MITM ืื•ื™ืฃ ื“ืขืจ ืฉืคึผื™ื™ึทื–ืขืจ ืžื“ืจื’ื”: ืื™ื™ืจืืคืขื™ืฉืขืจ ื•ื•ืขืจืกื™ืข

ืžื™ืจ ื–ืขื ืขืŸ ื’ืขืจืขื“ื˜ ื•ื•ืขื’ืŸ ืึท ื ื™ื™ึท ืจืขื›ืขื ื•ื ื’ ืื™ืŸ ื“ื™ื™ึทื˜ืฉืœืึทื ื“ ืื•ืŸ ืคืจื™ืขืจ ื™ื ื™ืฉืึทื˜ื™ื•ื•ื– ืžื™ื˜ ืึท ืขื ืœืขืš ืคืึธืงื•ืก.

MITM ืื•ื™ืฃ ื“ืขืจ ืฉืคึผื™ื™ึทื–ืขืจ ืžื“ืจื’ื”: ืื™ื™ืจืืคืขื™ืฉืขืจ ื•ื•ืขืจืกื™ืข
/ืึทื ืกืคึผืœืึทืฉ/ Fabio Lucas

ื•ื•ื™ ืขืก ืงืขืŸ ืงื•ืงืŸ

ืคืจื™ืขืจ ื“ืขื ื—ื•ื“ืฉ, ื“ื™ ื“ื™ื™ึทื˜ืฉ ืื•ื™ื˜ืืจื™ื˜ืขื˜ืŸ ื™ื ื˜ืจืึธื•ื“ื•ืกื˜ ืึท ืจืขื›ืขื ื•ื ื’ ื•ื•ืึธืก ื•ื•ืึธืœื˜ ืœืึธื–ืŸ ื’ืขื–ืขืฅ ืขื ืคืึธืจืกืžืึทื ื˜ ื™ื™ื“ื–ืฉืึทื ืกื™ื– ืฆื• ื ื•ืฆืŸ ื“ื™ ื™ื ืคืจืึทืกื˜ืจืึทืงื˜ืฉืขืจ ืคื•ืŸ ืื™ื ื˜ืขืจื ืขื˜ ืคึผืจืึทื•ื•ื™ื™ื“ืขืจื– ืฆื• ื™ื ืกื˜ืึทืœื™ืจืŸ ืกืขืจื•ื•ื™ื™ืœืึทื ืก ืกื™ืกื˜ืขืžืขืŸ ืื•ื™ืฃ ื‘ื™ืจื’ืขืจืก ื“ืขื•ื•ื™ืกืขืก. ื•ื•ื™ ืจื™ืคึผืึธืจืฅ ื“ื™ ื•ื™ืกื’ืึทื‘ืข ืคึผืจื™ื•ื•ืึทื˜ืงื™ื™ื˜ ื ื™ื™ึทืขืก ืึธื ืœื™ื™ืŸ, ืึธื•ื ื“ ื“ื•ืจืš VPN ืคึผืจืึทื•ื•ื™ื™ื“ืขืจื– ืคึผืจื™ื•ื•ืึทื˜ ืื™ื ื˜ืขืจื ืขื˜ ืึทืงืกืขืก ืื•ืŸ ืกืคึผืขืฉืึทืœื™ื™ื–ื™ื ื’ ืื™ืŸ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื–ื™ื›ืขืจื”ื™ื™ื˜ ื ื™ื™ึทืขืก, ืกืึทืคึผืึธื•ื–ืึทื“ืœื™ ื ื™ืฆื˜ FinFly ISP ื•ื•ื™ื™ื›ื•ื•ืืจื’ ืคื•ืŸ FinFisher ืฆื• ื™ื ืกื˜ืจื•ืžืขื ื˜ MITM. ืœื™ื™ืขื ืขืŸ ืžืขืจ ื•ื•ืขื’ืŸ ืื™ื ืฉื•ื™ืŸ ื’ืขืจืขื“ื˜ ืื™ืŸ Habrรฉ ื•ื•ื™ ื˜ื™ื™ืœ ืคื•ืŸ ืึท ืขื ืœืขืš ื ื™ื™ึทืขืก.

ื•ื•ืึธืก ืึทื ื“ืขืจืฉ ืžื™ืจ ืฉืจื™ื™ึทื‘ืŸ ื•ื•ืขื’ืŸ ืื•ื™ืฃ Habrรฉ:

ื“ื™ ื‘ืจืืฉื•ืจ ืฆื•ื’ืขืฉื˜ืขืœื˜ ื“ื•ืจืš WikiLeaks ื–ืื’ื˜ ืื– FinFly ISP ื•ื•ื™ื™ื›ื•ื•ืืจื’ ืื™ื– ื“ื™ื–ื™ื™ื ื“ ืฆื• ืึทืจื‘ืขื˜ืŸ ืื™ืŸ ืื™ื ื˜ืขืจื ืขื˜ ืกืขืจื•ื•ื™ืก ืคึผืจืึทื•ื•ื™ื™ื“ืขืจื– ื ืขื˜ื•ื•ืึธืจืงืก, ืื™ื– ืงืึทืžืคึผืึทื˜ืึทื‘ืึทืœ ืžื™ื˜ ืึทืœืข ื ืึธืจืžืึทืœ ืคึผืจืึธื˜ืึธืงืึธืœืก ืื•ืŸ ืงืขื ืขืŸ ื–ื™ื™ืŸ ืื™ื ืกื˜ืึทืœื™ืจืŸ ืื•ื™ืฃ ื“ื™ ืฆื™ืœ ืงืึธืžืคึผื™ื•ื˜ืขืจ ืฆื•ื–ืึทืžืขืŸ ืžื™ื˜ ืึท ื•ื•ื™ื™ื›ื•ื•ืืจื’ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ. ืื™ื™ื ืขืจ ืคื•ืŸ ื“ื™ ื”ืขืงืขืจ ื ื™ื™ึทืขืก ืจืขื–ื™ื“ืึทื ืฅ ืื™ืŸ ื“ื™ ื˜ื™ืžืึทื˜ื™ืง ืคืึธื“ืขื ืคืึธืจืฉืœืึธื’ืŸืึทื– ื“ื™ ืกื™ืกื˜ืขื ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ืฆื• ื™ื ืกื˜ืจื•ืžืขื ื˜ ื“ื™ QUANTUMINSERT ื‘ืึทืคืึทืœืŸ. ื•ื•ื™ ืื ื’ืขื•ื•ื™ื–ืŸ ืื™ืŸ Wired, ืื™ืจ ื’ืขื ื™ืฆื˜ ืื™ืŸ NSA ืฆื•ืจื™ืง ืื™ืŸ 2005. ืขืก ืึทืœืึทื•ื– ืื™ืจ ืฆื• ืœื™ื™ืขื ืขืŸ DNS ื‘ืขื˜ืŸ IDs ืื•ืŸ ืจื™ื“ืขืจืขืงื˜ ื“ื™ ื‘ืึทื ื™ืฆืขืจ ืฆื• ืึท ืฉื•ื•ื™ื ื“ืœ ืžื™ื˜ืœ.

ื–ื™ื™ืขืจ ืึทืœื˜ ืคื™ืจ

ืฆื•ืจื™ืง ืื™ืŸ 2011, ืขืงืกืคึผืขืจืฅ ืคื•ืŸ Chaos Computer Club (ืงืงืง) โ€” ื“ืฒื˜ืฉืข ื”ืขืงืขืจ ื’ืขื–ืขืœืฉืืคื˜ โ€” ื“ืขืจืฆื™ื™ืœื˜ ื•ื•ืขื’ืŸ ื•ื•ื™ื™ื›ื•ื•ืืจื’ ื’ืขื ื™ืฆื˜ ื“ื•ืจืš ื’ืขื–ืขืฅ ืขื ืคืึธืจืกืžืึทื ื˜ ืื™ืŸ ื“ื™ื™ึทื˜ืฉืœืึทื ื“. ื“ืึธืก ืื™ื– ืึท ื˜ืจืึธื“ื–ืฉืึทืŸ ื•ื•ืึธืก ืื™ื– ื‘ื™ื›ื•ืœืช ืฆื• ื™ื ืกื˜ืึทืœื™ืจืŸ ื‘ืึทืงื“ืึธืจื– ืื•ืŸ ืจื™ืžืึธื•ื˜ืœื™ ืงืึทื˜ืขืจ ืžื’ื™ืœื”. ืขืจ ืื•ื™ืš ื’ืขื•ื•ืื•ืกื˜ ื•ื•ื™ ืฆื• ื ืขืžืขืŸ ืกืงืจืขืขื ืฉืึธืฅ ืื•ืŸ ืงืขืจ ืื•ื™ืฃ ื“ื™ ืงืึธืžืคึผื™ื•ื˜ืขืจ ืก ืึทืคึผืึทืจืึทื˜ ืื•ืŸ ืžื™ืงืจืึธืคืึธืŸ. ืืคื™ืœื• ื“ืขืžืึธืœื˜, ื“ื™ ืกื™ืกื˜ืขื ืื™ื– ื’ืขื•ื•ืขืŸ ืื•ื ื˜ืขืจื˜ืขื ื™ืง ืฆื• ืฉื˜ืจืขื ื’ ืงืจื™ื˜ื™ืง.

ืื™ืŸ 2015 ื“ืขื ื˜ืขืžืข ื•ื•ื™ื“ืขืจ ื’ืขื‘ืจืื›ื˜ ืฆื• ื“ื™ืกืงื•ืกื™ืข. ื“ื™ ืงืฉื™ื ืคื•ืŸ ื“ื™ ืงืึทื ืกื˜ืึทื˜ื•ืฉืึทื ืึทืœื™ื˜ื™ ืคื•ืŸ ื“ืขื ืคืึธืจืขื ืคื•ืŸ ืกืขืจื•ื•ื™ื™ืœืึทื ืก ืื™ื– ืื•ื™ืคื’ืขืฉื˜ืื ืขืŸ. ื•ื•ื™ ืื™ืš ื’ืขืฉืจื™ื‘ืŸ ื“ื™ ื“ื™ื™ึทื˜ืฉ ืื™ื ื˜ืขืจื ืึทืฆื™ืึธื ืึทืœืข ื‘ืจืึธื“ืงืึทืกื˜ืขืจ DW ืื•ืŸ ืคืืจืฉื˜ื™ื™ืขืจืก ืคื•ืŸ ื“ืขืจ ืคึผืึธืœื™ื˜ื™ืฉ ืึธืจื’ืึทื ื™ื–ืึทืฆื™ืข "ื’ืจื™ืŸ ืคืืจื˜ื™ื™" ืงืขื’ืŸ ื“ืขื ืกื™ืกื˜ืขื. ื–ื™ื™ ื”ืึธื‘ืŸ ื‘ืืžืขืจืงื˜ ืึทื– "ื“ื™ ืขื ื“ืก ืคื•ืŸ ื’ืขื–ืขืฅ ืขื ืคืึธืจืกืžืึทื ื˜ ื‘ืึทืจืขื›ื˜ื™ืงืŸ ื ื™ืฉื˜ ื“ื™ ืžื™ื˜ืœืขืŸ."

MITM ืื•ื™ืฃ ื“ืขืจ ืฉืคึผื™ื™ึทื–ืขืจ ืžื“ืจื’ื”: ืื™ื™ืจืืคืขื™ืฉืขืจ ื•ื•ืขืจืกื™ืข
/ืึทื ืกืคึผืœืึทืฉ/ Thomas Bjornstad

ื“ื™ MITM ื“ืขืจืฆื™ื™ืœื•ื ื’ ืื•ื™ืฃ ื“ื™ ISP ืžื“ืจื’ื” ืื ื’ืขื”ื•ื™ื‘ืŸ ืฆื• ื–ื™ื™ืŸ ื•ื•ื™ื™ื“ืœื™ ื“ื™ืกืงืึทืกื˜ ืื™ืŸ ืึท ืคืึธื“ืขื ืื•ื™ืฃ Hacker News. ืขื˜ืœืขื›ืข ืจืขื–ื™ื“ืึทื ืฅ ืื•ื™ืคืฉื˜ื™ื™ืŸ ืคืจืื’ืขืก ื•ื•ืขื’ืŸ ื“ื™ ืกื™ื˜ื•ืึทืฆื™ืข ืžื™ื˜ ืคึผืจื™ื•ื•ืึทื˜ืงื™ื™ื˜ ืคื•ืŸ ืคึผืขืจื–ืขื ืœืขืš ื“ืึทื˜ืŸ ื•ื•ื™ ืึท ื’ืึทื ืฅ.

ืžื™ืจ ืื•ื™ืš ื’ืขืจืขื“ื˜ ื•ื•ืขื’ืŸ ืึทื‘ืœืึทื’ื™ื™ืฉืึทื ื– ืฆื• ืงืจืึธื ื“ืึทื˜ืŸ ืื•ื™ืฃ ื“ื™ ื–ื™ื™ึทื˜ ืคื•ืŸ ืื™ื ื˜ืขืจื ืขื˜ ืคึผืจืึทื•ื•ื™ื™ื“ืขืจื–, ืื•ืŸ ืขืžืขืฆืขืจ ืึทืคึฟื™ืœื• ื“ืขืจืžืื ื˜ ืึท ืคืึทืœ ืงืจื™ืคึผื˜ืึธ_ืึทื’. ืขืก ืื™ื– ืึท ื’ืœืื‘ืืœืข ืคืึทื‘ืจื™ืงืึทื ื˜ ืคื•ืŸ ืงืจื™ืคึผื˜ืึธื’ืจืึทืคื™ืง ื•ื™ืกืจื™ื›ื˜ ื•ื•ืึธืก ืื™ื– ื’ืขื•ื•ืขืŸ ื‘ืขืกืึธื“ ืึธื•ื ื“ ื“ื•ืจืš ื“ื™ ื™ื•. ืขืก. ืกืขื ื˜ืจืึทืœ ื™ื ื˜ืขืœืœื™ื’ืขื ืกืข ืึทื’ืขื ืกื™. ื“ื™ ืึธืจื’ืึทื ื™ื–ืึทืฆื™ืข ื”ืึธื˜ ืึธื ื˜ื™ื™ืœ ื’ืขื ื•ืžืขืŸ ืื™ืŸ ื“ืขืจ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’ ืคื•ืŸ ืึทืœื’ืขืจื™ื“ืึทืžื– ืื•ืŸ ืฆื•ื’ืขืฉื˜ืขืœื˜ ื™ื ืกื˜ืจืึทืงืฉืึทื ื– ืคึฟืึทืจ ืขืžื‘ืขื“ื“ื™ื ื’ ื‘ืึทืงื“ืึธืจื–. ื“ื™ ื’ืขืฉื™ื›ื˜ืข ืื™ื– ืื•ื™ืš ื’ืึทื ืฅ ื“ื™ื˜ื™ื™ืœื“ ื‘ืื“ืขืงื˜ ืื•ื™ืฃ Habrรฉ.

ื•ื•ืึธืก ืก ื•ื•ื™ื™ึทื˜ืขืจ

ื“ืขืจ ืขื ื“ื’ื™ืœื˜ื™ืงืขืจ ื‘ืืฉืœื•ืก ื•ื•ืขื’ืŸ ื“ืขื ื ื™ื™ืขื ื‘ื™ืœ ืื™ื– ื ืืš ื ื™ืฉื˜ ื’ืขืžืื›ื˜ ื’ืขื•ื•ืืจืŸ ืื•ืŸ ืขืก ื‘ืœื™ื™ื‘ื˜ ื ืืš ืฆื• ื–ืขืŸ. ืื‘ืขืจ ืขืก ืื™ื– ืฉื•ื™ืŸ ืงืœืึธืจ ืึทื– ื“ื™ ืคึผืจืึธื‘ืœืขื ืคื•ืŸ ื•ื•ืขื‘ืกื™ื˜ืขืก ืกืคึผืึธืึธืคื™ื ื’ ืงืขืŸ ื•ื•ืขืจืŸ ืืคื™ืœื• ืžืขืจ ืึทืงื•ื˜ืข. ืึธื‘ืขืจ ื•ื•ืึธืก ื•ื•ืขื˜ ื‘ืืฉื˜ื™ืžื˜ ืงืขื ืขืŸ ืฆื• ื ื•ืฅ ืคื•ืŸ ื“ื™ ืกื™ื˜ื•ืึทืฆื™ืข ื–ืขื ืขืŸ VPN ืคึผืจืึทื•ื•ื™ื™ื“ืขืจื–. ื–ื™ื™ ื–ืขื ืขืŸ ืฉื•ื™ืŸ ื“ืขืจืžืื ื˜ ืื™ืŸ ื›ึผืžืขื˜ ื™ืขื“ืขืจ ืคืึธื“ืขื ืึธื“ืขืจ ื”ืึทื‘ืจืึทืคึผืึธืกื˜ ืžื™ื˜ ืึท ืขื ืœืขืš ื˜ืขืžืข.

ื•ื•ืึธืก ืฆื• ืœื™ื™ืขื ืขืŸ ืื•ื™ืฃ ืื•ื ื“ื–ืขืจ ืคึฟื™ืจืžืข ื‘ืœืึธื’:

ืžืงื•ืจ: www.habr.com

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’