{"id":55546,"date":"2020-01-23T00:00:00","date_gmt":"2020-01-22T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/otkryt-kod-klientskih-prilozhenij-protonvpn"},"modified":"2020-02-18T14:03:40","modified_gmt":"2020-02-18T11:03:40","slug":"otkryt-kod-klientskih-prilozhenij-protonvpn","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/otkryt-kod-klientskih-prilozhenij-protonvpn","title":{"rendered":"Koden f\u00f6r ProtonVPN-klientapplikationer \u00f6ppnas","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

F\u00f6retaget Proton Technologies, som utvecklar en s\u00e4ker e-posttj\u00e4nst och VPN, tillk\u00e4nnagav<\/a><\/noindex> har meddelat om k\u00e4llkoderna<\/a><\/noindex> klientprogram f\u00f6r ProtonVPN f\u00f6r Windows<\/a><\/noindex>, macOS<\/a><\/noindex>, Android<\/a><\/noindex> och iOS<\/a><\/noindex> (konsolbaserad Linux-klient<\/a><\/noindex> \u00f6ppen fr\u00e5n b\u00f6rjan). Koden \u00e4r \u00f6ppen under GPLv3-licens. Samtidigt publicerades rapporter om en oberoende revision av de angivna applikationerna. Under revisionen uppt\u00e4cktes inga problem som kunde leda till dekryptering av VPN-trafik eller h\u00f6jning av privilegier.<\/p>\n

Koden har \u00f6ppnats f\u00f6r att s\u00e4kerst\u00e4lla projektets transparens s\u00e5 att oberoende experter kan verifiera att koden \u00f6verensst\u00e4mmer med de uttalade specifikationerna och kontrollera s\u00e4kerhetsrevisionens korrekthet. Som en del av samarbetet med Mozilla, som standard C-biblioteket<\/a><\/noindex> \u00e4r en betalbaserad VPN-tj\u00e4nst, fick ingenj\u00f6rer p\u00e5 Mozilla ocks\u00e5 tillg\u00e5ng till andra teknologier inom ProtonVPN f\u00f6r revisionen. Det noteras att n\u00e4sta steg kommer att vara att \u00e4ven \u00f6ppna de \u00f6vriga applikationerna inom ProtonVPN. <\/p>\n

Bland tidigare incidenter med ProtonVPN kan n\u00e4mnas identifiering<\/a><\/noindex> s\u00e5rbarheten<\/a><\/noindex> i applikationen f\u00f6r Windows, som till\u00e4t anv\u00e4ndaren att h\u00f6ja sina privilegier i systemet till administrat\u00f6r (s\u00e5rbarheten orsakades av felaktig interaktion mellan den icke-privilegierade GUI-klienten och systemtj\u00e4nsten). <\/p>\n

Den nyligen avslutade koden f\u00f6r applikationen f\u00f6r Windows avsl\u00f6jade 4 s\u00e5rbarheter<\/a><\/noindex> (tv\u00e5 av medelh\u00f6g sv\u00e5righetsgrad och tv\u00e5 obetydliga): lagring av sessionstokens och autentiseringsuppgifter i processens minne, f\u00f6rbest\u00e4mda VPN-servernycklar i konfigurationsfilen (inte anv\u00e4nda f\u00f6r autentisering), aktivering av fels\u00f6kningsinformation och mottagande av anslutningar p\u00e5 alla n\u00e4tverksgr\u00e4nssnitt. <\/p>\n

I versionen f\u00f6r macOS<\/a><\/noindex> uppt\u00e4cktes inga s\u00e5rbarheter. I versionen f\u00f6r iOS hittades tv\u00e5 obetydliga s\u00e5rbarheten<\/a><\/noindex> (det finns ingen SSL-certifikatbindning och tj\u00e4nsten blockeras inte p\u00e5 enheter efter jailbreak). I versionen f\u00f6r Android fanns<\/a><\/noindex> fyra obetydliga problem (aktivering av fels\u00f6kningsmeddelanden, brist p\u00e5 blockering av s\u00e4kerhetskopiering via ADB-verktyget, kryptering av inst\u00e4llningar med en f\u00f6rbest\u00e4md nyckel, brist p\u00e5 SSL-certifikatbindning) och en s\u00e5rbarhet av medelh\u00f6g sv\u00e5righetsgrad (ofullst\u00e4ndig sessionavslutning som m\u00f6jligg\u00f6r \u00e5teranv\u00e4ndning av sessionstokens).<\/p>\n

Vi p\u00e5minner om att f\u00f6retaget Proton Technologies grundades av flera forskare fr\u00e5n CERN (Europeiska organisationen f\u00f6r k\u00e4rnforskning) och \u00e4r registrerat i Schweiz, som har strikta lagar om skydd av privatlivet som hindrar underr\u00e4ttelsetj\u00e4nster fr\u00e5n att kontrollera information. Projektet ProtonVPN s\u00e4kerst\u00e4ller en h\u00f6g niv\u00e5 av skydd f\u00f6r kommunikationskanalen (fl\u00f6det krypteras med AES-256, nyckelutbytet baseras p\u00e5 2048-bitars RSA-nycklar och HMAC, autentisering anv\u00e4nder SHA-256 och det finns skydd mot attacker baserade p\u00e5 korrelation av datastreamar), avst\u00e5r fr\u00e5n att f\u00f6ra loggar och \u00e4r inriktat p\u00e5 att \u00f6ka s\u00e4kerheten och privatlivet p\u00e5 n\u00e4tet (projektet finansieras av FONGIT-stiftelsen, som st\u00f6ds av Europakommissionen). <\/p>\n

<\/a><\/noindex><\/p>\n

K\u00e4lla: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Proton Technologies, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0439 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0438 VPN, \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c ProtonVPN \u0434\u043b\u044f Windows, macOS, Android \u0438 iOS (\u043a\u043e\u043d\u0441\u043e\u043b\u044c\u043d\u044b\u0439 Linux-\u043a\u043b\u0438\u0435\u043d\u0442 \u043e\u0442\u043a\u0440\u044b\u0442 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e). \u041a\u043e\u0434 \u043e\u0442\u043a\u0440\u044b\u0442 \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GPLv3. \u041e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043e\u0442\u0447\u0451\u0442\u044b \u043e \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0438 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0433\u043e \u0430\u0443\u0434\u0438\u0442\u0430 \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439. \u041f\u0440\u043e\u0431\u043b\u0435\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0435 VPN-\u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0438\u043b\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044e \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u0432 \u0445\u043e\u0434\u0435 \u0430\u0443\u0434\u0438\u0442\u0430 \u043d\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-55546","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Koden f\u00f6r ProtonVPN:s klientapplikationer \u00e4r \u00f6ppen | ProHoster","description":"F\u00f6retaget Proton Technologies, som utvecklar en s\u00e4ker e-posttj\u00e4nst och VPN, har meddelat att de har \u00f6ppnat","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/otkryt-kod-klientskih-prilozhenij-protonvpn","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0442\u043a\u0440\u044b\u0442 \u043a\u043e\u0434 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 ProtonVPN | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Proton Technologies, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0430\u044f \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0439 \u043f\u043e\u0447\u0442\u043e\u0432\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0438 VPN, \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/otkryt-kod-klientskih-prilozhenij-protonvpn","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-22T21:00:00+00:00","article:modified_time":"2020-02-18T11:03:40+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55546","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:42:37","updated":"2022-10-07 23:49:44","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/55546","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=55546"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/55546\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=55546"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=55546"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=55546"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}