Abantu emhlabeni wonke basebenzisa ama-proxis ukuze bafihle indawo yabo yangempela noma ubunikazi babo. Lokhu kungenziwa ukuze kuxazululwe izinkinga ezihlukahlukene, okuhlanganisa ukufinyelela ulwazi oluvinjiwe noma ukuqinisekisa ubumfihlo.
Kodwa balungile kangakanani abahlinzeki bama-proxies anjalo uma bethi amaseva abo atholakala ezweni elithile? Lona umbuzo obaluleke kakhulu, impendulo yawo enquma ukuthi isevisi ethile ingasetshenziswa nhlobo yilawo maklayenti akhathazeke ngokuvikeleka kolwazi lomuntu siqu.
Iqembu lososayensi baseMelika abavela emanyuvesi aseMassachusetts, uCarnegie Mellon noStony Brook bashicilelwe , lapho indawo yangempela yamaseva abahlinzeki bommeleli abadumile abayisikhombisa yahlolwa. Silungiselele isifinyezo esifushane semiphumela eyinhloko.
Isingeniso
Ama-opharetha wommeleli ngokuvamile abahlinzeki nganoma yiluphi ulwazi olungaqinisekisa ukunemba kwezimangalo zabo mayelana nezindawo zeseva. Imininingo egciniwe ye-IP-to-location ivamise ukusekela izimangalo zokukhangisa zezinkampani ezinjalo, kodwa kunobufakazi obanele bamaphutha kulezi zingosi zolwazi.
Phakathi nocwaningo, ososayensi baseMelika bahlole izindawo zamaseva ababamba angu-2269 asetshenziswa izinkampani zama-proxy eziyisikhombisa futhi atholakala emazweni nezindawo ezingu-222. Ukuhlaziya kubonise ukuthi okungenani ingxenye yesithathu yawo wonke amaseva awekho emazweni izinkampani eziwafunayo ezintweni zazo zokumaketha. Kunalokho, atholakala emazweni anokusingatha okushibhile nokuthembekile: i-Czech Republic, iJalimane, iNetherlands, i-UK kanye ne-USA.
Ukuhlaziywa kwendawo yeseva
I-Commercial VPN nabahlinzeki bommeleli bangaba nomthelela ekunembeni kwesizindalwazi se-IP-to-location - izinkampani zinekhono lokukhohlisa, isibonelo, amakhodi endawo kumagama omzila. Njengomphumela, izinto zokuthengisa zingafuna inani elikhulu lezindawo ezitholakala kubasebenzisi, kuyilapho empeleni, ukonga imali nokuthuthukisa ukwethembeka, amaseva atholakala ngokoqobo enanini elincane lamazwe, nakuba isizindalwazi se-IP-to-location sisho okuphambene.
Ukuhlola indawo yangempela yamaseva, abacwaningi basebenzise i-algorithm ye-geolocation esebenzayo. Isetshenziswe ukuhlola uhambo oluya nokubuya lwephakethe elithunyelwe kuseva nakwabanye abasingathi abaziwayo ku-inthanethi.
Ngesikhathi esifanayo, ngaphansi kuka-10% kuphela wama-proxies ahloliwe aphendula i-ping, futhi ngenxa yezizathu ezisobala, ososayensi abakwazanga ukusebenzisa noma iyiphi isofthiwe yezilinganiso kuseva ngokwayo. Ayenekhono kuphela lokuthumela amaphakethe ngommeleli, ngakho uhambo oluya nokubuya kunoma iyiphi indawo esikhaleni isamba sesikhathi esithatha iphakethe ukusuka kumsingathi wokuhlola ukuya kummeleli futhi ukusuka kummeleli ukuya endaweni okuyiwa kuyo.
Phakathi nocwaningo, isofthiwe ekhethekile yathuthukiswa ngokusekelwe kuma-algorithms we-geolocation amane asebenzayo: i-CBG, i-Octant, i-Spotter kanye ne-hybrid Octant/Spotter. Ikhodi yesixazululo ku-GitHub.
Njengoba kwakungenakwenzeka ukuthembela kusizindalwazi se-IP-to-location, ekuhloleni abacwaningi abasebenzisa uhlu lwe-RIPE Atlas lwabasingathi behange - ulwazi olukulesi sizindalwazi luyatholakala ku-inthanethi, luvuselelwa njalo, futhi izindawo ezibhaliwe zilungile, ngaphezu kwalokho. , abasingathi abasohlwini bahlale bethumelana amasiginali e-ping futhi babuyekeze idatha yokuhamba nokubuya kusizindalwazi somphakathi.
Ithuthukiswe ososayensi besixazululo, uhlelo lokusebenza lwewebhu olusungula ukuxhumana okuvikelekile (HTTPS) kwe-TCP phezu kwembobo ye-HTTP engavikelekile engu-80. Uma iseva ingalaleli kulesi sikhungo, izohluleka ngemva kwesicelo esisodwa, noma kunjalo, uma iseva ilalele. kulesi sikhungo, isiphequluli sizothola impendulo SYN- ACK nge-TLS ClientHello iphakethe. Lokhu kuzodala iphutha lephrothokholi futhi isiphequluli sizobonisa iphutha, kodwa kuphela ngemva kohambo lokuya nokubuya lwesibili.
Ngale ndlela, uhlelo lokusebenza lwewebhu lungakwazi ukuhlela uhambo olulodwa noma ezimbili. Isevisi efanayo yenziwe njengohlelo oluqaliswe emugqeni womyalo.
Abekho kubahlinzeki abahloliwe odalula indawo ngqo yamaseva abo ababamba. Okungcono kakhulu, kukhulunywa ngamadolobha, kepha ezikhathini eziningi kuba nolwazi ngezwe kuphela. Ngisho noma kukhulunywa ngedolobha, izigameko zingenzeka - isibonelo, abacwaningi bahlole ifayela lokucushwa lenye yeziphakeli ezibizwa ngokuthi usa.new-york-city.cfg, equkethe imiyalelo yokuxhuma kuseva ebizwa nge-chicago.vpn-provider. isibonelo. Ngakho-ke, ngokunembe kakhulu, ungaqinisekisa kuphela ukuthi iseva ingeyezwe elithile.
Imiphumela
Ngokusekelwe emiphumeleni yokuhlolwa kusetshenziswa i-algorithm ye-geolocation esebenzayo, abacwaningi bakwazi ukuqinisekisa indawo engu-989 kumakheli angu-2269 we-IP. Endabeni ye-642, lokhu akukwazanga ukwenziwa, futhi i-638 ayikho ezweni lapho kufanele ibe khona, ngokusho kokuqinisekiswa kwezinsizakalo ze-proxy. Angaphezu kuka-400 kulawa makheli angamanga atholakala ezwenikazi elifanayo nezwe elimenyezelwe.
Amakheli alungile atholakala emazweni avame ukusetshenziselwa ukusingatha amaseva (chofoza isithombe ukuze uvule ngosayizi ogcwele)
Kutholakale abasingathi abasolisayo kubahlinzeki abayisikhombisa abahloliwe. Abacwaningi bafuna ukuphawula ezinkampanini, kodwa zonke zenqabile ukuxhumana.
Source: www.habr.com