Hayi nje iVPN. Iphepha lokukopela malunga nokuzikhusela kunye nedatha yakho

Molo, Habr.

Oku kuthi, inkonzo yeVPN FihlaMy.name. Ngoku sisebenza okwethutyana kwisipili se-HideMyna.me. Ngoba? Ngomhla we-20 kaJulayi, i-2018 iRoskomnadzor isongezele kuluhlu lwezibonelelo ezithintelweyo ngenxa yesigqibo seNkundla yeSithili saseMedvedevsky eYoshkar-Ola. Inkundla yagweba ukuba abatyeleli kwindawo yethu banokufikelela ngokungenamda kwimathiriyeli eyingozi #ngaphandle kobhaliso, kwaye ngandlela thile bafumana incwadi ethi "Mein Kampf" ka-Adolf Hitler kuyo. Ngokucacileyo, ukuthembeka.

Esi sigqibo samangalisa kakhulu, kodwa siyaqhubeka sisebenza kwi-hidemyna.me, hidemyname.org, .one, .biz, njl. Ingxabano yexesha elide kunye neRoskomnadzor ayizange iholele kuyo nayiphi na isiphumo. Ngelixa mna kunye namagqwetha am sicela umngeni kuthintelo kunye nesigqibo senkundla somlingo, sabelana nawe ngeengcebiso ezisisiseko zokugcina ubumfihlo be-intanethi kunye neendaba ngalo mba.

Hayi nje iVPN. Iphepha lokukopela malunga nokuzikhusela kunye nedatha yakho
U-Edward Snowden uyayithanda i-Arhente yoKhuseleko lweSizwe (mhlawumbi)

Akukho mfihlo ukuba iinkonzo ezidumileyo zaseRashiya azikhuselekanga. Imbalelwano yakho inokuthi nangaliphi na ixesha ize kumagosa ogcino-mthetho lwasekhaya. Sikuxelela into ekufuneka uyikhumbule xa unxibelelana ngamajelo onxibelelwano awohlukeneyo.

I-SORM kunye ne-ORI

kukho ezininzi ezahlukeneyo iindlela zokucofa ifowuni yakho. Esemthethweni kunye nezomthetho - i-SORM, inkqubo yeendlela zobugcisa zokuqinisekisa imisebenzi yemisebenzi yophando. Ngokomthetho kwiRussian Federation, bonke abaqhubi beeselula kufuneka bafake inkqubo enjalo kwiiPBX zabo ukuba abafuni ukuphulukana nelayisensi yabo. Kukho iintlobo ezintathu ze-SORM: eyokuqala yasungulwa kwi-80s, eyesibini yaqala ukuphunyezwa ngo-2014, kwaye baye bazama ukunyanzelisa okwesithathu kubaqhubi ukususela ngo-XNUMX. Ngokutsho kweRBC, abaninzi abaqhubi basebenzisa uhlobo lwesibini, kodwa kwi-70% yamatyala inkqubo ayisebenzi ngokuchanekileyo okanye ayisebenzi nonke. Nangona kunjalo, kusengcono ukuba ungaxoxi ngezihloko ezinobuzaza kwifowuni yasekhaya okanye ngokufowunela rhoqo kwifowuni ephathwayo.

Hayi nje iVPN. Iphepha lokukopela malunga nokuzikhusela kunye nedatha yakho
Inkqubo yokusebenza ye-SORM-2 (Umthombo: mfisoft.ru)

Ngokutsho kwe-97-FZ, naziphi na abathunywa, iinkonzo kunye neendawo ezisebenza eRashiya kufuneka zifakwe kwirejista. Abaququzeleli bokusasazwa kolwazi. Ngu"Umthetho waseYarovaya"Kufuneka ukuba bagcine yonke idatha yomsebenzisi, kubandakanya ukurekhodwa kwelizwi kunye nembalelwano, iinyanga ezintandathu. Ngendlela, i-ARI nayo ineHabrahabr.

Ukusebenza kobhaliso kuchazwe ngokweenkcukacha apha usebenzisa i-Threema njengomzekelo, kodwa isiphelo esiphambili sesi: ngoku, ngesicelo sabasemagunyeni baseRashiya, naluphi na ulwazi malunga nawe lunokuphela kwii-arhente zogcino-mthetho. Ke ngoko, into yokuqala ekufuneka uyenzile ukugcina imfihlo kukudlulisa iminxeba kunye nemiyalezo kubathunywa abakhawulezileyo, abangekho kwirejista ye-ARI. Okanye ezo zikhoyo, kodwa zala ukudlulisela idatha kwabasemagunyeni - njengeThreema kunye neTelegram.

Uncedo: Ukuba nje kwirejistri ye-ARI akuqinisekisi ukuba idatha iya kudluliselwa kwabasemagunyeni. Kufuneka ubeke iliso rhoqo iindaba kwaye ujonge ukusabela komthunywa xa "beza" kuye.

Iifowuni zelizwi kunye nemiyalezo

Iincoko zethu kunye nemiyalezo inokukhuselwa ekuphazamisekeni komntu wesithathu ngokubethelwa kokuphela ukuya ekupheleni, yiyo loo nto abathunywa abane-E2E babonwa njengeyona ikhuselekileyo. Kodwa oku akuyonyani ngokupheleleyo: makhe sijonge iinketho ezidumileyo.

yocingo ixhasa ukubethela ekupheleni ukuya esiphelweni kwiiNgxoxo zabo eziMfihlo kunye nokugcina idatha efihliweyo malunga nembalelwano yakho efini, esasazeke kumazwe ahlukeneyo ngolawulo "olukhuselekileyo". Kodwa emva amanqaku kuHabrΓ© unokuqala ukuthandabuza inkohliso yokhuseleko lweTelegram Passport kwi-E2E esuka eDurov.

Ewe kunjalo, iiNgxoxo eziMfihlo ziselukhetho olulungileyo lweparanoid. Umncedisi akabandakanyekanga kwi-encryption yabo konke konke: imiyalezo ithunyelwa kwi-peer-to-peer, oko kukuthi, ngokuthe ngqo phakathi kwabathathi-nxaxheba kwimbalelwano. Ukongezwa koxolo lwengqondo, ungasebenzisa umyalezo wexesha lokuzitshabalalisa. Kodwa akufuneki uthembele ngokumfamekileyo kwiTelegram. Ukuyenza ikhuseleke ngakumbi, wena kunye nomamkeli wakho kufuneka niye kwisetingi zomthunywa kwaye nenze ubuncinci izinto ezimbini:

  • Cwangcisa igama lokugqithisa xa ungena kwisicelo (Ubumfihlo kunye noKhuseleko -> Ikhowudi);
  • Yenza uqinisekiso lwamanyathelo amabini (Ubumfihlo kunye noKhuseleko -> Ukuqinisekiswa kwamanyathelo amabini).

Emva koko, ukongeza kwikhowudi evela kwiSMS, xa ungena kwisixhobo esitsha, isicelo siya kucela igama eliyimfihlo olaziyo kuphela.

Okwangoku, ukuqinisekiswa kokungena ngemvume kuphela ngeSMS akukhuseli nangayiphi na indlela umntu osebenzisa iSIM khadi yaseRashiya. Amatyala okuqhekezwa kweeakhawunti zeTelegram ngomyalezo ofunyenweyo weSMS sele esaziwa - ngo-2016, abahlaseli. ifumene ufikelelo kwimbalelwano yabachasi abaninzi, nakwi-2017 igqekeziwe Ingxelo yentatheli kaDozhd uMikhail Rubin.

Hayi nje iVPN. Iphepha lokukopela malunga nokuzikhusela kunye nedatha yakho
WhatsApp okwangoku inqanda ubhaliso lwe ORI kwaye isebenzisa ufihlo oluya ekupheleni ukuya ekupheleni, kodwa yonke into ayilunganga ngayo. Sisanda kupapasha iindaba malunga nabahlali baseMagadan ababephantsi kwetyala lolwaphulo-mthetho ngokugxeka usodolophu wesixeko. Eli bali, ngethamsanqa, laphela ngesohlwayo esiqhelekileyo. Kodwa yaqinisekisa uloyiko lwabasebenzisi: akukhuselekanga ukunxibelelana kwiingxoxo zeqela le-WhatsApp.

Kuya kwenzeka ntoni?

  • Nje ukuba ubhale umyalezo, inombolo yakho yefowuni iya kufumaneka kwangoko kuwo onke amalungu eqela. Kwaye isazisi sakho sinokumiselwa ngokulula ngenani.

Yintoni endiyenzayo?

  • Isisombululo sinokuba "ngasekhohlo" yeSIM khadi okanye inombolo yangaphandle - ngokukhethekileyo iYurophu.

Ukuba usebenzisa ikhadi lesiRashiya elibhaliswe egameni lakho, ziphephe izimvo eziphoxayo kumaqela anamagama anje β€œUkurhoxa kuSodolophu”: kungcono ukushiya imbalelwano yobuqu kuphela kunye neefowuni zeWhatsApp.

Viber ayidweliswanga kwakhona kwirejista ye-ORI, kodwa igcina unxibelelwano kunye nabasemagunyeni baseRashiya (ngexesha lakhe lokukhulula ekuthumeleni ugaxekile). Lo mthunywa wayengomnye wabokuqala ukuthobela iimfuno zorhulumente omtsha: igcina ukungena kunye neenombolo zefowuni zabasebenzisi baseRashiya kwintsimi yeRussian Federation, kodwa inikezela ngedatha yomyalezo. uyala - kubhekiselele kubuchwephesha bokugqibela ukuya ekupheleni kofihlo kunye nomgaqo-nkqubo wequmrhu.

iapile ikwasebenzisa isiphelo ukuya ekupheleni, kodwa xa ubhalisa nge-iMessage yenza izibini ezimbini eziphambili: zabucala kunye nezoluntu. Umyalezo owufumanayo kumnini omnye wesixhobo se-apile ugqithiselwa kuwe ngoguqulelo oluntsonkothileyo, olusebenzisa isitshixo sikawonke-wonke. Inokucocwa kuphela kusetyenziswa iqhosha labucala lomamkeli, eligcinwe kwisixhobo sakhe. Unokufunda malunga nendlela i-Apple ejonga ngayo ubumfihlo bomsebenzisi kwaye iya kwenza ntoni xa ifumana isicelo esivela kurhulumente apha. Akuzange kubekho iimeko ezirekhodiweyo zenkampani yokudlulisela idatha kubasebenzisi baseRashiya ukuya kwabasemagunyeni baseRashiya.

Hayi nje iVPN. Iphepha lokukopela malunga nokuzikhusela kunye nedatha yakho
umthombo: https://www.apple.com/business/docs/iOS_Security_Guide.pdf


Kodwa iMessage ineziphene ezimbini:

  • Ungabhala okanye ufowunele ngala matshaneli kuphela kumnini we-Apple omnye;
  • Ukuba uneengxaki ngoqhagamshelo lwakho lwe-Intanethi, umyalezo uya kuhamba kwisitishi esiqhelekileyo seselfowuni kwaye ube yi-SMS elula enokwamkelwa ngokulula.

Ukunqanda ukuba i-iMessage ijike ibe yiSMS, unokulivala eli nqaku kwiiSetingi.

Hayi nje iVPN. Iphepha lokukopela malunga nokuzikhusela kunye nedatha yakho
Abaphandi abavela kwi-Electronic Frontier Foundation Kleyima ukuba akukho ikhulu leepesenti ukhetho olukhuselekileyo lweefowuni kunye nemiyalezo. Ukuba abanye abathunywa banqanda abasemagunyeni ukuba bafumane idatha yakho yangasese, oku akuthethi ukuba abahlaseli (okanye urhulumente, abanokusebenzisa iinkonzo zabo) abanako ukwenza oku ngokuphepha imithetho. Ukunika umsebenzisi ukuzithemba ukuba akukho mntu-phakathi-phakathi, iTelegram inento entle: xa ufowuna, bobabini abamkeli banokuqinisekisa ukuba babona i-emoji efanayo kwikona ephezulu ngasekunene kwesikrini-oku kuya kuqinisekisa ukungabikho "kokungena" kuqhagamshelwano.

Hayi nje iVPN. Iphepha lokukopela malunga nokuzikhusela kunye nedatha yakho

Ukuba ujonge indlela ekhuseleke ngakumbi yokunxibelelana, sicebisa ukuba ujonge ngaphaya kweengxoxo eziyimfihlo, amagama agqithisiweyo, kunye namanyathelo amabini/ubuqinisekiso bezinto ezimbini kwii -apps ezingaziwayo ezifana Xelela okanye Uphawu.

Hayi nje iVPN. Iphepha lokukopela malunga nokuzikhusela kunye nedatha yakho
Ndisebenzisa iSignal yonke imihla. #notesforFBI (Spoiler: sele beyazi)

I-imeyile

Iinkampani ezidumileyo ezenza kube lula ukusebenzisa abathengi babo be-imeyile (eRashiya ezi zi-Yandex, i-Mail.Ru kunye ne-Rambler) sele zifakwe kwi-registry ye-ARI, oku kuthetha ukuba abakhuselekanga kakhulu. Ewe, Iqela leMail.Ru iminxeba ukuyeka amatyala olwaphulo-mthetho kwiimemes kunye noxolelo kwabo bagwetyiweyo, kodwa unokunika ulwazi malunga nedatha yakho kwabasemagunyeni xa uceliwe.

Nokuba usebenzisa abathengi be-imeyile baseNtshona njenge-Gmail okanye i-Outlook, inokuqinisekiswa kwezinto ezimbini, kwaye uyazi ukuba i-imeyile yakho ifihliwe usebenzisa iprotocol ekhuselekileyo ye-SSL/TLS, awunakuqiniseka ukuba i-imeyile yomamkeli wakho ikhuselwe ngokulinganayo.

Iinketho zokhuseleko:

  • Xa uthumela ulwazi olubuthathaka, guqulela i-imeyile usebenzisa iPretty Good Privacy (PGP). Le nkqubo inceda ukuguqula idatha esuka kwileta ibe yisethi engenantsingiselo yabalinganiswa kuye wonke umntu ngaphandle komthumeli kunye nomamkeli;
  • Xa uthumela ulwazi olubalulekileyo, hlala ubeke ingqalelo kwisizinda sommkeli kwaye ungabhali kwidilesi ekrokrisayo;
  • Jonga kumamkeli kwangethuba ukuba ngaba usekile ukuthumela okanye ukuqokelelwa kweposi ngenkonzo yeposi yaseRashiya.

Kwimeko yeenkampani zasekhaya ezivela kwirejista ye-ORI, akukho mbhalo ofihliweyo kwicala lomsebenzisi uya, ngokomgaqo, uncedo. Ulwazi aluthintelwanga, kodwa lugcinwe kwaye luhanjiswe ngamanqaku okugqibela - iinkonzo ezifanayo. Ekuphela kwesisombululo kunokuba kukubuyisela ngokukhuselekileyo ngakumbi i-analogues njengeProtonMail, iTutanota okanye iHushmail. Ezingakumbi iinkonzo ze-imeyile ezinjalo zinokufumaneka apha oku isitalato

I intanethi

Ukuqala, nciphisa ubukho bakho kwiinethiwekhi zentlalo ezidumileyo zaseRashiya - "Ihlabathi lam", "Odnoklassniki" kunye ne "VKontakte". Ubuncinci i-Facebook ayinikeli idatha yakho kwiiarhente zobuntlola zaseRussia. Ubuncinci, akukho matyala anjalo arekhodiweyo.

Hayi nje iVPN. Iphepha lokukopela malunga nokuzikhusela kunye nedatha yakho

Kodwa inika umdla into yokuba ngo-2017, inkampani isanelise i-85% yezicelo ezivela kurhulumente wase-US:

Hayi nje iVPN. Iphepha lokukopela malunga nokuzikhusela kunye nedatha yakhoScreenshots ukusuka Ingxelo yokungafihli kuFacebook

Ukuba uqhelene kakhulu neVK, kodwa awufuni kuphelela edokhini, nikela ingqalelo kwizinto ezimbalwa:

  • imifanekiso yakho egciniweyo;
  • izithuba, izimvo kunye nemiyalezo oyibhalayo;
  • izithuba ozithandayo;
  • izithuba owabelana ngazo;
  • abasebenzisi abangabahlobo nabo.

Kuzo zonke ezi zinto zingasentla, kungcono ukuphepha nantoni na enokuthi igqalwe njengento ekhubekisayo okanye eyingozi. Ngalo lonke ixesha khumbula ukuba "ukwabelana" kuthetha ukunxibelelana ngolwazi "olungekho mthethweni" kumntu omnye ubuncinane. Igqwetha leqela lamalungelo oluntu lamazwe ngamazwe "Agora" uDamir Gainutdinov uthi ngokomthetho, i-ORI kunyanzelekile ukugcina nokuhambisa kunye noyilo lwemiyalezo engathunyelwanga eya kwiiarhente zogcino mthetho. Funda ngakumbi malunga nokuba ungabanjwa njani ukuthunyelwa kwakhona apha.

Ngendlela, ixesha elithile ngoku nabani na onenombolo yefowuni yakho unokukufumana kwi-VKontakte ngokuzenzekelayo, nokuba iphepha ngokwalo alivezi ubuni bakho bokwenyani.

Unokubathintela abantu ekubeni bakufumane ngenombolo kwiisetingi zeprofayile yakho (Useto -> Ubumfihlo-> Qhagamshelana nam). Kodwa oku, ngokuqinisekileyo, akuyi kukusindisa kwiinkonzo ezizodwa. Musa ukusebenzisa iifowuni kunye nonxibelelwano lwevidiyo kwi-VKontakte: akwaziwa ukuba inethiwekhi iyayifihla ekugqibeleni, njengoko ibango lolawulo.

Ukhuseleko lweWebhusayithi

Iindaba ezimnandi kuphela zezo ngaphezu kwesiqingatha Zonke iisayithi ezidumileyo kwi-Intanethi sele zinenguqulelo ye-https okanye zitshintshele ngokupheleleyo ekusebenziseni iinguqulelo ze-https kuphela. Ulwazi olufunyenweyo nolugqithiselweyo kwezo sayithi lufihliwe kwaye alunakufundwa ngabantu besithathu. Izibonelelo ezinjalo ziphawulwe ngokuluhlaza kunye negama elithi "ikhuselwe".

Ziphela apho ke iindaba ezilungileyo. Ngaphandle kweprotocol ye-https, inyani yokundwendwela indawo enjalo kunye nezicelo ze-DNS (ulwazi malunga nokuba yeyiphi imimandla oye wafikelela kuyo) isahlala ibonakala kumnikezeli we-Intanethi.

Kodwa esinye isiqwenga seendaba sibi ngakumbi: isiqingatha esisele seendawo sisebenza sisebenzisa iprotocol eqhelekileyo ye-http, oko kukuthi, ngaphandle kofihlo lwedatha. Isisombululo sinokuba yi-VPN, ebethelela ngokupheleleyo yonke idatha efunyenweyo kwaye idluliselwe ukuze kungabikho lwazi olufundekayo kwicala lomnikezeli we-Intanethi kunye nabani na ozama ukungena phakathi kwakho kunye nesiza sokugqibela. Into kuphela eya kubonakala yinto yokudibanisa kwidilesi ethile ye-IP kwi-Intanethi (oko kukuthi, kwiseva yeVPN). Kwaye akukho okunye.

Siya konwaba ukuba ubomi ngenene buba lula kakhulu: vula iVPN kwaye ulibale malunga nokuvuza kolwazi olubuthathaka. Kodwa asiyonyaniso leyo. Jonga rhoqo ukuba isixhobo sakho osithandayo sibandakanyiwe kubhaliso lwe-ARI, jonga ukuba sisebenzisana njani nabasemagunyeni, jonga unxibelelwano olusebenzayo kuseto lwemiyalezo ekhawulezileyo kunye neenethiwekhi zentlalo kwaye usete kwakhona abo bakrokrelayo (kwaye ke uqiniseke ukuba utshintsha amagama agqithisiweyo).

kwihlabathi jikelele

Xa usebenza kunye namajelo onxibelelwano kunye nokudluliselwa kwedatha, kuphela indlela ebanzi yokhuseleko kunye nobumfihlo bunengqiqo. Landela iminyhadala yokhuseleko kwi-Intanethi kwitshaneli yethu yeTelegram @hidemyname_ru, Kwi-intanethi Roskomsvoboda kunye nezinye izixhobo ezinikezelwe kwiziganeko kwi-Intanethi kunye neRuNet ngokukodwa.

Ngawaphi amanyathelo okhuseleko uwathathayo?

umthombo: www.habr.com

Yongeza izimvo