{"id":94705,"date":"2020-09-20T07:42:30","date_gmt":"2020-09-20T05:42:30","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/organizacziya-effektivnyh-atak-po-vremeni-s-pomoshhyu-http-2-i-wpa3"},"modified":"2020-09-20T07:42:30","modified_gmt":"2020-09-20T05:42:30","slug":"organizacziya-effektivnyh-atak-po-vremeni-s-pomoshhyu-http-2-i-wpa3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/organizacziya-effektivnyh-atak-po-vremeni-s-pomoshhyu-http-2-i-wpa3","title":{"rendered":"Organizimi i sulmeve efikase n\u00eb koh\u00eb me HTTP\/2 dhe WPA3","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Metodika e re p\u00ebr sulmin kalon problemin e \"jitterit n\u00eb rrjet\", i cili mund t\u00eb ndikoj\u00eb n\u00eb suksesin e sulmeve p\u00ebrmes kanaleve t\u00eb jashtme.<\/p>\n

\"Organizimi
\n
\nMetodika e re, e zhvilluar nga studiuesit e Universitetit Leuven (Belgjik\u00eb) dhe Universitetit t\u00eb New Yorkut n\u00eb Abu Dabi, tregon se sulmuesit mund t\u00eb p\u00ebrdorin karakteristikat e protokolleve rrjet p\u00ebr t\u00eb organizuar rrjedhje t\u00eb informacionit t\u00eb ndjesh\u00ebm.<\/p>\n

Kjo metodik\u00eb e quajtur Timeless Timing Attacks<\/a><\/noindex>, e demonstruar k\u00ebt\u00eb vit n\u00eb konferenc\u00ebn Usenix, p\u00ebrdor karakteristikat e p\u00ebrpunimit t\u00eb k\u00ebrkesave t\u00eb ekzekutuara nj\u00ebkoh\u00ebsisht nga protokollet rrjet p\u00ebr t\u00eb eliminuar nj\u00eb nga problemet e sulmeve t\u00eb larg\u00ebta n\u00eb koh\u00eb p\u00ebrmes kanaleve t\u00eb jashtme.
\n<\/a><\/noindex><\/p>\n

Problemet e sulmeve t\u00eb larg\u00ebta n\u00eb koh\u00eb<\/h3>\n

\nN\u00eb realizimin e sulmeve n\u00eb koh\u00eb, sulmuesit masin ndryshimet n\u00eb koh\u00ebn e ekzekutimit t\u00eb komandave t\u00eb ndryshme, duke u p\u00ebrpjekur t\u00eb anashkalojn\u00eb mbrojtjen e ofruar nga enkriptimi dhe t\u00eb marrin informacione mbi t\u00eb dh\u00ebnat e ndjeshme, si\u00e7 jan\u00eb \u00e7el\u00ebsat e enkriptimit, korrespondenca private dhe sjellja e p\u00ebrdoruesve gjat\u00eb shfletimit n\u00eb internet.<\/p>\n

Por realizimin e suksessh\u00ebm t\u00eb sulmeve n\u00eb koh\u00eb, sulmuesi ka nevoj\u00eb p\u00ebr njohuri t\u00eb sakt\u00eb t\u00eb koh\u00ebs q\u00eb aplikacioni n\u00eb sh\u00ebnjest\u00ebr merr p\u00ebr t\u00eb p\u00ebrpunuar k\u00ebrkes\u00ebn.<\/p>\n

Kjo b\u00ebhet nj\u00eb problem gjat\u00eb sulmeve ndaj sistemeve t\u00eb larg\u00ebta, si\u00e7 jan\u00eb server\u00ebt web, sepse vonesa n\u00eb rrjet (jitter) \u00e7on n\u00eb shp\u00ebrndarjen e koh\u00ebs s\u00eb p\u00ebrgjigjes, e cila e komplikon llogaritjen e koh\u00ebs s\u00eb p\u00ebrpunimit.<\/p>\n

N\u00eb procesin e sulmeve t\u00eb larg\u00ebta n\u00eb koh\u00eb, sulmuesit zakonisht d\u00ebrgojn\u00eb \u00e7do komand\u00eb disa her\u00eb dhe kryejn\u00eb nj\u00eb analiz\u00eb statistikore t\u00eb koh\u00ebs s\u00eb p\u00ebrgjigjes p\u00ebr t\u00eb reduktuar ndikimin e jitter-it t\u00eb rrjetit. Por kjo metod\u00eb \u00ebsht\u00eb e dobishme vet\u00ebm deri n\u00eb nj\u00ebfar\u00eb shkalle.<\/p>\n

\"Sa m\u00eb pak diferenc\u00eb kohe, aq m\u00eb shum\u00eb k\u00ebrkesa nevojiten, dhe n\u00eb nj\u00eb pik\u00eb t\u00eb caktuar llogaritja b\u00ebhet e pamundur\", na tregon studiuesi i sistemeve t\u00eb siguris\u00eb s\u00eb t\u00eb dh\u00ebnave dhe autori kryesor i nj\u00eb artikulli mbi nj\u00eb lloj t\u00eb ri sulmesh, Tom Van Goytem.<\/p>\n

\"Sulmi n\u00eb koh\u00eb 'jasht\u00eb kohe'\"<\/h3>\n

\nMetodologjia e zhvilluar nga Goytem dhe koleg\u00ebt e tij kryen sulme t\u00eb larg\u00ebta n\u00eb koh\u00eb n\u00eb nj\u00eb m\u00ebnyr\u00eb q\u00eb eliminojn\u00eb ndikimin e jitter-it t\u00eb rrjetit.<\/p>\n

Principi q\u00eb q\u00ebndron pas sulmeve t\u00eb p\u00ebrhershme n\u00eb koh\u00eb \u00ebsht\u00eb i thjesht\u00eb: duhet t\u00eb b\u00ebhet q\u00eb k\u00ebrkesat t\u00eb arrijn\u00eb n\u00eb server n\u00eb koh\u00eb krejt t\u00eb nj\u00ebjt\u00eb, dhe jo t\u00eb d\u00ebrgohen nj\u00ebri pas tjetrit.<\/p>\n

Koh\u00ebzgjatja garanton q\u00eb t\u00eb gjitha k\u00ebrkesat t\u00eb jen\u00eb n\u00eb kushte t\u00eb nj\u00ebjta rrjeti dhe q\u00eb procesimi i tyre t\u00eb mos ndikoj\u00eb nga rruga midis sulmuesit dhe serverit. Renditja e marrjes s\u00eb p\u00ebrgjigjeve do t'i jap\u00eb sulmuesit t\u00eb gjith\u00eb informacionin e nevojsh\u00ebm p\u00ebr t\u00eb krahasuar koh\u00ebn e ekzekutimit.<\/p>\n

\u00abAvantazhi kryesor i sulmeve t\u00eb p\u00ebrhershme n\u00eb koh\u00eb \u00ebsht\u00eb se ato jan\u00eb shum\u00eb m\u00eb t\u00eb sakta, prandaj k\u00ebrkohen m\u00eb pak k\u00ebrkesa. Kjo i lejon sulmuesit t\u00eb dallojn\u00eb ndryshimet n\u00eb koh\u00ebn e ekzekutimit deri n\u00eb 100 ns\u00bb, thot\u00eb Van G\u00ebtem.<\/p>\n

Dallimi minimal i koh\u00ebs, i v\u00ebrejtur nga studiuesit gjat\u00eb nj\u00eb sulmi tradicional n\u00eb koh\u00eb p\u00ebrmes internetit, ka qen\u00eb 10 \u00b5s, q\u00eb \u00ebsht\u00eb 100 her\u00eb m\u00eb shum\u00eb se gjat\u00eb sulmit me k\u00ebrkesa t\u00eb p\u00ebrhershme.<\/p>\n

Si garantohet koh\u00ebzgjatja<\/h3>\n

\n\u00abKoh\u00ebzgjatjen e garantojm\u00eb duke vendosur t\u00eb dyja k\u00ebrkesat n\u00eb nj\u00eb paket\u00eb rrjeti\u00bb, shpjegon Van G\u00ebtem. \u00abN\u00eb praktik\u00eb, zbatimi kryesisht varet nga protokolli rrjetit\u00bb.<\/p>\n

P\u00ebr t\u00eb d\u00ebrguar k\u00ebrkesa t\u00eb nj\u00ebkohshme, studiuesit shfryt\u00ebzojn\u00eb mund\u00ebsit\u00eb e protokolleve t\u00eb ndryshme rrjetike.<\/p>\n

P\u00ebr shembull, HTTP\/2, i cili po b\u00ebhet shpejt standardi de facto p\u00ebr server\u00ebt web, mb\u00ebshtet \"multiplexing\" - nj\u00eb funksion q\u00eb lejon klientin t\u00eb d\u00ebrgoj\u00eb disa k\u00ebrkesa paralelisht n\u00ebp\u00ebrmjet nj\u00eb lidhjeje TCP.<\/p>\n

\"N\u00eb rastin e HTTP\/2, ne thjesht duhet t\u00eb sigurohemi q\u00eb t\u00eb dyja k\u00ebrkesat t\u00eb vendosen n\u00eb nj\u00eb paket\u00eb (p\u00ebr shembull, duke i shkruar t\u00eb dyja n\u00eb socket n\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb).\" Megjithat\u00eb, kjo metod\u00eb ka nuancat e saj. P\u00ebr shembull, n\u00eb shumic\u00ebn e rrjeteve t\u00eb shp\u00ebrndarjes s\u00eb p\u00ebrmbajtjes si Cloudflare, q\u00eb siguron p\u00ebrmbajtjen p\u00ebr nj\u00eb pjes\u00eb t\u00eb madhe t\u00eb webit, lidhja midis server\u00ebve t\u00eb kufirit dhe faqes realizohet p\u00ebrmes protokollit HTTP\/1.1, i cili nuk mb\u00ebshtet multiplexingun e k\u00ebrkesave.<\/p>\n

Megjith\u00ebse kjo e ul efikasitetin e nj\u00eb sulmi n\u00eb \u00e7do koh\u00eb, ata ende mbeten m\u00eb t\u00eb sakta se sulmet klasike t\u00eb larg\u00ebta n\u00eb baz\u00eb t\u00eb koh\u00ebs, sepse eliminojn\u00eb jitterin midis sulmuesit dhe serverit CDN t\u00eb kufirit.<\/p>\n

N\u00eb rastet e protokolleve q\u00eb nuk mb\u00ebshtesin shum\u00ebzimin e k\u00ebrkesave, sulmuesit mund t\u00eb p\u00ebrdorin nj\u00eb protokoll nd\u00ebrmjet\u00ebs rrjeti q\u00eb inkapsulon k\u00ebrkesat.<\/p>\n

Hulumtuesit treguan se si funksionon nj\u00eb sulm i koh\u00ebs s\u00eb p\u00ebrjetshme n\u00eb rrjetin Tor. N\u00eb k\u00ebt\u00eb rast, sulmuesi inkapsulon k\u00ebrkesat e shumta n\u00eb nj\u00eb qeliz\u00eb Tor \u2014 nj\u00eb paket\u00eb t\u00eb koduar q\u00eb transmetohet midis nyjeve t\u00eb rrjetit Tor n\u00eb paketa t\u00eb vet\u00ebm TCP.<\/p>\n

\u00abDuke qen\u00eb se zinxhiri Tor p\u00ebr sh\u00ebrbimet onion kalon t\u00eb gjith\u00eb rrug\u00ebn deri te serveri, ne mund t\u00eb garantojm\u00eb q\u00eb k\u00ebrkesat do t\u00eb arrijn\u00eb nj\u00ebkoh\u00ebsisht\u00bb, thot\u00eb Van G\u00ebtem.<\/p>\n

Sulmet e koh\u00ebs s\u00eb p\u00ebrjetshme n\u00eb praktik\u00eb<\/h3>\n

\nN\u00eb artikullin e tij, hulumtuesit shqyrtojn\u00eb sulmet e koh\u00ebs s\u00eb p\u00ebrjetshme n\u00eb tri situata t\u00eb ndryshme.<\/p>\n

N\u00eb sulmet direkte t\u00eb koh\u00ebs<\/b> sulmuesi lidhet drejtp\u00ebrdrejt me serverin dhe p\u00ebrpiqet t\u00eb organizoj\u00eb nj\u00eb rrjedhje t\u00eb informacionit sekret t\u00eb lidhur me aplikacionin.<\/p>\n

\u00abDuke qen\u00eb se kur krijohen shumica e aplikacioneve t\u00eb uebit, nuk merret parasysh se sulmet e koh\u00ebs mund t\u00eb jen\u00eb shum\u00eb praktike dhe t\u00eb sakta, ne besojm\u00eb se shum\u00eb faqe uebesh jan\u00eb t\u00eb pambrojtura ndaj k\u00ebtyre sulmeve\u00bb, thot\u00eb Van G\u00ebtem.<\/p>\n

N\u00eb sulmet nd\u00ebrsite e koh\u00ebs<\/b> sulmuesi b\u00ebn k\u00ebrkesa n\u00eb faqe t\u00eb tjera nga shfletuesi i viktim\u00ebs dhe b\u00ebn supozime mbi p\u00ebrmbajtjen e informacionit t\u00eb ndjesh\u00ebm duke v\u00ebzhguar sekuenc\u00ebn e p\u00ebrgjigjeve.<\/p>\n

Sulmuesit p\u00ebrdor\u00ebn k\u00ebt\u00eb skem\u00eb p\u00ebr t\u00eb shfryt\u00ebzuar nj\u00eb dob\u00ebsi n\u00eb programin e shp\u00ebrblimeve p\u00ebr defekte n\u00eb HackerOne dhe nxorr\u00ebn informacione t\u00eb tilla si fjal\u00eb ky\u00e7e t\u00eb p\u00ebrdorura n\u00eb raportet konfidenciale p\u00ebr dob\u00ebsi t\u00eb pazgjidhura.<\/p>\n

\u00abUn\u00eb k\u00ebrkova raste kur sulmi n\u00eb koh\u00eb ishte regjistruar m\u00eb par\u00eb, por nuk ishte konsideruar efektiv. P\u00ebr k\u00ebt\u00eb defekt n\u00eb HackerOne ishin raportuar t\u00eb pakt\u00ebn tri her\u00eb (identifikuesit e defekteve: 350432<\/a><\/noindex>, 348168<\/a><\/noindex> dhe 4701<\/a><\/noindex>), por nuk u rregullua, sepse besohej se ky sulm ishte i pamundur p\u00ebr t'u p\u00ebrdorur. At\u00ebher\u00eb krijova nj\u00eb projekt t\u00eb thjesht\u00eb k\u00ebrkues t\u00eb brendsh\u00ebm me sulme n\u00eb koh\u00eb t\u00eb pav\u00ebrtet\u00eb.<\/p>\n

N\u00eb at\u00eb koh\u00eb, ajo ende mbetej shum\u00eb e paoptimizuar, sepse vazhduam t\u00eb merreshim me detajet e sulmit, por megjithat\u00eb doli t\u00eb ishte mjaft e sakt\u00eb (n\u00eb lidhjen time WiFi sht\u00ebpiake arrita t\u00eb arrija rezultate shum\u00eb t\u00eb sakta)\u00bb.<\/p>\n

K\u00ebrkuesit gjithashtu provojn\u00eb t\u00eb kryejn\u00eb sulme n\u00eb koh\u00eb t\u00eb pav\u00ebrteta ndaj protokollit WPA3 t\u00eb WiFi<\/b>.<\/p>\n

Nj\u00eb nga bashkautor\u00ebt e artikullit Mati Wanchhoff ka zbuluar m\u00eb par\u00eb nj\u00eb rrjedhje potenciale n\u00eb koh\u00eb n\u00eb protokollin e konfirmimit t\u00eb lidhjes WPA3<\/a><\/noindex>. Por koha ose ishte shum\u00eb e shkurt\u00ebr p\u00ebr t'u p\u00ebrdorur n\u00eb pajisje t\u00eb larta performanc\u00ebs, ose nuk mund t\u00eb p\u00ebrdorej kund\u00ebr server\u00ebve.<\/p>\n

\u00abMe ndihm\u00ebn e nj\u00eb lloj t\u00eb ri t\u00eb sulmeve n\u00eb koh\u00eb, ne demonstruam se n\u00eb t\u00eb v\u00ebrtet\u00eb mund t\u00eb p\u00ebrdorej handshake i autentikimit (EAP-pwd) kund\u00ebr server\u00ebve, edhe n\u00ebse ata jan\u00eb t\u00eb pajisur me pajisje t\u00eb fuqishme\u00bb, shpjegon Van Goetem.<\/p>\n

Momenti ideal<\/h3>\n

\nN\u00eb artikullin e tij, hulumtuesit ofruan rekomandime p\u00ebr mbrojten e server\u00ebve nga sulmet n\u00eb koh\u00eb, si\u00e7 \u00ebsht\u00eb kufizimi i ekzekutimit n\u00eb koh\u00eb t\u00eb q\u00ebndrueshme dhe shtimi i nj\u00eb vonese t\u00eb rast\u00ebsishme. P\u00ebr t\u00eb zbatuar mjete praktike mbrojt\u00ebse kund\u00ebr sulmeve t\u00eb drejtp\u00ebrdrejta n\u00eb koh\u00eb, t\u00eb cilat do t\u00eb kishin ndikim t\u00eb vog\u00ebl n\u00eb funksionimin e rrjetit, k\u00ebrkohen hulumtime t\u00eb m\u00ebtejshme.<\/p>\n

\u00abMendojm\u00eb se kjo fush\u00eb hulumtimi \u00ebsht\u00eb n\u00eb faza shum\u00eb t\u00eb hershme t\u00eb zhvillimit dhe k\u00ebrkon nj\u00eb studim shum\u00eb m\u00eb t\u00eb thell\u00eb,\u00bb thot\u00eb Van Goetem.<\/p>\n

N\u00eb hulumtimet e ardhshme do t\u00eb mund t\u00eb studiohen metodologji t\u00eb tjera q\u00eb sulmuesit mund t\u00eb p\u00ebrdorin p\u00ebr t\u00eb kryer sulme t\u00eb sinkronizuara n\u00eb koh\u00eb, protokolle t\u00eb tjera dhe nivele nd\u00ebrmjet\u00ebse t\u00eb rrjeteve q\u00eb mund t\u00eb sulmohen, si dhe t\u00eb vler\u00ebsohet vulnerabiliteti i faqeve t\u00eb njohura n\u00eb internet q\u00eb lejojn\u00eb kryerjen e hulumtimeve t\u00eb tilla sipas kushteve t\u00eb programit t\u00eb k\u00ebrkimit t\u00eb gabimeve.<\/p>\n

Emri 'jasht\u00ebsor' u zgjodh, 'sepse n\u00eb k\u00ebto sulme ne nuk kemi p\u00ebrdorur ndonj\u00eb informacion (absolut) n\u00eb lidhje me koh\u00ebn', shpjegon Van Goetem.<\/p>\n

'P\u00ebrve\u00e7 k\u00ebsaj, ato mund t\u00eb konsiderohen 'jasht\u00ebsore' sepse (sulmet e larg\u00ebta) n\u00eb koh\u00eb jan\u00eb p\u00ebrdorur prej nj\u00eb kohe t\u00eb gjat\u00eb, dhe sipas hulumtimeve tona, situata do t\u00eb b\u00ebhet vet\u00ebm m\u00eb e keqe.'<\/p>\n

\r\n \"Luaj\r\n
<\/div>\r\n <\/div><\/center>
\nTeksti i plot\u00eb i raportit me Usenix ndodhet k\u00ebtu<\/a><\/noindex>.<\/p>\n

<\/p>\n

Si reklam\u00eb<\/h4>\n

\nVDS t\u00eb fuqishme<\/a><\/noindex> me mbrojtje nga sulmet DDoS dhe pajisje m\u00eb moderne. T\u00eb gjitha k\u00ebto flasin p\u00ebr serveryt tan\u00eb epik\u00eb<\/b>. Konfigurimi maksimal - 128 b\u00ebrthama CPU, 512 GB RAM, 4000 GB NVMe.<\/p>\n

\"Organizimi<\/a><\/noindex>
\n
Burimi: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u043e\u0432\u0430\u044f \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0430 \u0432\u0437\u043b\u043e\u043c\u0430 \u043f\u0440\u0435\u043e\u0434\u043e\u043b\u0435\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u00ab\u0434\u0436\u0438\u0442\u0442\u0435\u0440\u0430 \u0441\u0435\u0442\u0438\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c \u041d\u043e\u0432\u0430\u044f \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0430, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u0430\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u041b\u0435\u0432\u0435\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0411\u0435\u043b\u044c\u0433\u0438\u044f) \u0438 \u041d\u044c\u044e-\u0419\u043e\u0440\u043a\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0410\u0431\u0443-\u0414\u0430\u0431\u0438, \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0430, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0442\u0435\u0447\u0435\u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u0442\u0430 \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0430 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Timeless Timing Attacks, \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u043d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Usenix, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":94706,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-94705","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Organizimi i sulmeve efektive me koh\u00eb duke p\u00ebrdorur HTTP\/2 dhe WPA3 | ProHoster","description":"Nj\u00eb metod\u00eb e re e hackimit kalon problematik\u00ebn e \"jitters t\u00eb rrjetit\", e cila mund t\u00eb ndikoje n\u00eb suksesin e sulmeve p\u00ebrmes kanaleve t\u00eb jashtme. Nj\u00eb metod\u00eb e till\u00eb, e zhvilluar nga studiuesit e Universitetit Leuven (Belgjik\u00eb) dhe Universitetit t\u00eb New Yorkut n\u00eb Abu Dabi, tregoi se hakerat mund t\u00eb shfryt\u00ebzojn\u00eb ve\u00e7orit\u00eb e protokolleve rrjet\u00ebsore p\u00ebr t\u00eb organizuar rrjedhjen e informacionit t\u00eb ndjesh\u00ebm. Kjo metod\u00eb, e quajtur Sulmet me Koha t\u00eb Pabesueshme, u demonstruar k\u00ebt\u00eb vit n\u00eb konferenc\u00ebn Usenix,","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/organizacziya-effektivnyh-atak-po-vremeni-s-pomoshhyu-http-2-i-wpa3","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u043f\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e HTTP\/2 \u0438 WPA3 | ProHoster","og:description":"\u041d\u043e\u0432\u0430\u044f \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0430 \u0432\u0437\u043b\u043e\u043c\u0430 \u043f\u0440\u0435\u043e\u0434\u043e\u043b\u0435\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u00ab\u0434\u0436\u0438\u0442\u0442\u0435\u0440\u0430 \u0441\u0435\u0442\u0438\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c \u041d\u043e\u0432\u0430\u044f \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0430, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u0430\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u041b\u0435\u0432\u0435\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0411\u0435\u043b\u044c\u0433\u0438\u044f) \u0438 \u041d\u044c\u044e-\u0419\u043e\u0440\u043a\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0410\u0431\u0443-\u0414\u0430\u0431\u0438, \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0430, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0442\u0435\u0447\u0435\u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u0442\u0430 \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0430 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Timeless Timing Attacks, \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u043d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Usenix,","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/organizacziya-effektivnyh-atak-po-vremeni-s-pomoshhyu-http-2-i-wpa3","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-20T05:42:30+00:00","article:modified_time":"2020-09-20T05:42:30+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"94705","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:19:22","updated":"2022-09-27 17:10:32"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/94705","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=94705"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/94705\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/94706"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=94705"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=94705"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=94705"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}