{"id":85141,"date":"2020-06-13T13:42:24","date_gmt":"2020-06-13T11:42:24","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/chto-delat-esli-k-tvoemu-hosteru-prishli-siloviki"},"modified":"2020-06-13T13:42:24","modified_gmt":"2020-06-13T11:42:24","slug":"chto-delat-esli-k-tvoemu-hosteru-prishli-siloviki","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/chto-delat-esli-k-tvoemu-hosteru-prishli-siloviki","title":{"rendered":"\u00c7far\u00eb t\u00eb b\u00ebsh n\u00ebse silovik\u00ebt vizitojn\u00eb hostin tuaj","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/ruvds\/blog\/506334\/\"><img decoding=\"async\" alt=\"\u00c7far\u00eb t\u00eb b\u00ebsh n\u00ebse silovik\u00ebt vizitojn\u00eb hostin tuaj\" src=\"\/wp-content\/uploads\/2020\/06\/867a0b09b6e2b2676e520a16cee0148d.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><i>kdpv \u2014 Reuters<\/i><\/p>\n<p>N\u00ebse keni marr\u00eb me qira nj\u00eb server, at\u00ebher\u00eb nuk keni kontroll t\u00eb plot\u00eb mbi t\u00eb. Kjo do t\u00eb thot\u00eb se n\u00eb \u00e7do moment, nj\u00eb grup i trajnuar posa\u00e7\u00ebrisht mund t\u00eb vizitoj\u00eb hostin dhe t\u00eb k\u00ebrkoj\u00eb t\u00eb dh\u00ebnat tuaja. Dhe hosti do t'i dor\u00ebzoj\u00eb ato, n\u00ebse k\u00ebrkesa \u00ebsht\u00eb e formalizuar sipas ligjit. <\/p>\n<p>Nuk d\u00ebshironi aspak q\u00eb log-et e serverit tuaj t\u00eb uebit ose t\u00eb dh\u00ebnat e p\u00ebrdoruesve tuaj t\u00eb bien n\u00eb duar t\u00eb tjera. Nuk \u00ebsht\u00eb e mundur t\u00eb ndiheni plot\u00ebsisht t\u00eb sigurt. T\u00eb mbroheni nga hosti, i cili zot\u00ebron hipervizorin dhe ju ofron nj\u00eb makin\u00eb virtuale \u00ebsht\u00eb pothuajse e pamundur. Por, ndoshta, \u00ebsht\u00eb e mundur t\u00eb reduktoni pak rreziqet. Kriptimi i makinave t\u00eb marr\u00eb me qira nuk \u00ebsht\u00eb aq i padobish\u00ebm sa duket n\u00eb nj\u00eb shikim t\u00eb par\u00eb. Le t\u00eb shqyrtojm\u00eb gjithashtu k\u00ebrc\u00ebnimet e nxjerrjes s\u00eb t\u00eb dh\u00ebnave nga serverat fizik\u00eb.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>Modeli i k\u00ebrc\u00ebnimeve<\/h2>\n<p>\nSi zakonisht, hosti do t\u00eb p\u00ebrpiqet t\u00eb mbroj\u00eb maksimalisht interesat e klientit, p\u00ebr aq sa \u00ebsht\u00eb e mundur sipas ligjit. N\u00ebse n\u00eb nj\u00eb let\u00ebr nga organet zyrtare k\u00ebrkohet vet\u00ebm log-et e aksesit, hosti nuk do t\u00eb dor\u00ebzoj\u00eb kopjet e t\u00eb gjitha makinave tuaja virtuale me bazat e t\u00eb dh\u00ebnave. T\u00eb pakt\u00ebn, nuk duhet. N\u00ebse k\u00ebrkohet t\u00eb dh\u00ebnat e plota, at\u00ebher\u00eb hosti do t\u00eb kopjoj\u00eb disqet virtuale me t\u00eb gjitha skedar\u00ebt dhe ju nuk do ta dini p\u00ebr k\u00ebt\u00eb.<\/p>\n<p>Pavar\u00ebsisht nga skenari i zhvillimit t\u00eb ngjarjeve, detyra juaj kryesore \u00ebsht\u00eb t\u00eb b\u00ebni sulmin shum\u00eb t\u00eb v\u00ebshtir\u00eb dhe t\u00eb shtrenjt\u00eb. Ndryshe, zakonisht ekzistojn\u00eb tri opsione kryesore t\u00eb k\u00ebrc\u00ebnimit.<\/p>\n<h2>Zyrtar<\/h2>\n<p>\nM\u00eb shpesh, n\u00eb zyr\u00ebn zyrtare t\u00eb hostit d\u00ebrgohet nj\u00eb let\u00ebr fizike me k\u00ebrkes\u00ebn p\u00ebr t\u00eb ofruar t\u00eb dh\u00ebnat e nevojshme sipas nj\u00eb vendimi p\u00ebrkat\u00ebs. N\u00ebse gjith\u00e7ka \u00ebsht\u00eb e formalizuar si\u00e7 duhet, hosti ofron log-et p\u00ebrkat\u00ebse dhe t\u00eb dh\u00ebna t\u00eb tjera p\u00ebr organet zyrtare. Zakonisht k\u00ebrkohet thjesht t\u00eb d\u00ebrgojn\u00eb t\u00eb dh\u00ebnat e nevojshme.<\/p>\n<p>Rast\u00ebsisht, n\u00ebse \u00ebsht\u00eb shum\u00eb e nevojshme, p\u00ebrfaq\u00ebsuesit e organeve t\u00eb zbatimit t\u00eb ligjit vijn\u00eb personalisht n\u00eb Qendr\u00ebn e t\u00eb Dh\u00ebnave. P\u00ebr shembull, kur keni nj\u00eb server t\u00eb dedikuar dhe t\u00eb dh\u00ebnat nga aty mund t\u00eb merret vet\u00ebm fizikisht.<\/p>\n<p>N\u00eb t\u00eb gjitha vendet, p\u00ebr t\u00eb marr\u00eb akses n\u00eb nj\u00eb territor privat, p\u00ebr t\u00eb kryer kontrolle dhe aktivitete t\u00eb tjera, k\u00ebrkohet t\u00eb ket\u00eb prova q\u00eb t\u00eb dh\u00ebnat mund t\u00eb p\u00ebrmbajn\u00eb informacion t\u00eb r\u00ebnd\u00ebsish\u00ebm p\u00ebr hetimin e nj\u00eb krimi. P\u00ebr m\u00eb tep\u00ebr, k\u00ebrkohet nj\u00eb urdh\u00ebr p\u00ebr kontroll t\u00eb formuluar sipas gjith\u00eb rregulloreve. K\u00ebtu mund t\u00eb ket\u00eb nuanca q\u00eb lidhen me ve\u00e7antit\u00eb e legjislacionit vendas. E r\u00ebnd\u00ebsishme \u00ebsht\u00eb t\u00eb kuptoni se, n\u00ebse ndiqet rruga zyrtare si\u00e7 duhet, p\u00ebrfaq\u00ebsuesit e Qendr\u00ebs t\u00eb T\u00eb Dh\u00ebnave nuk do t\u00eb lejojn\u00eb ask\u00ebnd t\u00eb kaloj\u00eb p\u00ebrtej pik\u00ebs s\u00eb kalimit.<\/p>\n<p>P\u00ebr m\u00eb tep\u00ebr, n\u00eb shumic\u00ebn e vendeve nuk mund t\u00eb thjesht t\u00eb nxjerr\u00ebsh pajisje q\u00eb funksionojn\u00eb. P\u00ebr shembull, n\u00eb Rusi deri n\u00eb fund t\u00eb vitit 2018, sipas nenit 183 t\u00eb Kodit t\u00eb Procedur\u00ebs Penale t\u00eb Federat\u00ebs Ruse, pjesa 3.1, garantoheshin q\u00eb, gjat\u00eb procesit t\u00eb konfiskimit, sekuestrimi i mjeteve elektronike t\u00eb informacionit t\u00eb b\u00ebhej n\u00eb pranin\u00eb e nj\u00eb specialisti. Me k\u00ebrkes\u00ebn e pronarit t\u00eb ligjsh\u00ebm t\u00eb mjeteve elektronike t\u00eb informacionit ose t\u00eb mbajt\u00ebsit t\u00eb informacionit t\u00eb p\u00ebrmbajtur n\u00eb to, specialisti q\u00eb merr pjes\u00eb n\u00eb konfiskim, n\u00eb pranin\u00eb e d\u00ebshmitar\u00ebve, kryen kopjimin e informacionit nga mjetet elektronike t\u00eb informacionit n\u00eb mjete t\u00eb tjera elektronike t\u00eb informacionit.<\/p>\n<p>M\u00eb pas, p\u00ebr fat t\u00eb keq, ky segment u hoq nga neni.<\/p>\n<h2>T\u00eb fshehta dhe jozyrtare<\/h2>\n<p>\nKjo tashm\u00eb \u00ebsht\u00eb territori i veprimit t\u00eb shok\u00ebve t\u00eb specializuar nga NSA, FBI, MI5 dhe organizatave t\u00eb tjera me tre shkronja. Shpeshher\u00eb, legjislacioni i vendeve parashikon kompetenca shum\u00eb t\u00eb gjera p\u00ebr struktura t\u00eb tilla. P\u00ebr m\u00eb tep\u00ebr, pothuajse gjithmon\u00eb ka nj\u00eb ndalim ligjor p\u00ebr \u00e7do shp\u00ebrndarje t\u00eb drejtp\u00ebrdrejt\u00eb dhe t\u00eb t\u00ebrthort\u00eb t\u00eb faktit t\u00eb bashk\u00ebpunimit me organe t\u00eb tilla t\u00eb forc\u00ebs. N\u00eb Rusi ka norma t\u00eb ngjashme ligjore. <noindex><a rel=\"nofollow\" href=\"http:\/\/publication.pravo.gov.ru\/Document\/View\/0001201801220009?index=3&amp;rangeSize=1\">normat ligjore<\/a><\/noindex>.<\/p>\n<p>N\u00eb rast t\u00eb nj\u00eb k\u00ebrc\u00ebnimi t\u00eb till\u00eb ndaj t\u00eb dh\u00ebnave tuaja, ato pothuajse me siguri do t\u00eb nxirren. P\u00ebrve\u00e7 konfiskimit t\u00eb thjesht\u00eb, mund t\u00eb p\u00ebrdoren gjithashtu t\u00eb gjitha armatimet jozyrtare t\u00eb backdoor-ve, dob\u00ebsive t\u00eb dit\u00ebs zero, nxjerrjes s\u00eb t\u00eb dh\u00ebnave nga memoria operuese e makineris\u00eb virtuale tuaj dhe k\u00ebnaq\u00ebsive t\u00eb tjera. Host-i do t\u00eb jet\u00eb i detyruar t\u00eb ndihmoj\u00eb maksimalisht specialist\u00ebt e organeve t\u00eb forc\u00ebs.<\/p>\n<h2>Punonj\u00ebsi i pandersh\u00ebm<\/h2>\n<p>\nJo nuk njer\u00ebzit jan\u00eb nj\u00ebsoj t\u00eb mir\u00eb. Disa nga administratoret e Qendr\u00ebs t\u00eb Datan\u00eb mund t\u00eb vendosin t\u00eb fitojn\u00eb pak ekstra dhe t\u00eb shesin t\u00eb dh\u00ebnat tuaja. M\u00eb pas, zhvillimi i ngjarjeve varet nga kompetencat dhe akseset e tij. M\u00eb e pak\u00ebndshmja \u00ebsht\u00eb se administratori me qasje n\u00eb konsol\u00ebn e virtualizimit ka kontroll t\u00eb plot\u00eb mbi makinat tuaja. Gjithmon\u00eb mund t\u00eb b\u00ebj\u00eb nj\u00eb snapshot s\u00eb bashku me t\u00eb gjith\u00eb p\u00ebrmbajtjen e memorie dhe pastaj t\u00eb studioj\u00eb at\u00eb ngadal\u00eb.<\/p>\n<h2>2xIntel Xeon Scalable Processors (40 n\u00fcv\u0259\/80 ax\u0131n)<\/h2>\n<p>\nPra, keni nj\u00eb makin\u00eb virtuale q\u00eb ju \u00ebsht\u00eb dh\u00ebn\u00eb nga hosti. Si mund ta organizoni enkriptimin p\u00ebr t\u00eb mbrojtur veten? N\u00eb t\u00eb v\u00ebrtet\u00eb, pothuajse asnj\u00eb m\u00ebnyr\u00eb. P\u00ebr m\u00eb tep\u00ebr, edhe nj\u00eb server i dedikuar i huaj mund t\u00eb p\u00ebrfundoj\u00eb si nj\u00eb makin\u00eb virtuale, n\u00eb t\u00eb cil\u00ebn jan\u00eb lidhur pajisjet e nevojshme.<\/p>\n<p>N\u00ebse q\u00ebllimi i sistemit t\u00eb larg\u00ebt nuk \u00ebsht\u00eb vet\u00ebm ruajtja e t\u00eb dh\u00ebnave, por edhe kryerja e disa llogaritjeve, at\u00ebher\u00eb opsioni i vet\u00ebm p\u00ebr t\u00eb punuar me nj\u00eb makin\u00eb t\u00eb pa besuar do t\u00eb ishte realizimi <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/%D0%9F%D0%BE%D0%BB%D0%BD%D0%BE%D1%81%D1%82%D1%8C%D1%8E_%D0%B3%D0%BE%D0%BC%D0%BE%D0%BC%D0%BE%D1%80%D1%84%D0%BD%D0%BE%D0%B5_%D1%88%D0%B8%D1%84%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5\">i enkriptimit homomorfik<\/a><\/noindex>. Me k\u00ebt\u00eb, sistemi do t\u00eb kryej\u00eb llogaritjet pa pasur mund\u00ebsi t\u00eb kuptoj\u00eb se \u00e7far\u00eb po b\u00ebn. Fatkeq\u00ebsisht, shpenzimet p\u00ebr realizimin e k\u00ebtij enkriptimi jan\u00eb aq t\u00eb m\u00ebdha, sa q\u00eb aplikimi praktik i tij n\u00eb k\u00ebt\u00eb moment \u00ebsht\u00eb i kufizuar n\u00eb detyra shum\u00eb t\u00eb ngushta.<\/p>\n<p>P\u00ebr m\u00eb tep\u00ebr, n\u00eb momentin kur makina virtuale \u00ebsht\u00eb e nisur dhe kryen disa veprime, t\u00eb gjitha volumet e enkriptuara jan\u00eb n\u00eb nj\u00eb gjendje t\u00eb aksesueshme, ndryshe sistemi operativ nuk do t\u00eb mund t\u00eb punonte me to. Kjo do t\u00eb thot\u00eb se, duke pasur akses n\u00eb konsol\u00ebn e virtualizimit, mund t\u00eb b\u00ebni gjithmon\u00eb nj\u00eb snapshot t\u00eb makin\u00ebs n\u00eb pun\u00eb dhe t\u00eb nxirrni t\u00eb gjith\u00eb \u00e7el\u00ebsat nga memoria.<\/p>\n<p>Shum\u00eb furnizues kan\u00eb b\u00ebr\u00eb p\u00ebrpjekje p\u00ebr t\u00eb organizuar enkriptimin harduerik t\u00eb RAM p\u00ebr q\u00eb t\u00eb pakt\u00ebn hosti t\u00eb mos ket\u00eb akses n\u00eb k\u00ebto t\u00eb dh\u00ebna. P\u00ebr shembull, teknologjia Intel Software Guard Extensions, e cila organizon zona n\u00eb hap\u00ebsir\u00ebn virtuale t\u00eb adresave, t\u00eb mbrojtura nga leximi dhe shkruajtja nga jasht\u00ebsia e k\u00ebsaj zone nga procese t\u00eb tjera, p\u00ebrfshir\u00eb kernelin e sistemit operativ. Fatkeq\u00ebsisht, nuk do t\u00eb jeni n\u00eb gjendje t'i besoni plot\u00ebsisht k\u00ebtyre teknologjive, pasi do t\u00eb jeni t\u00eb kufizuar n\u00eb makin\u00ebn tuaj virtuale. P\u00ebr m\u00eb tep\u00ebr, tashm\u00eb ekzistojn\u00eb shembuj t\u00eb gatsh\u00ebm <noindex><a rel=\"nofollow\" href=\"https:\/\/www.theregister.co.uk\/2017\/03\/07\/eggheads_slip_a_note_under_intels_door_sgx_can_leak_crypto_keys\/\">t\u00eb nj\u00eb sulmi<\/a><\/noindex> n\u00eb k\u00ebt\u00eb teknologji. Megjithat\u00eb, enkriptimi i makinave virtuale nuk \u00ebsht\u00eb aq i pavler\u00eb, sa mund t\u00eb duket.<\/p>\n<h2>Enkriptojm\u00eb t\u00eb dh\u00ebnat n\u00eb VDS<\/h2>\n<p>\nS\u00eb pari, duhet t\u00eb sqaroj se gjith\u00e7ka q\u00eb b\u00ebjm\u00eb m\u00eb posht\u00eb nuk \u00ebsht\u00eb nj\u00eb mbrojtje e plot\u00eb. Hipervizori do t\u00eb lejoj\u00eb t\u00eb krijoni kopjet e nevojshme pa ndaluar sh\u00ebrbimin dhe pa iu v\u00ebn\u00eb re.<\/p>\n<ul>\n<li>N\u00ebse hosti transferon nj\u00eb imazh \"t\u00eb ftoht\u00eb\" t\u00eb makin\u00ebs virtuale tuaj, at\u00ebher\u00eb ju jeni n\u00eb nj\u00eb siguri relative. Ky \u00ebsht\u00eb skenari m\u00eb i zakonsh\u00ebm.<\/li>\n<li>N\u00ebse hosti jep nj\u00eb snapshot t\u00eb plot\u00eb t\u00eb makin\u00ebs n\u00eb pun\u00eb, at\u00ebher\u00eb gj\u00ebrat jan\u00eb t\u00eb k\u00ebqija. T\u00eb gjitha t\u00eb dh\u00ebnat do t\u00eb montohen n\u00eb sistem n\u00eb form\u00eb t\u00eb hapur. P\u00ebr m\u00eb tep\u00ebr, do t\u00eb ket\u00eb mund\u00ebsi p\u00ebr t\u00eb g\u00ebrmuar n\u00eb RAM p\u00ebr t\u00eb gjetur \u00e7el\u00ebsat privat\u00eb dhe t\u00eb dh\u00ebna t\u00eb ngjashme.<\/li>\n<\/ul>\n<p>\nN\u00eb t\u00eb v\u00ebrtet\u00eb, n\u00ebse keni vendosur nj\u00eb sistem operativ nga nj\u00eb imazh vanilla, hosti nuk ka qasje root. Gjithmon\u00eb \u00ebsht\u00eb e mundur t\u00eb montoni nj\u00eb medium me nj\u00eb imazh rescue dhe t\u00eb ndryshoni fjal\u00ebkalimin p\u00ebr root, duke b\u00ebr\u00eb chroot n\u00eb ambientin e makin\u00ebs virtuale. Por kjo do t\u00eb k\u00ebrkoj\u00eb nj\u00eb rindezje, e cila do t\u00eb v\u00ebrehet. Po ashtu, t\u00eb gjitha seksionet e koduara q\u00eb jan\u00eb t\u00eb montuara do t\u00eb jen\u00eb t\u00eb mbyllura.<\/p>\n<p>Megjithat\u00eb, n\u00ebse vendosja e makin\u00ebs virtuale b\u00ebhet nga nj\u00eb imazh i p\u00ebrgatitur m\u00eb par\u00eb, hosti shpesh mund t\u00eb shtoj\u00eb nj\u00eb llogari privilegjuar p\u00ebr t\u00eb ndihmuar n\u00eb raste emergjente p\u00ebr klientin. P\u00ebr shembull, p\u00ebr t\u00eb ndryshuar fjal\u00ebkalimin e harruar p\u00ebr root.<\/p>\n<p>Edhe n\u00eb rastin e nj\u00eb snapshot-i t\u00eb plot\u00eb, nuk \u00ebsht\u00eb gjith\u00e7ka kaq e keqe. Sulmuesi nuk do t\u00eb marr\u00eb skedar\u00ebt e koduar n\u00ebse i keni montuar ato nga nj\u00eb sistem skedar\u00ebsh t\u00eb larg\u00ebt t\u00eb nj\u00eb makine tjet\u00ebr. Po, n\u00eb teori, mund t\u00eb analizoni dump-in e RAM-it dhe t\u00eb nxirrni \u00e7el\u00ebsat e enkriptimit nga aty. Por n\u00eb praktik\u00eb, kjo \u00ebsht\u00eb shum\u00eb e v\u00ebshtir\u00eb dhe \u00ebsht\u00eb shum\u00eb e pak\u00ebt q\u00eb procesi t\u00eb shkoj\u00eb p\u00ebrtej transferimit t\u00eb thjesht\u00eb t\u00eb skedar\u00ebve.<\/p>\n<h2>Porositni makin\u00ebn<\/h2>\n<p>\n<img decoding=\"async\" alt=\"\u00c7far\u00eb t\u00eb b\u00ebsh n\u00ebse silovik\u00ebt vizitojn\u00eb hostin tuaj\" src=\"\/wp-content\/uploads\/2020\/06\/3a4c244720963e8da57e782aa53e2db0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nP\u00ebr q\u00ebllimet tona testuese, po marrim nj\u00eb makin\u00eb t\u00eb thjesht\u00eb n\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/ruvds.com\/ru-rub#order\">seksioni p\u00ebr porosin\u00eb e server\u00ebve<\/a><\/noindex>. Nuk na nevojiten shum\u00eb resurse, prandaj do t\u00eb marrim opsionin me pages\u00eb p\u00ebr megaherce dhe trafikun e p\u00ebrdorur. Kjo do t\u00eb mjaftoj\u00eb p\u00ebr t\u00eb eksperimentuar.<\/p>\n<p>Dm-crypt klasik p\u00ebr t\u00ebr\u00eb seksionin nuk funksionoi. Disku n\u00eb m\u00ebnyr\u00eb standarde jepet si nj\u00eb cop\u00eb, me root n\u00eb t\u00ebr\u00eb seksionin. T\u00eb zvog\u00eblohet seksioni me ext4 mbi nj\u00eb root t\u00eb montuar \u2014 kjo \u00ebsht\u00eb praktikisht nj\u00eb garanti p\u00ebr ta b\u00ebr\u00eb at\u00eb nj\u00eb d\u00ebrras\u00eb n\u00eb vend t\u00eb nj\u00eb sistemi skedar\u00ebsh. Un\u00eb provoja) Bubulli nuk ndihmoi.<\/p>\n<h2>Krijoni nj\u00eb kontenier t\u00eb enkriptuar<\/h2>\n<p>\nPrandaj nuk do ta enkriptojm\u00eb t\u00ebr\u00eb seksionin, por do t\u00eb p\u00ebrdorim konteiner\u00eb t\u00eb kriptuar t\u00eb skedar\u00ebve, p\u00ebrkat\u00ebsisht VeraCrypt, i cili ka kaluar auditimin dhe \u00ebsht\u00eb i besuesh\u00ebm. Kjo \u00ebsht\u00eb e mjaftueshme p\u00ebr q\u00ebllimet tona. S\u00eb pari, shkarkoni dhe instaloni paket\u00ebn me versionin CLI nga faqja zyrtare. Mund t\u00eb kontrolloni gjithashtu n\u00ebnshkrimin.<\/p>\n<pre><code class=\"bash\">wget https:\/\/launchpad.net\/veracrypt\/trunk\/1.24-update4\/+download\/veracrypt-console-1.24-Update4-Ubuntu-18.04-amd64.deb\ndpkg -i veracrypt-console-1.24-Update4-Ubuntu-18.04-amd64.deb\n<\/code><\/pre>\n<p>\nTani do t\u00eb krijojm\u00eb vet\u00eb konteinerin diku n\u00eb home tonin, p\u00ebr ta montuar manualisht pas rinisjes. N\u00eb variantin interaktiv, caktoni madh\u00ebsin\u00eb e konteinerit, fjal\u00ebkalimin dhe algoritmet e enkriptimit. Mund t\u00eb zgjedhni enkriptimin patriotik Kuznjecik dhe funksionin hash Stribog.<\/p>\n<pre><code class=\"bash\">veracrypt -t -c ~\/my_super_secret<\/code><\/pre>\n<p>\nTani le t\u00eb instalojm\u00eb nginx, montojm\u00eb konteinerin dhe ngarkojm\u00eb informacione sekrete n\u00eb t\u00eb.<\/p>\n<pre><code class=\"bash\">mkdir \/var\/www\/html\/images\nveracrypt ~\/my_super_secret \/var\/www\/html\/images\/\nwget https:\/\/upload.wikimedia.org\/wikipedia\/ru\/2\/24\/Lenna.png<\/code><\/pre>\n<p>\nPak do ta rregullojm\u00eb \/var\/www\/html\/index.nginx-debian.html p\u00ebr t\u00eb marr\u00eb faqen e nevojshme dhe mund t\u00eb fillojm\u00eb verifikimin.<\/p>\n<h2>Lidhuni dhe kontrolloni<\/h2>\n<p>\n<img decoding=\"async\" alt=\"\u00c7far\u00eb t\u00eb b\u00ebsh n\u00ebse silovik\u00ebt vizitojn\u00eb hostin tuaj\" src=\"\/wp-content\/uploads\/2020\/06\/1b1567cfd45db0d6f8421e89c0617a3a.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Konteineri \u00ebsht\u00eb montuar, t\u00eb dh\u00ebnat jan\u00eb t\u00eb disponueshme dhe iu jepen.<\/i><\/p>\n<p><img decoding=\"async\" alt=\"\u00c7far\u00eb t\u00eb b\u00ebsh n\u00ebse silovik\u00ebt vizitojn\u00eb hostin tuaj\" src=\"\/wp-content\/uploads\/2020\/06\/216440e8f586886a6ce79dc2b8d76fb0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Ja si duket makina pas rinisjes. T\u00eb dh\u00ebnat jan\u00eb t\u00eb sigurta n\u00eb ~\/my_super_secret.<\/i><\/p>\n<p>N\u00ebse \u00ebsht\u00eb shum\u00eb e nevojshme dhe doni hardkor, mund t\u00eb enkriptoni t\u00eb gjith\u00eb OS-n\u00eb, p\u00ebr ta b\u00ebr\u00eb at\u00eb t\u00eb k\u00ebrkoj\u00eb lidhje p\u00ebrmes ssh dhe futjen e fjal\u00ebkalimit pas rinisjes. Kjo gjithashtu do t\u00eb ishte e mjaftueshme n\u00eb skenar\u00ebt e konfiskimit t\u00eb thjesht\u00eb t\u00eb \u201ct\u00eb dh\u00ebnave t\u00eb ftohta\u201d. Ja <noindex><a rel=\"nofollow\" href=\"https:\/\/benediktkr.github.io\/ops\/2015\/05\/01\/remote-fde.html\">udhezimi me p\u00ebrdorimin e dropbear<\/a><\/noindex> dhe enkriptimin e larg\u00ebt t\u00eb disqeve. Megjithat\u00eb, n\u00eb rastin e VDS \u00ebsht\u00eb e komplikuar dhe tepric\u00eb.<\/p>\n<h2>Bare metal<\/h2>\n<p>\nNuk \u00ebsht\u00eb aq e leht\u00eb t\u00eb vendosni nj\u00eb server t\u00eb vetin n\u00eb qend\u00ebr t\u00eb t\u00eb dh\u00ebnave. Nj\u00eb server i dedikuar i huaj mund t\u00eb jet\u00eb nj\u00eb makin\u00eb virtuale, ku jan\u00eb lidhur t\u00eb gjitha pajisjet. Por di\u00e7ka interesante p\u00ebrsa i p\u00ebrket mbrojtjes fillon kur keni mund\u00ebsin\u00eb t\u00eb vendosni serverin tuaj fizik t\u00eb besuar n\u00eb qendr\u00ebn e t\u00eb dh\u00ebnave. Tani mund t\u00eb p\u00ebrdorni n\u00eb plot\u00ebsin\u00eb e saj dm-crypt, VeraCrypt ose \u00e7do enkriptim tjet\u00ebr sipas zgjedhjes suaj.<\/p>\n<p>Duhet t\u00eb kuptoni se n\u00eb implementimin e enkriptimit total, serveri nuk do t\u00eb jet\u00eb n\u00eb gjendje t\u00eb ngrihet vet\u00eb pas rinisjes. Do t\u00eb duhet t\u00eb ngrejt\u00eb lidhjen n\u00eb nd\u00ebrfaqen lokale IP-KVM, IPMI ose nj\u00eb analog tjet\u00ebr t\u00eb ngjash\u00ebm. Pas k\u00ebsaj, ne futim manualisht master-key-n. Schemi duket disi e dob\u00ebt n\u00eb aspektin e kontinuitetit dhe q\u00ebndrueshm\u00ebris\u00eb, por nuk ka opsione t\u00eb tjera n\u00ebse t\u00eb dh\u00ebnat jan\u00eb kaq t\u00eb vlefshme.<\/p>\n<p><img decoding=\"async\" alt=\"\u00c7far\u00eb t\u00eb b\u00ebsh n\u00ebse silovik\u00ebt vizitojn\u00eb hostin tuaj\" src=\"\/wp-content\/uploads\/2020\/06\/db32aac0efebed1bc71a2277b7f51244.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>NCipher nShield F3 Hardware Security Module<\/i><\/p>\n<p>Nj\u00eb version m\u00eb i but\u00eb supozon se t\u00eb dh\u00ebnat jan\u00eb t\u00eb koduara, dhe \u00e7el\u00ebsi ndodhet drejtp\u00ebrdrejt n\u00eb serverin n\u00eb nj\u00eb HSM (Modul i Siguris\u00eb Harduerike) t\u00eb ve\u00e7ant\u00eb. Zakonisht k\u00ebto jan\u00eb pajisje shum\u00eb funksionale, t\u00eb cilat jo vet\u00ebm q\u00eb ofrojn\u00eb kriptografi harduerike, por gjithashtu kan\u00eb mekanizma p\u00ebr t\u00eb zbuluar p\u00ebrpjekjet e thyerjes fizike. N\u00ebse dikush fillon t\u00eb prish\u00eb serverin tuaj me nj\u00eb kut\u00ebr, HSM me nj\u00eb burim t\u00eb pavarur energjie do t\u00eb fshij\u00eb \u00e7el\u00ebsat q\u00eb mban n\u00eb memorie. Sulmuesi do t\u00eb marr\u00eb nj\u00eb mas\u00eb t\u00eb koduar. N\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb, rinisja mund t\u00eb ndodh\u00eb automatikisht.<\/p>\n<p>Fshirja e \u00e7el\u00ebsave \u00ebsht\u00eb nj\u00eb opsion shum\u00eb m\u00eb i shpejt\u00eb dhe human se aktivizimi i nj\u00eb granate termike ose shkarkuesi elektromagnetik. P\u00ebr k\u00ebto pajisje, fqinj\u00ebt tuaj n\u00eb qendr\u00ebn e t\u00eb dh\u00ebnave do t'ju godasin p\u00ebr shum\u00eb koh\u00eb. Sidomos n\u00eb rastin e p\u00ebrdorimit <noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/Opal_Storage_Specification\">TCG Opal 2<\/a><\/noindex> t\u00eb kodimit n\u00eb vet\u00eb mbajt\u00ebsit, ju praktikisht nuk p\u00ebrjetoni asnj\u00eb ngarkes\u00eb shtes\u00eb. T\u00eb gjith\u00eb k\u00ebto ndodhin transparenc\u00eb p\u00ebr sistemin operativ. Megjithat\u00eb, n\u00eb k\u00ebt\u00eb raste duhet t'i besoni nj\u00eb Samsung-u t\u00eb kusht\u00ebzuar dhe t\u00eb shpresoni se ka AES256 t\u00eb ndersh\u00ebm, jo thjesht nj\u00eb XOR banal.<\/p>\n<p>N\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb, nuk duhet t\u00eb harhoni se t\u00eb gjitha portat e panevojshme duhet t\u00eb jen\u00eb t\u00eb \u00e7aktivizuara fizikisht ose t\u00eb mbushen thjesht me kompozit. P\u00ebrndryshe, ju ofroni mund\u00ebsin\u00eb sulmuesve t\u00eb kryejn\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/DMA_attack\">sulme DMA.<\/a><\/noindex>N\u00ebse keni nj\u00eb PCI Express ose Thunderbolt q\u00eb del jasht\u00eb, duke p\u00ebrfshir\u00eb USB me mb\u00ebshtetje p\u00ebr t\u00eb \u2014 ju jeni t\u00eb pambrojtur. Sulmuesi mund t\u00eb kryej\u00eb nj\u00eb sulm p\u00ebrmes k\u00ebtyre porteve dhe t\u00eb fitoj\u00eb qasje t\u00eb drejtp\u00ebrdrejt\u00eb n\u00eb memorin\u00eb me \u00e7el\u00ebsat.<\/p>\n<p><center><div class=\"youtube-placeholder\" data-id=\"E6gzVVjW4yY\" onclick=\"loadVideo(this)\">\r\n        <img decoding=\"async\" src=\"https:\/\/img.youtube.com\/vi\/E6gzVVjW4yY\/hqdefault.jpg\" alt=\"Luaj videon\" loading=\"lazy\" width=\"480\" height=\"360\" style=\"width:100%;height:auto;\">\r\n        <div class=\"play-button\"><\/div>\r\n    <\/div><\/center><\/p>\n<p>N\u00eb nj\u00eb variant shum\u00eb t\u00eb sofistikuar, sulmuesi do t\u00eb jet\u00eb n\u00eb gjendje t\u00eb kryej\u00eb nj\u00eb sulm 'cold boot'. K\u00ebshtu, ai thjesht derdh nj\u00eb sasi t\u00eb madhe azoti t\u00eb l\u00ebngsh\u00ebm n\u00eb serverin tuaj, nxjerr me dhun\u00eb modul\u00ebt e memorjes s\u00eb ngrir\u00eb dhe merr nj\u00eb dump prej tyre me t\u00eb gjith\u00eb \u00e7el\u00ebsat. Shpesh, p\u00ebr t\u00eb kryer sulmin, mjafton nj\u00eb sprej ftoh\u00ebs i zakonsh\u00ebm dhe temperatura rreth -50 grad\u00eb. Ka edhe nj\u00eb variant m\u00eb t\u00eb kujdessh\u00ebm. N\u00ebse nuk e keni \u00e7aktivizuar ngarkimin nga pajisje t\u00eb jashtme, algoritmi i sulmuesit do t\u00eb jet\u00eb edhe m\u00eb i thjesht\u00eb:<\/p>\n<ol>\n<li>T\u00eb ngrij\u00eb modul\u00ebt e memorjes pa e hapur kas\u00ebn.<\/li>\n<li>T\u00eb lidhni nj\u00eb USB t\u00eb ngarkuesh\u00ebm.<\/li>\n<li>Me mjete speciale t\u00eb nxjerrni t\u00eb dh\u00ebnat nga memoria RAM, t\u00eb cilat kan\u00eb mbijetuar rinisjen, fal\u00eb ngrirjes.<\/li>\n<\/ol>\n<p><\/p>\n<h2>Ndaj dhe sundo<\/h2>\n<p>\nOk, kemi vet\u00ebm virtualizime, por duam t\u00eb ulim ndonj\u00ebher\u00eb rrezikun e rrjedhjes s\u00eb t\u00eb dh\u00ebnave.<br \/>\nN\u00eb parim, mund t\u00eb provohet rrethimi i arkitektur\u00ebs dhe shp\u00ebrndarja e ruajtjes s\u00eb t\u00eb dh\u00ebnave dhe p\u00ebrpunimit n\u00eb juridiksione t\u00eb ndryshme. P\u00ebr shembull, frontend me \u00e7el\u00ebsa enkriptimi te hosti n\u00eb \u00c7eki, dhe backend me t\u00eb dh\u00ebna t\u00eb enkriptuara diku n\u00eb Rusi. N\u00eb rastin e nj\u00eb p\u00ebrpjekjeje standarde p\u00ebr konfiskim, \u00ebsht\u00eb tejet e pamundur q\u00eb strukturat ekstreme t\u00eb zhvillojn\u00eb k\u00ebt\u00eb n\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb n\u00eb juridiksione t\u00eb ndryshme. Gjithashtu, kjo na siguron pjes\u00ebrisht nga skenari i marrjes s\u00eb nj\u00eb snapshot-i.<\/p>\n<p>Ose mund t\u00eb shqyrtojm\u00eb nj\u00eb variant krejt\u00ebsisht t\u00eb past\u00ebr \u2014 enkriptimi End-to-End. Sigurisht, kjo kalon jasht\u00eb k\u00ebrkesave t\u00eb projektit dhe nuk parashikon kryerjen e llogaritjeve n\u00eb an\u00ebn e makin\u00ebs s\u00eb larg\u00ebt. Megjithat\u00eb, kjo \u00ebsht\u00eb nj\u00eb mund\u00ebsi mjaft e pranueshme, n\u00ebse b\u00ebhet fjal\u00eb p\u00ebr ruajtjen dhe sinkronizimin e t\u00eb dh\u00ebnave. P\u00ebr shembull, kjo \u00ebsht\u00eb realizuar shum\u00eb mir\u00eb n\u00eb Nextcloud. N\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb, sinkronizimi, versionimi dhe mir\u00ebsi t\u00eb tjera t\u00eb pjes\u00ebs server mbeten t\u00eb nj\u00ebjta.<\/p>\n<h2>P\u00ebrve\u00e7 k\u00ebsaj<\/h2>\n<p>\nNuk ka sisteme t\u00eb mbrojtura perfekt. Q\u00ebllimi \u00ebsht\u00eb vet\u00ebm t\u00eb b\u00ebhet nj\u00eb sulm m\u00eb i shtrenjt\u00eb se p\u00ebrfitimi potencial.<\/p>\n<p>Nj\u00eb reduktim t\u00eb caktuar t\u00eb rreziqeve t\u00eb aksesit n\u00eb t\u00eb dh\u00ebna n\u00eb virtual mund t\u00eb arrihet duke kombinuar enkriptimin dhe ruajtjen e ndar\u00eb me hoste t\u00eb ndrysh\u00ebm.<\/p>\n<p>Nj\u00eb variant m\u00eb ose m\u00eb pak t\u00eb besuesh\u00ebm \u00ebsht\u00eb p\u00ebrdorimi i serverit t\u00ebnd fizik.<\/p>\n<p>Por, hosti gjithsesi do t\u00eb duhet t\u00eb besohet n\u00eb nj\u00eb m\u00ebnyr\u00eb ose nj\u00eb tjet\u00ebr. Kjo \u00ebsht\u00eb b\u00ebrthama e gjith\u00eb industri.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"http:\/\/ruvds.com\/ru-rub?utm_source=habr&amp;utm_medium=article&amp;utm_campaign=mekl&amp;utm_content=prishli-siloviki\"><img decoding=\"async\" alt=\"\u00c7far\u00eb t\u00eb b\u00ebsh n\u00ebse silovik\u00ebt vizitojn\u00eb hostin tuaj\" src=\"\/wp-content\/uploads\/2020\/06\/13474ad7e4e39f259f91f51f4fd1febc.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p><noindex><a rel=\"nofollow\" href=\"http:\/\/ruvds.com\/ru-rub?utm_source=habr&amp;utm_medium=article&amp;utm_campaign=mekl&amp;utm_content=prishli-siloviki#order\"><img decoding=\"async\" alt=\"\u00c7far\u00eb t\u00eb b\u00ebsh n\u00ebse silovik\u00ebt vizitojn\u00eb hostin tuaj\" src=\"\/wp-content\/uploads\/2020\/06\/92555b963c5ff5b7bf0393a1918c40dd.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/ruvds\/blog\/506334\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u043a\u0434\u043f\u0432 \u2014 Reuters \u0415\u0441\u043b\u0438 \u0432\u044b \u0430\u0440\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0438 \u0441\u0435\u0440\u0432\u0435\u0440, \u0442\u043e \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0443 \u0432\u0430\u0441 \u043d\u0430\u0434 \u043d\u0438\u043c \u043d\u0435\u0442. \u042d\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442, \u0447\u0442\u043e \u0432 \u043b\u044e\u0431\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043a \u0445\u043e\u0441\u0442\u0435\u0440\u0443 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0439\u0442\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u043d\u044b\u0435 \u043b\u044e\u0434\u0438 \u0438 \u043f\u043e\u043f\u0440\u043e\u0441\u0438\u0442\u044c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0432\u0430\u0448\u0438 \u0434\u0430\u043d\u043d\u044b\u0435. \u0418 \u0445\u043e\u0441\u0442\u0435\u0440 \u0438\u0445 \u043e\u0442\u0434\u0430\u0441\u0442, \u0435\u0441\u043b\u0438 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0435 \u0431\u0443\u0434\u0435\u0442 \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043e \u043f\u043e \u0437\u0430\u043a\u043e\u043d\u0443. \u0412\u044b \u043e\u0447\u0435\u043d\u044c \u043d\u0435 \u0445\u043e\u0442\u0438\u0442\u0435, \u0447\u0442\u043e\u0431\u044b \u043b\u043e\u0433\u0438 \u0432\u0430\u0448\u0435\u0433\u043e \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":85142,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-85141","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/chto-delat-esli-k-tvoemu-hosteru-prishli-siloviki\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c, \u0435\u0441\u043b\u0438 \u043a \u0442\u0432\u043e\u0435\u043c\u0443 \u0445\u043e\u0441\u0442\u0435\u0440\u0443 \u043f\u0440\u0438\u0448\u043b\u0438 siloviki | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/chto-delat-esli-k-tvoemu-hosteru-prishli-siloviki\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-06-13T11:42:24+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-06-13T11:42:24+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u00c7far\u00eb t\u00eb b\u00ebsh n\u00ebse silovik\u00ebt shkuan te hosti yt | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/chto-delat-esli-k-tvoemu-hosteru-prishli-siloviki","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c, \u0435\u0441\u043b\u0438 \u043a \u0442\u0432\u043e\u0435\u043c\u0443 \u0445\u043e\u0441\u0442\u0435\u0440\u0443 \u043f\u0440\u0438\u0448\u043b\u0438 siloviki | ProHoster","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/chto-delat-esli-k-tvoemu-hosteru-prishli-siloviki","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-13T11:42:24+00:00","article:modified_time":"2020-06-13T11:42:24+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"85141","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:43:30","updated":"2026-08-11 12:50:15","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/85141","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=85141"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/85141\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/85142"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=85141"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=85141"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=85141"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}