\u00cbsht\u00eb l\u00ebshuar nj\u00eb version i ri i passwdqc \u2014 nj\u00eb grup mjetesh p\u00ebr kontrollin e kompleksitetit t\u00eb fjal\u00ebkalimeve dhe frazave t\u00eb fjal\u00ebkalimeve, duke p\u00ebrfshir\u00eb modulin pam_passwdqc, programet pwqcheck, pwqfilter (shtuar n\u00eb k\u00ebt\u00eb version) dhe pwqgen p\u00ebr p\u00ebrdorim manual ose nga skriptet, si dhe bibliotek\u00ebn libpasswdqc. P\u00ebrkrah sistemet me PAM (shumica e Linux, FreeBSD, DragonFly BSD, Solaris, HP-UX), si dhe ato pa PAM (p\u00ebrkrah nd\u00ebrfaqen passwordcheck n\u00eb OpenBSD, \u00ebsht\u00eb e disponueshme nj\u00eb mb\u00ebshtetje p\u00ebr p\u00ebrdorimin e pwqcheck nga PHP, ekziston nj\u00eb version me pages\u00eb p\u00ebr Windows, dhe programet dhe biblioteka gjithashtu mund t\u00eb p\u00ebrdoren n\u00eb sisteme t\u00eb tjera). <\/p>\n
N\u00eb krahasim me versionet e kaluara, \u00ebsht\u00eb shtuar mb\u00ebshtetja p\u00ebr skedar\u00eb t\u00eb jasht\u00ebm t\u00eb filtrimit t\u00eb fjal\u00ebkalimeve, p\u00ebrfshir\u00eb ato binar\u00eb, q\u00eb p\u00ebr momentin jan\u00eb nj\u00eb implementim i filtrit t\u00eb p\u00ebrmir\u00ebsuar t\u00eb kukuvajk\u00ebs. Ky filt\u00ebr garanton q\u00eb t\u00eb mos lejoj\u00eb asnj\u00eb fjal\u00ebkalim t\u00eb ndaluar, por mund t\u00eb krijoj\u00eb ndonj\u00ebher\u00eb alarme false, probabiliteti i t\u00eb cilave n\u00eb konfigurimet dhe algoritmin e p\u00ebrdorur n\u00eb passwdqc \u00ebsht\u00eb p\u00ebr t\u00eb ardhur keq i vog\u00ebl. Kontrolli i fjal\u00ebkalimit n\u00ebse gjendet n\u00eb filt\u00ebr k\u00ebrkon jo m\u00eb shum\u00eb se dy qasje t\u00eb rast\u00ebsishme p\u00ebr lexim nga disku, q\u00eb \u00ebsht\u00eb shum\u00eb i shpejt\u00eb dhe zakonisht nuk krijon ngarkesa t\u00eb tepruara. server\u00eb<\/a>. <\/p>\n P\u00ebr krijimin dhe pun\u00ebn me filtrat binar\u00eb n\u00eb passwdqc \u00ebsht\u00eb shtuar programi pwqfilter. Ai mund t\u00eb krijoj\u00eb nj\u00eb filt\u00ebr nga lista e fjal\u00ebkalimeve vet\u00eb, si dhe nga hash-et e tyre MD4 ose NTLM. Mb\u00ebshtetja e hash-eve NTLM lejon importimin e fjal\u00ebkalimeve nga lista HIBP (Fjal\u00ebkalimet e Prekura), shp\u00ebrndar\u00eb n\u00eb k\u00ebt\u00eb form\u00eb. \u00cbsht\u00eb investuar shum\u00eb pun\u00eb p\u00ebr optimizimin e pwqfilter p\u00ebr shpejt\u00ebsin\u00eb, kompakt\u00ebsin\u00eb e filtrave t\u00eb marrur, dhe gjithashtu nivelin e alarmeve false. P\u00ebr shembull, krijimi i nj\u00eb filtri kukuvajke me koeficient ngarkese prej 98% nga skedari pwned-passwords-ntlm-ordered-by-hash-v7.txt me madh\u00ebsi 21 GiB (22 GB) dhe m\u00eb shum\u00eb se 613 milion rreshta merr rreth 8 minuta n\u00eb procesorin Core i7-4770K. Filt\u00ebri rezultues z\u00eb 2.3 GiB (2.5 GB) dhe ka nj\u00eb nivel alarmesh false rreth 1 n\u00eb 1.15 miliard. Me nj\u00eb koeficient ngarkese m\u00eb t\u00eb ul\u00ebt, filtri mund t\u00eb krijohet shum\u00eb m\u00eb shpejt dhe do t\u00eb ket\u00eb nj\u00eb nivel alarme false madje m\u00eb t\u00eb ul\u00ebt, por p\u00ebrmasat e tij do t\u00eb jen\u00eb m\u00eb t\u00eb m\u00ebdha. <\/p>\n passwdqc b\u00ebn nj\u00eb pun\u00eb shum\u00eb t\u00eb mir\u00eb n\u00eb evitimin e kalimeve t\u00eb fjal\u00ebkalimeve t\u00eb dob\u00ebta pa p\u00ebrdorimin e skedar\u00ebve t\u00eb jasht\u00ebm. P\u00ebrdorimi i tyre mund t\u00eb rris\u00eb edhe m\u00eb shum\u00eb efikasitetin e passwdqc duke shkaktuar pak discomfort p\u00ebr p\u00ebrdoruesit, ose mund t\u00eb lejoj\u00eb zbutjen e kufizimeve t\u00eb tjera. Kontrolli i fjal\u00ebkalimeve q\u00eb zgjidhen nga p\u00ebrdoruesit ndaj rrjedhjeve t\u00eb njohura rekomandohet nga NIST. P\u00ebr projektin Openwall kjo \u00ebsht\u00eb nj\u00eb mund\u00ebsi financimi p\u00ebr zhvillimin e passwdqc (dhe jo vet\u00ebm) p\u00ebrmes shitjes s\u00eb filtrave t\u00eb gatsh\u00ebm, pa i kufizuar p\u00ebrdoruesit n\u00eb krijimin e filtrave t\u00eb tyre duke p\u00ebrdorur programin pwqfilter t\u00eb l\u00ebshuar n\u00ebn licenc\u00eb t\u00eb lir\u00eb. <\/p>\n pwqfilter punon me vargje t\u00eb rast\u00ebsishme dhe mund t\u00eb p\u00ebrdoret n\u00eb vend t\u00eb grep p\u00ebr shum\u00eb q\u00ebllime, madje edhe ato q\u00eb nuk lidhen me fjal\u00ebkalimet dhe sigurin\u00eb. N\u00eb k\u00ebt\u00eb kontekst, pwqfilter ka disa mund\u00ebsi, t\u00eb ngjashme me ato n\u00eb grep, shmang p\u00ebrdorimin e emrave t\u00eb mund\u00ebsive q\u00eb do t\u00eb kontrastonin me ato n\u00eb grep dhe p\u00ebrdor t\u00eb nj\u00ebjtat kode kthimi si n\u00eb grep. <\/p>\n