Iinkqubo ezininzi ze-IT zinomgaqo osisinyanzelo wokutshintsha amaxesha amaninzi amagama ayimfihlo. Oku mhlawumbi yeyona mfuneko ithiyiweyo kwaye ingenamsebenzi kwiinkqubo zokhuseleko. Abanye abasebenzisi batshintsha nje inombolo ekugqibeleni njenge-hack yobomi.

Esi senzo sabangela inkxamleko enkulu. Noko ke, abantu kwafuneka banyamezele, kuba oku ngenxa yokhuseleko. Ngoku le ngcebiso ayinamsebenzi ngokupheleleyo. NgoMeyi ka-2019, nkqu noMicrosoft ekugqibeleni wayisusa imfuneko yokutshintsha kwegama lokugqitha ukusuka kwinqanaba elisisiseko leemfuno zokhuseleko kwiinguqulelo zomntu kunye neseva Windows 10: Apha ingxelo blog esemthethweni ngoluhlu lotshintsho kuguqulelo Windows 10 v 1903 (qaphela ibinzana Ukulahla imigaqo-nkqubo yokuphelelwa lixesha efuna utshintsho lwamaxesha ngamaxesha). Imithetho ngokwayo kunye nemigaqo-nkqubo yenkqubo Windows 10 Inguqulelo ka-1903 kunye ne-Windows Server 2019 Baseline yoKhuseleko ifakiwe kwikhithi Izixhobo zeMicrosoft Compliance yoKhuseleko 1.0.

Ungabonisa la maxwebhu kubaphathi bakho kwaye uthi: amaxesha atshintshile. Utshintsho olunyanzelekileyo lwe-password luyi-archaic, ngoku luphantse lusemthethweni. Nokuba uphicotho lokhuseleko alusayi kuphinda lujonge le mfuneko (ukuba isekwe kwimithetho esemthethweni yokhuseleko olusisiseko lweekhompyuter zeWindows).


Isiqwenga soluhlu olunemigaqo-nkqubo yokhuseleko esisiseko Windows 10 v1809 kunye notshintsho kwi-1903, apho imigaqo-nkqubo ehambelanayo yokuphelelwa kwexesha lokugqitha ingasasebenzi. Ngendlela, kwinguqulelo entsha, umlawuli kunye neeakhawunti zeendwendwe nazo ziyacinywa ngokungagqibekanga

UMicrosoft uchaza ngokudumileyo kwiposti yebhlog ukuba kutheni ewushiyile umgaqo osisinyanzelo wokutshintsha igama eliyimfihlo: “Ukuphelelwa lixesha kwegama lokugqitha kukhusela kuphela ukuba igama eliyimfihlo (okanye ihashi) liya kubiwa ngexesha lokuphila kwalo kwaye lisetyenziswe ngumntu ongagunyaziswanga. Ukuba igama eliyimfihlo alibiwanga, akukho sizathu sokuyitshintsha. Kwaye ukuba unobungqina bokuba igama eliyimfihlo libiwe, ngokuqinisekileyo uya kufuna ukwenza okuthile ngokukhawuleza kunokuba ulinde de iphelelwe lixesha ukulungisa ingxaki. "

UMicrosoft uhlabela mgama ecacisa ukuba kwindawo yanamhlanje akufanelekanga ukukhusela ekubiweni kwamagama ayimfihlo usebenzisa le ndlela: “Ukuba kuyaziwa ukuba igama eliyimfihlo linokubiwa, zingaphi iintsuku kwixesha elamkelekileyo lokuvumela isela sebenzisa la phasiwedi ibiweyo? Ixabiso elimiselweyo ziintsuku ezingama-42. Ngaba oko akubonakali njengexesha elide ngokuhlekisayo? Ngokwenene, eli lixesha elide kakhulu, kwaye isiseko sethu sangoku sasibekwe kwiintsuku ezingama-60 - kwaye ngaphambili kwiintsuku ezingama-90 - kuba ukunyanzelisa ukuphelelwa rhoqo kuzisa iingxaki zakho. Kwaye ukuba igama eliyimfihlo alibiwanga, ngoko ufumana ezi ngxaki ngaphandle kwenzuzo. Ngaphandle koko, ukuba abasebenzisi bakho bazimisele ukurhweba ngegama eliyimfihlo leswiti, akukho mgaqo-nkqubo wokuphelelwa lixesha uya kunceda.

Ngenye indlela

UMicrosoft ubhala ukuba imigaqo-nkqubo yokhuseleko yesiseko yenzelwe ukusetyenziswa ngamashishini alawulwa kakuhle, akhathalele ukhuseleko. Zikwajonge ukunika isikhokelo kubaphicothi-zincwadi. Ukuba umbutho onjalo uphumeze uluhlu lwamagama ayimfihlo avaliweyo, uqinisekiso lwezinto ezininzi, ukubhaqwa kohlaselo lwepassword brute force, kunye nobhaqo lokungena ngendlela engaqhelekanga, ngaba ixesha lokugqitha liyafuneka? Yaye ukuba abakhange basebenzise imilinganiselo yokhuseleko yale mihla, ngaba ukuphelelwa ligama eliyimfihlo kuya kubanceda?

Ingqiqo yeMicrosoft iyakholisa ngokumangalisayo. Sinokhetho ezimbini:

1. Inkampani iphumeze amanyathelo okhuseleko anamhlanje.
2. Inkampani hayi iye yavelisa iindlela zokhuseleko zale mihla.

Kwimeko yokuqala, ukutshintsha rhoqo igama lokugqitha akuboneleli ngenzuzo ezongezelelweyo.

Kwimeko yesibini, ukutshintsha ixesha lokugqitha akuncedi nto.

Ke, endaweni yokuphelelwa kwexesha lokugqitha, kufuneka usebenzise, ​​okokuqala, uqinisekiso lwezinto ezininzi. Amanyathelo okhuseleko awongezelelweyo adweliswe ngasentla: uluhlu lwamagama ayimfihlo athintelweyo, ubhaqo lwamandla akhohlakeleyo kunye nezinye iinzame zokungena ezingaqhelekanga.

«Ukuphelelwa kwexesha lokugqitha ngumlinganiselo wakudala nophelelwe lixesha", IMicrosoft iqukumbela ngelithi, "kwaye asikholelwa ukuba kukho naliphi na ixabiso elikhethekileyo elifanele ukusetyenziswa kwinqanaba lethu lokhuseleko. Ngokuyisusa kwisiseko sethu, imibutho ingakhetha eyona nto ifanele iimfuno zabo ngaphandle kokungqubuzana neengcebiso zethu. ”

isiphelo

Ukuba inkampani namhlanje inyanzela abasebenzisi ukuba batshintshe amagama abo ayimfihlo ngamaxesha athile, umntu ongaphandle angacinga ntoni?

1. Nikiwe: Inkampani isebenzisa indlela yokukhusela yakudala.
2. Ucingelo: Inkampani ayizange isebenzise iindlela zokukhusela zanamhlanje.
3. Isiphelo: la magama okugqithisa kulula ukuwafumana kunye nokusebenzisa.

Kuyavela ukuba ukutshintsha rhoqo amagama ayimfihlo kwenza inkampani ibe yinto enomtsalane ngakumbi ekujoliswe kuyo kuhlaselo.

umthombo: www.habr.com