Ukukhishwa kwe-ZeroNet 0.7, inkundla yokudala amawebhusayithi ahlukaniswe

Ngemuva konyaka wentuthuko, ukukhululwa kweplatifomu yewebhu emisiwe yakhululwa I-ZeroNet 0.7, ehlongoza ukusebenzisa amakheli e-Bitcoin kanye nezindlela zokuqinisekisa kuhlanganiswe nobuchwepheshe bokulethwa kwe-BitTorrent obusabalalisiwe ukuze kwakhiwe amasayithi angakwazi ukucutshungulwa, amanga, noma ukuvinjwa. Okuqukethwe kwamasayithi kugcinwa kunethiwekhi ye-P2P emishinini yezivakashi futhi kuqinisekiswa kusetshenziswa isiginesha yedijithali yomnikazi. Isistimu yezinye iziphande ze-DNS yezimpande isetshenziselwa ukubhekana Namecoin. Iphrojekthi ibhalwe ngePython futhi isatshalaliswa ngu ilayisensi ngaphansi kwe-GPLv2.

Idatha ethunyelwe kusayithi iqinisekisiwe futhi ixhunywe ku-akhawunti yomnikazi wesayithi, efana nokuxhumanisa izikhwama ze-Bitcoin, okwenza kube nokwenzeka ukulawula ukuhambisana kolwazi nokubuyekeza okuqukethwe ngesikhathi sangempela. Ukufihla amakheli e-IP, inethiwekhi ye-Tor engaziwa ingasetshenziswa, usekelo olwakhelwe ku-ZeroNet. Umsebenzisi ubamba iqhaza ekusatshalalisweni kwawo wonke amasayithi afinyelele kuwo. Uma eselandiwe kusistimu yendawo, amafayela agcinwa kunqolobane futhi enziwa atholakale ukuze asatshalaliswe emshinini wamanje kusetshenziswa izindlela ezisikhumbuza i-BitTorrent.

Ukuze ubuke amasayithi e-ZeroNet, vele usebenzise iskripthi se-zeronet.py, ngemva kwalokho uvule amasayithi esipheqululini usebenzisa i-URL “http://127.0.0.1:43110/zeronet_address” (ngokwesibonelo, “http://127.0.0.1 :43110/1HeLLo4uzjaLetFx6NMN3PMwF5qbebTf1D”) . Lapho uvula iwebhusayithi, uhlelo luthola ontanga abaseduze bese lulanda amafayela ahlobene nekhasi eliceliwe (html, css, images, njll.).
Ukuze wakhe isayithi lakho, vele usebenzise umyalo othi “zeronet.py siteCreate”, ngemva kwalokho isihlonzi sesayithi kanye nokhiye oyimfihlo kuzokwenziwa ukuze kuqinisekiswe ubunikazi kusetshenziswa isiginesha yedijithali.

Kusayithi elidaliwe, uhla lwemibhalo olungenalutho lwefomu elithi “data/1HeLLo4usjaLetFx6NMH5PMwF3qbebTf1D” luzokwakhiwa. Ngemva kokushintsha okuqukethwe kwalolu hlu lwemibhalo, inguqulo entsha kufanele iqinisekiswe kusetshenziswa umyalo othi “zeronet.py siteSign site_identifier” kanye nokufaka ukhiye oyimfihlo. Uma okuqukethwe okusha sekuqinisekisiwe, kudinga ukumenyezelwa ngomyalo othi “zeronet.py sitePublish site_id” ukuze inguqulo eguquliwe itholakale kontanga (i-WebSocket API isetshenziselwa ukumemezela izinguquko). Kulolu chungechunge, ontanga bazohlola ubuqotho benguqulo entsha besebenzisa isiginesha yedijithali, balande okuqukethwe okusha futhi bakudlulisele kwabanye ontanga.

main amathuba:

• Alikho iphuzu elilodwa lokwehluleka - isayithi lihlala lifinyeleleka uma kukhona okungenani untanga oyedwa ekusabalaliseni;
• Ukuntuleka kwereferensi yesitoreji sesayithi - isayithi alikwazi ukuvalwa ngokunqamula ukusingathwa, njengoba idatha itholakala kuyo yonke imishini yezivakashi;
• Lonke ulwazi olubukwe ngaphambilini lusenqolobaneni futhi lufinyeleleka emshinini wamanje ungaxhunyiwe ku-inthanethi, ngaphandle kokufinyelela kunethiwekhi yomhlaba wonke.
• Sekela ukubuyekezwa kokuqukethwe kwesikhathi sangempela;
• Amathuba okukhuluma ngokubhaliswa kwesizinda endaweni ethi “.bit”;
• Sebenza ngaphandle kokusetha kokuqala - vele uvule ingobo yomlando ngesofthiwe bese usebenzisa iskripthi esisodwa;
• Ikhono lokuhlanganisa amawebhusayithi ngokuchofoza okukodwa;
• Ukufakazela ubuqiniso be-password okusekelwe kufomethi BIP32: i-akhawunti ivikelwe ngendlela efanayo ye-cryptographic njenge-cryptocurrency ye-Bitcoin;
• Iseva ye-SQL eyakhelwe ngaphakathi enemisebenzi yokuvumelanisa idatha ye-P2P;
• Ikhono lokusebenzisa i-Tor ukuze kungaziwa futhi ikusekele ngokugcwele ukusebenzisa amasevisi e-Tor afihliwe (.onion) esikhundleni samakheli e-IPv4;
• Ukusekelwa kokubethela kwe-TLS;
• Ukufinyeleleka okuzenzakalelayo nge-UPnP;
• Amathuba okunamathisela ababhali abaningana abanesiginesha ehlukene yedijithali kusayithi;
• Ukutholakala kwe-plugin yokudala ukucushwa kwabasebenzisi abaningi (i-openproxy);
• Ukusekelwa kokuphakelayo kwezindaba zokusakaza;
• Isebenza kunoma yiziphi iziphequluli namasistimu okusebenza.

Izinguquko ezinkulu ku-ZeroNet 0.7

• Ikhodi yenziwe kabusha ukuze isekele i-Python3, iqinisekisa ukuhambisana nePython 3.4-3.8;
• Imodi yokuvumelanisa egciniwe evikelekile isiqaliwe;
• Lapho kungenzeka khona, ukusatshalaliswa okuyinhloko kwemitapo yolwazi yezinkampani zangaphandle kuyekiwe ngenxa yokuncika kwangaphandle;
• Ikhodi yokuqinisekisa amasiginesha edijithali isheshiswe izikhathi ezi-5-10 (kusetshenziswa umtapo wezincwadi we-libsecp256k1;
• Kwengezwe i-randomization yezitifiketi esezivele zenziwe ukuze kudlule izihlungi;
• Ikhodi ye-P2P ibuyekeziwe ukuze isebenzise iphrothokholi ye-ZeroNet;
• Imodi engeziwe yokungaxhunyiwe ku-inthanethi;
• Kwengezwe i-plugin ye-UiPluginManager yokufaka nokuphatha ama-plugin ezinkampani zangaphandle;
• Ukusekelwa okugcwele kwe-OpenSSL 1.1 kunikezwa;
• Lapho uxhumeka kontanga, amarekhodi e-dummy SNI kanye ne-ALPN asetshenziselwa ukwenza ukuxhumana kufane kakhulu nezingcingo eziya kumasayithi avamile nge-HTTPS;

Ngosuku olufanayo nokukhishwa kwe-ZeroNet 0.7.0 kwakheka buyekeza u-0.7.1, oqeda ukuba sengozini okuyingozi okungase kuvumela ukusetshenziswa kwekhodi ohlangothini lweklayenti. Ngenxa yephutha kukhodi yokunikeza okuguquguqukayo kwesifanekiso, isiza sangaphandle esivulekile singasungula ukuxhumana nohlelo lweklayenti ngeWebSocket enamalungelo angenamkhawulo we-ADMIN/NOSANDBOX, okwenza kube nokwenzeka ukushintsha imingcele yokumisa nokusebenzisa ikhodi yayo kukhompyutha yomsebenzisi ngokusebenzisa ukukhohlisa ngepharamitha ye-open_browser.
Ubungozi buvela egatsheni elingu-0.7, kanye nasekwakheni kokuhlola kusukela ekubuyekezweni 4188 (ushintsho lwenziwe ezinsukwini ezingama-20 ezedlule).

Source: opennet.ru