ExpressVPN ื“ื™ืกืงืึทื•ื•ืขืจื– ื“ื™ื•ื•ืขืœืึทืคึผืžืึทื ืฅ ืฉื™ื™ึทื›ื•ืช ืฆื• Lightway VPN ืคึผืจืึธื˜ืึธืงืึธืœ

ExpressVPN ื”ืื˜ ืึทื ืึทื•ื ืกื˜ ื“ื™ ืขืคึฟืขื ืขืŸ ืžืงื•ืจ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ื™ ืœื™ื’ื”ื˜ื•ื•ื™ื™ึท ืคึผืจืึธื˜ืึธืงืึธืœ, ื“ื™ื–ื™ื™ื ื“ ืฆื• ื“ืขืจื’ืจื™ื™ื›ืŸ ื“ื™ ืคืึทืกื˜ืึทืกื˜ ืงืึทื ืขืงืฉืึทืŸ ืกืขื˜ืึทืคึผ ืฆื™ื™ื˜ ื‘ืฉืขืช ื”ืึทืœื˜ืŸ ืึท ื”ื•ื™ืš ืžื“ืจื’ื” ืคื•ืŸ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืื•ืŸ ืจื™ืœื™ื™ืึทื‘ื™ืœืึทื˜ื™. ื“ืขืจ ืงืึธื“ ืื™ื– ื’ืขืฉืจื™ื‘ืŸ ืื™ืŸ C ืื•ืŸ ืคื•ื ืื ื“ืขืจื’ืขื˜ื™ื™ืœื˜ ืื•ื ื˜ืขืจ ื“ื™ GPLv2 ื“ืขืจืœื•ื™ื‘ืขื ื™ืฉ. ื“ื™ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืื™ื– ื–ื™ื™ืขืจ ืกืึธืœื™ื“ ืื•ืŸ ืคื™ืฅ ืื™ืŸ ืฆื•ื•ื™ื™ ื˜ื•ื™ื–ื ื˜ ืฉื•ืจื•ืช ืคื•ืŸ ืงืึธื“. ื“ืขืจืงืœืขืจื˜ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ืœื™ื ื•ืงืก, ื•ื•ื™ื ื“ืึธื•ื–, ืžืึทืงืึธืก, ื™ืึธืก, ืึทื ื“ืจื•ื™ื“ ืคึผืœืึทื˜ืคืึธืจืžืก, ืจืึธื•ื˜ืขืจืก (ืึทืกื•ืก, ื ืขื˜ื’ืขืึทืจ, ืœื™ื ืงืกื™ืก) ืื•ืŸ ื‘ืจืึทื•ื–ืขืจื–. ืคึฟืึทืจื–ืึทืžืœื•ื ื’ ืจื™ืงื•ื•ื™ื™ืขืจื– ื“ื™ ื ื•ืฆืŸ ืคื•ืŸ ืขืจื“ื™ืฉืข ืื•ืŸ ืกืขืขื“ืœื™ื ื’ ืคึฟืึทืจื–ืึทืžืœื•ื ื’ ืกื™ืกื˜ืขืžืขืŸ. ื“ื™ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืื™ื– ืคึผืึทืงื™ื“ื–ืฉื“ ื•ื•ื™ ืึท ื‘ื™ื‘ืœื™ืึธื˜ืขืง ื•ื•ืึธืก ืื™ืจ ืงืขื ืขืŸ ื ื•ืฆืŸ ืฆื• ื•ื™ืกืฉื˜ื™ืžืขืŸ VPN ืงืœื™ืขื ื˜ ืื•ืŸ ืกืขืจื•ื•ืขืจ ืคืึทื ื’ืงืฉืึทื ืึทืœื™ื˜ื™ ืื™ืŸ ื“ื™ื™ืŸ ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื–.

ื“ืขืจ ืงืึธื“ ื ื™ืฆื˜ ืื•ื™ืก-ืคื•ืŸ-ื“ืขื-ืงืขืกื˜ืœ ื•ื•ืึทืœืึทื“ื™ื™ื˜ืึทื“ ืงืจื™ืคึผื˜ืึธื’ืจืึทืคื™ืง ืคืึทื ื’ืงืฉืึทื ื– ืฆื•ื’ืขืฉื˜ืขืœื˜ ื“ื•ืจืš ื“ื™ WolfSSL ื‘ื™ื‘ืœื™ืึธื˜ืขืง ืฉื•ื™ืŸ ื’ืขื ื™ืฆื˜ ืื™ืŸ FIPS 140-2 ืกืขืจื˜ืึทืคื™ื™ื“ ืกืึทืœื•ืฉืึทื ื–. ืื™ืŸ ื ืึธืจืžืึทืœ ืžืึธื“ืข, ื“ืขืจ ืคึผืจืึธื˜ืึธืงืึธืœ ื ื™ืฆื˜ UDP ืฆื• ืึทืจื™ื‘ืขืจืคื™ืจืŸ ื“ืึทื˜ืŸ ืื•ืŸ DTLS ืฆื• ืฉืึทืคึฟืŸ ืึท ื™ื ืงืจื™ืคึผื˜ื™ื“ ืงืึธืžื•ื ื™ืงืึทืฆื™ืข ืงืึทื ืึทืœ. ื•ื•ื™ ืึทืŸ ืึธืคึผืฆื™ืข ืฆื• ืฉืขืคึผืŸ ืึทื ืจื™ืœื™ื™ืึทื‘ืึทืœ ืึธื“ืขืจ UDP-ืจื™ืกื˜ืจื™ืงื˜ื™ื ื’ ื ืขื˜ื•ื•ืึธืจืงืก, ืึท ืžืขืจ ืคืึทืจืœืึธื–ืœืขืš, ืึธื‘ืขืจ ืกืœืึธื•ืขืจ, ืกื˜ืจื™ืžื™ื ื’ ืžืึธื“ืข ืื™ื– ืฆื•ื’ืขืฉื˜ืขืœื˜ ื“ื•ืจืš ื“ื™ ืกืขืจื•ื•ืขืจ, ื•ื•ืึธืก ืึทืœืึทื•ื– ื“ืึทื˜ืŸ ื˜ืจืึทื ืกืคืขืจื“ ืื™ื‘ืขืจ TCP ืื•ืŸ TLSv1.3.

ื˜ืขืกื˜ืก ื’ืขืคื™ืจื˜ ื“ื•ืจืš ExpressVPN ื”ืึธื‘ืŸ ื’ืขื•ื•ื™ื–ืŸ ืึทื– ืงืึทืžืคึผืขืจื“ ืžื™ื˜ ืขืœื˜ืขืจืข ืคึผืจืึธื˜ืึธืงืึธืœืก (ExpressVPN ืฉื˜ื™ืฆื˜ L2TP/IPSec, OpenVPN, IKEv2, PPTP, WireGuard ืื•ืŸ SSTP, ืึธื‘ืขืจ ื“ืขืจ ืคืึทืจื’ืœื™ื™ึทืš ืื™ื– ื ื™ืฉื˜ ื“ื™ื˜ื™ื™ืœื“), ื‘ืึทืฉื˜ื™ืžืขืŸ ืฆื• ืœื™ื’ื”ื˜ื•ื•ื™ื™ึท ืจื™ื“ื•ืกื˜ ื“ื™ ืงืึทื ืขืงืฉืึทืŸ ืกืขื˜ืึทืคึผ ืฆื™ื™ื˜ ืžื™ื˜ ืึท ื“ื•ืจื›ืฉื ื™ื˜ืœืขืš ืคื•ืŸ 2.5 ืžืืœ (ืื™ืŸ ืžืขืจ ื•ื•ื™ ื”ืขืœืคื˜ ืคื•ืŸ ื“ื™ ืงืึทืกืขืก, ืึท ืงืึธืžื•ื ื™ืงืึทืฆื™ืข ืงืึทื ืึทืœ ืื™ื– ื‘ืืฉืืคืŸ ืื™ืŸ ื•ื•ื™ื™ื ื™ืงืขืจ ื•ื•ื™ ืึท ืจื’ืข). ื“ืขืจ ื ื™ื™ึท ืคึผืจืึธื˜ืึธืงืึธืœ ืื•ื™ืš ื’ืขืžืื›ื˜ ืขืก ืžืขื’ืœืขืš ืฆื• ืจืขื“ื•ืฆื™ืจืŸ ื“ื™ ื ื•ืžืขืจ ืคื•ืŸ ื“ื™ืกืงืึทื ืขืงืฉืึทื ื– ืื™ืŸ ืึทื ืจื™ืœื™ื™ืึทื‘ืึทืœ ืจื™ืจืขื•ื•ื“ื™ืง ื ืขื˜ื•ื•ืึธืจืงืก ืžื™ื˜ ืงืฉืจ ืงื•ื•ืึทืœื™ื˜ืขื˜ ืคึผืจืึธื‘ืœืขืžืก ืžื™ื˜ 40%.

ื“ื™ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’ ืคื•ืŸ ื“ืขืจ ืจืขืคึฟืขืจืขื ืฅ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ืขื ืคึผืจืึธื˜ืึธืงืึธืœ ื•ื•ืขื˜ ื–ื™ื™ืŸ ื“ื•ืจื›ื’ืขืงืึธื›ื˜ ืื•ื™ืฃ GitHub ืžื™ื˜ ื“ื™ ื’ืขืœืขื’ื ื”ื™ื™ื˜ ืฆื• ืึธื ื˜ื™ื™ืœ ื ืขืžืขืŸ ืื™ืŸ ื“ืขืจ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’ ืคื•ืŸ ืงื”ืœ ืคืืจืฉื˜ื™ื™ืขืจืก (ืฆื• ืึทืจื™ื‘ืขืจืคื™ืจืŸ ืขื ื“ืขืจื•ื ื’ืขืŸ, ืื™ืจ ื“ืึทืจืคึฟืŸ ืฆื• ืฆื™ื™ื›ืŸ ืึท CLA ื”ืขืกืงืขื ืื•ื™ืฃ ื“ื™ ืึทืจื™ื‘ืขืจืคื™ืจืŸ ืคื•ืŸ ืคืึทืจืžืึธื’ ืจืขื›ื˜ ืฆื• ื“ื™ ืงืึธื“). ืื ื“ืขืจืข ื•ื•ืคึผืŸ ืคึผืจืึทื•ื•ื™ื™ื“ืขืจื– ื–ืขื ืขืŸ ืื•ื™ืš ืคืืจื‘ืขื˜ืŸ ืฆื• ืงืึธื•ืึทืคึผืขืจื™ื™ื˜, ื•ื•ืึธืก ืงืขื ืขืŸ ื ื•ืฆืŸ ื“ื™ ืคืืจื’ืขืœื™ื™ื’ื˜ ืคึผืจืึธื˜ืึธืงืึธืœ ืึธืŸ ืจื™ืกื˜ืจื™ืงืฉืึทื ื–.

ื“ื™ ื–ื™ื›ืขืจื”ื™ื™ื˜ ืคื•ืŸ ื“ื™ ื™ืžืคึผืœืึทืžืขื ื˜ื™ื™ืฉืึทืŸ ืื™ื– ื‘ืืฉื˜ืขื˜ื™ืงื˜ ื“ื•ืจืš ื“ืขืจ ืจืขื–ื•ืœื˜ืึทื˜ ืคื•ืŸ ืึท ืคืจื™ื™ึท ืงืึธื ื˜ืจืึธืœื™ืจืŸ ื“ื•ืจื›ื’ืขืงืึธื›ื˜ ื“ื•ืจืš Cure53, ื•ื•ืึธืก ืึทืžืึธืœ ืึทื•ื“ื™ื˜ืขื“ NTPsec, SecureDrop, Cryptocat, F-Droid ืื•ืŸ Dovecot. ื“ื™ ืงืึธื ื˜ืจืึธืœื™ืจืŸ ืงืึทื•ื•ืขืจื“ ื“ื™ ื•ื•ืขืจืึทืคืึทืงื™ื™ืฉืึทืŸ ืคื•ืŸ ืžืงื•ืจ ืงืึธื•ื“ื– ืื•ืŸ ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ื˜ืขืกืฅ ืฆื• ื™ื“ืขื ื˜ื™ืคื™ืฆื™ืจืŸ ืžืขื’ืœืขืš ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– (ื™ืฉื•ื– ืฉื™ื™ึทื›ื•ืช ืฆื• ืงืจื™ืคึผื˜ืึธื’ืจืึทืคื™ ื–ืขื ืขืŸ ื ื™ืฉื˜ ืงืึทื ืกื™ื“ืขืจื“). ืื™ืŸ ืึทืœื’ืขืžื™ื™ืŸ, ื“ื™ ืงื•ื•ืึทืœื™ื˜ืขื˜ ืคื•ืŸ ื“ื™ ืงืึธื“ ืื™ื– ืจื™ื™ื˜ืึทื“ ื•ื•ื™ ื”ื•ื™ืš, ืึธื‘ืขืจ, ืคื•ื ื“ืขืกื˜ื•ื•ืขื’ืŸ, ื“ื™ ืจืขืฆืขื ื–ื™ืข ืื ื˜ืคืœืขืงื˜ ื“ืจื™ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ื•ื•ืึธืก ืงืขื ืขืŸ ืคื™ืจืŸ ืฆื• ืึท ืึธืคึผืœื™ื™ืงืขื ื•ื ื’ ืคื•ืŸ ื“ื™ื ืกื˜, ืื•ืŸ ืื™ื™ืŸ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ื•ื•ืึธืก ืึทืœืึทื•ื– ื“ื™ ืคึผืจืึธื˜ืึธืงืึธืœ ืฆื• ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ื•ื•ื™ ืึท ืคืึทืจืงืขืจ ืึทืžืคึผืœืึทืคื™ื™ืขืจ ื‘ืขืฉืึทืก DDoS ืื ืคืืœืŸ. ื“ื™ ืคึผืจืึธื‘ืœืขืžืก ื”ืึธื‘ืŸ ืฉื•ื™ืŸ ืคืึทืจืคืขืกื˜ื™ืงื˜, ืื•ืŸ ื“ื™ ื‘ืึทืžืขืจืงื•ื ื’ืขืŸ ื’ืขืžืื›ื˜ ืื•ื™ืฃ ื™ืžืคึผืจื•ื•ื•ื™ื ื’ ื“ื™ ืงืึธื“ ื–ืขื ืขืŸ ื’ืขื ื•ืžืขืŸ ืื™ืŸ ื—ืฉื‘ื•ืŸ. ื“ื™ ืงืึธื ื˜ืจืึธืœื™ืจืŸ ืื•ื™ืš ื’ืขืฆื•ื™ื’ืŸ ื•ืคืžืขืจืงื–ืึทืžืงื™ื™ื˜ ืฆื• ื‘ืึทื•ื•ื•ืกื˜ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ืื•ืŸ ื™ืฉื•ื– ืื™ืŸ ื“ื™ ื™ื ื•ื•ืึทืœื•ื•ื“ ื“ืจื™ื˜-ืคึผืึทืจื˜ื™ื™ ืงืึทืžืคึผืึธื•ื ืึทื ืฅ, ืึทื–ืึท ื•ื•ื™ libdnet, WolfSSL, Unity, Libuv ืื•ืŸ lua-crypt. ืจื•ื‘ึฟ ืคื•ืŸ ื“ื™ ื™ืฉื•ื– ื–ืขื ืขืŸ ืžื™ื ืขืจื•ื•ืขืจื˜ื™ืง, ืžื™ื˜ ื“ื™ ื•ื™ืกื ืขื ืคื•ืŸ MITM ืื™ืŸ WolfSSL (CVE-2021-3336).

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’