{"id":80907,"date":"2020-05-09T13:42:35","date_gmt":"2020-05-09T11:42:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/spam-kak-instrument-zashhity"},"modified":"2020-05-09T13:42:35","modified_gmt":"2020-05-09T11:42:35","slug":"spam-kak-instrument-zashhity","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/spam-kak-instrument-zashhity","title":{"rendered":"Spami si nj\u00eb mjet mbrojt\u00ebs","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Ekziston nj\u00eb mendim<\/a><\/noindex>, se 80% e mesazheve elektronike n\u00eb bot\u00eb jan\u00eb spam. Pra, email-e q\u00eb marr\u00ebsit nuk u duhen aspak (dhe kjo \u00ebsht\u00eb p\u00ebr t\u00eb ardhur keq). Por, sikur t\u00eb mos mjaftonte kjo, mes spam-it shpesh gjenden edhe letra t\u00eb d\u00ebrguara me q\u00ebllime dashakeqe: p\u00ebr shembull, p\u00ebr vjedhjen ose fshirjen e t\u00eb dh\u00ebnave, apo p\u00ebr shantazh.<\/p>\n

Ilustrim:<\/p>\n

\"Spami
\n
\nSi\u00e7 e dim\u00eb, q\u00eb nj\u00eb email t\u00eb mund t\u00eb d\u00ebmtoj\u00eb realisht sistemet kompjuterike, n\u00eb shumic\u00ebn e rasteve nuk mjafton vet\u00ebm dor\u00ebzimi i tij te marr\u00ebsi. Duhet nj\u00eb \u00abkund\u00ebrshtar i prirur p\u00ebr bashk\u00ebpunim\u00bb, dometh\u00ebn\u00eb p\u00ebrdoruesi duhet t\u00eb kryej\u00eb vet\u00eb veprime q\u00eb do t\u00eb \u00e7ojn\u00eb n\u00eb realizimin e planit t\u00eb keqb\u00ebr\u00ebsit.
\n<\/a><\/noindex>
\nZakonisht nj\u00eb veprim i till\u00eb \u00ebsht\u00eb \u00abhapja\u00bb e skedarit bashk\u00ebngjitur email-it, pra nisja manuale e p\u00ebrpunimit t\u00eb skedarit nga programi p\u00ebrkat\u00ebs brenda sistemit operativ t\u00eb p\u00ebrdoruesit.<\/p>\n

Edhe m\u00eb keq, nj\u00eb ndihm\u00ebs i till\u00eb nga pala tjet\u00ebr nuk \u00ebsht\u00eb aspak i rrall\u00eb, dhe spammeri-keqb\u00ebr\u00ebs mund t\u00eb llogaris\u00eb fare mir\u00eb tek ai. <\/p>\n

Dhe kjo \u00e7on te<\/b>
\n \"Spami<\/p>\n

\nShkurt, llogaritarka jon\u00eb hap fatur\u00ebn, por aty nuk \u00ebsht\u00eb aspak fatur\u00eb, por nj\u00eb virus.<\/p>\n

Mesazhet dashakeqe, natyrisht, kan\u00eb dallime t\u00eb r\u00ebnd\u00ebsishme. Por t\u00eb mb\u00ebshtetesh te v\u00ebmendja dhe nd\u00ebrgjegj\u00ebsimi i p\u00ebrdoruesve \u00ebsht\u00eb nj\u00eb ide e keqe. Edhe fushatat e bujshme me tem\u00ebn \u00abmos i hapni k\u00ebto\u00bb, me fishekzjarr\u00eb dhe performanc\u00eb solo t\u00eb drejtorit t\u00eb p\u00ebrgjithsh\u00ebm (kompozimi \u00abPolimer\u00ebt\u00bb), me kalimin e koh\u00ebs zbehen nga kujtesa e punonj\u00ebsit t\u00eb zyr\u00ebs.<\/p>\n

Natyrisht, sistemet e konfiguruara si\u00e7 duhet do t\u00eb na mbrojn\u00eb nga shumica e sulmeve t\u00eb tilla. Por fjala ky\u00e7e mbetet gjithsesi \u00abshumica\u00bb. Askush nuk mund t\u00eb jap\u00eb garanci nj\u00ebqind p\u00ebr qind; dhe n\u00ebse gjith\u00e7ka arrin deri te p\u00ebrdoruesi, at\u00ebher\u00eb forcimi i tij, si nj\u00eb nga pikat m\u00eb t\u00eb dob\u00ebta t\u00eb sistemit, \u00ebsht\u00eb nj\u00eb hap i dobish\u00ebm.<\/p>\n

N\u00eb bot\u00ebn e keqb\u00ebrjes kompjuterike, teknologjit\u00eb dhe inxhinieria sociale ecin krah p\u00ebr krah. Keqb\u00ebr\u00ebsi e kupton se \u00ebsht\u00eb e v\u00ebshtir\u00eb t\u00eb shtiret si dikush t\u00eb cilit p\u00ebrdoruesi i beson pa kushte, prandaj detyrohet t\u00eb p\u00ebrdor\u00eb edhe taktika t\u00eb tjera: frik\u00ebsim, detyrim, imitim t\u00eb autoriteteve t\u00eb njohura dhe\/ose p\u00ebrdorim t\u00eb em\u00ebrtimeve t\u00eb rreme p\u00ebrkat\u00ebse \u2014 p\u00ebr shembull, d\u00ebrgimin e email-eve n\u00eb em\u00ebr t\u00eb institucioneve shtet\u00ebrore dhe kompanive t\u00eb m\u00ebdha.<\/p>\n

Dhe, si\u00e7 na m\u00ebsojn\u00eb t\u00eb lasht\u00ebt: n\u00ebse nuk mund ta mposhtim, duhet ta marrim ne drejtimin. V\u00ebrtet, pse t\u00eb jemi m\u00eb keq se spammer-at? Madje jemi shum\u00eb m\u00eb t\u00eb mir\u00eb! P\u00ebr m\u00eb tep\u00ebr, kemi edhe m\u00eb shum\u00eb mund\u00ebsi. Dhe vet\u00eb detyra do t\u00eb k\u00ebrkoj\u00eb aft\u00ebsi minimale programimi dhe pothuajse nuk do t\u00eb prek\u00eb sistemet ekzistuese.<\/p>\n

P\u00ebrg\u00ebnjeshtrim: autori nuk \u00ebsht\u00eb spammer, spammer-i nuk \u00ebsht\u00eb autor. Autori \u00ebsht\u00eb vet\u00ebm dhe ekskluzivisht n\u00eb an\u00ebn e s\u00eb mir\u00ebs.<\/p><\/blockquote>\n

Detyra \u00ebsht\u00eb shum\u00eb e thjesht\u00eb: <\/p>\n

do t\u2019u d\u00ebrgojm\u00eb vet\u00eb p\u00ebrdoruesve tan\u00eb email-e q\u00eb ngjajn\u00eb me ato keqdash\u00ebse. N\u00eb bashk\u00ebngjitjet e k\u00ebtyre email-eve do t\u00eb vendosim dokumente ku me shkronja t\u00eb m\u00ebdha do t\u00eb shkruajm\u00eb: \u00abMOS HAPNI DOKUMENTE NGA EMAIL-E T\u00cb TILLA. Tregohuni m\u00eb t\u00eb v\u00ebmendsh\u00ebm dhe m\u00eb t\u00eb kujdessh\u00ebm\u00bb.<\/p>\n

K\u00ebshtu, detyra jon\u00eb ka kushtet e m\u00ebposhtme kushte<\/b>:<\/p>\n

Kushti 1<\/b>. Email-et duhet t\u00eb jen\u00eb t\u00eb ndryshme<\/b>. N\u00ebse do t\u2019u d\u00ebrgojm\u00eb t\u00eb gjith\u00ebve dhe \u00e7do her\u00eb t\u00eb nj\u00ebjtin email, kjo nuk do t\u00eb ndryshoj\u00eb aspak nga kujtesat e zakonshme n\u00eb mbledhje, ndaj t\u00eb cilave p\u00ebrdoruesit kan\u00eb krijuar imunitet t\u00eb fort\u00eb. Ne duhet t\u00eb nxisim te p\u00ebrdoruesi sistemin q\u00eb \u00ebsht\u00eb p\u00ebrgjegj\u00ebs p\u00ebr t\u00eb m\u00ebsuarit. Prej k\u00ebsaj rrjedhin kushtet e m\u00ebposhtme:<\/p>\n

Kushti 2<\/b>. Email-et duhet t\u00eb ngjajn\u00eb me t\u00eb v\u00ebrtetat<\/b>. T\u00eb d\u00ebrgosh email-e n\u00eb em\u00ebr t\u00eb SHPK \u00abMishi-kompani\u00bb ose t\u00eb Barack Obama-s mundesh, por \u00ebsht\u00eb joefektive. Ka kuptim t\u00eb p\u00ebrdoren emra realisht ekzistues (dhe t\u00eb ndrysh\u00ebm!) organizatash dhe institucionesh;<\/p>\n

Kushti 3<\/b>. Gjithashtu \u00ebsht\u00eb e r\u00ebnd\u00ebsishme q\u00eb email-et t\u00eb duken paksa t\u00eb \u00e7uditshme<\/b>. Ato duhet t\u00eb duken disi t\u00eb dyshimta, q\u00eb t\u00eb ngjallin dyshim te p\u00ebrdoruesi dhe t\u00eb aktivizojn\u00eb n\u00eb tru mekanizmin e t\u00eb m\u00ebsuarit;<\/p>\n

Kushti 4<\/b>. Dhe, nj\u00ebkoh\u00ebsisht, email-et duhet t\u00eb t\u00ebrheqin v\u00ebmendjen dhe t\u00eb provokojn\u00eb<\/b>. Epo, k\u00ebtu gjith\u00e7ka \u00ebsht\u00eb e thjesht\u00eb, madje nuk na duhet t\u00eb shpikim asgj\u00eb: spammer-at e kan\u00eb b\u00ebr\u00eb tashm\u00eb gjith\u00e7ka p\u00ebr ne. \u00abGjoba\u00bb, \u00abVendime gjyq\u00ebsore\u00bb dhe madje thjesht \u00abDokumente\u00bb n\u00eb bashk\u00ebngjitje, \u00abPenalitete\u00bb, \u00abRillogaritje\u00bb, \u00abKamata vonese\u00bb n\u00eb subjekt dhe shum\u00eb fjal\u00eb si \u00abUrgjente\u00bb, \u00abMenj\u00ebher\u00eb\u00bb, \u00abJeni t\u00eb detyruar\u00bb, \u00abPaguani\u00bb n\u00eb tekst \u2014 dhe puna mbaron me sukses.<\/p>\n

P\u00ebr t\u00eb realizuar k\u00ebt\u00eb set magjik do t\u00eb duhen aft\u00ebsi minimale programimi dhe nj\u00eb mbr\u00ebmje e m\u00ebrzitshme. Autori ka p\u00ebrdorur Python 3 (sepse donte t\u00eb ushtrohej) dhe JS (p\u00ebr mbledhjen e t\u00eb dh\u00ebnave, drejtp\u00ebrdrejt nga konsola e shfletuesit). Por pjesa m\u00eb e madhe e kodit mund t\u00eb realizohet leht\u00ebsisht me mjetet native t\u00eb OS (bash, cmd), vet\u00ebm se do t\u00eb lodheni me kodimet.<\/p>\n

P\u00ebr korrekt\u00ebsi, duhet theksuar se vet\u00eb ideja nuk i p\u00ebrket autorit, por \u00ebsht\u00eb huazuar nga nj\u00eb kompani e madhe nd\u00ebrkomb\u00ebtare. Megjithat\u00eb, ideja \u00ebsht\u00eb aq e dukshme, saq\u00eb sapo e d\u00ebgjoi, autori u hodh ta zbatonte me britm\u00ebn \u00absi nuk m\u00eb shkoi nd\u00ebr mend m\u00eb par\u00eb\u00bb.<\/p>\n

Pra, s\u00eb pari na duhen pjes\u00ebt nga t\u00eb cilat do t\u00eb p\u00ebrpilojm\u00eb emailin. Le t\u00eb nisim me fush\u00ebn From \u2013 kush do t\u2019u b\u00ebj\u00eb presion p\u00ebrdoruesve tan\u00eb t\u00eb trembur. E kush tjet\u00ebr: sigurisht bankat, inspektoratet tatimore, gjykatat dhe lloj-lloj shoq\u00ebrish t\u00eb \u00e7uditshme me p\u00ebrgjegj\u00ebsi t\u00eb kufizuar. Nj\u00ebkoh\u00ebsisht mund t\u00eb shtoni edhe shabllone p\u00ebr autoplot\u00ebsim n\u00eb t\u00eb ardhmen, si p.sh. P\u0410\u041e CmpNmF<\/code>. Shihni from.txt<\/p>\n

Tani na duhen vet\u00eb emrat. \u041e\u041e\u041e Romashka dhe Vektor, si edhe ndonj\u00eb \u00abGjykata e Mosk\u00ebs\u00bb q\u00eb p\u00ebrs\u00ebritet pafund, v\u00ebshtir\u00eb se do t\u00eb ngjallin ndonj\u00eb reagim.<\/p>\n

P\u00ebr fat, interneti na jep mund\u00ebsi v\u00ebrtet t\u00eb jasht\u00ebzakonshme p\u00ebr t\u00eb marr\u00eb informacion. P\u00ebr shembull, lista e gjykatave aktive t\u00eb Federat\u00ebs Ruse<\/a><\/noindex> mund t\u00eb merret me nj\u00eb komand\u00eb t\u00eb thjesht\u00eb n\u00eb JavaScript direkt n\u00eb konsol\u00ebn e shfletuesit, me kod t\u00eb till\u00eb si:<\/p>\n

p\u00ebr (le t\u00eb el t\u00eb dokumentit.getElementById("mw-content-text").querySelectorAll("li")) {console.log(el.innerText;)}<\/code><\/pre>\n
\nN\u00eb k\u00ebt\u00eb m\u00ebnyr\u00eb mund t\u00eb krijoni shum\u00eb shpejt nj\u00eb baz\u00eb t\u00eb shk\u00eblqyer p\u00ebr q\u00ebllimet tona (sidomos pasi autori tashm\u00eb e ka b\u00ebr\u00eb k\u00ebt\u00eb p\u00ebr ju \ud83d\ude42 ). Do ta ruajm\u00eb n\u00eb Plain text; p\u00ebr nj\u00eb detyr\u00eb t\u00eb till\u00eb, nj\u00eb DB \u00ebsht\u00eb overkill. Projekti p\u00ebrdor kodimin UTF-8 me BOM, n\u00eb rast se duhen p\u00ebrdorur simbolet m\u00eb specifike. Shihni skedar\u00ebt txt me emrat p\u00ebrkat\u00ebs.<\/p>\n
P\u00ebr m\u00eb tep\u00ebr, duhet t\u00eb gjenerojm\u00eb nj\u00eb adres\u00eb elektronike t\u00eb sakt\u00eb (sipas standardeve, por jo domosdoshm\u00ebrisht ekzistuese) t\u00eb d\u00ebrguesit, n\u00eb m\u00ebnyr\u00eb q\u00eb letra jon\u00eb t\u00eb shfaqet si\u00e7 \u00ebsht\u00eb e nevojshme dhe t\u00eb mund t\u00eb p\u00ebrcillet sakt\u00ebsisht. P\u00ebr disa emra, autori p\u00ebrdori domeine fikse, nd\u00ebrsa p\u00ebr disa t\u00eb tjera \u2013 gjenerimin automatik nga emri duke p\u00ebrdorur nj\u00eb bibliotek\u00eb transliterimi, di\u00e7ka si \u041e\u041e\u041e \u00ab\u0412\u0435\u043a\u0442\u043e\u0440\u00bb -> warning@ooovektor.ru. Emri i kutis\u00eb merret nga lista n\u00eb kod dhe gjithashtu ka si synim t\u00eb krijoj\u00eb frik\u00eb: \u00abvzyskanie\u00bb, \u00abshtraf\u00bb, \u00abdolg\u00bb, \u2018alarm\u2019 dhe t\u00eb tjera \u00abzapros\u00bb.<\/p>\n
Tani \u2013 subjekti i email-it.<\/p>\n
Subjekti duhet patjet\u00ebr t\u00eb t\u00ebrheq\u00eb v\u00ebmendjen, p\u00ebrndryshe email-i do t\u00eb kaloj\u00eb pa u v\u00ebn\u00eb re. L\u00ebreni t\u00eb lir\u00eb frik\u00ebsuesin tuaj t\u00eb brendsh\u00ebm t\u00eb kontabilist\u00ebve dhe gjith\u00e7ka do t\u00eb funksionoj\u00eb: \u00abMbyllja e llogaris\u00eb\/llogarive (CmpNm<\/code>)\u00bb, \u00abP\u00ebr kryekontabilistin (CmpNm<\/code>)\u00bb, \u00abK\u00ebrkes\u00eb (p\u00ebr CmpNm<\/code>)\u00bb \u00abPaguani menj\u00ebher\u00eb (!!!)\u00bb dhe marifete t\u00eb tjera t\u00eb tilla. 
\nShihni subj.txt. Shtoni sipas shijes, p\u00ebrziejeni, por mos e tundni.<\/p>\n
Teksti i email-it duhet t\u00eb jet\u00eb disi i \u00e7uditsh\u00ebm. Tashm\u00eb e kemi t\u00ebrhequr v\u00ebmendjen e p\u00ebrdoruesit, tani detyra jon\u00eb \u00ebsht\u00eb t\u00eb ngjallim dyshim. Prandaj, t\u00eb p\u00ebrpiqesh shum\u00eb n\u00eb k\u00ebt\u00eb pik\u00eb nuk ka fare kuptim. Le t\u00eb marrim fraza k\u00ebrc\u00ebnuese nga spammer-at dhe t\u2019i kombinojm\u00eb n\u00eb m\u00ebnyr\u00eb t\u00eb rast\u00ebsishme; besueshm\u00ebria nj\u00ebqind p\u00ebr qind vet\u00ebm sa do t\u00eb na pengoj\u00eb. Do t\u00eb dal\u00eb nj\u00eb marr\u00ebzi e tipit:<\/p>\n
(informacion e r\u00ebnd\u00ebsishme) (SH.A. "TEST") P\u00ebr llogarin\u00eb n\u00eb p\u00ebrputhje me procedurat gjyq\u00ebsore 
\nhapni dokumentet n\u00eb bashk\u00ebngjitje 
\nvendimi \u00ebsht\u00eb n\u00eb bashk\u00ebngjitje<\/code><\/p><\/blockquote>\n
\nShih msg.txt. Shtesat jan\u00eb t\u00eb mir\u00ebpritura.<\/p>\n
Dhe, n\u00eb fund, bashk\u00ebngjitja. N\u00eb projekt aktualisht jan\u00eb parashikuar 3 lloje bashk\u00ebngjitjesh: pdf, doc, docx. Skedar\u00ebt kopjohen nga mostrat pa ndryshuar p\u00ebrmbajtjen, nd\u00ebrsa skedarit bashk\u00ebngjitur i caktohet nj\u00eb em\u00ebr nga lista (\u00abVendim\u00bb, \u00abVendim gjykate\u00bb etj., shih flnms.txt). P\u00ebr dy llojet e para madh\u00ebsia gjenerohet rast\u00ebsisht duke shtuar zero n\u00eb fund t\u00eb skedarit. Me docx kjo nuk funksionon (edhe pse pas procedur\u00ebs s\u00eb rikuperimit Word e hap skedarin; nd\u00ebrsa LibreOffice, p\u00ebr shembull, i hap pa ankesa skedar\u00ebt docx ku jan\u00eb shtuar skedar\u00eb t\u00eb huaj p\u00ebrmes nd\u00ebrfaqes s\u00eb arkivuesve).<\/p>\n
Dhe do t\u00eb marrim k\u00ebt\u00eb mrekulli:<\/p>\n
\"Spami
\n
\nMund t\u00eb d\u00ebrgohet:<\/p>\n
gen_msg.py buh@oootest.ru<\/code><\/pre>\n
\nKodi, sigurisht, \u00ebsht\u00eb n\u00eb GitHub<\/a><\/noindex><\/p>\n
N\u00eb thelb, kaq ishte. Pun\u00eb p\u00ebr nj\u00eb or\u00eb, por dobi... E dobi do t\u00eb ket\u00eb. Sepse teoria \u00ebsht\u00eb e that\u00eb, nd\u00ebrsa pema e jet\u00ebs lul\u00ebzon gjelb\u00ebr \u2014 shpjegimet nuk dep\u00ebrtojn\u00eb, kujtesat harrohen, kurse njer\u00ebzit i p\u00ebrvet\u00ebsojn\u00eb aft\u00ebsit\u00eb vet\u00ebm n\u00eb praktik\u00eb. Dhe m\u00eb mir\u00eb t\u00eb jemi ne m\u00ebsuesit, sesa m\u00eb pas t\u00eb rikthejm\u00eb gjith\u00e7ka nga backup-et, apo jo?<\/p>\n
Vet\u00ebm p\u00ebrdoruesit e regjistruar mund t\u00eb marrin pjes\u00eb n\u00eb anket\u00eb. Hyni<\/a><\/noindex>, ju lutem.<\/p>\n
E provuat te p\u00ebrdoruesit tuaj? Si ishin rezultatet?<\/h2>\n