{"id":85141,"date":"2020-06-13T13:42:24","date_gmt":"2020-06-13T11:42:24","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/chto-delat-esli-k-tvoemu-hosteru-prishli-siloviki"},"modified":"2020-06-13T13:42:24","modified_gmt":"2020-06-13T11:42:24","slug":"chto-delat-esli-k-tvoemu-hosteru-prishli-siloviki","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/chto-delat-esli-k-tvoemu-hosteru-prishli-siloviki","title":{"rendered":"\u00c7far\u00eb duhet t\u00eb b\u00ebsh n\u00ebse silovik\u00ebt i shkojn\u00eb hostit t\u00ebnd","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/ruvds\/blog\/506334\/\"><img decoding=\"async\" alt=\"\u00c7far\u00eb duhet t\u00eb b\u00ebsh n\u00ebse silovik\u00ebt i shkojn\u00eb hostit t\u00ebnd\" src=\"\/wp-content\/uploads\/2020\/06\/867a0b09b6e2b2676e520a16cee0148d.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><i>kdpv \u2014 Reuters<\/i><\/p>\n<p>N\u00ebse keni marr\u00eb me qira nj\u00eb server, at\u00ebher\u00eb kontrolli juaj mbi t\u00eb nuk \u00ebsht\u00eb i plot\u00eb. Kjo do t\u00eb thot\u00eb se n\u00eb \u00e7do moment, ofruesit t\u00eb sh\u00ebrbimit mund t\u2019i paraqiten njer\u00ebz t\u00eb trajnuar dhe t\u2019i k\u00ebrkojn\u00eb t\u00eb dh\u00ebnat tuaja. Dhe ofruesi do t\u2019i jap\u00eb ato n\u00ebse k\u00ebrkesa \u00ebsht\u00eb e dokumentuar sipas ligjit. <\/p>\n<p>Ju nuk d\u00ebshironi aspak q\u00eb log-et e serverit tuaj web ose t\u00eb dh\u00ebnat e p\u00ebrdoruesve t\u00eb p\u00ebrfundojn\u00eb tek dikush tjet\u00ebr. E p\u00ebrsosur mbrojtja nuk \u00ebsht\u00eb e mundur t\u00eb nd\u00ebrtohet. Mbrojtja nga ofruesi i sh\u00ebrbimit q\u00eb zot\u00ebron hipervizorin dhe ju ofron nj\u00eb makin\u00eb virtuale pothuajse \u00ebsht\u00eb e pamundur. Megjithat\u00eb, ndoshta \u00ebsht\u00eb e mundur t\u00eb ulni pak rrezikun. Enkriptimi i makinave t\u00eb marr\u00eb me qira nuk \u00ebsht\u00eb aq i padobish\u00ebm sa duket n\u00eb fillim. Nj\u00ebkoh\u00ebsisht, do t\u00eb hedhim nj\u00eb v\u00ebshtrim n\u00eb k\u00ebrc\u00ebnimet e nxjerrjes s\u00eb t\u00eb dh\u00ebnave nga server\u00ebt fizik\u00eb.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h2>Modeli i k\u00ebrc\u00ebnimeve<\/h2>\n<p>\nN\u00eb p\u00ebrgjith\u00ebsi, host-i do t\u00eb p\u00ebrpiqet t\u00eb mbroj\u00eb sa m\u00eb shum\u00eb interesat e klientit, saq\u00eb \u00ebsht\u00eb e mundur sipas ligjit. N\u00ebse nj\u00eb shkres\u00eb nga organet zyrtare k\u00ebrkon vet\u00ebm log-et e aksesit, host-i nuk do t\u00eb dor\u00ebzoj\u00eb kopjet e t\u00eb gjitha makinave virtuale me bazat e t\u00eb dh\u00ebnave. Nuk duhet, t\u00eb pakt\u00ebn. N\u00ebse k\u00ebrkohet t\u00eb dh\u00ebna t\u00eb plota, host-i do t\u00eb kopjoj\u00eb disqet virtuale me t\u00eb gjitha skedar\u00ebt dhe ju nuk do t\u00eb merrni vesh p\u00ebr k\u00ebt\u00eb.<\/p>\n<p>Pavar\u00ebsisht skenarit t\u00eb zhvillimit t\u00eb ngjarjeve, detyra juaj kryesore \u00ebsht\u00eb t\u00eb b\u00ebni q\u00eb sulmi t\u00eb jet\u00eb shum\u00eb i zakonsh\u00ebm dhe i kushtuesh\u00ebm. Rreth tri opsione kryesore p\u00ebr k\u00ebrc\u00ebnimin jan\u00eb zakonisht.<\/p>\n<h2>Zyrtare<\/h2>\n<p>\nM\u00eb shpesh, n\u00eb zyr\u00ebn zyrtare t\u00eb host-it d\u00ebrgohet nj\u00eb let\u00ebr me k\u00ebrkes\u00ebn p\u00ebr t\u00eb siguruar t\u00eb dh\u00ebnat e nevojshme sipas nj\u00eb vendimi p\u00ebrkat\u00ebs. N\u00ebse gjith\u00e7ka \u00ebsht\u00eb e rregullt, host-i ofron log-et e nevojshme dhe t\u00eb dh\u00ebna t\u00eb tjera p\u00ebr organet zyrtare. Zakonisht thjesht k\u00ebrkohet t\u00eb d\u00ebrgohen t\u00eb dh\u00ebnat e nevojshme.<\/p>\n<p>Her\u00eb pas here, n\u00ebse \u00ebsht\u00eb e nevojshme, p\u00ebrfaq\u00ebsues t\u00eb organeve t\u00eb zbatimit t\u00eb ligjit vizitojn\u00eb personalisht Qendr\u00ebn e t\u00eb Dh\u00ebnave. P\u00ebr shembull, kur keni nj\u00eb server t\u00eb dedikuar dhe t\u00eb dh\u00ebnat nga aty mund t\u00eb merren vet\u00ebm fizikisht.<\/p>\n<p>N\u00eb t\u00eb gjitha vendet, p\u00ebr t\u00eb siguruar qasje n\u00eb territorin privat, p\u00ebr t\u00eb kryer k\u00ebrkime dhe aktivitete t\u00eb tjera, k\u00ebrkohet t\u00eb ket\u00eb prova q\u00eb k\u00ebto t\u00eb dh\u00ebna mund t\u00eb p\u00ebrmbajn\u00eb informacion t\u00eb r\u00ebnd\u00ebsish\u00ebm p\u00ebr hetimin e nj\u00eb krimi. P\u00ebr m\u00eb tep\u00ebr, k\u00ebrkohet nj\u00eb urdh\u00ebr k\u00ebrkimi i hartuar sipas t\u00eb gjitha rregullave. K\u00ebtu mund t\u00eb ket\u00eb nuanca q\u00eb lidhen me ve\u00e7orit\u00eb e legjislacionit vendas. E r\u00ebnd\u00ebsishme \u00ebsht\u00eb t\u00eb kuptohet se, n\u00eb rastin e nj\u00eb rrug\u00ebzimi t\u00eb duhur zyrtar, p\u00ebrfaq\u00ebsuesit e Qendr\u00ebs s\u00eb t\u00eb Dh\u00ebnave nuk do t\u00eb lejojn\u00eb ask\u00ebnd t\u00eb kaloj\u00eb m\u00eb tej te hyrja.<\/p>\n<p>M\u00eb tep\u00ebr, n\u00eb shumic\u00ebn e vendeve nuk \u00ebsht\u00eb e mundur thjesht t\u00eb hiqet pajisja q\u00eb funksionon. P\u00ebr shembull, n\u00eb Rusi deri n\u00eb fund t\u00eb vitit 2018, sipas nenit 183 t\u00eb Kodit t\u00eb Procedur\u00ebs Penale t\u00eb RF, pjesa 3.1, garantoheshin q\u00eb gjat\u00eb kryerjes s\u00eb konfiskimit, heqja e mediave elektronike t\u00eb informacionit t\u00eb b\u00ebhej me pjes\u00ebmarrjen e nj\u00eb specialisti. Me k\u00ebrkes\u00ebn e pronarit ligjor t\u00eb mediave elektronike q\u00eb konfiskohen ose t\u00eb mbajt\u00ebsit t\u00eb informacionit q\u00eb ndodhet n\u00eb to, specialisti q\u00eb merr pjes\u00eb n\u00eb konfiskim, n\u00eb prani t\u00eb d\u00ebshmitar\u00ebve, kryen kopjimin e informacionit nga mediat elektronike n\u00eb media t\u00eb tjera elektronike.<\/p>\n<p>Pastaj, fatkeq\u00ebsisht, ky pik\u00eb \u00ebsht\u00eb hequr nga neni.<\/p>\n<h2>T\u00eb fshehta dhe jozyrtare<\/h2>\n<p>\nKjo \u00ebsht\u00eb tashm\u00eb territori i veprimtaris\u00eb s\u00eb shok\u00ebve t\u00eb trajnuar nga NSA, FBI, MI5 dhe organizata t\u00eb tjera me tre shkronja. \u00c7doher\u00eb, ligj\u00ebria e vendeve parashikon kompetenca shum\u00eb t\u00eb gj \u0448\u0438\u0440a p\u00ebr k\u00ebto struktura. M\u00eb shum\u00eb se kaq, pothuajse gjithmon\u00eb ekziston nj\u00eb ndalim ligjor p\u00ebr \u00e7do shp\u00ebrndarje direkte dhe indirekte t\u00eb vet\u00eb faktit t\u00eb bashk\u00ebpunimit me k\u00ebto institucione force. N\u00eb Rusi ekzistojn\u00eb norma t\u00eb ngjashme <noindex><a rel=\"nofollow\" href=\"http:\/\/publication.pravo.gov.ru\/Document\/View\/0001201801220009?index=3&amp;rangeSize=1\">juridike<\/a><\/noindex>.<\/p>\n<p>N\u00eb rast se ka nj\u00eb k\u00ebrc\u00ebnim t\u00eb till\u00eb p\u00ebr t\u00eb dh\u00ebnat tuaja, ato me siguri do t\u00eb nxirren. P\u00ebrve\u00e7 thjesht nxjerrjes, mund t\u00eb p\u00ebrdoren edhe t\u00eb gjitha mjetet jozyrtare t\u00eb backdoor-it, vulnerabilitetet e dit\u00ebs zero, nxjerrja e t\u00eb dh\u00ebnave nga memoria RAM e makin\u00ebs tuaj virtuale dhe k\u00ebnaq\u00ebsit\u00eb e tjera. Hosting provider-i do t\u00eb jet\u00eb i detyruar t\u00eb ndihmoj\u00eb maksimalisht specialist\u00ebt e autoriteteve.<\/p>\n<h2>Punonj\u00ebsi i pandersh\u00ebm<\/h2>\n<p>\nNuk jan\u00eb t\u00eb gjith\u00eb njer\u00ebzit t\u00eb nj\u00ebjt\u00eb. Disa nga administrator\u00ebt e Qendr\u00ebs s\u00eb t\u00eb Dh\u00ebnave mund t\u00eb vendosin t\u00eb fitojn\u00eb ndonj\u00eb para dhe t\u00eb shesin t\u00eb dh\u00ebnat tuaja. Zhvillimi i m\u00ebtejsh\u00ebm i ngjarjeve varet nga pushtetet dhe akseset e tij. E keqja m\u00eb e madhe \u00ebsht\u00eb se nj\u00eb administrator me akses n\u00eb konsol\u00ebn e virtualizimit ka kontroll t\u00eb plot\u00eb mbi makinat tuaja. Gjithmon\u00eb \u00ebsht\u00eb e mundur t\u00eb b\u00ebhet nj\u00eb snapshot me t\u00eb gjitha p\u00ebrmbajtjet e memories RAM dhe m\u00eb pas ta studiojm\u00eb at\u00eb pa ngut.<\/p>\n<h2>VDS<\/h2>\n<p>\nK\u00ebshtu, ju keni nj\u00eb makin\u00eb virtuale q\u00eb ju \u00ebsht\u00eb dh\u00ebn\u00eb nga hosting provider-i. Si mund ta organizoni enkriptimin p\u00ebr t\u00eb mbrojtur veten? N\u00eb t\u00eb v\u00ebrtet\u00eb, thuajse asnj\u00eb m\u00ebnyr\u00eb. P\u00ebr m\u00eb tep\u00ebr, edhe nj\u00eb server i dedikuar i huaj mund t\u00eb p\u00ebrfundoj\u00eb si nj\u00eb makin\u00eb virtuale, n\u00eb t\u00eb cil\u00ebn jan\u00eb lidhur pajisjet e nevojshme.<\/p>\n<p>N\u00ebse q\u00ebllimi i sistemit t\u00eb larg\u00ebt nuk \u00ebsht\u00eb vet\u00ebm ruajtja e t\u00eb dh\u00ebnave, por edhe kryerja e disa llogaritjeve, at\u00ebher\u00eb opsioni i vet\u00ebm p\u00ebr t\u00eb punuar me nj\u00eb makin\u00eb t\u00eb pabesueshme do t\u00eb jet\u00eb zbatimi i <noindex><a rel=\"nofollow\" href=\"https:\/\/ru.wikipedia.org\/wiki\/%D0%9F%D0%BE%D0%BB%D0%BD%D0%BE%D1%81%D1%82%D1%8C%D1%8E_%D0%B3%D0%BE%D0%BC%D0%BE%D0%BC%D0%BE%D1%80%D1%84%D0%BD%D0%BE%D0%B5_%D1%88%D0%B8%D1%84%D1%80%D0%BE%D0%B2%D0%B0%D0%BD%D0%B8%D0%B5\">kriptimit homomorfik<\/a><\/noindex>. K\u00ebtu, sistemi do t\u00eb kryej\u00eb llogaritjet pa mund\u00ebsi p\u00ebr t\u00eb kuptuar se \u00e7far\u00eb sakt\u00ebsisht po b\u00ebn. Fatkeq\u00ebsisht, shpenzimet p\u00ebr zbatimin e k\u00ebtij kriptimi jan\u00eb aq t\u00eb m\u00ebdha, saq\u00eb aplikimi i tij n\u00eb praktik\u00eb n\u00eb k\u00ebt\u00eb moment \u00ebsht\u00eb i kufizuar n\u00eb disa detyra shum\u00eb t\u00eb ngushta.<\/p>\n<p>P\u00ebr m\u00eb tep\u00ebr, n\u00eb momentin kur makina virtuale \u00ebsht\u00eb e aktivizuar dhe po kryen disa veprime, t\u00eb gjitha volumet e kriptuara jan\u00eb n\u00eb nj\u00eb gjendje t\u00eb aksesueshme, p\u00ebrndryshe OS thjesht nuk do t\u00eb mund t\u00eb punoj\u00eb me to. Kjo do t\u00eb thot\u00eb se duke pasur akses n\u00eb konsol\u00ebn e virtualizimit, gjithmon\u00eb mund t\u00eb b\u00ebni nj\u00eb snapshot t\u00eb makin\u00ebs n\u00eb pun\u00eb dhe t\u00eb nxirrni t\u00eb gjitha \u00e7el\u00ebsat nga memoria e p\u00ebrkohshme.<\/p>\n<p>Shum\u00eb ofrues sh\u00ebrbimesh kan\u00eb nd\u00ebrmarr\u00eb p\u00ebrpjekje p\u00ebr t\u00eb organizuar shkall\u00ebzimin e harduerit RAM, n\u00eb m\u00ebnyr\u00eb q\u00eb asnj\u00eb hoster t\u00eb mos ket\u00eb akses n\u00eb k\u00ebto t\u00eb dh\u00ebna. P\u00ebr shembull, teknologjia Intel Software Guard Extensions krijon zona n\u00eb hap\u00ebsir\u00ebn virtuale adresuese, t\u00eb mbrojtura nga leximet dhe shkrimet nga proceset e tjera, p\u00ebrfshir\u00eb b\u00ebrtham\u00ebn e sistemit operativ. Fatkeq\u00ebsisht, nuk do t\u00eb mund t\u00eb besoni plot\u00ebsisht k\u00ebto teknologji, pasi do t\u00eb jeni t\u00eb kufizuar n\u00eb makin\u00ebn tuaj virtuale. P\u00ebr m\u00eb tep\u00ebr, tashm\u00eb ekzistojn\u00eb shembuj t\u00eb gatsh\u00ebm <noindex><a rel=\"nofollow\" href=\"https:\/\/www.theregister.co.uk\/2017\/03\/07\/eggheads_slip_a_note_under_intels_door_sgx_can_leak_crypto_keys\/\">t\u00eb nj\u00eb sulmi<\/a><\/noindex> n\u00eb k\u00ebt\u00eb teknologji. Megjithat\u00eb, enkriptimi i makinave virtuale nuk \u00ebsht\u00eb aq i pavler\u00eb sa mund t\u00eb dukej.<\/p>\n<h2>Enkriptimi i t\u00eb dh\u00ebnave n\u00eb VDS<\/h2>\n<p>\nMenj\u00ebher\u00eb duhet t\u00eb p\u00ebrmend se gjith\u00e7ka q\u00eb ne b\u00ebjm\u00eb m\u00eb posht\u00eb nuk do ta ofroj\u00eb mbrojtjen e plot\u00eb. Hipervizori do t\u00eb lejoj\u00eb krijimin e kopjeve t\u00eb nevojshme pa ndalur sh\u00ebrbimin dhe pa u v\u00ebn\u00eb re nga ju.<\/p>\n<ul>\n<li>N\u00ebse hoster-i transferon nj\u00eb imazh 't\u00eb ftoht\u00eb' t\u00eb makin\u00ebs tuaj virtuale sipas k\u00ebrkes\u00ebs, at\u00ebher\u00eb ju do t\u00eb jeni n\u00eb nj\u00eb siguri relative. Kjo \u00ebsht\u00eb skenari m\u00eb i zakonsh\u00ebm.<\/li>\n<li>N\u00ebse hosti ofron nj\u00eb snapshot t\u00eb plot\u00eb t\u00eb nj\u00eb makine n\u00eb funksion, gj\u00ebrat jan\u00eb shum\u00eb t\u00eb k\u00ebqija. T\u00eb gjitha t\u00eb dh\u00ebnat do t\u00eb montoheshin n\u00eb sistem n\u00eb form\u00eb t\u00eb hapur. P\u00ebr m\u00eb tep\u00ebr, do t\u00eb kishte mund\u00ebsi p\u00ebr t\u00eb hulumtuar n\u00eb RAM p\u00ebr t\u00eb gjetur \u00e7el\u00ebsa privat\u00eb dhe t\u00eb dh\u00ebna t\u00eb ngjashme.<\/li>\n<\/ul>\n<p>\nP\u00ebr default, n\u00ebse keni implementuar nj\u00eb sistem operativ nga nj\u00eb imazh t\u00eb past\u00ebr, hosti nuk ka akses root. Gjithmon\u00eb \u00ebsht\u00eb e mundur t\u00eb montoni nj\u00eb media me nj\u00eb imazh rescue dhe t\u00eb ndryshoni fjal\u00ebkalimin e root, duke b\u00ebr\u00eb chroot n\u00eb mjedisin e makin\u00ebs virtuale. Por kjo do t\u00eb k\u00ebrkonte nj\u00eb rinisje, q\u00eb do t\u00eb vihej re. Plus, t\u00eb gjitha ndarjet e montuara t\u00eb enkriptuara do t\u00eb ishin t\u00eb mbyllura.<\/p>\n<p>Megjithat\u00eb, n\u00ebse implementimi i makin\u00ebs virtuale nuk b\u00ebhet nga nj\u00eb imazh t\u00eb past\u00ebr, por nga nj\u00eb t\u00eb p\u00ebrgatitur paraprakisht, hosti shpesh mund t\u00eb shtoj\u00eb nj\u00eb llogari me privilegje p\u00ebr t\u00eb ndihmuar n\u00eb nj\u00eb situat\u00eb emergjente p\u00ebr klientin. P\u00ebr shembull, p\u00ebr t\u00eb ndryshuar nj\u00eb fjal\u00ebkalim t\u00eb harruar t\u00eb root.<\/p>\n<p>Edhe n\u00eb rastin e nj\u00eb snapshoti t\u00eb plot\u00eb, nuk \u00ebsht\u00eb gjith\u00e7ka aq keq. Sulmuesi nuk do t\u00eb marr\u00eb skedar\u00ebt e enkriptuar n\u00ebse i keni montuar ata nga nj\u00eb sistem t\u00eb larg\u00ebt t\u00eb skedar\u00ebve t\u00eb nj\u00eb makine tjet\u00ebr. Po, teorikisht \u00ebsht\u00eb e mundur t\u00eb shk\u00ebrmoqni dump-in e memories dhe t\u00eb nxirrni \u00e7el\u00ebsat e enkriptuar nga aty. Por n\u00eb praktik\u00eb, ky proces \u00ebsht\u00eb shum\u00eb kompleks dhe \u00ebsht\u00eb shum\u00eb e dyshimt\u00eb q\u00eb ai t\u00eb shkoj\u00eb p\u00ebrtej thjesht kalimit t\u00eb skedar\u00ebve.<\/p>\n<h2>K\u00ebrkojm\u00eb nj\u00eb makin\u00eb<\/h2>\n<p>\n<img decoding=\"async\" alt=\"\u00c7far\u00eb duhet t\u00eb b\u00ebsh n\u00ebse silovik\u00ebt i shkojn\u00eb hostit t\u00ebnd\" src=\"\/wp-content\/uploads\/2020\/06\/3a4c244720963e8da57e782aa53e2db0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nP\u00ebr q\u00ebllimet tona testuese, marrim nj\u00eb makin\u00eb t\u00eb thjesht\u00eb n\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/ruvds.com\/ru-rub#order\">seksioni p\u00ebr porosin\u00eb e server\u00ebve<\/a><\/noindex>. Nuk na duhen shum\u00eb resurse, prandaj do t\u00eb zgjedhim opsionin me pages\u00eb p\u00ebr megaherc\u00ebt dhe trafikun e konsumuar. Mjafton p\u00ebr t\u00eb luajtur pak.<\/p>\n<p>Klasikja dm-crypt e t\u00ebr\u00eb ndarjes nuk funksionoi. Disku, me t\u00eb drejt\u00eb, jepet si nj\u00eb cop\u00eb e vetme, me root n\u00eb t\u00eb gjith\u00eb ndarjen. T\u00eb zvog\u00eblosh ndarjen me ext4 mbi root t\u00eb montuar \u2014 \u00ebsht\u00eb praktikisht nj\u00eb garanci p\u00ebr t\u00eb pasur nj\u00eb mur n\u00eb vend t\u00eb sistemit t\u00eb skedar\u00ebve. E provojta) Buben nuk ndihmoi.<\/p>\n<h2>Krijojm\u00eb nj\u00eb kriptokontainer<\/h2>\n<p>\nPrandaj, nuk do ta kodojm\u00eb t\u00ebr\u00eb seksionin, por do t\u00eb p\u00ebrdorim kontejner\u00eb t\u00eb koduar t\u00eb skedar\u00ebve, sidomos VeraCrypt q\u00eb ka kaluar audite dhe \u00ebsht\u00eb i besuesh\u00ebm. Kjo \u00ebsht\u00eb e mjaftueshme p\u00ebr ne. Fillimisht, t\u00ebrheqim dhe instalojm\u00eb paket\u00ebn me versionin CLI nga faqja zyrtare. Mund ta kontrolloni edhe n\u00ebnshkrimin.<\/p>\n<pre><code class=\"bash\">wget https:\/\/launchpad.net\/veracrypt\/trunk\/1.24-update4\/+download\/veracrypt-console-1.24-Update4-Ubuntu-18.04-amd64.deb\ndpkg -i veracrypt-console-1.24-Update4-Ubuntu-18.04-amd64.deb\n<\/code><\/pre>\n<p>\nTani do t\u00eb krijojm\u00eb vet\u00eb kontejnerin diku n\u00eb home ton\u00eb, p\u00ebr ta montuar manualisht pas rinisjes. N\u00eb variantin interaktiv, caktoni madh\u00ebsin\u00eb e kontejnerit, fjal\u00ebkalimin dhe algoritmet e enkriptimit. Mund t\u00eb zgjidhni enkriptimin patriotik Kuznechik dhe funksionin hash Stribog.<\/p>\n<pre><code class=\"bash\">veracrypt -t -c ~\/my_super_secret<\/code><\/pre>\n<p>\nTani le t\u00eb instalojm\u00eb nginx, t\u00eb montojm\u00eb kontejnerin dhe t\u00eb ngarkojm\u00eb informacionin sekret brenda tij.<\/p>\n<pre><code class=\"bash\">mkdir \/var\/www\/html\/images\nveracrypt ~\/my_super_secret \/var\/www\/html\/images\/\nwget https:\/\/upload.wikimedia.org\/wikipedia\/ru\/2\/24\/Lenna.png<\/code><\/pre>\n<p>\nLe t\u00eb rregullojm\u00eb \/var\/www\/html\/index.nginx-debian.html p\u00ebr t\u00eb marr\u00eb faqen e d\u00ebshiruar dhe mund t\u00eb fillojm\u00eb verifikimin.<\/p>\n<h2>Lidhemi dhe verifikojm\u00eb<\/h2>\n<p>\n<img decoding=\"async\" alt=\"\u00c7far\u00eb duhet t\u00eb b\u00ebsh n\u00ebse silovik\u00ebt i shkojn\u00eb hostit t\u00ebnd\" src=\"\/wp-content\/uploads\/2020\/06\/1b1567cfd45db0d6f8421e89c0617a3a.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Konteineri \u00ebsht\u00eb montuar, t\u00eb dh\u00ebnat jan\u00eb t\u00eb aksesueshme dhe ofrohen.<\/i><\/p>\n<p><img decoding=\"async\" alt=\"\u00c7far\u00eb duhet t\u00eb b\u00ebsh n\u00ebse silovik\u00ebt i shkojn\u00eb hostit t\u00ebnd\" src=\"\/wp-content\/uploads\/2020\/06\/216440e8f586886a6ce79dc2b8d76fb0.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Dhe k\u00ebtu \u00ebsht\u00eb makina pas rinisjes. T\u00eb dh\u00ebnat jan\u00eb t\u00eb siguruara n\u00eb ~\/my_super_secret.<\/i><\/p>\n<p>N\u00ebse keni shum\u00eb nevoj\u00eb dhe d\u00ebshironi hardcore, mund t\u00eb enkriptoni t\u00ebr\u00eb OS-n\u00eb, n\u00eb m\u00ebnyr\u00eb q\u00eb gjat\u00eb rindezjes t\u00eb k\u00ebrkoj\u00eb lidhje p\u00ebrmes ssh dhe futjen e fjal\u00ebkalimit. Kjo do t\u00eb jet\u00eb e mjaftueshme edhe n\u00eb skenarin e t\u00ebrheqjes s\u00eb \"t\u00eb dh\u00ebnave t\u00eb ftohta\". Ja <noindex><a rel=\"nofollow\" href=\"https:\/\/benediktkr.github.io\/ops\/2015\/05\/01\/remote-fde.html\">udh\u00ebzimi me p\u00ebrdorimin e dropbear<\/a><\/noindex> dhe enkriptimin e tij t\u00eb larg\u00ebt t\u00eb disqeve. Megjithat\u00eb, n\u00eb rastin e VDS, kjo \u00ebsht\u00eb e komplikuar dhe e tepruar.<\/p>\n<h2>Bare metal<\/h2>\n<p>\nNuk \u00ebsht\u00eb aq e leht\u00eb t\u00eb vendosni nj\u00eb server t\u00eb vetin n\u00eb data center. Nj\u00eb dedicated tjet\u00ebr mund t\u00eb rezultoj\u00eb t\u00eb jet\u00eb nj\u00eb makin\u00eb virtuale, ku jan\u00eb lidhur t\u00eb gjitha pajisjet. Por di\u00e7ka interesante n\u00eb aspektin e mbrojtjes fillon kur keni mund\u00ebsin\u00eb t\u00eb vendosni nj\u00eb server fizik t\u00eb besuesh\u00ebm n\u00eb data center. K\u00ebtu \u00ebsht\u00eb e mundur t\u00eb shfryt\u00ebzoni plot\u00ebsisht dm-crypt, VeraCrypt ose \u00e7do enkriptim tjet\u00ebr sipas zgjedhjes suaj.<\/p>\n<p>Duhet t\u00eb kuptohet se gjat\u00eb realizimit t\u00eb enkriptimit total, serveri nuk do t\u00eb mund t\u00eb ngrihet vet\u00eb pas rinisjes. Do t\u00eb nevojitet t\u00eb ngrihet lidhja me nd\u00ebrfaqen lokale IP-KVM, IPMI ose ndonj\u00eb ekvivalent tjet\u00ebr t\u00eb ngjash\u00ebm. Pas k\u00ebsaj, ne do t\u00eb futim manualisht \u00e7el\u00ebsin kryesor. Skema duket k\u00ebshtu me r\u00ebnd\u00ebsi p\u00ebr vazhdim\u00ebsin\u00eb dhe q\u00ebndrueshm\u00ebrin\u00eb, por nuk ka shum\u00eb alternativa k\u00ebtu, n\u00ebse t\u00eb dh\u00ebnat jan\u00eb kaq t\u00eb \u00e7muara.<\/p>\n<p><img decoding=\"async\" alt=\"\u00c7far\u00eb duhet t\u00eb b\u00ebsh n\u00ebse silovik\u00ebt i shkojn\u00eb hostit t\u00ebnd\" src=\"\/wp-content\/uploads\/2020\/06\/db32aac0efebed1bc71a2277b7f51244.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>NCipher nShield F3 Hardware Security Module<\/i><\/p>\n<p>Nj\u00eb variant m\u00eb i but\u00eb supozon se t\u00eb dh\u00ebnat jan\u00eb t\u00eb enkriptuara, nd\u00ebrsa \u00e7el\u00ebsi gjendet drejtp\u00ebrdrejt n\u00eb server n\u00eb nj\u00eb HSM (Hardware Security Module) t\u00eb ve\u00e7ant\u00eb. N\u00eb p\u00ebrgjith\u00ebsi, k\u00ebto jan\u00eb pajisje shum\u00eb funksionale q\u00eb jo vet\u00ebm ofrojn\u00eb kriptografi harduerike, por gjithashtu kan\u00eb mekanizma p\u00ebr zbulimin e p\u00ebrpjekjeve t\u00eb thyerjes fizike. N\u00ebse dikush fillon t\u00eb shqet\u00ebsoj\u00eb serverin tuaj me nj\u00eb bulgar, at\u00ebher\u00eb HSM me nj\u00eb burim t\u00eb pavarur energjie do t\u00eb fshij\u00eb \u00e7el\u00ebsat q\u00eb ruan n\u00eb kujtes\u00ebn e tij. Sulmuesi do t\u00eb marr\u00eb nj\u00eb p\u00ebrzierje t\u00eb enkriptuar. N\u00eb k\u00ebt\u00eb rast, rinisja mund t\u00eb ndodh\u00eb automatikisht.<\/p>\n<p>Shk\u00ebputja e \u00e7el\u00ebsave \u00ebsht\u00eb nj\u00eb alternativ\u00eb shum\u00eb m\u00eb e shpejt\u00eb dhe humane, krahasuar me aktivizimin e nj\u00eb fishe teremonte ose shkarkuesit elektromagnetik. P\u00ebr k\u00ebto pajisje, fqinj\u00ebt tuaj n\u00eb qendr\u00ebn e t\u00eb dh\u00ebnave do t'ju rrahin p\u00ebr nj\u00eb koh\u00eb t\u00eb gjat\u00eb. Aq m\u00eb tep\u00ebr, n\u00eb rastin e p\u00ebrdorimit <noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/Opal_Storage_Specification\">TCG Opal 2<\/a><\/noindex> t\u00eb enkriptimit n\u00eb vet\u00eb media, ju praktikisht nuk p\u00ebrjetoni asnj\u00eb mbingarkes\u00eb. E gjith\u00eb kjo ndodh n\u00eb m\u00ebnyr\u00eb transparente p\u00ebr sistemin operativ. Megjithat\u00eb, n\u00eb k\u00ebt\u00eb rast duhet t'i besoni nj\u00eb kompani si Samsung dhe t\u00eb shpresoni se atje ka nj\u00eb AES256 t\u00eb sinqert\u00eb, e jo nj\u00eb XOR t\u00eb zakonsh\u00ebm.<\/p>\n<p>Gjithashtu, nuk duhet t\u00eb harrohet se t\u00eb gjith\u00eb portet e panevojshme duhet t\u00eb jen\u00eb t\u00eb \u00e7aktivizuara fizikisht ose thjesht t\u00eb mbulohen me kompaund. Ndryshe, ju krijoni mund\u00ebsi p\u00ebr sulmuesit t\u00eb kryejn\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/DMA_attack\">sulme DMA<\/a><\/noindex>. N\u00ebse keni nj\u00eb PCI Express ose Thunderbolt t\u00eb mbetjeve jasht\u00eb, duke p\u00ebrfshir\u00eb USB me mb\u00ebshtetje p\u00ebr t\u00eb \u2014 ju jeni t\u00eb pambrojtur. Sulmuesi mund t\u00eb kryej\u00eb nj\u00eb sulm p\u00ebrmes k\u00ebtyre porteve dhe t\u00eb fitoj\u00eb qasje t\u00eb drejtp\u00ebrdrejt\u00eb n\u00eb memorin\u00eb me \u00e7el\u00ebsat.<\/p>\n<p><center><div class=\"youtube-placeholder\" data-id=\"E6gzVVjW4yY\" onclick=\"loadVideo(this)\">\r\n        <img decoding=\"async\" src=\"https:\/\/img.youtube.com\/vi\/E6gzVVjW4yY\/hqdefault.jpg\" alt=\"Luaj videon\" loading=\"lazy\" width=\"480\" height=\"360\" style=\"width:100%;height:auto;\">\r\n        <div class=\"play-button\"><\/div>\r\n    <\/div><\/center><\/p>\n<p>N\u00eb nj\u00eb version shum\u00eb t\u00eb sofistikuar, sulmuesi mund t\u00eb kryej\u00eb nj\u00eb sulm cold boot. N\u00eb k\u00ebt\u00eb rast, ai thjesht derdh nj\u00eb sasi t\u00eb madhe l\u00ebngu azoti n\u00eb serverin tuaj, nxjerr n\u00eb m\u00ebnyr\u00eb brutale shiritat e ngrihjes s\u00eb memories dhe merr nj\u00eb dump me t\u00eb gjitha \u00e7el\u00ebsat. shpesh, p\u00ebr t\u00eb kryer sulmin mjafton nj\u00eb sprej i zakonsh\u00ebm ndihm\u00ebs dhe temperatura rreth -50 grad\u00eb. Ka edhe nj\u00eb variant m\u00eb t\u00eb kujdessh\u00ebm. N\u00ebse nuk e keni \u00e7aktivizuar ngarkimin nga pajisjet e jashtme, algoritmi i sulmuesit do t\u00eb jet\u00eb edhe m\u00eb i thjesht\u00eb:<\/p>\n<ol>\n<li>T\u00eb ngrijm\u00eb shiritat e memories pa hapur kabinetin<\/li>\n<li>T\u00eb lidhem me flash-in time t\u00eb ngarkimit<\/li>\n<li>T\u00eb p\u00ebrdorim mjete speciale p\u00ebr t\u00eb nxjerr\u00eb t\u00eb dh\u00ebnat nga memoria operuese, t\u00eb cilat kan\u00eb mbijetuar rinisjen fal\u00eb ngrirjes.<\/li>\n<\/ol>\n<p><\/p>\n<h2>P\u00ebr\u00e7aj dhe sundo<\/h2>\n<p>\nOk, kemi vet\u00ebm virtualizime, por duam t\u00eb ulim ndonj\u00ebher\u00eb rrezikun e rrjedhjes s\u00eb t\u00eb dh\u00ebnave.<br \/>\nN\u00eb parim, mund t\u00eb shqyrtojm\u00eb arkitektur\u00ebn dhe t\u00eb ndajm\u00eb ruajtjen e t\u00eb dh\u00ebnave dhe p\u00ebrpunimin n\u00eb juridiksione t\u00eb ndryshme. P\u00ebr shembull, frontend me \u00e7el\u00ebsat e kodimit te hosti n\u00eb \u00c7eki, dhe backend me t\u00eb dh\u00ebna t\u00eb koduara diku n\u00eb Rusi. N\u00eb rastin e nj\u00eb p\u00ebrpjekjeje standarde p\u00ebr konfiskim, \u00ebsht\u00eb jasht\u00ebzakonisht e pamundur q\u00eb autoritetet t\u00eb mund t\u00eb kryejn\u00eb k\u00ebt\u00eb nj\u00ebkoh\u00ebsisht n\u00eb juridiksione t\u00eb ndryshme. P\u00ebr m\u00eb tep\u00ebr, kjo na siguron pjes\u00ebrisht nga skenari i marrjes s\u00eb snapshot-it.<\/p>\n<p>Ose mund t\u00eb shqyrtojm\u00eb nj\u00eb variant krejt\u00ebsisht t\u00eb past\u00ebr \u2014 Enkriptim End-to-End. Sigurisht, kjo del jasht\u00eb korniz\u00ebs s\u00eb k\u00ebrkesave dhe nuk n\u00ebnkupton kryerjen e llogaritjeve n\u00eb makinat e larg\u00ebta. Megjithat\u00eb, \u00ebsht\u00eb nj\u00eb variant krejt i pranuesh\u00ebm n\u00ebse b\u00ebhet fjal\u00eb p\u00ebr ruajtjen dhe sinkronizimin e t\u00eb dh\u00ebnave. P\u00ebr shembull, kjo \u00ebsht\u00eb realisht e implementuar shum\u00eb mir\u00eb n\u00eb Nextcloud. Nd\u00ebrkoh\u00eb, sinkronizimi, versionimi dhe karakteristika t\u00eb tjera t\u00eb pjes\u00ebs server do t\u00eb mbeten gjithmon\u00eb.<\/p>\n<h2>N\u00eb p\u00ebrfundim<\/h2>\n<p>\nNuk ka sisteme t\u00eb p\u00ebrsosura t\u00eb mbrojtura. Q\u00ebllimi \u00ebsht\u00eb vet\u00ebm t\u00eb b\u00ebhet nj\u00eb sulm m\u00eb i shtrenjt\u00eb se p\u00ebrfitimi potencial.<\/p>\n<p>Nj\u00eb reduktim t\u00eb disa rreziqeve p\u00ebr aksesin n\u00eb t\u00eb dh\u00ebna n\u00eb serverin virtual mund t\u00eb arrihet duke kombinuar enkriptimin dhe ruajtjen e ndar\u00eb te hoster\u00eb t\u00eb ndrysh\u00ebm.<\/p>\n<p>Nj\u00eb opsion relativisht i besuesh\u00ebm \u00ebsht\u00eb p\u00ebrdorimi i nj\u00eb serveri t\u00eb dedikuar.<\/p>\n<p>Por, nd\u00ebrsa hosti do t'ju duhet ndonj\u00ebher\u00eb t\u00eb besoni. Kjo \u00ebsht\u00eb baza e t\u00eb gjith\u00eb industris\u00eb.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"http:\/\/ruvds.com\/ru-rub?utm_source=habr&amp;utm_medium=article&amp;utm_campaign=mekl&amp;utm_content=prishli-siloviki\"><img decoding=\"async\" alt=\"\u00c7far\u00eb duhet t\u00eb b\u00ebsh n\u00ebse silovik\u00ebt i shkojn\u00eb hostit t\u00ebnd\" src=\"\/wp-content\/uploads\/2020\/06\/13474ad7e4e39f259f91f51f4fd1febc.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/p>\n<p><noindex><a rel=\"nofollow\" href=\"http:\/\/ruvds.com\/ru-rub?utm_source=habr&amp;utm_medium=article&amp;utm_campaign=mekl&amp;utm_content=prishli-siloviki#order\"><img decoding=\"async\" alt=\"\u00c7far\u00eb duhet t\u00eb b\u00ebsh n\u00ebse silovik\u00ebt i shkojn\u00eb hostit t\u00ebnd\" src=\"\/wp-content\/uploads\/2020\/06\/92555b963c5ff5b7bf0393a1918c40dd.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/ruvds\/blog\/506334\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u043a\u0434\u043f\u0432 \u2014 Reuters \u0415\u0441\u043b\u0438 \u0432\u044b \u0430\u0440\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0438 \u0441\u0435\u0440\u0432\u0435\u0440, \u0442\u043e \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0443 \u0432\u0430\u0441 \u043d\u0430\u0434 \u043d\u0438\u043c \u043d\u0435\u0442. \u042d\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442, \u0447\u0442\u043e \u0432 \u043b\u044e\u0431\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043a \u0445\u043e\u0441\u0442\u0435\u0440\u0443 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0439\u0442\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u043d\u044b\u0435 \u043b\u044e\u0434\u0438 \u0438 \u043f\u043e\u043f\u0440\u043e\u0441\u0438\u0442\u044c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0432\u0430\u0448\u0438 \u0434\u0430\u043d\u043d\u044b\u0435. \u0418 \u0445\u043e\u0441\u0442\u0435\u0440 \u0438\u0445 \u043e\u0442\u0434\u0430\u0441\u0442, \u0435\u0441\u043b\u0438 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0435 \u0431\u0443\u0434\u0435\u0442 \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043e \u043f\u043e \u0437\u0430\u043a\u043e\u043d\u0443. \u0412\u044b \u043e\u0447\u0435\u043d\u044c \u043d\u0435 \u0445\u043e\u0442\u0438\u0442\u0435, \u0447\u0442\u043e\u0431\u044b \u043b\u043e\u0433\u0438 \u0432\u0430\u0448\u0435\u0433\u043e \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":85142,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-85141","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u043a\u0434\u043f\u0432 \u2014 Reuters \u0415\u0441\u043b\u0438 \u0432\u044b \u0430\u0440\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0438 \u0441\u0435\u0440\u0432\u0435\u0440, \u0442\u043e \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0443 \u0432\u0430\u0441 \u043d\u0430\u0434 \u043d\u0438\u043c \u043d\u0435\u0442. \u042d\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442, \u0447\u0442\u043e \u0432 \u043b\u044e\u0431\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043a \u0445\u043e\u0441\u0442\u0435\u0440\u0443 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0439\u0442\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u043d\u044b\u0435 \u043b\u044e\u0434\u0438 \u0438 \u043f\u043e\u043f\u0440\u043e\u0441\u0438\u0442\u044c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0432\u0430\u0448\u0438 \u0434\u0430\u043d\u043d\u044b\u0435. \u0418 \u0445\u043e\u0441\u0442\u0435\u0440 \u0438\u0445 \u043e\u0442\u0434\u0430\u0441\u0442, \u0435\u0441\u043b\u0438 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0435 \u0431\u0443\u0434\u0435\u0442 \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043e \u043f\u043e \u0437\u0430\u043a\u043e\u043d\u0443. \u0412\u044b \u043e\u0447\u0435\u043d\u044c \u043d\u0435 \u0445\u043e\u0442\u0438\u0442\u0435, \u0447\u0442\u043e\u0431\u044b \u043b\u043e\u0433\u0438 \u0432\u0430\u0448\u0435\u0433\u043e \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/chto-delat-esli-k-tvoemu-hosteru-prishli-siloviki\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c, \u0435\u0441\u043b\u0438 \u043a \u0442\u0432\u043e\u0435\u043c\u0443 \u0445\u043e\u0441\u0442\u0435\u0440\u0443 \u043f\u0440\u0438\u0448\u043b\u0438 siloviki | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u043a\u0434\u043f\u0432 \u2014 Reuters \u0415\u0441\u043b\u0438 \u0432\u044b \u0430\u0440\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0438 \u0441\u0435\u0440\u0432\u0435\u0440, \u0442\u043e \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0443 \u0432\u0430\u0441 \u043d\u0430\u0434 \u043d\u0438\u043c \u043d\u0435\u0442. \u042d\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442, \u0447\u0442\u043e \u0432 \u043b\u044e\u0431\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043a \u0445\u043e\u0441\u0442\u0435\u0440\u0443 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0439\u0442\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u043d\u044b\u0435 \u043b\u044e\u0434\u0438 \u0438 \u043f\u043e\u043f\u0440\u043e\u0441\u0438\u0442\u044c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0432\u0430\u0448\u0438 \u0434\u0430\u043d\u043d\u044b\u0435. \u0418 \u0445\u043e\u0441\u0442\u0435\u0440 \u0438\u0445 \u043e\u0442\u0434\u0430\u0441\u0442, \u0435\u0441\u043b\u0438 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0435 \u0431\u0443\u0434\u0435\u0442 \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043e \u043f\u043e \u0437\u0430\u043a\u043e\u043d\u0443. \u0412\u044b \u043e\u0447\u0435\u043d\u044c \u043d\u0435 \u0445\u043e\u0442\u0438\u0442\u0435, \u0447\u0442\u043e\u0431\u044b \u043b\u043e\u0433\u0438 \u0432\u0430\u0448\u0435\u0433\u043e \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/chto-delat-esli-k-tvoemu-hosteru-prishli-siloviki\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-06-13T11:42:24+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-06-13T11:42:24+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u00c7far\u00eb t\u00eb b\u00ebni n\u00ebse tek hosti juaj vijn\u00eb silovik\u00ebt | ProHoster","description":"Reuters N\u00ebse keni marr\u00eb me qira nj\u00eb server, at\u00ebher\u00eb nuk keni kontroll t\u00eb plot\u00eb mbi t\u00eb. Kjo do t\u00eb thot\u00eb se n\u00eb \u00e7do moment, tek hosti mund t\u00eb vij\u00eb nj\u00eb grup i trajnuar dhe t\u00eb k\u00ebrkoj\u00eb \u00e7do t\u00eb dh\u00ebn\u00eb tuaj\u00ebn. Dhe hosti do t'i dor\u00ebzoj\u00eb, n\u00ebse k\u00ebrkesa \u00ebsht\u00eb e formuluar sipas ligjit. Nuk d\u00ebshironi aspak q\u00eb loget e serverit tuaj t\u00eb uebit ose t\u00eb dh\u00ebnat e p\u00ebrdoruesve","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/chto-delat-esli-k-tvoemu-hosteru-prishli-siloviki","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c, \u0435\u0441\u043b\u0438 \u043a \u0442\u0432\u043e\u0435\u043c\u0443 \u0445\u043e\u0441\u0442\u0435\u0440\u0443 \u043f\u0440\u0438\u0448\u043b\u0438 siloviki | ProHoster","og:description":"\u043a\u0434\u043f\u0432 \u2014 Reuters \u0415\u0441\u043b\u0438 \u0432\u044b \u0430\u0440\u0435\u043d\u0434\u043e\u0432\u0430\u043b\u0438 \u0441\u0435\u0440\u0432\u0435\u0440, \u0442\u043e \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0443 \u0432\u0430\u0441 \u043d\u0430\u0434 \u043d\u0438\u043c \u043d\u0435\u0442. \u042d\u0442\u043e \u0437\u043d\u0430\u0447\u0438\u0442, \u0447\u0442\u043e \u0432 \u043b\u044e\u0431\u043e\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043a \u0445\u043e\u0441\u0442\u0435\u0440\u0443 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0439\u0442\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u043d\u044b\u0435 \u043b\u044e\u0434\u0438 \u0438 \u043f\u043e\u043f\u0440\u043e\u0441\u0438\u0442\u044c \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0432\u0430\u0448\u0438 \u0434\u0430\u043d\u043d\u044b\u0435. \u0418 \u0445\u043e\u0441\u0442\u0435\u0440 \u0438\u0445 \u043e\u0442\u0434\u0430\u0441\u0442, \u0435\u0441\u043b\u0438 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u0435 \u0431\u0443\u0434\u0435\u0442 \u043e\u0444\u043e\u0440\u043c\u043b\u0435\u043d\u043e \u043f\u043e \u0437\u0430\u043a\u043e\u043d\u0443. \u0412\u044b \u043e\u0447\u0435\u043d\u044c \u043d\u0435 \u0445\u043e\u0442\u0438\u0442\u0435, \u0447\u0442\u043e\u0431\u044b \u043b\u043e\u0433\u0438 \u0432\u0430\u0448\u0435\u0433\u043e \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438\u043b\u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/chto-delat-esli-k-tvoemu-hosteru-prishli-siloviki","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-13T11:42:24+00:00","article:modified_time":"2020-06-13T11:42:24+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"85141","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:43:30","updated":"2022-10-03 02:15:09"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/85141","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=85141"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/85141\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/85142"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=85141"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=85141"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=85141"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}