{"id":91733,"date":"2020-08-17T19:42:21","date_gmt":"2020-08-17T17:42:21","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/doklad-soveta-bezopasnosti-tor-vredonosnye-vyhodnye-uzly-ispolzovali-sslstrip"},"modified":"2020-08-17T19:42:21","modified_gmt":"2020-08-17T17:42:21","slug":"doklad-soveta-bezopasnosti-tor-vredonosnye-vyhodnye-uzly-ispolzovali-sslstrip","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/doklad-soveta-bezopasnosti-tor-vredonosnye-vyhodnye-uzly-ispolzovali-sslstrip","title":{"rendered":"Raporti i K\u00ebshillit t\u00eb Siguris\u00eb Tor: nodet keqdash\u00ebse kan\u00eb p\u00ebrdorur sslstrip.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"


\n \"Raporti<\/p>\n

<\/a><\/p>\n

<\/p>\n

The essence of what happened<\/b><\/p>\n

N\u00eb maj t\u00eb vitit 2020, u zbulua nj\u00eb grup nyjesh dal\u00ebse q\u00eb nd\u00ebrhynin n\u00eb lidhjet e dal\u00ebse. N\u00eb ve\u00e7anti, ata linin pothuajse t\u00eb gjitha lidhjet t\u00eb paprekura, por kapnin lidhjet me nj\u00eb num\u00ebr t\u00eb vog\u00ebl t\u00eb shk\u00ebmbeve t\u00eb kriptomonedhave. N\u00ebse p\u00ebrdoruesit vizitonin versionin HTTP t\u00eb faqes (dmth. t\u00eb pa-enkriptuar dhe pa autentikim), nyjet keqdash\u00ebse parandalonin ridrejtimin n\u00eb versionin HTTPS (dmth. t\u00eb enkriptuar dhe t\u00eb autentikuar). N\u00ebse p\u00ebrdoruesi nuk e v\u00ebrente z\u00ebvend\u00ebsimin (p.sh. munges\u00ebn e ikon\u00ebs s\u00eb ky\u00e7jes n\u00eb shfletues), dhe fillonte t\u00eb d\u00ebrgonte informacione t\u00eb r\u00ebnd\u00ebsishme, k\u00ebto informacione mund t\u00eb ishin kapur nga sulmuesi.<\/p>\n

Projekti Tor p\u00ebrjashtoi k\u00ebto nod nga rrjeti n\u00eb maj 2020. N\u00eb korrik 2020, u zbulua nj\u00eb grup tjet\u00ebr rikthyesish q\u00eb po kryenin nj\u00eb sulm t\u00eb ngjash\u00ebm, pas t\u00eb cilit ata gjithashtu u p\u00ebrjashtuan. Ende nuk \u00ebsht\u00eb e qart\u00eb n\u00ebse ndonj\u00eb p\u00ebrdorues \u00ebsht\u00eb sulmuar me sukses, por duke marr\u00eb parasysh shkall\u00ebn e sulmit dhe faktin q\u00eb sulmuesi p\u00ebrs\u00ebriti p\u00ebrpjekjen (rastin e par\u00eb e preku 23% t\u00eb kapacitetit t\u00eb p\u00ebrgjithsh\u00ebm t\u00eb nod\u00ebve dalje, i dyti ~ 19%), \u00ebsht\u00eb e arsyeshme t\u00eb supozohet se sulmuesi mendoi se kostot e sulmit ishin t\u00eb arsyeshme.<\/p>\n

Ky incident \u00ebsht\u00eb nj\u00eb kujtes\u00eb e mir\u00eb q\u00eb k\u00ebrkesat HTTP jan\u00eb t\u00eb paenkriptuara dhe t\u00eb paautentikuara, prandaj jan\u00eb ende t\u00eb vulnerueshme. Tor Browser vjen me nj\u00eb shtes\u00eb HTTPS-Everywhere, e cila \u00ebsht\u00eb projektuar pik\u00ebrisht p\u00ebr t\u00eb parandaluar sulme t\u00eb till\u00eb, por efikasiteti i saj \u00ebsht\u00eb i kufizuar n\u00eb list\u00ebn q\u00eb nuk mbulon t\u00eb gjith\u00eb faqet e internetit n\u00eb bot\u00eb. P\u00ebrdoruesit q\u00eb vizitojn\u00eb versionin HTTP t\u00eb faqeve gjithmon\u00eb do t\u00eb jen\u00eb n\u00eb rrezik.<\/p>\n

Parandalimi i sulmeve t\u00eb tilla n\u00eb t\u00eb ardhmen<\/b><\/p>\n

M\u00ebnyrat e parandalimit t\u00eb sulmeve ndahen n\u00eb dy pjes\u00eb: e para p\u00ebrfshin masa q\u00eb mund t\u00eb nd\u00ebrmarrin p\u00ebrdoruesit dhe administrator\u00ebt e faqeve duke forcuar sigurin\u00eb e tyre, nd\u00ebrsa e dyta ka t\u00eb b\u00ebj\u00eb me identifikimin dhe zbulimin n\u00eb koh\u00eb t\u00eb nyjeve keqdash\u00ebse t\u00eb rrjetit.<\/p>\n

Veprimet e rekomanduara nga faqet: <\/p>\n

1. Aktivizimi i HTTPS (certifikata falas ofrohen nga Let’s Encrypt<\/a>) <\/p>\n

<\/noindex><\/p>\n

2. Shtimi i rregullave t\u00eb ridrejtimit n\u00eb list\u00ebn HTTPS-Everywhere, n\u00eb m\u00ebnyr\u00eb q\u00eb p\u00ebrdoruesit t\u00eb mund t\u00eb vendosin nj\u00eb lidhje t\u00eb mbrojtur parandaluesh\u00ebm, n\u00eb vend q\u00eb t\u00eb varen nga ridrejtimi pas vendosjes s\u00eb nj\u00eb lidhjeje t\u00eb pa mbrojtur. P\u00ebr m\u00eb tep\u00ebr, n\u00ebse administrata e sh\u00ebrbimeve web d\u00ebshiron t\u00eb shmang\u00eb plot\u00ebsisht nd\u00ebrveprimin me nyjet dal\u00ebse, ajo mund t\u00eb ofroj\u00eb versionin onion t\u00eb faqes<\/a>.<\/p>\n

<\/noindex><\/p>\n

Aktualisht, projekti Tor po shqyrton mund\u00ebsin\u00eb e \u00e7aktivizimit t\u00eb HTTP t\u00eb pa mbrojtur n\u00eb Tor Browser. Disa vite m\u00eb par\u00eb, nj\u00eb mas\u00eb e till\u00eb ishte e pamendueshme (shum\u00eb burime dispononin vet\u00ebm HTTP t\u00eb pa mbrojtur), por HTTPS-Everywhere dhe versioni n\u00eb vijim i Firefox kan\u00eb nj\u00eb mund\u00ebsi eksperimentale p\u00ebr t\u00eb p\u00ebrdorur HTTPS si standard p\u00ebr lidhjen e par\u00eb, duke pasur mund\u00ebsin\u00eb p\u00ebr t'u rikthyer n\u00eb HTTP n\u00eb rast nevoje. Akoma \u00ebsht\u00eb e paqart\u00eb se si nj\u00eb qasje e till\u00eb do t\u00eb ndikoj\u00eb te p\u00ebrdoruesit e Tor Browser, prandaj do t\u00eb testohet fillimisht n\u00eb nivele m\u00eb t\u00eb larta t\u00eb siguris\u00eb s\u00eb shfletuesit (ikona e mburoj\u00ebs).<\/p>\n

Nga ana e rrjetit Tor, ka vullnetar\u00eb q\u00eb monitorojn\u00eb sjelljen e rikthyesve dhe raportojn\u00eb incidente, duke b\u00ebr\u00eb q\u00eb nodet malinj t\u00eb mund t\u00eb p\u00ebrjashtohen nga serverat e katalogut. Edhe pse k\u00ebto raporte zakonisht shqyrtohen shpejt dhe nodet malinj shk\u00ebputen menj\u00ebher\u00eb pas zbulimit, burimet p\u00ebr monitorimin e q\u00ebndruesh\u00ebm t\u00eb rrjetit jan\u00eb t\u00eb pamjaftueshme. N\u00ebse arrini t\u00eb zbuloni nj\u00eb rikthyes malinj - mund t\u00eb njoftoni projektin, udh\u00ebzimi \u00ebsht\u00eb e disponueshme n\u00eb k\u00ebt\u00eb lidhje<\/a>.<\/p>\n

<\/noindex><\/p>\n

Prerja aktuale ka dy probleme themelore: <\/p>\n

1. Kur shqyrtohet nj\u00eb p\u00ebrcjell\u00ebs i panjohur, \u00ebsht\u00eb e v\u00ebshtir\u00eb t\u00eb provohet keqdash\u00ebsia e tij. N\u00ebse nuk jan\u00eb v\u00ebrejtur sulme nga ana e tij, a duhet t\u00eb mbetet ai n\u00eb vend? Sulmet masive q\u00eb prekin shum\u00eb p\u00ebrdorues jan\u00eb m\u00eb t\u00eb lehta p\u00ebr t'u zbuluar, por n\u00ebse sulmet prekin vet\u00ebm nj\u00eb num\u00ebr t\u00eb vog\u00ebl faqe dhe p\u00ebrdoruesish, sulmuesi mund t\u00eb veproj\u00eb me parashikim.<\/a>. Vet\u00eb rrjeti Tor p\u00ebrb\u00ebhet nga mij\u00ebra rikthyes q\u00eb ndodhen n\u00eb t\u00eb gjith\u00eb bot\u00ebn, dhe kjo larmishm\u00ebri (dhe decentralizimi q\u00eb rrjedh prej saj) \u00ebsht\u00eb nj\u00eb nga pikat e tij t\u00eb forta. <\/p>\n

<\/noindex><\/p>\n

2. Kur shqyrtohet nj\u00eb grup p\u00ebrcjell\u00ebsish t\u00eb panjohur, \u00ebsht\u00eb e v\u00ebshtir\u00eb t\u00eb provohet nd\u00ebrveprimi i tyre (dmth. a po kryejn\u00eb ata sulmin e Sivilit). Shum\u00eb operator\u00eb vullnetar\u00eb t\u00eb p\u00ebrcjell\u00ebsve zgjedhin t\u00eb nj\u00ebjtat rrjetet e lira p\u00ebr strehimin, si Hetzner, OVH, Online, Frantech, Leaseweb etj., dhe n\u00ebse zbulohen disa p\u00ebrcjell\u00ebs t\u00eb rinj, do t\u00eb jet\u00eb e v\u00ebshtir\u00eb t\u00eb supozohet n\u00eb m\u00ebnyr\u00eb t\u00eb qart\u00eb n\u00ebse jan\u00eb shfaqur disa operator\u00eb t\u00eb rinj ose vet\u00ebm nj\u00eb, q\u00eb menaxhon t\u00eb gjith\u00eb p\u00ebrcjell\u00ebsit e rinj.<\/a>). Shum\u00eb operator\u00eb t\u00eb rinj t\u00eb retransmetuesve zgjedhin t\u00eb nj\u00ebjtat rrjete t\u00eb lira p\u00ebr vendosje, si Hetzner, OVH, Online, Frantech, Leaseweb etj., dhe n\u00ebse zbulohet disa retransmetues t\u00eb rinj, do t\u00eb jet\u00eb e v\u00ebshtir\u00eb t\u00eb supozohet qart\u00eb n\u00ebse jan\u00eb shfaqur disa operacione t\u00eb reja apo vet\u00ebm nj\u00eb, q\u00eb menaxhon t\u00eb gjith\u00eb retransmetuesit e rinj.<\/p>\n

<\/noindex><\/noindex><\/p>\n

Burimi: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u0443\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u0434\u0448\u0435\u0433\u043e \u0412 \u043c\u0430\u0435 2020 \u0433\u043e\u0434\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0433\u0440\u0443\u043f\u043f\u0430 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0445 \u0443\u0437\u043b\u043e\u0432, \u0432\u043c\u0435\u0448\u0438\u0432\u0430\u0432\u0448\u0438\u0445\u0441\u044f \u0432 \u0438\u0441\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f. \u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043e\u043d\u0438 \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0438 \u043d\u0435\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u043c\u0438 \u043f\u043e\u0447\u0442\u0438 \u0432\u0441\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f, \u043d\u043e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u043b\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u043c\u0443 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0443 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u043d\u044b\u0445 \u0431\u0438\u0440\u0436. \u0415\u0441\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u0441\u0435\u0449\u0430\u043b\u0438 HTTP-\u0432\u0435\u0440\u0441\u0438\u044e \u0441\u0430\u0439\u0442\u0430 (\u0442.\u0435. \u043d\u0435\u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0438 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e), \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0443\u0437\u043b\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0430\u043b\u0438 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0430 HTTPS-\u0432\u0435\u0440\u0441\u0438\u044e (\u0442.\u0435. \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e). \u0415\u0441\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043d\u0435 \u0437\u0430\u043c\u0435\u0447\u0430\u043b \u043f\u043e\u0434\u043c\u0435\u043d\u044b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":91734,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-91733","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Raporti i K\u00ebshillit t\u00eb Siguris\u00eb Tor: nyjat e d\u00ebmshme t\u00eb daljes p\u00ebrdor\u00ebn sslstrip. | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/doklad-soveta-bezopasnosti-tor-vredonosnye-vyhodnye-uzly-ispolzovali-sslstrip","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0414\u043e\u043a\u043b\u0430\u0434 \u0441\u043e\u0432\u0435\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Tor: \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435 \u0443\u0437\u043b\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 sslstrip. | ProHoster","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/doklad-soveta-bezopasnosti-tor-vredonosnye-vyhodnye-uzly-ispolzovali-sslstrip","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-17T17:42:21+00:00","article:modified_time":"2020-08-17T17:42:21+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"91733","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:22:22","updated":"2022-10-05 06:28:17","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/91733","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=91733"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/91733\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/91734"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=91733"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=91733"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=91733"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}