ื’ื•ื’ืœ ื”ืื˜ ืคืืจืขืคื ื˜ืœืขื›ื˜ ืึท ื‘ื™ื‘ืœื™ืึธื˜ืขืง ืฆื• ื™ื“ืขื ื˜ื™ืคื™ืฆื™ืจืŸ ืคึผืจืึธื‘ืœืขืžืึทื˜ื™ืง ืงืจื™ืคึผื˜ืึธื’ืจืึทืคื™ืง ืฉืœื™ืกืœืขืŸ

ืžื™ื˜ื’ืœื™ื“ืขืจ ืคื•ืŸ ื“ืขืจ Google ืกืขืงื•ืจื™ื˜ื™ ืžืึทื ืฉืึทืคึฟื˜ ื”ืึธื‘ืŸ ืืจื•ื™ืก ืึทืŸ ืึธืคึฟืŸ ืžืงื•ืจ ื‘ื™ื‘ืœื™ืึธื˜ืขืง, Paranoid, ื“ื™ื–ื™ื™ื ื“ ืฆื• ื™ื“ืขื ื˜ื™ืคื™ืฆื™ืจืŸ ืฉื•ื•ืึทืš ืงืจื™ืคึผื˜ืึธื’ืจืึทืคื™ืง ืึทืจื˜ืึทืคืึทืงืฅ, ืึทื–ืึท ื•ื•ื™ ืขืคื ื˜ืœืขืš ืฉืœื™ืกืœืขืŸ ืื•ืŸ ื“ื™ื’ื™ื˜ืึทืœ ืกื™ื’ื ืึทื˜ืฉืขืจื–, ื‘ืืฉืืคืŸ ืื™ืŸ ืฉืคึผื™ืจืขื•ื•ื“ื™ืง ื™ื™ึทื–ื ื•ื•ืึทืจื’ (HSM) ืื•ืŸ ื•ื•ื™ื™ื›ื•ื•ืืจื’ ืกื™ืกื˜ืขืžืขืŸ. ื“ืขืจ ืงืึธื“ ืื™ื– ื’ืขืฉืจื™ื‘ืŸ ืื™ืŸ ืคึผื™ื˜ื”ืึธืŸ ืื•ืŸ ืคื•ื ืื ื“ืขืจื’ืขื˜ื™ื™ืœื˜ ืื•ื ื˜ืขืจ ื“ื™ Apache 2.0 ื“ืขืจืœื•ื™ื‘ืขื ื™ืฉ.

ื“ืขืจ ืคึผืจื•ื™ืขืงื˜ ืงืขืŸ ื–ื™ื™ืŸ ื ื•ืฆื™ืง ืคึฟืึทืจ ืžื™ื ืึทืฆืึทื“ ืึทืกืกืขืกืก ื“ื™ ื ื•ืฆืŸ ืคื•ืŸ ืึทืœื’ืขืจื™ื“ืึทืžื– ืื•ืŸ ืœื™ื™ื‘ืจืขืจื™ื– ื•ื•ืึธืก ื”ืึธื‘ืŸ ื‘ืึทื•ื•ื•ืกื˜ ื’ืึทืคึผืก ืื•ืŸ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ื•ื•ืึธืก ื•ื•ื™ืจืงืŸ ื“ื™ ืจื™ืœื™ื™ืึทื‘ื™ืœืึทื˜ื™ ืคื•ืŸ ื“ื–ืฉืขื ืขืจื™ื™ื˜ืึทื“ ืฉืœื™ืกืœืขืŸ ืื•ืŸ ื“ื™ื’ื™ื˜ืึทืœ ืกื™ื’ื ืึทื˜ืฉืขืจื– ืื•ื™ื‘ ื“ื™ ืึทืจื˜ืึทืคืึทืงืฅ ื•ื•ืึธืก ื•ื•ืขืจืึทืคื™ื™ื“ ื–ืขื ืขืŸ ื“ื–ืฉืขื ืขืจื™ื™ื˜ืึทื“ ื“ื•ืจืš ื™ื™ึทื–ื ื•ื•ืึทืจื’ ื•ื•ืึธืก ืงืขื ืขืŸ ื ื™ื˜ ื–ื™ื™ืŸ ื•ื•ืขืจืึทืคื™ื™ื“ ืึธื“ืขืจ ื“ื•ืจืš ืคืืจืžืื›ื˜ ืงืึทืžืคึผืึธื•ื ืึทื ืฅ ื•ื•ืึธืก ืคืึธืจืฉื˜ืขืœืŸ ืึท ืฉื•ื•ืึทืจืฅ ืงืขืกื˜ืœ. ื“ื™ ื‘ื™ื‘ืœื™ืึธื˜ืขืง ืงืขื ืขืŸ ืื•ื™ืš ืคื•ื ืึทื ื“ืขืจืงืœื™ื™ึทื‘ืŸ ืฉื˜ืขืœื˜ ืคื•ืŸ ืคึผืกืขื•ื“ืึธืจืึทื ื“ืึธื ื ื•ืžืขืจืŸ ืคึฟืึทืจ ื“ื™ ืจื™ืœื™ื™ืึทื‘ื™ืœืึทื˜ื™ ืคื•ืŸ ื–ื™ื™ืขืจ ื’ืขื ืขืจืึทื˜ืึธืจ, ืื•ืŸ ืคึฟื•ืŸ ืึท ื’ืจื•ื™ืก ื–ืึทืžืœื•ื ื’ ืคื•ืŸ ืึทืจื˜ืึทืคืึทืงืฅ, ื™ื“ืขื ื˜ื™ืคื™ืฆื™ืจืŸ ื‘ื™ื– ืึทื”ืขืจ ืื•ืžื‘ืึทืงืึทื ื˜ ืคึผืจืึธื‘ืœืขืžืก ื•ื•ืึธืก ื–ืขื ืขืŸ ื’ืขืคึฟื™ืจื˜ ืคึฟื•ืŸ ืคึผืจืึธื’ืจืึทืžืžื™ื ื’ ืขืจืจืึธืจืก ืึธื“ืขืจ ื“ื™ ื ื•ืฆืŸ ืคื•ืŸ ืึทื ืจื™ืœื™ื™ืึทื‘ืึทืœ ืคึผืกืขื•ื“ืึธืจืึทื ื“ืึธื ื ื•ืžืขืจ ื’ืขื ืขืจืึทื˜ืึธืจืก.

ื•ื•ืขืŸ ืื™ืจ ื ื•ืฆืŸ ื“ื™ ืคืืจื’ืขืœื™ื™ื’ื˜ ื‘ื™ื‘ืœื™ืึธื˜ืขืง ืฆื• ืงืึธื ื˜ืจืึธืœื™ืจืŸ ื“ื™ ืื™ื ื”ืึทืœื˜ ืคื•ืŸ ื“ื™ CT (Certificate Transparency) ืขืคื ื˜ืœืขืš ืงืœืึธืฅ, ื•ื•ืึธืก ื›ื•ืœืœ ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื•ื•ืขื’ืŸ ืžืขืจ ื•ื•ื™ 7 ื‘ื™ืœื™ืึธืŸ ืกืขืจื˜ื™ืคื™ืงืึทืฅ, ืงื™ื™ืŸ ืคึผืจืึธื‘ืœืขืžืึทื˜ื™ืง ืขืคื ื˜ืœืขืš ืฉืœื™ืกืœืขืŸ ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ื™ืœื™ืคึผื˜ื™ืง ืงื•ืจื•ื•ืขืก (EC) ืื•ืŸ ื“ื™ื’ื™ื˜ืึทืœ ืกื™ื’ื ืึทื˜ืฉืขืจื– ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ื“ื™ ECDSA ืึทืœื’ืขืจื™ื“ืึทื ื–ืขื ืขืŸ ื’ืขืคึฟื•ื ืขืŸ ื’ืขื•ื•ืึธืจืŸ. , ืึธื‘ืขืจ ืคึผืจืึธื‘ืœืขืžืึทื˜ื™ืง ืฆื™ื‘ื•ืจ ืฉืœื™ืกืœืขืŸ ื–ืขื ืขืŸ ื’ืขืคึฟื•ื ืขืŸ ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ื“ื™ RSA ืึทืœื’ืขืจื™ื“ืึทื. ืื™ืŸ ื‘ืึทื–ื•ื ื“ืขืจ, 3586 ืึทื ื˜ืจืึทืกื˜ื™ื“ ืฉืœื™ืกืœืขืŸ ื–ืขื ืขืŸ ื™ื™ื“ืขื ืึทืคื™ื™ื“ ื•ื•ืึธืก ื–ืขื ืขืŸ ื“ื–ืฉืขื ืขืจื™ื™ื˜ืึทื“ ื“ื•ืจืš ืงืึธื“ ืžื™ื˜ ื“ื™ ืึทื ืคื™ืงืกื˜ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ CVE-2008-0166 ืื™ืŸ ื“ื™ OpenSSL ืคึผืขืงืœ ืคึฟืึทืจ ื“ืขื‘ื™ืึทืŸ, 2533 ืฉืœื™ืกืœืขืŸ ืคึฟืึทืจื‘ื•ื ื“ืŸ ืžื™ื˜ ื“ื™ CVE-2017-15361 ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ ื“ื™ ื™ื ืคื™ื ืขืึธืŸ ื‘ื™ื‘ืœื™ืึธื˜ืขืง, ืื•ืŸ 1860 ืฉืœื™ืกืœืขืŸ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืคึฟืึทืจื‘ื•ื ื“ืŸ ืžื™ื˜ ื“ื™ ื–ื•ื›ืŸ ืคึฟืึทืจ ื“ื™ ื’ืจืขืกื˜ืข ืคึผืจืึธืกื˜ ื“ื™ื•ื•ื™ื™ื–ืขืจ (GCD). ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื•ื•ืขื’ืŸ ืคึผืจืึธื‘ืœืขืžืึทื˜ื™ืง ืกืขืจื˜ื™ืคื™ืงืึทืฅ ื•ื•ืึธืก ื‘ืœื™ื™ื‘ืŸ ืื™ืŸ ื ื•ืฆืŸ ืื™ื– ื’ืขืฉื™ืงื˜ ืฆื• ืกืขืจื˜ืึทืคืึทืงื™ื™ืฉืึทืŸ ืื•ื™ื˜ืืจื™ื˜ืขื˜ืŸ ืคึฟืึทืจ ื–ื™ื™ืขืจ ืจื™ื•ื•ืึธื•ืงื™ื™ืฉืึทืŸ.

ื’ื•ื’ืœ ื”ืื˜ ืคืืจืขืคื ื˜ืœืขื›ื˜ ืึท ื‘ื™ื‘ืœื™ืึธื˜ืขืง ืฆื• ื™ื“ืขื ื˜ื™ืคื™ืฆื™ืจืŸ ืคึผืจืึธื‘ืœืขืžืึทื˜ื™ืง ืงืจื™ืคึผื˜ืึธื’ืจืึทืคื™ืง ืฉืœื™ืกืœืขืŸ


ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’