Xa uguqulelo oluntsonkothileyo aluyi kunceda: sithetha malunga nokufikelela ngokwasemzimbeni kwisixhobo

NgoFebruwari, sapapasha inqaku elithi β€œAyiyoVPN yodwa. Iphepha lokukopela lendlela yokuzikhusela wena kunye nedatha yakho." Enye yezimvo lisibangele ukuba sibhale ukuqhubeka kwenqaku. Le nxalenye ngumthombo ozimeleyo wolwazi, kodwa sisacebisa ukuba ufunde zombini izithuba.

Isithuba esitsha sinikezelwe kumbandela wokhuseleko lwedatha (imbalelwano, iifoto, iividiyo, yiyo yonke loo nto) kwizithunywa ezikhawulezayo kunye nezixhobo ngokwazo ezisetyenziselwa ukusebenza kunye nezicelo.

Abathunywa

yocingo

Emuva ngo-Oktobha 2018, umfundi wokuqala we-Wake Technical College uNathaniel Sachi wafumanisa ukuba umthunywa weTelegram ugcina imiyalezo kunye neefayile zeendaba kwi-drive yekhompyutheni yendawo kwisicatshulwa esicacileyo.

Umfundi ukwazile ukufumana imbalelwano yakhe, kuquka umbhalo nemifanekiso. Ukwenza oku, wafunda iinkcukacha zesicelo ezigcinwe kwi-HDD. Kwavela ukuba idatha kwakunzima ukuyifunda, kodwa ingabhalwanga ngokuntsonkothileyo. Kwaye banokufikelelwa nokuba umsebenzisi usete igama lokugqitha lesicelo.

Kwidatha efunyenweyo, amagama kunye neenombolo zomnxeba ze-interlocutors zifunyenwe, apho, ukuba zifunwa, zinokuthelekiswa. Ulwazi oluvela kwiingxoxo ezivaliweyo lukwagcinwa ngendlela ecacileyo.

Kamva uDurov wathi oku akuyongxaki, kuba ukuba umhlaseli unokufikelela kwi-PC yomsebenzisi, uya kukwazi ukufumana izitshixo ze-encryption kwaye akhuphe yonke imbalelwano ngaphandle kweengxaki. Kodwa iingcali ezininzi zokhuseleko lolwazi ziphikisa ukuba oku kusenzulu.


Ukongeza, iTelegram yajika yaba sesichengeni sohlaselo oluphambili lobusela, oluthi ifunyenwe Umsebenzisi weHabr. Uyakwazi ukugqekeza amagama ayimfihlo ekhowudi yalapha kubo nabuphi na ubude kunye nobunzima.

WhatsApp

Njengoko sisazi, lo mthunywa ukwagcina idatha kwidiski yekhompyuter kwifomu engafihlwanga. Ngokufanelekileyo, ukuba umhlaseli unokufikelela kwisixhobo somsebenzisi, ke yonke idatha nayo ivulekile.

Kodwa kukho enye ingxaki yehlabathi. Okwangoku, zonke ii-backups ezivela ku-WhatsApp ezifakwe kwizixhobo ezine-Android OS zigcinwa kwi-Google Drive, njengoko uGoogle kunye no-Facebook bavumile kunyaka ophelileyo. Kodwa ii-backups zembalelwano, iifayile zemidiya kunye nokunye okunjalo igcinwe iguqulelwe ngokuntsonkothileyo. Kangangoko umntu unokugweba, amagosa omthetho we-US efanayo unofikelelo kuGoogle Drive, ngoko kukho ithuba lokuba imikhosi yokhuseleko inokujonga nayiphi na idatha egciniweyo.

Kuyenzeka ukufihla idatha, kodwa zombini iinkampani azikwenzi oku. Mhlawumbi ngenxa yokuba ii-backups ezingafihlwanga zinokugqithiselwa ngokulula kwaye zisetyenziswe ngabasebenzisi ngokwabo. Okunokwenzeka, akukho lufihlo kungekhona ngenxa yokuba kunzima ukuphumeza: ngokuchaseneyo, unokukhusela ii-backups ngaphandle kobunzima. Ingxaki kukuba uGoogle unezizathu zakhe zokusebenza kunye ne-WhatsApp - inkampani ngokuqinisekileyo ihlalutya idatha egcinwe kwiiseva zikaGoogle Drive kwaye uzisebenzise ukubonisa intengiso eyenzelwe wena. Ukuba i-Facebook ngequbuliso yazisa i-encryption yee-backups ze-WhatsApp, uGoogle uya kuphelelwa ngumdla ngoko nangoko kwintsebenziswano enjalo, elahlekelwa ngumthombo obalulekileyo wedatha malunga nezinto ezikhethwa ngabasebenzisi be-WhatsApp. Oku, ewe, yingcinga nje, kodwa kunokwenzeka kakhulu kwihlabathi lentengiso ye-hi-tech.

Ngokuphathelele i-WhatsApp ye-iOS, ii-backups zigcinwa kwilifu le-iCloud. Kodwa apha, kwakhona, ulwazi lugcinwe kwifomu engabhalwanga, echazwe nakwizicwangciso zesicelo. Ingaba i-Apple ihlalutya le datha okanye hayi iyaziwa kuphela kwi-corporation ngokwayo. Enyanisweni, i-Cupertino ayinayo inethiwekhi yentengiso njengeGoogle, ngoko sinokucinga ukuba amathuba okuba bahlalutye idatha yobuqu yabasebenzisi be-WhatsApp iphantsi kakhulu.

Konke okuthethiweyo kunokuqulunqwa ngolu hlobo lulandelayo - ewe, akukuphela nje ukufikelela kwimbalelwano yakho ye-WhatsApp.

TikTok kunye nabanye abathunywa

Le nkonzo imfutshane yokwabelana ngevidiyo inokuduma ngokukhawuleza. Abaphuhlisi bathembisa ukuqinisekisa ukhuseleko olupheleleyo lwedatha yabasebenzisi babo. Njengoko kwavela, inkonzo ngokwayo isebenzise le datha ngaphandle kokwazisa abasebenzisi. Okubi nakakhulu: inkonzo iqokelele idatha yomuntu siqu kubantwana abangaphantsi kwe-13 ngaphandle kwemvume yabazali. Ulwazi lomntu siqu lwabantwana - amagama, ii-imeyile, iinombolo zefowuni, iifoto kunye neevidiyo - zenziwe zafumaneka esidlangalaleni.

inkonzo wahlawuliswa ngezigidi ezininzi zeerandi, abalawuli bakwafuna ukususwa kwazo zonke iividiyo ezenziwe ngabantwana abangaphantsi kweminyaka eyi-13. Ithobele iTikTok. Nangona kunjalo, abanye abathunywa kunye neenkonzo zisebenzisa idatha yobuqu yabasebenzisi ngeenjongo zabo, ngoko awunakuqiniseka ngokhuseleko lwabo.

Olu luhlu lunokuqhubeka ngokungenasiphelo - uninzi lwezithunywa ezikhawulezayo zinomngcipheko omnye okanye omnye ovumela abahlaseli ukuba baphulaphule abasebenzisi (umzekelo omkhulu - Viber, nangona yonke into ibonakala ilungisiwe apho) okanye yeba idatha yabo. Ukongezelela, phantse zonke izicelo ezivela kwi-5 ephezulu yokugcina idatha yomsebenzisi kwifom engakhuselekanga kwi-hard drive yekhompyutheni okanye kwimemori yefowuni. Kwaye oku ngaphandle kokukhumbula iinkonzo zobuntlola zamazwe ahlukeneyo, ezinokufikelela kwidatha yomsebenzisi ngenxa yomthetho. I-Skype efanayo, i-VKontakte, i-TamTam kunye nabanye banikezela naluphi na ulwazi malunga nawuphi na umsebenzisi ngesicelo sabasemagunyeni (umzekelo, i-Russian Federation).

Ukhuseleko olulungileyo kwinqanaba leprotocol? Akukho ngxaki, siyaphula isixhobo

Kwiminyaka ethile edlulileyo kwaqhambuka impixano phakathi kwe-Apple kunye norhulumente wase-US. Iqumrhu lalile ukuvula i-smartphone efihliweyo eyayibandakanyeka kuhlaselo lwabanqolobi kwisixeko saseSan Bernardino. Ngelo xesha, oku kwakubonakala ngathi yingxaki yokwenyani: idatha yayikhuselwe kakuhle, kwaye ukukhwabanisa i-smartphone kwakungenakwenzeka okanye kunzima kakhulu.

Ngoku izinto zahlukile. Ngokomzekelo, inkampani yakwa-Israel i-Cellebrite ithengisela amaqumrhu asemthethweni eRashiya nakwamanye amazwe inkqubo yesoftware kunye ne-hardware ekuvumela ukuba uqhekeze zonke iimodeli ze-iPhone kunye ne-Android. Kunyaka ophelileyo bekukho incwadana yentengiso ipapashiwe ngolwazi oluthe vetshe malunga nesi sihloko.

Xa uguqulelo oluntsonkothileyo aluyi kunceda: sithetha malunga nokufikelela ngokwasemzimbeni kwisixhobo
Umphandi waseMagadan wenkundla uPopov ugqekeza i-smartphone esebenzisa itekhnoloji efanayo esetyenziswa yi-US Federal Bureau of Investigation. Umthombo: BBC

Isixhobo asibizi ngokwemigangatho karhulumente. Kwi-UFED Touch2, isebe le-Volgograd yeKomiti yoPhando lihlawule i-ruble eyi-800 lamawaka, isebe laseKhabarovsk - i-ruble ye-1,2 yezigidi. Ngo-2017, uAlexander Bastrykin, intloko yeKomiti yoPhando yeRussian Federation, waqinisekisa ukuba isebe lakhe. isebenzisa izisombululo Inkampani yakwaSirayeli.

I-Sberbank iphinda ithenge izixhobo ezinjalo - nangona kunjalo, kungekhona ukuqhuba uphando, kodwa ukulwa neentsholongwane kwizixhobo ezine-Android OS. "Ukuba izixhobo eziphathwayo zirhanelwa ukuba zosulelwe yikhowudi yesoftware engalunganga, kwaye emva kokufumana imvume enyanzelekileyo yabanini beefowuni ezosulelekileyo, uhlalutyo luya kwenziwa ukukhangela iintsholongwane ezihlala zivela kwaye zitshintsha kusetyenziswa izixhobo ezahlukeneyo, kubandakanya ukusetyenziswa. ye-UFED Touch2,” - watsho kwinkampani.

Abantu baseMelika nabo banetekhnoloji ebavumela ukuba baqhekeze nayiphi na i-smartphone. I-Grayshift ithembisa ukukrazula ii-smartphones ze-300 nge-$ 15 (i-$ 50 ngeyunithi nganye ngokumelene ne-$ 1500 yeCellbrite).

Kusenokwenzeka ukuba abaphuli-mthetho be-intanethi nabo banezixhobo ezifanayo. Ezi zixhobo zihlala ziphuculwa - ubukhulu bazo buyancipha kwaye ukusebenza kwazo kuyanda.

Ngoku sithetha malunga neefowuni ezingaphezulu okanye ezincinci ezaziwayo ezivela kubavelisi abakhulu abanenkxalabo malunga nokukhusela idatha yabasebenzisi babo. Ukuba sithetha ngeenkampani ezincinci okanye imibutho engenamagama, ngoko kule meko idatha isuswe ngaphandle kweengxaki. Imowudi ye-HS-USB isebenza naxa i-bootloader itshixiwe. Iindlela zenkonzo zidla ngokuba "lucango lwangasemva" apho idatha inokufunyanwa khona. Ukuba akunjalo, ungaqhagamshela kwizibuko le-JTAG okanye ususe itshiphu ye-EMMC ngokupheleleyo kwaye emva koko uyifake kwi-adapter engabizi. Ukuba idatha ayifihlwanga, isuka kwifowuni inokutsalwa ngaphandle yonke into ngokubanzi, kubandakanywa amathokheni okuqinisekisa anikezela ukufikelela kwisitoreji samafu kunye nezinye iinkonzo.

Ukuba umntu unokufikelela kwakhe kwi-smartphone enolwazi olubalulekileyo, ngoko banokuyiqhekeza ukuba bafuna, kungakhathaliseki ukuba bathini abavelisi.

Kucacile ukuba yonke into ethethiweyo ayisebenzi kuphela kwii-smartphones, kodwa nakwiikhomputha kunye neelaptops ezisebenzisa ii-OS ezahlukeneyo. Ukuba awubheneli kumanyathelo okukhusela aphakamileyo, kodwa unelisekile ngeendlela eziqhelekileyo ezifana negama lokugqitha kunye nokungena, ngoko idatha iya kuhlala isengozini. I-hacker enamava kunye nokufikelela ngokomzimba kwisixhobo uya kukwazi ukufumana phantse naluphi na ulwazi - yinto nje yexesha.

Ke makwenziwe ntoni?

Ku-HabrΓ©, umba wokhuseleko lwedatha kwizixhobo zomntu uphakanyiswe ngaphezu kwesihlandlo esinye, ngoko asiyi kuphinda sibuyisele ivili kwakhona. Siza kubonisa kuphela iindlela eziphambili ezinciphisa amathuba okuba abantu besithathu bafumane idatha yakho:

  • Kunyanzelekile ukuba usebenzise ufihlo lwedatha kuzo zombini i-smartphone yakho kunye nePC. Iisistim zokusebenza ezahlukeneyo zihlala zibonelela ngeempawu ezilungileyo ezingagqibekanga. Umzekelo - indalo isikhongozeli se-crypto kwi-Mac OS usebenzisa izixhobo eziqhelekileyo.

  • Seta amagama ayimfihlo naphi na naphi na, kubandakanywa nembali yembalelwano kwiTelegram kunye nabanye abathunywa ngoko nangoko. Ngokwemvelo, amagama ayimfihlo kufuneka abe nzima.

  • Ukuqinisekiswa kwezinto ezimbini - ewe, kunokuba nzima, kodwa ukuba ukhuseleko luza kuqala, kufuneka unyamezele.

  • Jonga ukhuseleko lomzimba lwezixhobo zakho. Thatha iPC yoshishino kwicafe kwaye uyilibale apho? Yakudala. Imilinganiselo yokhuseleko, kuquka eyemibutho, yabhalwa ngeenyembezi zamaxhoba ngenxa yokungakhathali kwawo.

Makhe sijonge kumagqabantshintshi kwiindlela zakho zokunciphisa ukubakho kwedatha xa umntu wesithathu efumana ukufikelela kwisixhobo somzimba. Emva koko siya kongeza iindlela ezicetywayo kwinqaku okanye sizipapashe kwethu itshaneli yetelegram, apho sihlala sibhala malunga nokhuseleko, ii-hacks zobomi zokusetyenziswa VPN yethu kunye nokuhlolwa kwe-Intanethi.

umthombo: www.habr.com

Yongeza izimvo