u00ebrmbante 274 numra, nd\u00ebrsa p\u00ebr ato me gjasht\u00eb cifra 2910.<\/p>\n

P\u00ebr pajisjet Apple, p\u00ebrdoruesi ka 10 p\u00ebrpjekje p\u00ebr t\u00eb futur kodin PIN. Sipas hulumtuesve, n\u00eb k\u00ebt\u00eb rast, lista e zez\u00eb nuk ka shum\u00eb kuptim. Pas 10 p\u00ebrpjekjeve, \u00ebsht\u00eb e v\u00ebshtir\u00eb t\u00eb gjesh numrin e sakt\u00eb, edhe n\u00ebse \u00ebsht\u00eb shum\u00eb i thjesht\u00eb (p.sh. 123456). P\u00ebr pajisjet Android, brenda 11 or\u00ebve mund t\u00eb b\u00ebhen 100 hyrje t\u00eb kodit PIN, dhe n\u00eb k\u00ebt\u00eb rast lista e zez\u00eb \u00ebsht\u00eb nj\u00eb mjet m\u00eb i besuesh\u00ebm p\u00ebr t\u00eb parandaluar p\u00ebrdorimin e nj\u00eb kombinimi t\u00eb thjesht\u00eb dhe p\u00ebr t\u00eb parandaluar t\u00eb dh\u00ebnat e pajisjes t\u00eb luhen p\u00ebrmes kombinimeve.<\/p>\n

<\/center><\/p>\n

N\u00eb eksperiment, 1220 pjes\u00ebmarr\u00ebs vet\u00ebzgjodh\u00ebn kodet PIN dhe eksperimentuesit p\u00ebrpiqeshin t'i gjenin ato n\u00eb 10, 30 ose 100 p\u00ebrpjekje. Zgjedhja e kombinimeve u b\u00eb n\u00eb dy m\u00ebnyra. N\u00ebse lista e zez\u00eb aktivizohej, smartphone-t sulmoheshin pa p\u00ebrdorur numrat e list\u00ebs. Pa aktivizuar list\u00ebn e zez\u00eb, p\u00ebrshtatja e kodit fillohej me kombinime nga lista e zez\u00eb (si m\u00eb t\u00eb p\u00ebrdorurat). N\u00eb vijim t\u00eb eksperimentit, u zbulua se nj\u00eb kod PIN me kat\u00ebr cifra, n\u00ebse zgjidhet me men\u00e7uri, \u00ebsht\u00eb mjaft i sigurt dhe madje pak m\u00eb i besuesh\u00ebm se ai me gjasht\u00eb cifra.<\/p>\n

Kombinimet m\u00eb t\u00eb zakonshme t\u00eb kodit PIN me kat\u00ebr cifra ishin 1234, 0000, 1111, 5555 dhe 2580 (kjo \u00ebsht\u00eb nj\u00eb kolon\u00eb vertikale n\u00eb tastier\u00ebn numerike). Nj\u00eb analiz\u00eb m\u00eb e thell\u00eb tregoi se lista ideale e zez\u00eb p\u00ebr kodet PIN me kat\u00ebr figura duhet t\u00eb p\u00ebrmbaj\u00eb rreth 1000 regjistrime dhe t\u00eb jet\u00eb paksa ndryshe nga ajo q\u00eb u krijua p\u00ebr pajisjet Apple.<\/p>\n

\"Studimi:<\/p>\n

S\u00eb fundmi, studiuesit zbuluan se kodet PIN me kat\u00ebr dhe gjasht\u00eb cifra jan\u00eb m\u00eb pak t\u00eb sigurta se fjal\u00ebkalimet, por m\u00eb t\u00eb besueshme se bllokimi grafik i smartphone-ve (p\u00ebrmes skemave). Raporti i plot\u00eb i hulumtimit<\/a><\/noindex> do t\u00eb paraqitet n\u00eb San Francisko n\u00eb maj 2020 n\u00eb konferenc\u00ebn IEEE Symposium on Security and Privacy.<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
Burimi: 3dnews.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u0435\u043c\u0435\u0446\u043a\u043e-\u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441 \u043f\u0440\u0438\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0435\u043c \u0434\u043e\u0431\u0440\u043e\u0432\u043e\u043b\u044c\u0446\u0435\u0432 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u043b\u0430 \u0438 \u0441\u0440\u0430\u0432\u043d\u0438\u043b\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0448\u0435\u0441\u0442\u0438\u0437\u043d\u0430\u0447\u043d\u044b\u0445 \u0438 \u0447\u0435\u0442\u044b\u0440\u0451\u0445\u0437\u043d\u0430\u0447\u043d\u044b\u0445 PIN-\u043a\u043e\u0434\u043e\u0432 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u043e\u0432. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u0443\u0442\u0435\u0440\u0438 \u0438\u043b\u0438 \u043a\u0440\u0430\u0436\u0438 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u0430 \u043b\u0443\u0447\u0448\u0435 \u0431\u044b\u0442\u044c \u0443\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u043c \u0445\u043e\u0442\u044f \u0431\u044b \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u043a\u0430\u0436\u0435\u0442\u0441\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0439 \u043e\u0442 \u0432\u0437\u043b\u043e\u043c\u0430. \u0422\u0430\u043a \u043b\u0438 \u044d\u0442\u043e? \u0424\u0438\u043b\u0438\u043f\u043f \u041c\u0430\u0440\u043a\u0435\u0440\u0442 \u0438\u0437 \u0418\u043d\u0441\u0442\u0438\u0442\u0443\u0442\u0430 \u0418\u0422-\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0425\u043e\u0440\u0441\u0442\u0430 \u0413\u0451\u0440\u0446\u0430 \u0420\u0443\u0440\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0411\u043e\u0445\u0443\u043c\u0430 \u0438 \u041c\u0430\u043a\u0441\u0438\u043c\u0438\u043b\u0438\u0430\u043d \u0413\u043e\u043b\u043b\u0430 \u0438\u0437 \u0418\u043d\u0441\u0442\u0438\u0442\u0443\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":74250,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-74249","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Hulumtimi: p\u00ebr sigurin\u00eb kodet PIN me gjasht\u00eb cifra nuk jan\u00eb m\u00eb t\u00eb mira se ato me kat\u00ebr cifra | ProHoster","description":"Nj\u00eb ekip gjerman-amerikan i hulumtuesve me pjes\u00ebmarrjen e vullnetar\u00ebve","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/issledovanie-dlya-bezopasnosti-shestiznachnye-pin-kody-ne-luchshe-chem-chetyrehznachnye","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0435: \u0434\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0448\u0435\u0441\u0442\u0438\u0437\u043d\u0430\u0447\u043d\u044b\u0435 PIN-\u043a\u043e\u0434\u044b \u043d\u0435 \u043b\u0443\u0447\u0448\u0435, \u0447\u0435\u043c \u0447\u0435\u0442\u044b\u0440\u0435\u0445\u0437\u043d\u0430\u0447\u043d\u044b\u0435 | ProHoster","og:description":"\u041d\u0435\u043c\u0435\u0446\u043a\u043e-\u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441 \u043f\u0440\u0438\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u0435\u043c \u0434\u043e\u0431\u0440\u043e\u0432\u043e\u043b\u044c\u0446\u0435\u0432","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/issledovanie-dlya-bezopasnosti-shestiznachnye-pin-kody-ne-luchshe-chem-chetyrehznachnye","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-03-15T17:42:16+00:00","article:modified_time":"2020-03-15T17:42:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"74249","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:18:28","updated":"2022-10-02 00:04:33","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/74249","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=74249"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/74249\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/74250"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=74249"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=74249"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=74249"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}