ืคึผืึธื˜ืขื ืฆื™ืขืœ ืื ืคืืœืŸ ืื•ื™ืฃ HTTPS ืื•ืŸ ื•ื•ื™ ืฆื• ื‘ืึทืฉื™ืฆืŸ ืงืขื’ืŸ ื–ื™ื™

ื”ืขืœืคื˜ ื“ื™ ื–ื™ื™ื˜ืœืขืš ื ื™ืฆื˜ ื”ื˜ื˜ืคึผืก, ืื•ืŸ ื–ื™ื™ืขืจ ื ื•ืžืขืจ ืื™ื– ืกื˜ืขื“ืึทืœื™ ื™ื ืงืจื™ืกื™ื ื’. ื“ืขืจ ืคึผืจืึธื˜ืึธืงืึธืœ ืจืึทื“ื•ืกืึทื– ื“ื™ ืจื™ื–ื™ืงื™ืจืŸ ืคื•ืŸ ืคืึทืจืงืขืจ ื™ื ื˜ืขืจืกืขืคึผืฉืึทืŸ, ืึธื‘ืขืจ ื˜ื•ื˜ ื ื™ืฉื˜ ืขืœื™ืžื™ื ื™ืจืŸ ืคึผืจื•ื•ื•ืŸ ืื ืคืืœืŸ ื•ื•ื™ ืึทื–ืึท. ืžื™ืจ ื•ื•ืขืœืŸ ืจืขื“ืŸ ื•ื•ืขื’ืŸ ืขื˜ืœืขื›ืข ืคื•ืŸ โ€‹โ€‹ื–ื™ื™ - ืคึผื•ื“ืœ, ื—ื™ื”, ื“ืจืึธื•ื•ืŸ ืื•ืŸ ืื ื“ืขืจืข - ืื•ืŸ ืžืขื˜ื”ืึธื“ืก ืคื•ืŸ ืฉื•ืฅ ืื™ืŸ ืื•ื ื“ื–ืขืจ ืžืึทื˜ืขืจื™ืึทืœ.

ืคึผืึธื˜ืขื ืฆื™ืขืœ ืื ืคืืœืŸ ืื•ื™ืฃ HTTPS ืื•ืŸ ื•ื•ื™ ืฆื• ื‘ืึทืฉื™ืฆืŸ ืงืขื’ืŸ ื–ื™ื™
/ืคืœื™ืงืจ/ ืกื•ื•ืขืŸ ื’ืจืึทืžืข / CC BY-SA

ืคึผืึธืึธื“ืœืข

ืคึฟืึทืจ ื“ื™ ืขืจืฉื˜ืขืจ ืžืึธืœ ื•ื•ืขื’ืŸ ื“ื™ ื‘ืึทืคืึทืœืŸ ืคึผืึธืึธื“ืœืข ื’ืขื•ื•ืืจืŸ ื‘ืืงืื ื˜ ืื™ืŸ 2014. ื ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ ื“ื™ SSL 3.0 ืคึผืจืึธื˜ืึธืงืึธืœ ืื™ื– ื“ื™ืกืงืึทื•ื•ืขืจื“ ื“ื•ืจืš ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื–ื™ื›ืขืจื”ื™ื™ื˜ ืžื•ืžื›ืข Bodo Mรถller ืื•ืŸ ื—ื‘ืจื™ื ืคื•ืŸ Google.

ื“ื™ ืขืกืึทื ืก ืื™ื– ื•ื•ื™ ื’ื™ื™ื˜: ื“ืขืจ ื”ืขืงืขืจ ืคืึธืจืกืขืก ื“ืขื ืงืœื™ืขื ื˜ ืฆื• ืคืึทืจื‘ื™ื ื“ืŸ ื“ื•ืจืš ืกืกืœ 3.0, ืขืžื™ืึทืœื™ื™ื˜ื™ื ื’ ื“ื™ ืงืฉืจ ื‘ืจื™ื™ืงืก. ื“ืขืจื ืึธืš ืขืก ื–ื•ื›ืŸ ืื™ืŸ ื“ื™ ื™ื ืงืจื™ืคึผื˜ื™ื“ ืงื‘ืง-ืคืึทืจืงืขืจ ืžืึธื“ืข ืกืคึผืขืฆื™ืขืœืข ืึธื ื–ืึธื’-ื˜ืึทื’ืก. ื ื™ืฆืŸ ืึท ืกืขืจื™ืข ืคื•ืŸ โ€‹โ€‹ืคืึธืจื“ื–ืฉื“ ืจื™ืงื•ื•ืขืก, ืึท ืึทื˜ืึทืงืขืจ ืื™ื– ื‘ื™ื›ื•ืœืช ืฆื• ืจืขืงืึธื ืกื˜ืจื•ื™ืจืŸ ื“ื™ ืื™ื ื”ืึทืœื˜ ืคื•ืŸ ื“ืึทื˜ืŸ ืคื•ืŸ ืื™ื ื˜ืขืจืขืก, ืึทื–ืึท ื•ื•ื™ ืงื™ื›ืœืขืš.

SSL 3.0 ืื™ื– ืึทืŸ ืึทื•ื˜ื“ื™ื™ื˜ื™ื“ ืคึผืจืึธื˜ืึธืงืึธืœ. ืื‘ืขืจ ื“ื™ ืงืฉื™ื ืคื•ืŸ ื–ื™ื™ืŸ ื–ื™ื›ืขืจืงื™ื™ึทื˜ ืื™ื– ื ืึธืš ื‘ืึทื˜ื™ื™ึทื˜ื™ืง. ืงืœื™ื™ืึทื ืฅ ื ื•ืฆืŸ ืขืก ืฆื• ื•ื™ืกืžื™ื™ื“ืŸ ืงืึทืžืคึผืึทื˜ืึทื‘ื™ืœืึทื˜ื™ ื™ืฉื•ื– ืžื™ื˜ ืกืขืจื•ื•ืขืจืก. ืœื•ื™ื˜ ืขื˜ืœืขื›ืข ื“ืึทื˜ืŸ, ื›ึผืžืขื˜ 7% ืคื•ืŸ ื“ื™ 100 ืžืขืจืกื˜ ืคืึธืœืงืก ื–ื™ื™ื˜ืœืขืš ื ืึธืš ืฉื˜ื™ืฆืŸ SSL 3.0... ืื•ื™ืš ืขืงืกื™ืกื˜ื™ืจืŸ ืžืึธื“ื™ืคื™ืงืึทื˜ื™ืึธื ืก ืฆื• POODLE ื•ื•ืึธืก ืฆื™ืœืŸ ื“ื™ ืžืขืจ ืžืึธื“ืขืจืŸ TLS 1.0 ืื•ืŸ TLS 1.1. ื“ืืก ื™ืืจ ืืจื•ื™ืก ื ื™ื™ึท Zombie POODLE ืื•ืŸ GOLDENDOODLE ืื ืคืืœืŸ ื•ื•ืึธืก ื‘ื™ื™ืคึผืึทืก TLS 1.2 ืฉื•ืฅ (ื–ื™ื™ ื–ืขื ืขืŸ ื ืึธืš ืคืืจื‘ื•ื ื“ืŸ ืžื™ื˜ CBC ืขื ืงืจื™ืคึผืฉืึทืŸ).

ื•ื•ื™ ืฆื• ื‘ืึทืฉื™ืฆืŸ ื–ื™ืš. ืื™ืŸ ื“ืขื ืคืึทืœ ืคื•ืŸ ื“ืขืจ ืึธืจื™ื’ื™ื ืขืœ ืคึผืึธืึธื“ืœืข, ืื™ืจ ื“ืึทืจืคึฟืŸ ืฆื• ื“ื™ืกื™ื™ื‘ืึทืœ SSL 3.0 ืฉื˜ื™ืฆืŸ. ืึธื‘ืขืจ, ืื™ืŸ ื“ืขื ืคืึทืœ ืขืก ืื™ื– ืึท ืจื™ื–ื™ืงื™ืจืŸ ืคื•ืŸ ืงืึทืžืคึผืึทื˜ืึทื‘ื™ืœืึทื˜ื™ ืคึผืจืึธื‘ืœืขืžืก. ืึทืŸ ืึธืœื˜ืขืจื ืึทื˜ื™ื•ื• ืœื™ื™ื–ื•ื ื’ ืงืขืŸ ื–ื™ื™ืŸ ื“ื™ TLS_FALLBACK_SCSV ืžืขืงืึทื ื™ื–ืึทื - ืขืก ื™ื ืฉื•ืจื– ืึทื– ื“ืึทื˜ืŸ ื•ื•ืขืงืกืœ ื“ื•ืจืš SSL 3.0 ื•ื•ืขื˜ ื–ื™ื™ืŸ ื“ื•ืจื›ื’ืขืงืึธื›ื˜ ื‘ืœื•ื™ื– ืžื™ื˜ ืขืœื˜ืขืจืข ืกื™ืกื˜ืขืžืขืŸ. ืึทื˜ืึทืงืขืจื– ื•ื•ืขื˜ ื ื™ื˜ ืžืขืจ ืงืขื ืขืŸ ืฆื• ืึธื ื”ื™ื™ื‘ืŸ ืคึผืจืึธื˜ืึธืงืึธืœ ื“ืึทื•ื ื’ืจื™ื™ื™ื“ื–. ื ื•ื•ืขื’ ืฆื• ื‘ืึทืฉื™ืฆืŸ ืงืขื’ืŸ Zombie POODLE ืื•ืŸ GOLDENDOODLE ืื™ื– ืฆื• ื“ื™ืกื™ื™ื‘ืึทืœ CBC ืฉื˜ื™ืฆืŸ ืื™ืŸ TLS 1.2-ื‘ืื–ื™ืจื˜ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื–. ื“ื™ ืงืึทืจื“ื™ื ืึทืœ ืœื™ื™ื–ื•ื ื’ ื•ื•ืขื˜ ื–ื™ื™ืŸ ื“ื™ ื™ื‘ืขืจื’ืึทื ื’ ืฆื• TLS 1.3 - ื“ื™ ื ื™ื™ึทืข ื•ื•ืขืจืกื™ืข ืคื•ืŸ โ€‹โ€‹โ€‹โ€‹ื“ื™ ืคึผืจืึธื˜ืึธืงืึธืœ ื˜ื•ื˜ ื ื™ืฉื˜ ื ื•ืฆืŸ CBC ืขื ืงืจื™ืคึผืฉืึทืŸ. ืึทื ืฉื˜ืึธื˜, ืžืขืจ ื“ื•ืจืึทื‘ืึทืœ AES ืื•ืŸ ChaCha20 ื–ืขื ืขืŸ ื’ืขื ื™ืฆื˜.

ื—ื™ื”

ืื™ื™ื ืขืจ ืคื•ืŸ ื“ื™ ื–ื™ื™ืขืจ ืขืจืฉื˜ืขืจ ืื ืคืืœืŸ ืื•ื™ืฃ SSL ืื•ืŸ TLS 1.0, ื“ื™ืกืงืึทื•ื•ืขืจื“ ืื™ืŸ 2011. ื•ื•ื™ ืคึผื•ื“ืœ, ื—ื™ื” ื ื™ืฆื˜ ืคึฟืขื™ึดืงื™ื™ื˜ืŸ ืคื•ืŸ CBC ืขื ืงืจื™ืคึผืฉืึทืŸ. ืึทื˜ืึทืงืขืจื– ื™ื ืกื˜ืึทืœื™ืจืŸ ืึท ื“ื–ืฉืึทื•ื•ืึทืกืงืจื™ืคึผื˜ ืึทื’ืขื ื˜ ืึธื“ืขืจ ื“ื–ืฉืึทื•ื•ืึท ืึทืคึผืœืึทื˜ ืื•ื™ืฃ ื“ืขื ืงืœื™ืขื ื˜ ืžืึทืฉื™ืŸ, ื•ื•ืึธืก ืจื™ืคึผืœื™ื™ืกื™ื– ืึทืจื˜ื™ืงืœืขืŸ ื•ื•ืขืŸ ื˜ืจืึทื ืกืžื™ื˜ื™ื ื’ ื“ืึทื˜ืŸ ืื™ื‘ืขืจ TLS ืึธื“ืขืจ SSL. ื–ื™ื ื˜ ืึทื˜ืึทืงืขืจื– ื•ื•ื™ืกืŸ ื“ื™ ืื™ื ื”ืึทืœื˜ ืคื•ืŸ ื“ื™ "ื‘ืึธืง" ืคึผืึทืงื™ืฅ, ื–ื™ื™ ืงืขื ืขืŸ ื ื•ืฆืŸ ื–ื™ื™ ืฆื• ื“ืขืงืจื™ืคึผื˜ ื“ื™ ื™ื ื™ื˜ื™ืึทืœื™ื–ืึทื˜ื™ืึธืŸ ื•ื•ืขืงื˜ืึธืจ ืื•ืŸ ืœื™ื™ืขื ืขืŸ ืื ื“ืขืจืข ืึทืจื˜ื™ืงืœืขืŸ ืฆื• ื“ื™ ืกืขืจื•ื•ืขืจ, ืึทื–ืึท ื•ื•ื™ ืึธื˜ืขื ื˜ืึทืงื™ื™ืฉืึทืŸ ืงื™ื›ืœืขืš.

ื•ื•ื™ ืคื•ืŸ ื”ื™ื™ึทื ื˜, BEAST ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ื‘ืœื™ื™ื‘ืŸ ืึท ื ื•ืžืขืจ ืคื•ืŸ ื ืขืฅ ืžื›ืฉื™ืจื™ื ื–ืขื ืขืŸ ืกืึทืกืขืคึผื˜ืึทื‘ืึทืœ: ืคึผืจืึธืงืกื™ ืกืขืจื•ื•ืขืจืก ืื•ืŸ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ืคึฟืึทืจ ืคึผืจืึทื˜ืขืงื˜ื™ื ื’ ื”ื™ื’ืข ืื™ื ื˜ืขืจื ืขื˜ ื’ื™ื™ื˜ื•ื•ื™ื™ื–.

ื•ื•ื™ ืฆื• ื‘ืึทืฉื™ืฆืŸ ื–ื™ืš. ื“ืขืจ ืึทื˜ืึทืงืขืจ ื“ืึทืจืฃ ืฉื™ืงืŸ ืจืขื’ื•ืœืขืจ ืจื™ืงื•ื•ืขืก ืฆื• ื“ืขืงืจื™ืคึผื˜ ื“ื™ ื“ืึทื˜ืŸ. ืื™ืŸ VMware ืจืขืงืึธืžืขื ื“ื™ืจืŸ ืจืขื“ื•ืฆื™ืจืŸ ื“ื™ ื’ืขื“ื•ื™ืขืจ ืคื•ืŸ SSLSessionCacheTimeout ืคื•ืŸ ืคื™ื ืฃ ืžื™ื ื•ื˜ (ืคืขืœื™ืงื™ื™ึทื˜ ืจืขืงืึธืžืขื ื“ืึทืฆื™ืข) ืฆื• 30 ืกืขืงื•ื ื“ืขืก. ื“ืขืจ ืฆื•ื’ืึทื ื’ ื•ื•ืขื˜ ืžืึทื›ืŸ ืขืก ืžืขืจ ืฉื•ื•ืขืจ ืคึฟืึทืจ ืึทื˜ืึทืงืขืจื– ืฆื• ื™ื ืกื˜ืจื•ืžืขื ื˜ ื–ื™ื™ืขืจ ืคึผืœืึทื ื–, ื›ืึธื˜ืฉ ืขืก ื•ื•ืขื˜ ื”ืึธื‘ืŸ ืขื˜ืœืขื›ืข ื ืขื’ืึทื˜ื™ื•ื• ืคึผืจืึทืœ ืื•ื™ืฃ ืคืึธืจืฉื˜ืขืœื•ื ื’. ืื™ืŸ ืึทื“ื™ืฉืึทืŸ, ืื™ืจ ื“ืึทืจืคึฟืŸ ืฆื• ืคึฟืึทืจืฉื˜ื™ื™ืŸ ืึทื– ื“ื™ BEAST ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืงืขืŸ ื‘ืึทืœื“ ื•ื•ืขืจืŸ ืึท ื–ืึทืš ืคื•ืŸ ื“ืขืจ ืคืึทืจื’ืึทื ื’ืขื ื”ื™ื™ื˜ ืื•ื™ืฃ ื–ื™ืš - ื–ื™ื ื˜ 2020, ื“ื™ ื’ืจืขืกื˜ืข ื‘ืจืึทื•ื–ืขืจื– ืึธืคึผืฉื˜ืขืœ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ TLS 1.0 ืื•ืŸ 1.1. ืื™ืŸ ืงื™ื™ืŸ ืคืึทืœ, ื•ื•ื™ื™ื ื™ืงืขืจ ื•ื•ื™ 1,5% ืคื•ืŸ ืึทืœืข ื‘ืœืขื˜ืขืจืขืจ ื™ื•ื–ืขืจื– ืึทืจื‘ืขื˜ ืžื™ื˜ ื“ื™ ืคึผืจืึธื˜ืึธืงืึธืœืก.

ื“ืขืจื˜ืจื™ื ืงืขืŸ

ื“ืึธืก ืื™ื– ืึท ืงืจื™ื™ึทื–-ืคึผืจืึธื˜ืึธืงืึธืœ ื‘ืึทืคืึทืœืŸ ื•ื•ืึธืก ืขืงืกืคึผืœื•ื™ืฅ ื‘ืึทื’ื– ืื™ืŸ ื“ื™ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ SSLv2 ืžื™ื˜ 40-ื‘ื™ืกืœ RSA ืฉืœื™ืกืœืขืŸ. ื“ืขืจ ืึทื˜ืึทืงืขืจ ืœื™ืกืึทื ื– ืฆื• ื”ื•ื ื“ืขืจื˜ืขืจ ืคื•ืŸ TLS ืงืึทื ืขืงืฉืึทื ื– ืคื•ืŸ ื“ื™ ืฆื™ืœ ืื•ืŸ ืกืขื ื“ื– ืกืคึผืขืฆื™ืขืœ ืคึผืึทืงื™ืฅ ืฆื• ืึท SSLv2 ืกืขืจื•ื•ืขืจ ื ื™ืฆืŸ ื“ื™ ื–ืขืœื‘ืข ืคึผืจื™ื•ื•ืึทื˜ ืฉืœื™ืกืœ. ื ื™ืฆืŸ ื‘ืœืฒื›ืขื ื‘ืื˜ืฉืขืจ ืื˜ืืงืข, ืึท ื”ืขืงืขืจ ืงืขื ืขืŸ ื“ืขืงืจื™ืคึผื˜ ืื™ื™ื ืขืจ ืคื•ืŸ ื•ื•ืขื’ืŸ ืึท ื˜ื•ื™ื–ื ื˜ ืงืœื™ืขื ื˜ TLS ืกืขืฉืึทื ื–.

DROWN ืขืจืฉื˜ืขืจ ื’ืขื•ื•ืืจืŸ ื‘ืืงืื ื˜ ืื™ืŸ 2016 - ื“ืขืžืึธืœื˜ ืขืก ืื™ื– ื’ืขื•ื•ืขืŸ ื ื“ืจื™ื˜ืœ ืคื•ืŸ ืกืขืจื•ื•ืขืจืก ื–ืขื ืขืŸ ืึทืคืขืงื˜ืึทื“ ืื™ืŸ ื“ื™ ื•ื•ืขืœื˜. ื”ื™ื™ึทื ื˜ ืขืก ื”ืื˜ ื ื™ืฉื˜ ืคืึทืจืœืึธืจืŸ ื–ื™ื™ึทืŸ ืฉื™ื™ื›ื•ืช. ืคื•ืŸ ื“ื™ 150 ืžืขืจืกื˜ ืคืึธืœืงืก ื–ื™ื™ื˜ืœืขืš, 2% ื–ืขื ืขืŸ ื ืึธืš ืฉื˜ื™ืฆืŸ SSLv2 ืื•ืŸ ืฉืคึผื™ืจืขื•ื•ื“ื™ืง ืขื ืงืจื™ืคึผืฉืึทืŸ ืžืขืงืึทื ื™ื–ืึทืžื–.

ื•ื•ื™ ืฆื• ื‘ืึทืฉื™ืฆืŸ ื–ื™ืš. ืขืก ืื™ื– ื ื™ื™ื˜ื™ืง ืฆื• ื™ื ืกื˜ืึทืœื™ืจืŸ ืคึผืึทื˜ืฉืึทื– ืคืืจื’ืขืœื™ื™ื’ื˜ ื“ื•ืจืš ื“ื™ ื“ืขื•ื•ืขืœืึธืคึผืขืจืก ืคื•ืŸ ืงืจื™ืคึผื˜ืึธื’ืจืึทืคื™ืง ืœื™ื™ื‘ืจืขืจื™ื– ื•ื•ืึธืก ื“ื™ืกื™ื™ื‘ืึทืœ SSLv2 ืฉื˜ื™ืฆืŸ. ืคึฟืึทืจ ื‘ื™ื™ึทืฉืคึผื™ืœ, ืฆื•ื•ื™ื™ ืึทื–ืึท ืคึผืึทื˜ืฉืึทื– ื–ืขื ืขืŸ ื“ืขืจืœืื ื’ื˜ ืคึฟืึทืจ OpenSSL (ืื™ืŸ 2016 ื“ืึธืก ื–ืขื ืขืŸ ื’ืขื•ื•ืขืŸ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ 1.0.1 ืก ืื•ืŸ 1.0.2 ื’). ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื•ื ื’ืขืŸ ืื•ืŸ ื™ื ืกื˜ืจืึทืงืฉืึทื ื– ืคึฟืึทืจ ื“ื™ืกื™ื™ื‘ืึทืœื™ื ื’ ื“ื™ ืฉืคึผื™ืจืขื•ื•ื“ื™ืง ืคึผืจืึธื˜ืึธืงืึธืœ ื–ืขื ืขืŸ ืื•ื™ืš ืืจื•ื™ืก ืื™ืŸ ืจื•ื™ื˜ ื”ืึทื˜, ืึทืคึผืึทื˜ืฉื™, ื“ืขื‘ื™ืึทืŸ.

"ื ืžื™ื˜ืœ ืงืขืŸ ื–ื™ื™ืŸ ืฉืคึผื™ืจืขื•ื•ื“ื™ืง ืฆื• DROWN ืื•ื™ื‘ ื–ื™ื™ืŸ ืฉืœื™ืกืœืขืŸ ื–ืขื ืขืŸ ื’ืขื ื™ืฆื˜ ื“ื•ืจืš ืึท ื“ืจื™ื˜-ืคึผืึทืจื˜ื™ื™ ืกืขืจื•ื•ืขืจ ืžื™ื˜ SSLv2, ืึทื–ืึท ื•ื•ื™ ืึท ืคึผืึธืกื˜ ืกืขืจื•ื•ืขืจ," ื”ืขืจื•ืช ื“ืขืจ ื”ื•ื™ืคึผื˜ ืคื•ืŸ ื“ืขืจ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’ ืึธืคึผื˜ื™ื™ืœื•ื ื’ IaaS ืฉืคึผื™ื™ึทื–ืขืจ 1cloud.ru ืกืขืจื’ื™ื™ ื‘ืขืœืงื™ืŸ. - ื“ื™ ืกื™ื˜ื•ืึทืฆื™ืข ืึทืงืขืจื– ืื•ื™ื‘ ืขื˜ืœืขื›ืข ืกืขืจื•ื•ืขืจืก ื ื•ืฆืŸ ืึท ืคึผืจืึธืกื˜ SSL ื‘ืึทื•ื•ื™ื™ึทื–ืŸ. ืื™ืŸ ื“ืขื ืคืึทืœ, ืื™ืจ ื“ืึทืจืคึฟืŸ ืฆื• ื“ื™ืกื™ื™ื‘ืึทืœ SSLv2 ืฉื˜ื™ืฆืŸ ืื•ื™ืฃ ืึทืœืข ืžืืฉื™ื ืขืŸ."

ืื™ืจ ืงืขื ืขืŸ ืงืึธื ื˜ืจืึธืœื™ืจืŸ ืฆื™ ื“ื™ื™ืŸ ืกื™ืกื˜ืขื ื“ืึทืจืฃ ื–ื™ื™ืŸ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงื˜ ืžื™ื˜ ืึท ืกืคึผืขืฆื™ืขืœืข ื™ื•ื˜ื™ืœืึทื˜ื™ื– - ืขืก ืื™ื– ื“ืขื•ื•ืขืœืึธืคึผืขื“ ื“ื•ืจืš ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื–ื™ื›ืขืจื”ื™ื™ื˜ ืกืคึผืขืฉืึทืœืึทืกืฅ ื•ื•ืึธืก ื“ื™ืกืงืึทื•ื•ืขืจื“ DROWN. ืื™ืจ ืงืขื ื˜ ืœื™ื™ืขื ืขืŸ ืžืขืจ ื•ื•ืขื’ืŸ ืจืขืงืึทืžืึทื ื“ื™ื™ืฉืึทื ื– ืฉื™ื™ึทื›ื•ืช ืฆื• ืฉื•ืฅ ืงืขื’ืŸ ื“ืขื ื˜ื™ืคึผ ืคื•ืŸ ื‘ืึทืคืึทืœืŸ ืื™ืŸ ืคึผืึธืกื˜ืŸ ืื•ื™ืฃ ื“ื™ OpenSSL ื•ื•ืขื‘ื–ื™ื™ื˜ืœ.

ื”ืขืึทืจื˜ื‘ืœืขืขื“

ืื™ื™ื ืขืจ ืคื•ืŸ ื“ื™ ื’ืจืขืกื˜ืข ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืื™ืŸ ื•ื•ื™ื™ื›ื•ื•ืืจื’ ืื™ื– ื”ืขืึทืจื˜ื‘ืœืขืขื“. ืขืก ืื™ื– ื’ืขื•ื•ืขืŸ ื“ื™ืกืงืึทื•ื•ืขืจื“ ืื™ืŸ 2014 ืื™ืŸ ื“ื™ OpenSSL ื‘ื™ื‘ืœื™ืึธื˜ืขืง. ืื™ืŸ ื“ืขืจ ืฆื™ื™ื˜ ืคื•ืŸ ื“ื™ ื–ืฉื•ืง ืžืขืœื“ืŸ, ื“ื™ ื ื•ืžืขืจ ืคื•ืŸ ืฉืคึผื™ืจืขื•ื•ื“ื™ืง ื•ื•ืขื‘ืกื™ื˜ืขืก ืื™ื– ื’ืขืฉืืฆื˜ ื’ืขื•ื•ืืจืŸ ืื•ื™ืฃ ื ื”ืืœื‘ืŸ ืžื™ืœื™ืืŸ - ื“ืึธืก ืื™ื– ื‘ืขืขืจืขืš 17% ืคื•ืŸ ืคึผืจืึธื˜ืขืงื˜ืขื“ ืจืขืกื•ืจืกืŸ ืื•ื™ืฃ ื“ื™ ื ืขืฅ.

ื“ื™ ื‘ืึทืคืึทืœืŸ ืื™ื– ื™ืžืคึผืœืึทืžืขื ืึทื“ ื“ื•ืจืš ื“ื™ ืงืœื™ื™ืŸ Heartbeat TLS ืคืึทืจืœืขื ื’ืขืจื•ื ื’ ืžืึธื“ื•ืœืข. ื“ืขืจ TLS ืคึผืจืึธื˜ืึธืงืึธืœ ืจื™ืงื•ื•ื™ื™ืขืจื– ืึทื– ื“ืึทื˜ืŸ ืงืึทื ื˜ื™ื ื™ื•ืึทืกืœื™ ื˜ืจืึทื ืกืžื™ื˜ื˜ืขื“. ืื™ืŸ ืคืึทืœ ืคื•ืŸ ืคึผืจืึทืœืึธื ื’ื“ ื“ืึทื•ื ื˜ื™ื™ื, ืึท ื‘ืจืขื›ืŸ ืึทืงืขืจื– ืื•ืŸ ื“ื™ ืงืฉืจ ืžื•ื–ืŸ ื–ื™ื™ืŸ ืฉื™ื™ึทืขืš-ื’ืขื’ืจื™ื ื“ืขื˜. ืฆื• ืงืึธืคึผืข ืžื™ื˜ ื“ืขื ืคึผืจืึธื‘ืœืขื, ืกืขืจื•ื•ืขืจืก ืื•ืŸ ืงืœื™ื™ืึทื ืฅ ืงื™ื ืกื˜ืœืขืš "ืจืึทืฉ" ื“ืขื ืงืึทื ืึทืœ (ืจืคืง 6520, ืคึผ.5), ื˜ืจืึทื ืกืžื™ื˜ื™ื ื’ ืึท ืคึผืึทืงืึทื˜ ืคื•ืŸ ื˜ืจืึทืค - ืœืขื ื’. ืื•ื™ื‘ ืขืก ืื™ื– ื’ืขื•ื•ืขืŸ ื’ืจืขืกืขืจ ื•ื•ื™ ื“ื™ ื’ืื ืฆืข ืคึผืึทืงืึทื˜, ื“ื™ ืฉืคึผื™ืจืขื•ื•ื“ื™ืง ื•ื•ืขืจืกื™ืขืก ืคื•ืŸ OpenSSL ืœื™ื™ืขื ืขืŸ ื–ื›ึผืจื•ืŸ ื•ื•ื™ื™ึทื˜ืขืจ ืคื•ืŸ ื“ื™ ืึทืœืึทืงื™ื™ื˜ื™ื“ ื‘ืึทืคืขืจ. ื“ืขืจ ื’ืขื’ื ื˜ ืงืขืŸ ืึทื ื˜ื”ืึทืœื˜ืŸ ืงื™ื™ืŸ ื“ืึทื˜ืŸ, ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ืคึผืจื™ื•ื•ืึทื˜ ืขื ืงืจื™ืคึผืฉืึทืŸ ืฉืœื™ืกืœืขืŸ ืื•ืŸ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื•ื•ืขื’ืŸ ืื ื“ืขืจืข ืงืึทื ืขืงืฉืึทื ื–.

ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ื’ืขื•ื•ืขืŸ ืคืึธืจืฉื˜ืขืœืŸ ืื™ืŸ ืึทืœืข ื•ื•ืขืจืกื™ืขืก ืคื•ืŸ ื“ืขืจ ื‘ื™ื‘ืœื™ืึธื˜ืขืง ืฆื•ื•ื™ืฉืŸ 1.0.1 ืื•ืŸ 1.0.1f ื™ื ืงืœื•ืกื™ื•ื•, ื•ื•ื™ ื’ืขื–ื•ื ื˜ ื•ื•ื™ ืื™ืŸ ืึท ื ื•ืžืขืจ ืคื•ืŸ ืึธืคึผืขืจื™ื™ื˜ื™ื ื’ ืกื™ืกื˜ืขืžืขืŸ - Ubuntu ืึทืจื•ื™ืฃ ืฆื• 12.04.4, CentOS ืขืœื˜ืขืจ ื•ื•ื™ 6.5, OpenBSD 5.3 ืื•ืŸ ืื ื“ืขืจืข. ืขืก ืื™ื– ืึท ื’ืึทื ืฅ ืจืฉื™ืžื” ืื•ื™ืฃ ืึท ื•ื•ืขื‘ื–ื™ื™ื˜ืœ ื“ืขื“ืึทืงื™ื™ื˜ืึทื“ ืฆื• ื”ืขืึทืจื˜ื‘ืœืขืขื“. ื›ืึธื˜ืฉ ืคึผืึทื˜ืฉืึทื– ืงืขื’ืŸ ื“ืขื ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ื–ืขื ืขืŸ ื‘ืืคืจื™ื™ื˜ ื›ึผืžืขื˜ ืชื™ื›ืฃ ื ืึธืš ื–ื™ื™ึทืŸ ื•ืคื“ืขืงื•ื ื’, ื“ื™ ืคึผืจืึธื‘ืœืขื ื‘ืœื™ื™ื‘ื˜ ื‘ืึทื˜ื™ื™ึทื˜ื™ืง ืฆื• ื“ืขื ื˜ืึธื’. ืฆื•ืจื™ืง ืื™ืŸ 2017 ื›ึผืžืขื˜ 200 ื˜ื•ื™ื–ื ื˜ ื–ื™ื™ื˜ืœืขืš ื’ืขืืจื‘ืขื˜, ืกืึทืกืขืคึผื˜ืึทื‘ืึทืœ ืฆื• ื”ืขืึทืจื˜ื‘ืœืขืขื“.

ื•ื•ื™ ืฆื• ื‘ืึทืฉื™ืฆืŸ ื–ื™ืš. ืขืก ืื™ื– ื ื™ื™ื˜ื™ืง ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ OpenSSL ืึทืจื•ื™ืฃ ืฆื• ื•ื•ืขืจืกื™ืข 1.0.1ื’ ืึธื“ืขืจ ื”ืขื›ืขืจ. ืื™ืจ ืงืขื ื˜ ืื•ื™ืš ื“ื™ืกื™ื™ื‘ืึทืœ ื”ืขืึทืจื˜ื‘ืขืึทื˜ ืจื™ืงื•ื•ืขืก ืžืึทื ื™ื•ืึทืœื™ ื ื™ืฆืŸ ื“ื™ DOPENSSL_NO_HEARTBEATS ืึธืคึผืฆื™ืข. ื ืึธืš ื“ื™ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ, ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื–ื™ื›ืขืจื”ื™ื™ื˜ ืกืคึผืขืฉืึทืœืึทืกืฅ ืจืขืงืึธืžืขื ื“ื™ืจืŸ ืจื™ืกื•ื™ืกืŸ ืกืกืœ ืกืขืจื˜ื™ืคื™ืงืึทืฅ. ื ืคืึทืจื‘ื™ื™ึทื˜ ืื™ื– ื“ืืจืฃ ืื™ืŸ ืคืึทืœ ื“ื™ ื“ืึทื˜ืŸ ืื•ื™ืฃ ื“ื™ ืขื ืงืจื™ืคึผืฉืึทืŸ ืฉืœื™ืกืœืขืŸ ืขื ื“ืก ืื™ืŸ ื“ื™ ื”ืขื ื˜ ืคื•ืŸ ื›ืึทืงืขืจื–.

ืกืขืจื˜ื™ืคื™ืงืึทื˜ ืกืึทื‘ืกื˜ื™ื˜ื•ืฉืึทืŸ

ื ื’ืขืจืื˜ืŸ ื ืึธื“ืข ืžื™ื˜ ืึท ืœืึทื“ื–ืฉื™ื˜ืึทืžืึทื˜ ืกืกืœ ื‘ืึทื•ื•ื™ื™ึทื–ืŸ ืื™ื– ืื™ื ืกื˜ืึทืœื™ืจืŸ ืฆื•ื•ื™ืฉืŸ ื“ื™ ื‘ืึทื ื™ืฆืขืจ ืื•ืŸ ื“ื™ ืกืขืจื•ื•ืขืจ, ืึทืงื˜ื™ื•ื•ืœื™ ื™ื ื˜ืขืจืกืขืคึผื˜ื™ื ื’ ืคืึทืจืงืขืจ. ื“ืขืจ ื ืึธื“ืข ื™ืžืคึผืขืจืกืึทื ื™ื™ืฅ ืึท ืœืึทื“ื–ืฉื™ื˜ืึทืžืึทื˜ ืกืขืจื•ื•ืขืจ ื“ื•ืจืš ืคึผืจื™ื–ืขื ื˜ื™ื ื’ ืึท ื’ื™ืœื˜ื™ืง ื‘ืึทื•ื•ื™ื™ึทื–ืŸ, ืื•ืŸ ืขืก ืื™ื– ืžืขื’ืœืขืš ืฆื• ื“ื•ืจื›ืคื™ืจืŸ ืึท MITM ื‘ืึทืคืึทืœืŸ.

ืœื•ื™ื˜ ืคืึธืจืฉื•ื ื’ ื˜ื™ืžื– ืคื•ืŸ ืžืึธื–ื™ืœืœืึท, Google ืื•ืŸ ืึท ื ื•ืžืขืจ ืคื•ืŸ ืื•ื ื™ื•ื•ืขืจืกื™ื˜ืขื˜ืŸ, ื‘ืขืขืจืขืš 11% ืคื•ืŸ ื–ื™ื›ืขืจ ืงืึทื ืขืงืฉืึทื ื– ืื•ื™ืฃ ื“ื™ ื ืขืฅ ื–ืขื ืขืŸ ื™ื•ื•ื–ื“ืจืึทืคึผื˜. ื“ืึธืก ืื™ื– ื“ืขืจ ืจืขื–ื•ืœื˜ืึทื˜ ืคื•ืŸ ื™ื ืกื˜ืึธืœื™ื ื’ ืกืึทืกืคึผื™ืฉืึทืก ื•ื•ืึธืจืฆืœ ืกืขืจื˜ื™ืคื™ืงืึทืฅ ืื•ื™ืฃ ื“ื™ ืงืึธืžืคึผื™ื•ื˜ืขืจืก ืคื•ืŸ ื ื™ืฆืขืจืก.

ื•ื•ื™ ืฆื• ื‘ืึทืฉื™ืฆืŸ ื–ื™ืš. ื ื™ืฆืŸ ื“ื™ ืกืขืจื•ื•ื™ืกืขืก ืคื•ืŸ ืคืึทืจืœืึธื–ืœืขืš SSL ืคึผืจืึทื•ื•ื™ื™ื“ืขืจื–. ืื™ืจ ืงืขื ืขืŸ ืงืึธื ื˜ืจืึธืœื™ืจืŸ ื“ื™ "ืงื•ื•ืึทืœื™ื˜ืขื˜" ืคื•ืŸ ืกืขืจื˜ื™ืคื™ืงืึทืฅ ื ื™ืฆืŸ ื“ื™ ืกืขืจื•ื•ื™ืก ืกืขืจื˜ื™ืคื™ืงืึทื˜ ื“ื•ืจื›ื–ืขื™ืงื™ื™ึทื˜ (CT). ื•ื•ืึธืœืงืŸ ืคึผืจืึทื•ื•ื™ื™ื“ืขืจื– ืงืขื ืขืŸ ืื•ื™ืš ื”ืขืœืคึฟืŸ ื“ื™ื˜ืขืงื˜ื™ื ื’ ื™ื•ื•ื–ื“ืจืึทืคึผื™ื ื’; ืขื˜ืœืขื›ืข ื’ืจื•ื™ืก ืงืึธืžืคึผืึทื ื™ืขืก ืคืึธืจืฉืœืึธื’ืŸ ืฉื•ื™ืŸ ืกืคึผืขืฉืึทืœื™ื™ื–ื“ ืžื›ืฉื™ืจื™ื ืคึฟืึทืจ ืžืึธื ื™ื˜ืึธืจื™ื ื’ TLS ืงืึทื ืขืงืฉืึทื ื–.

ืืŸ ืื ื“ืขืจ ืื•ืคึฟืŸ ืคื•ืŸ ืฉื•ืฅ ื•ื•ืขื˜ ื–ื™ื™ืŸ ืึท ื ื™ื™ึทืข ื ืึธืจืžืึทืœ ACME, ื•ื•ืึธืก ืึธื˜ืึทืžื™ื™ืฅ ื“ื™ ืงืึทื‘ืึธืœืข ืคื•ืŸ โ€‹โ€‹ืกืกืœ ืกืขืจื˜ื™ืคื™ืงืึทืฅ. ืื™ืŸ ื“ืขืจ ื–ืขืœื‘ื™ืงืขืจ ืฆื™ื™ื˜, ืขืก ื•ื•ืขื˜ ืœื™ื™ื’ืŸ ื ืึธืš ืžืขืงืึทื ื™ื–ืึทืžื– ืฆื• ื‘ืึทืฉื˜ืขื˜ื™ืงืŸ ื“ื™ ื‘ืึทื–ื™ืฆืขืจ ืคื•ืŸ ื“ืขื ืคึผืœืึทืฅ. ืžืขืจ ื•ื•ืขื’ืŸ ืื™ื ืžื™ืจ ื”ืื‘ืŸ ื’ืขืฉืจื™ื‘ืŸ ืื™ืŸ ืื™ื™ื ืขื ืคื•ืŸ ืื•ื ื–ืขืจืข ืคืจื™ืขืจื“ื™ื’ืข ืžืื˜ืขืจื™ืืœืŸ.

ืคึผืึธื˜ืขื ืฆื™ืขืœ ืื ืคืืœืŸ ืื•ื™ืฃ HTTPS ืื•ืŸ ื•ื•ื™ ืฆื• ื‘ืึทืฉื™ืฆืŸ ืงืขื’ืŸ ื–ื™ื™
/ืคืœื™ืงืจ/ ื™ื•ืจื™ ืกืึทืžืึธื™ืœืึธื•ื• / CC BY

ืคึผืจืึทืกืคึผืขืงืก ืคึฟืึทืจ ื”ื˜ื˜ืคึผืก

ื˜ืจืึธืฅ ืึท ื ื•ืžืขืจ ืคื•ืŸ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื–, IT ื“ื–ืฉื™ื™ืึทื ืฅ ืื•ืŸ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื–ื™ื›ืขืจื”ื™ื™ื˜ ืขืงืกืคึผืขืจืฅ ื–ืขื ืขืŸ ื–ื™ื›ืขืจ ืื™ืŸ ื“ืขืจ ืฆื•ืงื•ื ืคึฟื˜ ืคื•ืŸ ื“ืขื ืคึผืจืึธื˜ืึธืงืึธืœ. ืคึฟืึทืจ ืึทืงื˜ื™ื•ื• ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ HTTPS ืื“ื•ื•ืืงืื˜ืŸ WWW ื‘ืืฉืขืคืขืจ Tim Berners-Lee. ืœื•ื™ื˜ ืื™ื, ืžื™ื˜ ื“ืขืจ ืฆื™ื™ื˜ TLS ื•ื•ืขื˜ ื•ื•ืขืจืŸ ืžืขืจ ื–ื™ื›ืขืจ, ื•ื•ืึธืก ื•ื•ืขื˜ ื‘ืื˜ื™ื™ื˜ื™ืง ืคึฟืึทืจื‘ืขืกืขืจืŸ ื“ื™ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืคื•ืŸ ืงืึทื ืขืงืฉืึทื ื–. ื‘ืขืจื ืขืจึพืœื™ ื”ืึธื˜ ื“ืึธืก ืึทืคึฟื™ืœื• ืคึฟืึธืจื’ืขืฉืœืึธื’ืŸ ื•ื•ืขื˜ ื“ืขืจืฉื™ื™ึทื ืขืŸ ืื™ืŸ ื“ืขืจ ืฆื•ืงื•ื ืคึฟื˜ ืงืœื™ืขื ื˜ ืกืขืจื˜ื™ืคื™ืงืึทืฅ ืคึฟืึทืจ ืื™ื“ืขื ื˜ื™ื˜ืขื˜ ืึธื˜ืขื ื˜ืึทืงื™ื™ืฉืึทืŸ. ื–ื™ื™ ื•ื•ืขืœืŸ ื”ืขืœืคึฟืŸ ืคึฟืึทืจื‘ืขืกืขืจืŸ ืกืขืจื•ื•ืขืจ ืฉื•ืฅ ืคื•ืŸ ืึทื˜ืึทืงืขืจื–.

ืขืก ืื™ื– ืื•ื™ืš ืคึผืœืึทื ื ืขื“ ืฆื• ืึทื ื˜ื•ื•ื™ืงืœืขืŸ SSL / TLS ื˜ืขื›ื ืึธืœืึธื’ื™ืข ื ื™ืฆืŸ ืžืึทืฉื™ืŸ ืœืขืจื ืขืŸ - ืงืœื•ื’ ืึทืœื’ืขืจื™ื“ืึทืžื– ื•ื•ืขื˜ ื–ื™ื™ืŸ ืคืึทืจืึทื ื˜ื•ื•ืึธืจื˜ืœืขืš ืคึฟืึทืจ ืคื™ืœื˜ืขืจื™ื ื’ ื‘ื™ื™ื–ืข ืคืึทืจืงืขืจ. ืžื™ื˜ HTTPS ืงืึทื ืขืงืฉืึทื ื–, ืึทื“ืžื™ื ื™ืกื˜ืจืึทื˜ืึธืจืก ื”ืึธื‘ืŸ ืงื™ื™ืŸ ื•ื•ืขื’ ืฆื• ื’ืขืคึฟื™ื ืขืŸ ื“ื™ ืื™ื ื”ืึทืœื˜ ืคื•ืŸ ื™ื ืงืจื™ืคึผื˜ื™ื“ ืึทืจื˜ื™ืงืœืขืŸ, ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ื“ื™ื˜ืขืงื˜ื™ื ื’ ืจื™ืงื•ื•ืขืก ืคื•ืŸ ืžืึทืœื•ื•ืึทืจืข. ืฉื•ื™ืŸ ื”ื™ื™ึทื ื˜, ื ืขื•ืจืึทืœ ื ืขื˜ื•ื•ืึธืจืงืก ื–ืขื ืขืŸ ื‘ื™ื›ื•ืœืช ืฆื• ืคื™ืœื˜ืขืจ ืคึผืึทื˜ืขื ื˜ืฉืึทืœื™ ื’ืขืคืขืจืœืขืš ืคึผืึทืงื™ืฅ ืžื™ื˜ 90% ืึทืงื™ืขืจืึทืกื™. (ืคึผืจืขื–ืขื ื˜ื™ืจื•ื ื’ ืจื•ืง 23).

ืคื™ื™ื ื“ื™ื ื’ื–

ืจื•ื‘ึฟ ืื ืคืืœืŸ ืื•ื™ืฃ HTTPS ื–ืขื ืขืŸ ื ื™ืฉื˜ ืฉื™ื™ึทื›ื•ืช ืฆื• ืคึผืจืึธื‘ืœืขืžืก ืžื™ื˜ ื“ืขื ืคึผืจืึธื˜ืึธืงืึธืœ ื–ื™ืš, ืึธื‘ืขืจ ืฆื• ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ืึทื•ื˜ื“ื™ื™ื˜ื™ื“ ืขื ืงืจื™ืคึผืฉืึทืŸ ืžืขืงืึทื ื™ื–ืึทืžื–. ื“ื™ IT ืื™ื ื“ื•ืกื˜ืจื™ืข ื”ื™ื™ื‘ื˜ ืฆื• ื‘ื™ืกืœืขื›ื•ื•ื™ื™ึทื– ืคืึทืจืœืึธื–ืŸ ื“ื™ ืคืจื™ืขืจื“ื™ืงืข ื“ื•ืจ ืคึผืจืึธื˜ืึธืงืึธืœืก ืื•ืŸ ืคืึธืจืฉืœืึธื’ืŸ ื ื™ื™ึทืข ืžื›ืฉื™ืจื™ื ืคึฟืึทืจ ื–ื•ื›ืŸ ืคึฟืึทืจ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื–. ืื™ืŸ ื“ืขืจ ืฆื•ืงื•ื ืคึฟื˜, ื“ื™ ืžื›ืฉื™ืจื™ื ื•ื•ืขื˜ ื•ื•ืขืจืŸ ื™ื ืงืจื™ืกื™ื ื’ืœื™ ื™ื ื˜ืขืœื™ื’ืขื ื˜.

ื ืึธืš ืœื™ื ืงืก ืื•ื™ืฃ ื“ืขืจ ื˜ืขืžืข:

ืžืงื•ืจ: www.habr.com

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’