Ehlabathini lonke abantu basebenzisa abameli bezorhwebo ukufihla indawo yabo yokwenyani okanye iinkcukacha zabo. Oku kunokwenziwa ukusombulula iingxaki ezahlukeneyo, kubandakanya ukufikelela kulwazi oluvaliweyo okanye ukuqinisekisa ubumfihlo.
Kodwa ichaneke kangakanani ababoneleli abanjalo xa bebanga ukuba iiseva zabo zikwilizwe elithile? Lo ngumbuzo obaluleke kakhulu, impendulo echaza ukuba inkonzo ethile ingasetyenziselwa bonke abo baxumi abanenkxalabo malunga nokukhuselwa kolwazi lomntu.
Iqela lezazinzulu zaseMelika ezisuka kwiidyunivesithi zaseMassachusetts, eCarnegie Mellon naseStony Brook , ngexesha apho indawo yokwenyani yeeseva zabanikezeli abasixhenxe abadumileyo bajongwa. Silungiselele isishwankathelo esifutshane seziphumo eziphambili.
Intshayelelo
Abasebenzisi be-proxy kaninzi ababoneleli naluphi na ulwazi olunokuqinisekisa ukuchaneka kwamabango abo malunga neendawo zeseva. I-IP-to-location databases idla ngokuxhasa amabango eentengiso zeenkampani ezinjalo, kodwa kukho ubungqina obuninzi beempazamo kwezi nkcukacha zolwazi.
Ngexesha lophononongo, izazinzulu zaseMelika zivavanye iindawo zeeseva zommeli ezingama-2269 ezisetyenziswa ziinkampani ezisixhenxe zommeli kwaye zibekwe kumazwe angama-222 kunye nemimandla. Uhlalutyo lubonise ukuba ubuncinane isahlulo sesithathu sazo zonke iiseva azikho kumazwe apho iinkampani zibango kwizinto zabo zokuthengisa. Endaweni yoko, bakumazwe anexabiso eliphantsi nelithembekileyo: iRiphabhlikhi yaseCzech, iJamani, iNetherlands, i-UK kunye ne-USA.
Uhlalutyo lweNdawo yeseva
I-VPN yezoRhwebo kunye nabanikezeli be-proxy banokuchaphazela ukuchaneka kwe-IP-to-location databases - iinkampani zinamandla okuphatha, umzekelo, iikhowudi zendawo kumagama e-router. Ngenxa yoko, izinto zokuthengisa zingabanga inani elikhulu leendawo ezifumanekayo kubasebenzisi, ngelixa ngokwenene, ukugcina imali kunye nokuphucula ukuthembeka, amaseva ahlala ngokwasemzimbeni kwinani elincinci lamazwe, nangona i-IP-to-location databases ithetha okuchaseneyo.
Ukujonga indawo yokwenene yeeseva, abaphandi basebenzisa i-algorithm ye-geolocation esebenzayo. Isetyenziselwe ukuvavanya uhambo olubuyayo lwepakethi ethunyelwe ngakwiseva kunye nezinye iinginginya ezaziwayo kwi-Intanethi.
Ngelo xesha, kuphela ngaphantsi kwe-10% ye-proxies evavanyiweyo iphendula kwi-ping, kwaye ngenxa yezizathu ezicacileyo, izazinzulu azikwazanga ukuqhuba nayiphi na isofthiwe yemilinganiselo kwi-server ngokwayo. Babenakho ukuthumela iipakethi nge-proxy, ngoko ke uhambo olujikelezayo ukuya nakweyiphi na indawo kwisithuba sisixa-mali sexesha elithatha ipakethi ukuhamba ukusuka kumgcini wovavanyo ukuya kummeli kunye nokusuka kummeli ukuya kwindawo ekuyiwa kuyo.
Ngexesha lophando, isoftware ekhethekileyo yaphuhliswa ngokusekelwe kwii-algorithms ezine ze-geolocation: i-CBG, i-Octant, i-Spotter kunye ne-hybrid Octant / Spotter. Ikhowudi yesisombululo kwiGitHub.
Ekubeni kwakungenakwenzeka ukuthembela kwi-database ye-IP-to-location, kuba iimvavanyo abaphandi basebenzise uluhlu lwe-RIPE Atlas ye-anchor hosts - ulwazi kule database lufumaneka kwi-intanethi, luhlaziywa rhoqo, kwaye iindawo ezibhaliweyo zichanekile, ngaphezu koko. , imikhosi evela kuluhlu ihlala ithumela izibonakaliso ze-ping komnye nomnye kwaye ihlaziye idatha kwi-roundtrip kwisiseko sedatha yoluntu.
Iphuhliswe ngoososayensi besisombululo, sisicelo sewebhu esenza uxhulumaniso lwe-TCP olukhuselekileyo (HTTPS) phezu kwe-HTTP port engakhuselekanga 80. Ukuba umncedisi akaphulaphuli kule port, ngoko iya kuphumelela emva kwesicelo esinye, nangona kunjalo, ukuba umncedisi uphulaphule. kweli zibuko, emva koko umkhangeli zincwadi uya kufumana SYN- ACK impendulo nge TLS ClientMolo ipakethe. Oku kuya kubangela impazamo yeprotocol kwaye isikhangeli siya kubonisa impazamo, kodwa kuphela emva kohambo lwesibini lokujikeleza.
Ngale ndlela, usetyenziso lwewebhu lunokuhamba uhambo olunye okanye ezimbini. Inkonzo efanayo yaphunyezwa njengenkqubo eqaliswe kumgca womyalelo.
Akukho namnye kubaboneleli abavavanyiweyo ochaza indawo ngqo yeeseva zabo zommeli. Okona kulungileyo, kukhankanywa izixeko, kodwa amaxesha amaninzi kukho ulwazi malunga nelizwe kuphela. Nangona isixeko sikhankanyiwe, iziganeko zingenzeka - umzekelo, abaphandi bahlolisise ifayile yoqwalaselo yenye yeeseva ezibizwa ngokuba yi-usa.new-york-city.cfg, equlethe imiyalelo yokudibanisa kumncedisi obizwa ngokuba ngu-chicago.vpn-provider. umzekelo. Ke, ngaphezulu okanye ngaphantsi ngokuchanekileyo, unokuqinisekisa kuphela ukuba umncedisi ngowelizwe elithile.
Iziphumo
Ngokusekelwe kwiziphumo zovavanyo usebenzisa i-algorithm ye-geolocation esebenzayo, abaphandi baye bakwazi ukuqinisekisa indawo ye-989 kwiidilesi ze-IP ze-2269. Kwimeko ye-642, oku akunakwenziwa, kwaye i-638 ngokuqinisekileyo ayikho kwilizwe apho kufuneka ibe khona, ngokweziqinisekiso zeenkonzo zommeli. Ngaphezulu kwama-400 ezi dilesi zobuxoki ngokwenene zikwilizwekazi elinye nelizwe elibhengeziweyo.
Iidilesi ezichanekileyo zibekwe kumazwe adla ngokusetyenziswa ukubamba abancedisi (cofa emfanekisweni ukuvula ubungakanani obugcweleyo)
Abamkeli abakrokrelayo bafunyenwe kumboneleli ngamnye kwabasixhenxe abavavanyiweyo. Abaphandi bafuna izimvo kwiinkampani, kodwa zonke zalile ukunxibelelana.
umthombo: www.habr.com