{"id":94705,"date":"2020-09-20T07:42:30","date_gmt":"2020-09-20T05:42:30","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/organizacziya-effektivnyh-atak-po-vremeni-s-pomoshhyu-http-2-i-wpa3"},"modified":"2020-09-20T07:42:30","modified_gmt":"2020-09-20T05:42:30","slug":"organizacziya-effektivnyh-atak-po-vremeni-s-pomoshhyu-http-2-i-wpa3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/organizacziya-effektivnyh-atak-po-vremeni-s-pomoshhyu-http-2-i-wpa3","title":{"rendered":"Organizimi i sulmeve efektive t\u00eb koh\u00ebs me HTTP\/2 dhe WPA3","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Metodologjia e re e hakerimit kap\u00ebrcen problemin e \"jitters\" t\u00eb rrjetit, i cili mund t\u00eb ndikoj\u00eb n\u00eb suksesin e sulmeve p\u00ebrmes kanaleve t\u00eb jashtme<\/p>\n<p><img decoding=\"async\" alt=\"Organizimi i sulmeve efektive t\u00eb koh\u00ebs me HTTP\/2 dhe WPA3\" src=\"\/wp-content\/uploads\/2020\/09\/c79026eedd1d4411c1c0f49b41acabc9.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nMetodologjia e re, e zhvilluar nga hulumtuesit e Universitetit t\u00eb Levenit (Belgjik\u00eb) dhe Universitetit t\u00eb Nju Jorkut n\u00eb Abu Dabi, tregoi se sulmuesit mund t\u00eb shfryt\u00ebzojn\u00eb karakteristikat e protokolleve t\u00eb rrjetit p\u00ebr t\u00eb organizuar rrjedhje t\u00eb informacionit t\u00eb ndjesh\u00ebm.<\/p>\n<p>Kjo metodologji e quajtur <noindex><a rel=\"nofollow\" href=\"https:\/\/www.usenix.org\/conference\/usenixsecurity20\/presentation\/van-goethem\">Sulmet n\u00eb Koha t\u00eb Amortizuar<\/a><\/noindex>, e demonstruar k\u00ebt\u00eb vit n\u00eb konferenc\u00ebn Usenix, p\u00ebrdor karakteristikat e p\u00ebrpunimit t\u00eb k\u00ebrkesave t\u00eb ekzekutuara nj\u00ebher\u00ebsh nga protokollet e rrjetit p\u00ebr t\u00eb eliminuar nj\u00eb nga problemet e sulmeve t\u00eb larg\u00ebta n\u00eb koh\u00eb p\u00ebrmes kanaleve t\u00eb jashtme.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>Problemet e sulmeve t\u00eb larg\u00ebta n\u00eb koh\u00eb<\/h3>\n<p>\nN\u00eb aplikimin e sulmeve n\u00eb koh\u00eb, sulmuesit masin ndryshimet n\u00eb koh\u00ebn e ekzekutimit t\u00eb komandave t\u00eb ndryshme, duke u p\u00ebrpjekur t\u00eb anashkalojn\u00eb mbrojtjen e siguruar nga enkriptimi dhe t\u00eb fitojn\u00eb t\u00eb dh\u00ebna mbi informacionin e ndjesh\u00ebm, si\u00e7 jan\u00eb \u00e7el\u00ebsat e enkriptimit, korrespondenc\u00ebn private dhe sjelljen e p\u00ebrdoruesve gjat\u00eb shfletimit n\u00eb web.<\/p>\n<p>Por p\u00ebr t\u00eb realizuar me sukses sulmet n\u00eb koh\u00eb, sulmuesi ka nevoj\u00eb p\u00ebr njohuri t\u00eb sakt\u00eb rreth koh\u00ebs q\u00eb k\u00ebrkohet nga aplikacioni i sulmuar p\u00ebr t\u00eb p\u00ebrpunuar k\u00ebrkes\u00ebn.<\/p>\n<p>Kjo b\u00ebhet problematike kur sulmon sisteme t\u00eb tilla t\u00eb larg\u00ebta si server\u00ebt web, sepse vonesa n\u00eb rrjet (jitters) \u00e7on n\u00eb shp\u00ebrndarjen e koh\u00ebs s\u00eb p\u00ebrgjigjes, duke e b\u00ebr\u00eb m\u00eb t\u00eb v\u00ebshtir\u00eb llogaritjen e koh\u00ebs s\u00eb p\u00ebrpunimit.<\/p>\n<p>N\u00eb procesin e sulmeve t\u00eb larg\u00ebta n\u00eb koh\u00eb, sulmuesit zakonisht d\u00ebrgojn\u00eb \u00e7do komand\u00eb disa her\u00eb dhe kryejn\u00eb analiza statistikore t\u00eb koh\u00ebs s\u00eb p\u00ebrgjigjes p\u00ebr t\u00eb reduktuar ndikimin e jitters t\u00eb rrjetit. Por ky metod \u00ebsht\u00eb i dobish\u00ebm vet\u00ebm p\u00ebr nj\u00ebfar\u00eb mase.<\/p>\n<p>\"Sa m\u00eb e vog\u00ebl t\u00eb jet\u00eb diferenca e koh\u00ebs, aq m\u00eb shum\u00eb k\u00ebrkesa nevojiten, dhe n\u00eb nj\u00eb pik\u00eb t\u00eb caktuar llogaritja b\u00ebhet e pamundur,\" na tregon studiuesi i sistemeve t\u00eb mbrojtjes s\u00eb t\u00eb dh\u00ebnave dhe autori kryesor i artikullit mbi k\u00ebt\u00eb lloj sulmi, Tom Van Goetem.<\/p>\n<h3>\"Sulmi n\u00eb koh\u00eb t\u00eb amortizuar\"<\/h3>\n<p>\nMetodologjia e zhvilluar nga Goetem dhe koleg\u00ebt e tij realizon sulme t\u00eb larg\u00ebta n\u00eb koh\u00eb n\u00eb at\u00eb m\u00ebnyr\u00eb q\u00eb anashkalon ndikimin e jitters t\u00eb rrjetit.<\/p>\n<p>Parimi q\u00eb q\u00ebndron pas sulmit n\u00eb koh\u00eb t\u00eb amortizuar \u00ebsht\u00eb i thjesht\u00eb: duhet t\u00eb sigurohet q\u00eb k\u00ebrkesat t\u00eb arrijn\u00eb n\u00eb server n\u00eb nj\u00eb koh\u00eb t\u00eb barabart\u00eb, dhe jo t\u00eb d\u00ebrgohen nj\u00ebra pas tjetr\u00ebs.<\/p>\n<p>Kohesionet garanton q\u00eb t\u00eb gjitha k\u00ebrkesat ndodhen n\u00eb kushte t\u00eb nj\u00ebjta rrjeti, dhe se p\u00ebrpunimi i tyre nuk ndikohet nga rruga nd\u00ebrmjet sulmuesit dhe serverit. Renditja e marrjes s\u00eb p\u00ebrgjigjeve do t'i jep\u00eb sulmuesit t\u00eb gjith\u00eb informacionin e nevojsh\u00ebm p\u00ebr t\u00eb krahasuar koh\u00ebt e ekzekutimit.<\/p>\n<p>\"Avantazhi kryesor i sulmeve me koh\u00eb q\u00eb nuk jan\u00eb t\u00eb kaluara \u00ebsht\u00eb se ato jan\u00eb shum\u00eb m\u00eb t\u00eb sakta, prandaj nevojiten m\u00eb pak k\u00ebrkesa. Kjo lejon sulmuesin t\u00eb njoh\u00eb ndryshimet n\u00eb koh\u00ebt e ekzekutimit deri n\u00eb 100 ns\", thot\u00eb Van Geetem.<\/p>\n<p>Shkalla minimale e ndryshimit t\u00eb koh\u00ebs, e v\u00ebrejtur nga hulumtuesit gjat\u00eb nj\u00eb sulmi tradicional me koh\u00eb n\u00ebp\u00ebr internet, ishte 10 \u00b5s, q\u00eb do t\u00eb thot\u00eb se \u00ebsht\u00eb 100 her\u00eb m\u00eb shum\u00eb se gjat\u00eb sulmit me k\u00ebrkesa t\u00eb kohshme.<\/p>\n<h3>Si sigurohet koh\u00ebsia<\/h3>\n<p>\n\"Koh\u00ebsin\u00eb e sigurojm\u00eb duke vendosur t\u00eb dy k\u00ebrkesat n\u00eb nj\u00eb paket\u00eb rrjeti\", shpjegon Van Geetem. \"N\u00eb praktik\u00eb, zbatimi n\u00eb thelb varet nga protokolli rrjetit.\"<\/p>\n<p>P\u00ebr t\u00eb d\u00ebrguar k\u00ebrkesa t\u00eb kohshme, hulumtuesit p\u00ebrdorin mund\u00ebsit\u00eb e protokolleve t\u00eb ndryshme rrjetesh.<\/p>\n<p>P\u00ebr shembull, HTTP\/2, i cili po b\u00ebhet shpejt standardi i de-fakto p\u00ebr server\u00ebt e webit, mb\u00ebshtet \"multipleximin e k\u00ebrkesave\" - nj\u00eb funksion q\u00eb lejon klientin t\u00eb d\u00ebrgoj\u00eb disa k\u00ebrkesa paralelisht p\u00ebrmes nj\u00eb lidhjeje TCP.<\/p>\n<p>\"N\u00eb rastin e HTTP\/2, ne duhet thjesht t\u00eb sigurojm\u00eb q\u00eb t\u00eb dy k\u00ebrkesat t\u00eb vendosen n\u00eb nj\u00eb paket\u00eb (p.sh., duke i regjistruar t\u00eb dy n\u00eb socket n\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb)\". Megjithat\u00eb, ky metodologji ka vetit\u00eb e saj t\u00eb ve\u00e7anta. P\u00ebr shembull, n\u00eb shumic\u00ebn e rrjeteve t\u00eb shp\u00ebrndarjes s\u00eb p\u00ebrmbajtjes si Cloudflare, e cila siguron p\u00ebrmbajtja p\u00ebr pjes\u00ebn m\u00eb t\u00eb madhe t\u00eb webit, lidhja nd\u00ebrmjet server\u00ebve kufitar\u00eb dhe sitit b\u00ebhet p\u00ebrmes protokollit HTTP\/1.1, i cili nuk mb\u00ebshtet multipleximin e k\u00ebrkesave.<\/p>\n<p>Megjith\u00ebse kjo e ul efikasitetin e sulmit me koh\u00eb, ato ende mbeten m\u00eb t\u00eb sakta se sulmet tradicionale t\u00eb larg\u00ebta me koh\u00eb, sepse eliminojn\u00eb jitter-in nd\u00ebrmjet sulmuesit dhe serverit kufitar CDN.<\/p>\n<p>N\u00eb rastin e protokolleve q\u00eb nuk mb\u00ebshtesin multipleximin e k\u00ebrkesave, sulmuesit mund t\u00eb p\u00ebrdorin nj\u00eb protokoll rrjeti t\u00eb nd\u00ebrmjet\u00ebm q\u00eb inkapsulon k\u00ebrkesat.<\/p>\n<p>Researcher\u00ebt treguan se si funksionon nj\u00eb sulm i p\u00ebrhersh\u00ebm temporal n\u00eb rrjetin Tor. Nj\u00eb sulmues n\u00eb k\u00ebt\u00eb rast inkapsulon shum\u00eb k\u00ebrkesa n\u00eb nj\u00eb qeliz\u00eb Tor \u2014 nj\u00eb paket\u00eb e enkriptuar q\u00eb transmetohet midis nyjeve t\u00eb rrjetit Tor n\u00eb paketa TCP t\u00eb nj\u00ebjta.<\/p>\n<p>\u00abPas t\u00eb gjitha, zinxhiri Tor p\u00ebr sh\u00ebrbimet onion e merr rrug\u00ebn deri te serveri, k\u00ebshtu q\u00eb ne mund t\u00eb garantojm\u00eb q\u00eb k\u00ebrkesat do t\u00eb arrijn\u00eb nj\u00ebkoh\u00ebsisht\u00bb, thot\u00eb Van G\u00ebtem.<\/p>\n<h3>Sulmet e p\u00ebrhershme temporale n\u00eb praktik\u00eb<\/h3>\n<p>\nN\u00eb artikullin e tij, studiuesit analizuan sulmet e p\u00ebrhershme temporale n\u00eb tri situata t\u00eb ndryshme.<\/p>\n<p>Kur <b>sulmet e drejtp\u00ebrdrejta temporale<\/b> nj\u00eb sulmues lidhet drejtp\u00ebrdrejt me serverin dhe p\u00ebrpiqet t\u00eb organizoj\u00eb nj\u00eb rrjedhje t\u00eb informacionit sekret q\u00eb lidhet me aplikacionin.<\/p>\n<p>\u00abDuke pasur parasysh se n\u00eb krijimin e shumic\u00ebs s\u00eb aplikacioneve web nuk merren parasysh se sulmet temporale mund t\u00eb jen\u00eb shum\u00eb praktike dhe t\u00eb sakta, ne besojm\u00eb se shum\u00eb faqe interneti jan\u00eb t\u00eb ndjeshme ndaj k\u00ebtyre sulmeve\u00bb, shpjegon Van G\u00ebten.<\/p>\n<p>Kur <b>sulmet e nd\u00ebrmjetme temporale<\/b> sulmuesi b\u00ebn k\u00ebrkesa p\u00ebr faqe t\u00eb tjera uebi nga shfletuesi i viktim\u00ebs dhe b\u00ebn supozime mbi p\u00ebrmbajtjen e informacionit konfidencial duke v\u00ebzhguar sekuenc\u00ebn e p\u00ebrgjigjeve.<\/p>\n<p>Sulmuesit kan\u00eb p\u00ebrdorur k\u00ebt\u00eb skem\u00eb p\u00ebr t\u00eb shfryt\u00ebzuar nj\u00eb cenueshm\u00ebri n\u00eb programin e shp\u00ebrblimeve p\u00ebr defekteve HackerOne dhe p\u00ebr t\u00eb nxjerr\u00eb informacione si fjal\u00ebt ky\u00e7e t\u00eb p\u00ebrdorura n\u00eb raportet konfidenciale p\u00ebr cenueshm\u00ebrit\u00eb e pazgjidhura.<\/p>\n<p>\u00abK\u00ebrkova raste kur nj\u00eb sulm temporal ishte regjistruar m\u00eb par\u00eb, por nuk ishte konsideruar efektiv. Nj\u00eb defekt i HackerOne \u00ebsht\u00eb raportuar t\u00eb pakt\u00ebn tri her\u00eb (identifikuesit e defekteve: <noindex><a rel=\"nofollow\" href=\"https:\/\/hackerone.com\/reports\/350432\">350432<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/hackerone.com\/reports\/348168\">348168<\/a><\/noindex> dhe <noindex><a rel=\"nofollow\" href=\"https:\/\/hackerone.com\/reports\/4701\">4701<\/a><\/noindex>), por nuk u rregullua sepse konsiderohej se ky sulm nuk mund t\u00eb p\u00ebrdorej. At\u00ebher\u00eb krijova nj\u00eb projekt t\u00eb brendsh\u00ebm k\u00ebrkimor me sulmet e p\u00ebrhershme temporale.<\/p>\n<p>N\u00eb at\u00eb koh\u00eb, ajo ende mbetej shum\u00eb e pap\u00ebrsosur, sepse vazhdonim t\u00eb merreshim me detajet e sulmit, por gjithsesi, ajo rezultoi mjaft e sakt\u00eb (n\u00eb lidhjen time t\u00eb WiFi n\u00eb sht\u00ebpi arrita rezultate shum\u00eb t\u00eb sakta).<\/p>\n<p>Studiuesit gjithashtu p\u00ebrpoq\u00ebn t\u00eb kryenin <b>sulme t\u00eb p\u00ebrhershme temporale n\u00eb protokollin WiFi WPA3<\/b>.<\/p>\n<p>Nj\u00eb nga autor\u00ebt e studimit, Mati Vanhoef, kishte zbuluar m\u00eb par\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/wpa3.mathyvanhoef.com\/\">nj\u00eb rrjedhje potenciale temporale n\u00eb protokollin e konfirmimit t\u00eb lidhjes WPA3.<\/a><\/noindex>. Por m\u00eb shum\u00eb apo m\u00eb pak koh\u00eb p\u00ebr t'u p\u00ebrdorur n\u00eb pajisjet me performanc\u00eb t\u00eb lart\u00eb, ose nuk mund t\u00eb p\u00ebrdorej kund\u00ebr server\u00ebve.<\/p>\n<p>\u00abMe ndihm\u00ebn e nj\u00eb lloji t\u00eb ri t\u00eb sulmeve q\u00eb sfidojn\u00eb koh\u00ebn, ne demonstruam se \u00ebsht\u00eb e mundur t\u00eb p\u00ebrdoret authentication handshake (EAP-pwd) kund\u00ebr server\u00ebve, edhe pse ata kan\u00eb pajisje t\u00eb fuqishme\u00bb, shpjegon Van Goetem.<\/p>\n<h3>Momenti ideal<\/h3>\n<p>\nN\u00eb artikullin e tij, k\u00ebrkuesit ofruan rekomandime p\u00ebr mbrojtjen e server\u00ebve nga sulmet q\u00eb sfidojn\u00eb koh\u00ebn, si\u00e7 jan\u00eb kufizimi i ekzekutimit n\u00eb koh\u00eb konstante dhe shtimi i nj\u00eb vonese t\u00eb rast\u00ebsishme. P\u00ebr zbatimin e mjeteve praktike mbrojt\u00ebse kund\u00ebr sulmeve t\u00eb drejtp\u00ebrdrejta q\u00eb sfidojn\u00eb koh\u00ebn, t\u00eb cilat do t\u00eb kishin pak ndikim n\u00eb funksionimin e rrjetit, k\u00ebrkohen studime t\u00eb m\u00ebtejshme.<\/p>\n<p>\u00abNe mendojm\u00eb se kjo fush\u00eb studimi \u00ebsht\u00eb n\u00eb fazat shum\u00eb t\u00eb hershme t\u00eb zhvillimit dhe k\u00ebrkon nj\u00eb studim shum\u00eb m\u00eb t\u00eb thell\u00eb\u00bb, thot\u00eb Van Goetem.<\/p>\n<p>N\u00eb hulumtimet e ardhshme, do t\u00eb jet\u00eb e mundur t\u00eb studiohen metodologji t\u00eb tjera q\u00eb hakerat mund t\u00eb p\u00ebrdorin p\u00ebr t\u00eb kryer sulme t\u00eb sinkronizuara q\u00eb sfidojn\u00eb koh\u00ebn, protokolle t\u00eb tjera dhe nivele nd\u00ebrmjet\u00ebsuese t\u00eb rrjetit, q\u00eb mund t\u00eb sulmohen, si dhe t\u00eb vler\u00ebsohet ndjeshm\u00ebria e faqeve t\u00eb njohura t\u00eb internetit q\u00eb lejojn\u00eb k\u00ebto k\u00ebrkime n\u00eb p\u00ebrputhje me programin e gjetjes s\u00eb gabimeve.<\/p>\n<p>Emri \u00absihtor\u00bb u zgjodh, \u00absepse gjat\u00eb k\u00ebtyre sulmeve nuk p\u00ebrdor\u00ebm asnj\u00eb informacion (absolut) mbi koh\u00ebn\u00bb, shpjegon Van Goetem.<\/p>\n<p>\u00abP\u00ebr m\u00eb tep\u00ebr, ato mund t\u00eb konsiderohen \u00absihtore\u00bb edhe sepse sulmet q\u00eb sfidojn\u00eb koh\u00ebn p\u00ebrdoren prej koh\u00ebsh, dhe sipas hulumtimeve tona, situata vet\u00ebm do t\u00eb b\u00ebhet m\u00eb e keqe\u00bb.<\/p>\n<p><center><div class=\"youtube-placeholder\" data-id=\"DjRwTsUQt58\" onclick=\"loadVideo(this)\">\r\n        <img decoding=\"async\" src=\"https:\/\/img.youtube.com\/vi\/DjRwTsUQt58\/hqdefault.jpg\" alt=\"Luaj videon\" loading=\"lazy\" width=\"480\" height=\"360\" style=\"width:100%;height:auto;\">\r\n        <div class=\"play-button\"><\/div>\r\n    <\/div><\/center><br \/>\nTeksti i plot\u00eb i raportit me Usenix ndodhet <noindex><a rel=\"nofollow\" href=\"https:\/\/www.usenix.org\/system\/files\/sec20-van_goethem.pdf\">k\u00ebtu<\/a><\/noindex>.<\/p>\n<p><\/p>\n<h4>Me lejen e reklam\u00ebs<\/h4>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/vdsina.ru\/cloud-servers?partner=habr105\">VDS t\u00eb fuqishme<\/a><\/noindex> me mbrojtje kund\u00ebr sulmeve DDoS dhe pajisje t\u00eb reja. T\u00eb gjitha k\u00ebto flasin p\u00ebr server\u00ebt tan\u00eb <b>epik\u00eb.<\/b>. Konfigurimi maksimal - 128 b\u00ebrthama CPU, 512 GB RAM, 4000 GB NVMe.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/vdsina.ru\/cloud-servers?partner=habr105\"><img decoding=\"async\" alt=\"Organizimi i sulmeve efektive t\u00eb koh\u00ebs me HTTP\/2 dhe WPA3\" src=\"\/wp-content\/uploads\/2020\/09\/24ab2d9ab30dd2a713ee4efdcaf75fac.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/vdsina\/blog\/519592\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041d\u043e\u0432\u0430\u044f \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0430 \u0432\u0437\u043b\u043e\u043c\u0430 \u043f\u0440\u0435\u043e\u0434\u043e\u043b\u0435\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u00ab\u0434\u0436\u0438\u0442\u0442\u0435\u0440\u0430 \u0441\u0435\u0442\u0438\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c \u041d\u043e\u0432\u0430\u044f \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0430, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u0430\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u041b\u0435\u0432\u0435\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0411\u0435\u043b\u044c\u0433\u0438\u044f) \u0438 \u041d\u044c\u044e-\u0419\u043e\u0440\u043a\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0410\u0431\u0443-\u0414\u0430\u0431\u0438, \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0430, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0442\u0435\u0447\u0435\u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u0442\u0430 \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0430 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Timeless Timing Attacks, \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u043d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Usenix, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":94706,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-94705","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041d\u043e\u0432\u0430\u044f \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0430 \u0432\u0437\u043b\u043e\u043c\u0430 \u043f\u0440\u0435\u043e\u0434\u043e\u043b\u0435\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u00ab\u0434\u0436\u0438\u0442\u0442\u0435\u0440\u0430 \u0441\u0435\u0442\u0438\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/organizacziya-effektivnyh-atak-po-vremeni-s-pomoshhyu-http-2-i-wpa3\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u043f\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e HTTP\/2 \u0438 WPA3 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041d\u043e\u0432\u0430\u044f \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0430 \u0432\u0437\u043b\u043e\u043c\u0430 \u043f\u0440\u0435\u043e\u0434\u043e\u043b\u0435\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u00ab\u0434\u0436\u0438\u0442\u0442\u0435\u0440\u0430 \u0441\u0435\u0442\u0438\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/organizacziya-effektivnyh-atak-po-vremeni-s-pomoshhyu-http-2-i-wpa3\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-20T05:42:30+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-20T05:42:30+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Organizmi i sulmeve efektive q\u00eb sfidojn\u00eb koh\u00ebn me HTTP\/2 dhe WPA3 | ProHoster","description":"Metodologjia e re e hakerimit kap\u00ebrcen problemin e \"jitters\" t\u00eb rrjetit, i cili mund t\u00eb ndikoj\u00eb n\u00eb suksesin e sulmeve p\u00ebrmes kanaleve t\u00eb jashtme","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/organizacziya-effektivnyh-atak-po-vremeni-s-pomoshhyu-http-2-i-wpa3","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u043f\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e HTTP\/2 \u0438 WPA3 | ProHoster","og:description":"\u041d\u043e\u0432\u0430\u044f \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0430 \u0432\u0437\u043b\u043e\u043c\u0430 \u043f\u0440\u0435\u043e\u0434\u043e\u043b\u0435\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u00ab\u0434\u0436\u0438\u0442\u0442\u0435\u0440\u0430 \u0441\u0435\u0442\u0438\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/organizacziya-effektivnyh-atak-po-vremeni-s-pomoshhyu-http-2-i-wpa3","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-20T05:42:30+00:00","article:modified_time":"2020-09-20T05:42:30+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"94705","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:19:22","updated":"2022-09-27 17:10:32","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/94705","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=94705"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/94705\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/94706"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=94705"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=94705"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=94705"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}