{"id":91733,"date":"2020-08-17T19:42:21","date_gmt":"2020-08-17T17:42:21","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/doklad-soveta-bezopasnosti-tor-vredonosnye-vyhodnye-uzly-ispolzovali-sslstrip"},"modified":"2020-08-17T19:42:21","modified_gmt":"2020-08-17T17:42:21","slug":"doklad-soveta-bezopasnosti-tor-vredonosnye-vyhodnye-uzly-ispolzovali-sslstrip","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/doklad-soveta-bezopasnosti-tor-vredonosnye-vyhodnye-uzly-ispolzovali-sslstrip","title":{"rendered":"Raporti i K\u00ebshillit t\u00eb Siguris\u00eb Tor: nodet e d\u00ebmshme kan\u00eb p\u00ebrdorur sslstrip.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"


\n \"Raporti<\/p>\n

<\/a><\/p>\n

<\/p>\n

Thelbi i asaj q\u00eb ndodhi<\/b><\/p>\n

N\u00eb maj 2020 u zbulua nj\u00eb grup nyjesh dal\u00ebse q\u00eb nd\u00ebrhynin n\u00eb lidhjet hyr\u00ebse. N\u00eb ve\u00e7anti, ato linin t\u00eb paprekura pothuajse t\u00eb gjitha lidhjet, por p\u00ebrgjonin lidhjet me nj\u00eb num\u00ebr t\u00eb vog\u00ebl bursash kriptomonedhash. N\u00ebse p\u00ebrdoruesit vizitonin versionin HTTP t\u00eb sajtit (pra, t\u00eb pakriptuar dhe t\u00eb paautentifikuar), nyjet keqdash\u00ebse pengonin ridrejtimin drejt versionit HTTPS (pra, t\u00eb enkriptuar dhe t\u00eb autentifikuar). N\u00ebse p\u00ebrdoruesi nuk e vinte re z\u00ebvend\u00ebsimin (p\u00ebr shembull, munges\u00ebn e ikon\u00ebs s\u00eb drynit n\u00eb shfletues) dhe fillonte t\u00eb d\u00ebrgonte informacion t\u00eb r\u00ebnd\u00ebsish\u00ebm, ky informacion mund t\u00eb p\u00ebrgjohej nga sulmuesi.<\/p>\n

Projekti Tor p\u00ebrcaktoi k\u00ebto nyje jasht\u00eb rrjetit n\u00eb maj 2020. N\u00eb korrik 2020 u zbulua nj\u00eb grup tjet\u00ebr reretansh q\u00eb kryenin nj\u00eb sulm t\u00eb ngjash\u00ebm, pas t\u00eb cilit ata u p\u00ebrjashtuan gjithashtu. Akoma nuk \u00ebsht\u00eb e qart\u00eb n\u00ebse ndonj\u00eb p\u00ebrdorues \u00ebsht\u00eb sulmuar me sukses, por duke pasur parasysh shkall\u00ebn e sulmit dhe faktin q\u00eb sulmuesi provoi p\u00ebrs\u00ebri (rasti i par\u00eb preku 23% t\u00eb kapacitetit total t\u00eb nyjeve dal\u00ebse, rasti i dyt\u00eb \u2014 rreth 19%), \u00ebsht\u00eb e arsyeshme t\u00eb supozohet se sulmuesi e konsideroi koston e sulmit t\u00eb arsyeshme.<\/p>\n

Ky incident \u00ebsht\u00eb nj\u00eb p\u00ebrkujtim i mir\u00eb se k\u00ebrkesat HTTP jan\u00eb t\u00eb pazhduara dhe pa autentikim, dhe prandaj ende jan\u00eb t\u00eb prekshme. Tor Browser ka nj\u00eb shtes\u00eb t\u00eb p\u00ebrfshir\u00eb HTTPS-Everywhere, e cila \u00ebsht\u00eb krijuar posa\u00e7\u00ebrisht p\u00ebr t\u00eb parandaluar sulme t\u00eb tilla, por efektiviteti i saj \u00ebsht\u00eb i kufizuar nga lista e cila nuk mbulon t\u00eb gjitha ueb-faqet n\u00eb bot\u00eb. P\u00ebrdoruesit q\u00eb vizitojn\u00eb versionet HTTP t\u00eb faqeve gjithmon\u00eb do t\u00eb jen\u00eb n\u00ebn k\u00ebrc\u00ebnim.<\/p>\n

Parandalimi i sulmeve t\u00eb tilla n\u00eb t\u00eb ardhmen<\/b><\/p>\n

M\u00ebnyrat p\u00ebr t\u00eb parandaluar sulmet ndahen n\u00eb dy pjes\u00eb: e para p\u00ebrfshin masat q\u00eb mund t\u00eb nd\u00ebrmarrin p\u00ebrdoruesit dhe administrator\u00ebt e sajteve p\u00ebr t\u00eb forcuar sigurin\u00eb e tyre, nd\u00ebrsa e dyta ka t\u00eb b\u00ebj\u00eb me identifikimin dhe zbulimin n\u00eb koh\u00eb t\u00eb nyjeve keqdash\u00ebse t\u00eb rrjetit.<\/p>\n

Veprimet e rekomanduara nga ana e sajteve: <\/p>\n

1. Aktivizimi i HTTPS (certifikatat falas ofrohen nga Let’s Encrypt<\/a>) <\/p>\n

<\/noindex><\/p>\n

2. Shtimi i rregullave t\u00eb ridrejtimit n\u00eb list\u00ebn HTTPS-Everywhere, n\u00eb m\u00ebnyr\u00eb q\u00eb p\u00ebrdoruesit t\u00eb mund t\u00eb vendosin paraprakisht nj\u00eb lidhje t\u00eb sigurt dhe t\u00eb mos mb\u00ebshteten te ridrejtimi pas krijimit t\u00eb nj\u00eb lidhjeje t\u00eb pasigurt. P\u00ebr m\u00eb tep\u00ebr, n\u00ebse administrata e sh\u00ebrbimeve t\u00eb internetit d\u00ebshiron t\u00eb shmang\u00eb plot\u00ebsisht nd\u00ebrveprimin me nyjet dal\u00ebse, ajo mund t\u00eb ofroj\u00eb versionin onion t\u00eb faqes<\/a>.<\/p>\n

<\/noindex><\/p>\n

Aktualisht, projekti Tor po shqyrton mund\u00ebsin\u00eb e \u00e7aktivizimit t\u00eb plot\u00eb t\u00eb HTTP-s\u00eb s\u00eb pasigurt n\u00eb Tor Browser. Disa vite m\u00eb par\u00eb, nj\u00eb mas\u00eb e till\u00eb do t\u00eb ishte e paimagjinueshme (shum\u00eb burime ofronin vet\u00ebm HTTP t\u00eb pasigurt), por HTTPS-Everywhere dhe versioni i ardhsh\u00ebm i Firefox-it kan\u00eb nj\u00eb mund\u00ebsi eksperimentale p\u00ebr t\u00eb p\u00ebrdorur HTTPS si parazgjedhje p\u00ebr lidhjen e par\u00eb, me opsionin p\u00ebr t\u2019u kthyer te HTTP kur \u00ebsht\u00eb e nevojshme. Ende nuk \u00ebsht\u00eb e qart\u00eb se si nj\u00eb qasje e till\u00eb do t\u00eb ndikoj\u00eb te p\u00ebrdoruesit e Tor Browser, prandaj fillimisht do t\u00eb testohet n\u00eb nivelet m\u00eb t\u00eb larta t\u00eb siguris\u00eb s\u00eb shfletuesit (ikona e mburoj\u00ebs).<\/p>\n

Nga ana e rrjetit Tor ka vullnetar\u00eb q\u00eb monitorojn\u00eb sjelljen e reretansh\u00ebve dhe raportojn\u00eb incidente, duke mund\u00ebsuar k\u00ebshtu q\u00eb nyjet e d\u00ebmshme t\u00eb p\u00ebrjashtohen nga server\u00ebt katalog\u00eb. Edhe pse raportet e tilla zakonisht shqyrtohen shpejt dhe nyjet e d\u00ebmshme jan\u00eb \u00e7aktivizuar menj\u00ebher\u00eb pas zbulimit, burimet p\u00ebr monitorimin e vazhduesh\u00ebm t\u00eb rrjetit nuk jan\u00eb t\u00eb mjaftueshme. N\u00ebse ju keni arritur t\u00eb zbuloni nj\u00eb reretansh t\u00eb d\u00ebmsh\u00ebm \u2014 mund t'i raportoni projektit, udh\u00ebzimi. \u00ebsht\u00eb i disponuesh\u00ebm n\u00eb k\u00ebt\u00eb lidhje<\/a>.<\/p>\n

<\/noindex><\/p>\n

Qasja aktuale ka dy probleme themelore: <\/p>\n

1. Gjat\u00eb shqyrtimit t\u00eb nj\u00eb relay t\u00eb panjohur, \u00ebsht\u00eb e v\u00ebshtir\u00eb t\u00eb provohet se ai \u00ebsht\u00eb keqdash\u00ebs. N\u00ebse nuk jan\u00eb v\u00ebrejtur sulme nga ana e tij, a duhet t\u00eb lihet n\u00eb vend? Sulmet masive, q\u00eb prekin shum\u00eb p\u00ebrdorues, zbulohen m\u00eb leht\u00eb, por n\u00ebse sulmet prekin vet\u00ebm nj\u00eb num\u00ebr t\u00eb vog\u00ebl faqesh dhe p\u00ebrdoruesish, sulmuesi mund t\u00eb veproj\u00eb n\u00eb m\u00ebnyr\u00eb parandaluese<\/a>. Rrjeti Tor p\u00ebrb\u00ebhet nga mij\u00ebra reretansh\u00ebsh t\u00eb shp\u00ebrndar\u00eb n\u00eb t\u00eb gjith\u00eb bot\u00ebn, dhe ky diversitet (dhe decentralizimi q\u00eb rrjedh prej tij) \u00ebsht\u00eb nj\u00eb nga piketat e saj t\u00eb forta. <\/p>\n

<\/noindex><\/p>\n

2. Gjat\u00eb shqyrtimit t\u00eb nj\u00eb grupi relays t\u00eb panjohura, \u00ebsht\u00eb e v\u00ebshtir\u00eb t\u00eb provohet lidhja mes tyre (dometh\u00ebn\u00eb, n\u00ebse po kryejn\u00eb nj\u00eb sulm Sybil<\/a>). Shum\u00eb operator\u00eb vullnetar\u00eb t\u00eb relay-ve zgjedhin t\u00eb nj\u00ebjtat rrjete t\u00eb lira p\u00ebr hostim, si Hetzner, OVH, Online, Frantech, Leaseweb etj., dhe n\u00ebse zbulohen disa relay t\u00eb rinj, do t\u00eb jet\u00eb e v\u00ebshtir\u00eb t\u00eb p\u00ebrcaktohet qart\u00eb n\u00ebse jan\u00eb shfaqur disa operator\u00eb t\u00eb rinj apo vet\u00ebm nj\u00eb q\u00eb menaxhon t\u00eb gjith\u00eb relay-t e rinj.<\/p>\n

<\/noindex><\/noindex><\/p>\n

Burimi: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u0443\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u0434\u0448\u0435\u0433\u043e \u0412 \u043c\u0430\u0435 2020 \u0433\u043e\u0434\u0430 \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0433\u0440\u0443\u043f\u043f\u0430 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0445 \u0443\u0437\u043b\u043e\u0432, \u0432\u043c\u0435\u0448\u0438\u0432\u0430\u0432\u0448\u0438\u0445\u0441\u044f \u0432 \u0438\u0441\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f. \u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043e\u043d\u0438 \u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0438 \u043d\u0435\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u043c\u0438 \u043f\u043e\u0447\u0442\u0438 \u0432\u0441\u0435 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f, \u043d\u043e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u043b\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u043c\u0443 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0443 \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u043d\u044b\u0445 \u0431\u0438\u0440\u0436. \u0415\u0441\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u0441\u0435\u0449\u0430\u043b\u0438 HTTP-\u0432\u0435\u0440\u0441\u0438\u044e \u0441\u0430\u0439\u0442\u0430 (\u0442.\u0435. \u043d\u0435\u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0438 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e), \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0443\u0437\u043b\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0449\u0430\u043b\u0438 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0430 HTTPS-\u0432\u0435\u0440\u0441\u0438\u044e (\u0442.\u0435. \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e \u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e). \u0415\u0441\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043d\u0435 \u0437\u0430\u043c\u0435\u0447\u0430\u043b \u043f\u043e\u0434\u043c\u0435\u043d\u044b […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":91734,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-91733","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Raporti i K\u00ebshillit t\u00eb Siguris\u00eb s\u00eb Tor: nyjet dal\u00ebse keqdash\u00ebse p\u00ebrdor\u00ebn sslstrip. | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/doklad-soveta-bezopasnosti-tor-vredonosnye-vyhodnye-uzly-ispolzovali-sslstrip","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0414\u043e\u043a\u043b\u0430\u0434 \u0441\u043e\u0432\u0435\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Tor: \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0435 \u0443\u0437\u043b\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 sslstrip. | ProHoster","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/doklad-soveta-bezopasnosti-tor-vredonosnye-vyhodnye-uzly-ispolzovali-sslstrip","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-17T17:42:21+00:00","article:modified_time":"2020-08-17T17:42:21+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"91733","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:22:22","updated":"2022-10-05 06:28:17","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/91733","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=91733"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/91733\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/91734"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=91733"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=91733"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=91733"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}