Sawubona, Habr.
Lesi yithi, isevisi ye-VPN . Njengamanje sisebenza okwesikhashana esibukweni se-HideMyna.me. Kungani? Ngomhla zingama-20 kuJulayi 2018 iRoskomnadzor yasingeza ngenxa yesinqumo seNkantolo Yesifunda saseMedvedevsky eYoshkar-Ola. Inkantolo inqume ukuthi izivakashi ezivakashela isayithi lethu zinokufinyelela okungenamkhawulo ezintweni eziyingozi ezithi #withoutregistrationisms, futhi ngandlela thize zathola incwadi ethi “Mein Kampf” ka-Adolf Hitler kuyo. Ngokusobala, ukwethembeka.
Lesi sinqumo sisimangaze kakhulu, kodwa siyaqhubeka nokusebenza ku-hidemyna.me, hidemyname.org, .one, .biz, njll. Ingxabano eyathatha isikhathi eside ne-Roskomnadzor ayizange iholele kunoma yimuphi umphumela. Ngenkathi mina nabameli bami siphonsela inselelo ukuvinjwa kanye nesinqumo senkantolo esiwumlingo, sabelana nawe ngamathiphu ayisisekelo okugcina ubumfihlo ku-inthanethi kanye nezindaba ngalesi sihloko.
U-Edward Snowden uthanda i-National Security Agency (mhlawumbe)
Akuyona imfihlo ukuthi izinsizakalo ezidumile zaseRussia aziphephile. Incwadi yakho ingafika noma nini ezindlebeni zeziphathimandla zomthetho wasekhaya. Sikutshela okufanele ukukhumbule lapho uxhumana ngamashaneli ahlukene okuxhumana.
I-SORM ne-ORI
Zikhona izindlela zokucofa ifoni yakho. Okusemthethweni kanye nezomthetho - i-SORM, uhlelo lwezindlela zobuchwepheshe zokuqinisekisa imisebenzi yemisebenzi yophenyo yokusebenza. Ngokomthetho we-Russian Federation, bonke opharetha bamaselula kudingeka bafake isistimu enjalo kuma-PBX abo uma bengafuni ukulahlekelwa ilayisense yabo. Kunezinhlobo ezintathu ze-SORM: eyokuqala yasungulwa ngeminyaka yama-80s, eyesibili yaqala ukusetshenziswa ngawo-2014, futhi bebelokhu bezama ukuphoqelela eyesithathu kuma-opharetha kusukela ngo-XNUMX. , opharetha abaningi basebenzisa uhlobo lwesibili, kodwa ku-70% yamacala uhlelo alusebenzi kahle noma alusebenzi nhlobo. Nokho, kusengcono ukungaxoxi ngezihloko ezibucayi ngocingo lwasendlini noma ngocingo oluvamile oluvela kumakhalekhukhwini.
Uhlelo lokusebenza lwe-SORM-2 (Umthombo: mfisoft.ru)
Ngokusho kwe-97-FZ, noma yiziphi izithunywa, izinsizakalo kanye nezingosi ezisebenza eRussia kufanele zifakwe kurejista. . Ngu"“Kudingeka ukuthi bagcine yonke imininingwane yabasebenzisi, okuhlanganisa nokuqoshwa kwezwi nezincwadi, izinyanga eziyisithupha. Ngendlela, i-ARI nayo ine-Habrahabr.
Ukusebenza kokubhalisa kuchazwe ngokuningiliziwe sisebenzisa i-Threema njengesibonelo, kodwa isiphetho esikhulu yilesi: manje, ngesicelo seziphathimandla zaseRussia, noma yiluphi ulwazi ngawe lungagcina lusezikhundleni zomthetho. Ngakho-ke, into yokuqala okufanele yenziwe ukuze kugcinwe kuyimfihlo ukudlulisa amakholi nemilayezo kuzithunywa ezisheshayo, ezingekho kurejista ye-ARI. Noma lezo ezikhona, kodwa zenqabe ukudlulisela idatha kuziphathimandla - njengeThreema neTelegram.
Usizo: Ukuba sebhukwini le-ARI akuqinisekisi ukuthi idatha izodluliselwa kwabasemagunyeni. Udinga ukuqapha njalo izindaba futhi ubheke ukusabela kwesithunywa lapho "beza" kuye.
Izingcingo zezwi nemiyalezo
Izingxoxo zethu nemilayezo ingavikelwa ekuphazamisekeni kwezinkampani zangaphandle ngokubethela kokugcina, yingakho izithunywa ezine-E2E zithathwa njengeziphephe kakhulu. Kodwa lokhu akulona iqiniso ngokuphelele: ake sibheke izinketho ezidumile.
yocingo ukubethela ngasemaphethelweni Ezingxoxweni zabo Eziyimfihlo futhi igcina idatha ebethelwe mayelana nemibhalo yakho emafini, ehlakazeke emazweni ahlukahlukene anegunya "lokuphepha". Kodwa ngemva ku-Habré ungaqala ukungabaza inkohliso yokuphepha kwe-Telegram Passport e-E2E esuka eDurov.
Impela, Izingxoxo Eziyimfihlo ziseyinketho enhle ku-paranoid. Iseva ayibandakanyeki nhlobo ekubetheleni kwayo: imilayezo idluliselwa kontanga kuya kontanga, okungukuthi, ngokuqondile phakathi kwabahlanganyeli ekubhaleni. Ukuze uthole ukuthula kwengqondo okwengeziwe, ungasebenzisa umsebenzi wokuzilimaza womlayezo wesikhathi. Kepha akufanele uthembele kuTelegram. Ukuze ukwenze kuvikeleke kakhudlwana, wena nomamukeli wakho kufanele niye kuzilungiselelo zesithunywa futhi nenze okungenani izinto ezimbili:
- Setha iphasiwedi lapho ungena kuhlelo lokusebenza (Ubumfihlo nokuphepha -> Iphasiwedi);
- Nika amandla ukuqinisekiswa okuzinyathelo ezimbili (Ubumfihlo nokuphepha -> Ukuqinisekiswa okuzinyathelo ezimbili).
Ngemuva kwalokhu, ngaphezu kwekhodi evela ku-SMS, lapho ungena kusuka kudivayisi entsha, uhlelo lokusebenza luzocela iphasiwedi oyaziyo kuphela.
Njengamanje, ukuqinisekiswa kokungena ngemvume kuphela nge-SMS akumvikeli nganoma iyiphi indlela umuntu osebenzisa i-SIM khadi yesiRashiya. Amacala okugetshengwa kwama-akhawunti eTelegramu ngomlayezo we-SMS owabanjwa asevele aziwa - ngo-2016, abahlaseli ezincwadini zabaphikisi abaningana, nango-2017 i-akhawunti yentatheli ye-Dozhd uMikhail Rubin.
WhatsApp okwamanje igwema ukubhaliswa kwe-ORI futhi isebenzisa ukubethela kokuphela ukuya ekupheleni, kodwa yonke into ayinhle kangako ngayo. Sisanda kushicilela mayelana nezakhamuzi zaseMagadan ezazibhekene necala lobugebengu ngokugxeka imeya yedolobha. Le ndaba, ngenhlanhla, yaphela ngenhlawulo evamile. Kepha kuqinisekisile ukwesaba kwabasebenzisi: akuphephile ukuxhumana ezingxoxweni zamaqembu e-WhatsApp.
Kuzokwenzekani?
- Uma nje ubhala umlayezo, inombolo yakho yocingo izotholakala ngokushesha kuwo wonke amalungu eqembu. Futhi ubuwena bunganqunywa kalula ngenombolo.
Yini okufanele ngiyenze?
- Isixazululo singaba ikhadi le-SIM "kwesokunxele" noma inombolo yangaphandle - okungcono kakhulu eyaseYurophu.
Uma usebenzisa ikhadi lesiRashiya elibhaliswe egameni lakho, gwema ukuphawula okubhuqayo emaqenjini anamagama afana nokuthi “Shiya IMeya”: kungcono ukushiya izincwadi zomuntu siqu kuphela nezingcingo ze-WhatsApp.
Viber futhi ayifakwanga ohlwini lwe-ORI, kodwa igcina ukuxhumana neziphathimandla zaseRussia (ngesikhathi sakhe samahhala ekuthumeleni ugaxekile). Lesi sithunywa sasingomunye wabokuqala ukuthobela izidingo zikahulumeni ezintsha: sigcina ukungena nezinombolo zocingo zabasebenzisi baseRussia endaweni yeRussian Federation, kodwa sinikeze idatha yomlayezo. - ibhekisela kumakhenikha wokubethela ekupheleni ukuya ekupheleni kanye nenqubomgomo yebhizinisi.
Apple futhi isebenzisa ukuphela ukuya ekupheleni, kodwa uma ubhalisa nge-iMessage idala amapheya amabili ayinhloko: okuyimfihlo kanye nesesidlangalaleni. Umlayezo owuthola kumnikazi ofanayo wedivayisi ye-apula udluliselwa kuwe ngokubhala ngekhodi, okusebenzisa ukhiye osesidlangalaleni. Ingasuswa kuphela ukubethela kusetshenziswa ukhiye oyimfihlo womamukeli, ogcinwa kudivayisi yakhe. Ungafunda ukuthi i-Apple ibubheka kanjani ubumfihlo bomsebenzisi nokuthi izokwenzani uma ithola isicelo kuhulumeni Azikho izehlakalo ezirekhodiwe zenkampani edlulisa idatha isuka kubasebenzisi baseRussia iye kuziphathimandla zaseRussia.
Source:
Kodwa i-iMessage inezinkinga ezimbili:
- Ungabhala noma ushayele ngalezi ziteshi kuphela kumnikazi ofanayo we-Apple;
- Uma unezinkinga ngoxhumano lwakho lwe-inthanethi, umlayezo uzodlula esiteshini esivamile seselula futhi ube i-SMS elula engabanjwa kalula.
Ukuze ugweme ukuthi i-iMessage iphenduke i-SMS, ungakhubaza lesi sici kokuthi Izilungiselelo.
Abacwaningi abavela ku-Electronic Frontier Foundation ukuthi ayikho inketho ephephile yamaphesenti ayikhulu yezingcingo nemiyalezo. Uma ezinye izithunywa zivimbela iziphathimandla ekutholeni idatha yakho yangasese, lokhu akusho ukuthi izigebengu (noma izwe, ezingasebenzisa izinsizakalo zazo) azikwazi ukwenza lokhu ngokweqa imithetho. Ukuze unikeze umsebenzisi ithemba lokuthi akekho umuntu ophakathi nendawo, iTelegramu inesici esihle: lapho ushaya ucingo, bobabili abamukeli bangaqiniseka ukuthi babona i-emoji efanayo ekhoneni eliphezulu kwesokudla sesikrini - lokhu kuzoqinisekisa ukungabikho "kokungena" kuxhumo.
Uma ufuna indlela evikeleke kakhulu yokuxhumana, sincoma ukuthi ubheke ngale kwezingxoxo eziyimfihlo, amaphasiwedi, kanye nokuqinisekiswa kwezinyathelo ezimbili/ezimbili kuzinhlelo zokusebenza ze-niche ezingaziwa kangako njenge noma .
Ngisebenzisa iSignal nsuku zonke. #notesforFBI (Spoiler: they already know)
Электронная почта
Izinkampani ezidumile ezenza kube nokwenzeka ukusebenzisa amaklayenti abo e-imeyili (eRussia lezi yi-Yandex, Mail.Ru kanye ne-Rambler) sezivele zifakiwe kurejista ye-ARI, okusho ukuthi aziphephile kakhulu. Yebo, i-Mail.Ru Group amacala obugebengu we-memes kanye noshwele kulabo abagwetshiwe, kodwa anganikeza ulwazi mayelana nedatha yakho kuziphathimandla uma ucela.
Ngisho noma usebenzisa amaklayenti e-imeyili aseNtshonalanga njenge-Gmail noma i-Outlook, vumela ukuqinisekiswa kwezinto ezimbili okunikwe amandla, futhi wazi ukuthi i-imeyili yakho ibethelwe kusetshenziswa iphrothokholi evikelekile ye-SSL/TLS, ngeke uqiniseke ukuthi i-imeyili yomamukeli wakho ivikelwe ngokulinganayo.
Izinketho zokuvikela:
- Lapho uthumela imininingwane ebucayi, bethela ama-imeyili usebenzisa Imfihlo Enhle Kahle (). Lolu hlelo lusiza ukushintsha idatha isuke kuhlamvu iyenze isethi engasho lutho yezinhlamvu zawo wonke umuntu ngaphandle komthumeli nomamukeli;
- Uma uthumela ulwazi olubalulekile, hlala unaka isizinda somamukeli futhi ungabhali ekhelini elisolisayo;
- Hlola nomamukeli kusenesikhathi ukuthi usethe ukudlulisela phambili noma ukuqoqwa kwemeyili ngesevisi yeposi yaseRussia.
Endabeni yezinkampani ezifuywayo ezivela ebhukwini le-ORI, akukho ukubethela ohlangothini lwabasebenzisi, empeleni, kuzosiza. Ulwazi alubanjwa, kodwa lugcinwa futhi ludluliselwe ezindaweni zokugcina - izinsizakalo ezifanayo. Okuwukuphela kwesixazululo kungaba ukuwashintsha ufake ama-analogue aphephe kakhulu njengeProtonMail, Tutanota noma Hushmail. Amanye amasevisi anjalo e-imeyili angatholakala kokuthi ikhasi.
Amanethiwekhi omphakathi
Okokuqala, nciphisa ubukhona bakho ezinkundleni zokuxhumana ezidumile zaseRussia - "Umhlaba Wami", "Odnoklassniki" kanye "VKontakte". Okungenani i-Facebook ayinikezi idatha yakho ezikhungweni zezobunhloli zaseRussia. Okungenani, awekho amacala anjalo arekhodiwe.
Kodwa kuyathakazelisa ukuthi ngo-2017, inkampani isanelise ama-85% ezicelo ezivela kuhulumeni wase-US:
Izithombe-skrini ezivela
Uma usujwayele kakhulu i-VK, kodwa ungafuni ukuphelela esitokisini, naka izinto ezimbalwa:
- izithombe zakho ezilondoloziwe;
- okuthunyelwe, imibono nemiyalezo oyibhalayo;
- okuthunyelwe okuthandayo;
- okuthunyelwe owabelana ngakho;
- abasebenzisi ongabangane nabo.
Kukho konke okungenhla, kuhle kakhulu ukugwema noma yini engabhekwa njengecasulayo noma eyeqisayo. Hlala ukhumbula ukuthi “ukwabelana” kusho ukudlulisela ulwazi “olungekho emthethweni” okungenani kumuntu oyedwa. Ummeli wenhlangano yamalungelo abantu emhlabeni wonke "Agora" uDamir Gainutdinov uthi ngokomthetho, i-ORI. ngisho nohlaka lwemiyalezo engathunyelwanga ezikhungweni zomthetho. Funda kabanzi mayelana nokuthi ungabanjwa kanjani ukuthunyelwa kabusha
Phela, isikhathi esithile manje noma ubani onenombolo yakho yocingo angakuthola ku-VKontakte ngokuzenzakalelayo, ngisho noma ikhasi ngokwalo lingavezi ubuwena bangempela.
Ungavimbela abantu ekukutholeni ngenombolo kuzilungiselelo zephrofayela yakho (Izilungiselelo -> Ubumfihlo -> Ngithinte). Kodwa lokhu, yiqiniso, ngeke kukusindise ezinsizeni ezikhethekile. Ungasebenzisi izingcingo nokuxhumana kwevidiyo ku-VKontakte: akwaziwa ukuthi inethiwekhi iyazibethela ngempela ekugcineni, njengoba kusho abaphathi.
Ukuphepha Kwewebhusayithi
Izindaba ezinhle kuphela ukuthi Wonke amasayithi adumile ku-inthanethi asevele anenguqulo ye-https noma ashintshe ngokuphelele ekusebenziseni izinguqulo ze-https kuphela. Ulwazi olutholiwe nolwedluliswa kumasayithi anjalo lubhalwe ngekhodi futhi alukwazi ukufundwa ngabanye abantu. Izinsiza ezinjalo zimakwe ngokuluhlaza kanye negama elithi "vikelwe".
Kulapho-ke izindaba ezinhle ziphela khona. Ngaphandle kwephrothokholi ye-https, iqiniso lokuvakashela isayithi elinjalo kanye nezicelo ze-DNS (ulwazi mayelana nokuthi yiziphi izizinda ofinyelele kuzo) lusabonakala kumhlinzeki we-inthanethi.
Kodwa olunye ucezu lwezindaba lubi nakakhulu: ingxenye esele yamasayithi isebenza kusetshenziswa iphrothokholi ye-http evamile, okungukuthi, ngaphandle kokubethelwa kwedatha. Isixazululo kungaba i-VPN, ebhala ngemfihlo yonke idatha etholiwe nedluliswayo ukuze kungabikho ulwazi olufundekayo ohlangothini lomhlinzeki we-inthanethi nanoma ubani ozama ukungena phakathi kwakho nesayithi lokugcina. Okuwukuphela kwento ezobonakala iqiniso lokuxhuma ekhelini elithile le-IP ku-inthanethi (okungukuthi, kuseva ye-VPN). Futhi akukho okunye.
Sizojabula uma ukuphila kuba lula kungazelelwe: vula i-VPN futhi ukhohlwe ngokuputshuka kolwazi olubucayi. Kodwa lokho akulona iqiniso. Hlola njalo ukuthi insiza oyikhonzile ifakiwe yini kurejista ye-ARI, qapha ukuthi isebenzisana kanjani neziphathimandla, hlola ukuxhumana okusebenzayo kuzilungiselelo zemiyalezo esheshayo nezinkundla zokuxhumana futhi usethe kabusha asolisayo (bese uqinisekisa ukuthi ushintsha amagama ayimfihlo).
emhlabeni jikelele
Lapho usebenza ngamashaneli okuxhumana nokudluliswa kwedatha, indlela ebanzi kuphela yokuphepha nobumfihlo enengqondo. Landela imicimbi yezokuphepha ku-inthanethi esiteshini sethu seTelegram , Ku-inthanethi nakwezinye izinsiza ezinikezelwe emicimbini eku-inthanethi kanye ne-RuNet ikakhulukazi.
Yiziphi izinyathelo zokuphepha ozithathayo?
Source: www.habr.com