Kwiintsuku ezithile ezidlulileyo I-ExpressVPN ityhile ukuphunyezwa kwemithombo evulekileyo yenkqubo ye-Lightway, eyilelwe ukufezekisa ubuncinci amaxesha okuseta kunxibelelwano ngelixa kugcinwa amanqanaba aphezulu okhuseleko kunye nokuthembeka. Ikhowudi ibhalwe ngo-C kwaye ihanjiswa phantsi kwelayisensi ye-GPLv2.
Ukuphunyezwa icwecwe kakhulu kwaye ingena kumawaka amabini ekhowudi, Ukongeza, inkxaso yeLinux, Windows, macOS, iOS, amaqonga e-Android, ii-routers (Asus, Netgear, Linksys) kunye nezikhangeli zibhengeziwe.
Malunga neLightway
Ikhowudi yeLightway isebenzisa imisebenzi yecryptographic eqinisekisiweyoukulungele ukusetyenziswa okubonelelwe yithala leencwadi le-wolfSSL Sele isetyenzisiwe kwizisombululo eziqinisekisiweyo ze-FIPS 140-2.
Kwindlela yesiqhelo, umthetho olandelwayo isebenzisa i-UDP yokuhambisa idatha kunye ne-DTLS ukwenza umjelo wonxibelelwano ofihliweyo. Njengokukhetha ukuqinisekisa ukusebenza kwinethiwekhi ezingathembekanga okanye ezinqunyelwe kwi-UDP, iseva ibonelela ngendlela ethembekileyo, kodwa ecothayo, yokudlulisela evumela ukuhanjiswa kwedatha ngaphezulu kweTCP kunye ne-TLSv1.3.
Kunyaka ophelileyo, abasebenzisi bethu bakwazile ukubona ukuba unxibelelwano lwabo lukhawuleze kangakanani ngeLightway, bakhawuleza kangakanani ukufumana uqhagamshelo lweVPN, rhoqo kwiqhezu lomzuzwana, kwaye unxibelelwano lwabo luthembeke kangakanani na, kwanaxa betshintsha. uthungelwano. I-Lightway sesinye isizathu, kunye ne-bandwidth eqhubela phambili kunye nesiseko sendawo esakhele kuyo, sinokubonelela ngeyona nkonzo yeVPN efanelekileyo kubasebenzisi bethu.
Kwaye ngoku, nabani na unokuzibonela ngokwabo okubandakanyiweyo kwikhowudi engundoqo ye-Lightway, kunye nokufunda uphicotho oluzimeleyo lokhuseleko lwe-Lightway yinkampani yokhuseleko lwe-cyber Cure53.
Ukuvavanywa ngu-ExpressVPN kubonisile ukuba kuthelekiswa nomgaqo olidala (i-ExpressVPN ixhasa i-L2TP / IPSec, i-OpenVPN, i-IKEv2, i-PPTP, kunye ne-SSTP, kodwa ayinazinkcukacha ngokwenziweyo kuthelekiso), utshintsho oluya e-Lightway linciphise ixesha lokuseta umnxeba umndilili wamaxesha ama-2,5 (ngaphezulu kwesiqingatha samatyala, ijelo lonxibelelwano lenziwa ngaphantsi komzuzwana).
Umgaqo-nkqubo omtsha unciphise nenani lokuqhawuka konxibelelwano olungathembekanga kwinethiwekhi kunye neengxaki zomgangatho wonxibelelwano ngama-40%.
Kwicala le ukhuseleko yokuphunyezwa sinokubona kwisibhengezo esikhankanyiweyo kungqinwa ziziphumo zophicotho oluzimeleyo olwenziwa yiCure53, apho ngaxa lithile kwenziwa uphicotho lweNTPsec, SecureDrop, Cryptocat, F-Droid, kunye neDovecot.
Uphicotho-zincwadi lubandakanya ukungqinisisa ikhowudi yemvelaphi kwaye kubandakanya neemvavanyo ezichonga ubungozi (imiba enxulumene nokubhala ngokufihlakeleyo khange iqatshelwe).
Ngokubanzi, umgangatho wekhowudi ulinganiswe phezulu, Nangona kunjalo, uphicotho-zincwadi luveze ubuthathaka obunokubangela ukukhanyelwa kwenkonzo kunye nokuba sesichengeni okuvumela ukuba umthetho olandelwayo usetyenziswe njengesikhulisi sendlela ngexesha lokuhlaselwa kwe-DDoS.
Imicimbi echaziweyo sele ilungisiwe kwaye ingxelo malunga nokuphuculwa kwekhowudi ithathelwe ingqalelo. Uphicotho-zincwadi lujolise kubuthathaka obaziwayo kunye nemicimbi ebandakanyekayo kumalungu esithathu, njenge libdnet, WolfSSL, Unity, Libuv, kunye lua-crypt. Uninzi lwemiba mincinci, ngaphandle kweMITM kwiWolfSSL (CVE-2021-3336).
Uphuhliso lokuhanjiswa isalathiso somgaqo iya kwenzeka kwiGitHub ngokunikwa ithuba lokuthatha inxaxheba kuphuhliso lwabameli boluntu (lokutshintshwa kweenguqu, bayacelwa ukuba batyikitye isivumelwano se-CLA sokudluliselwa kwelungelo lobunini kwikhowudi).
Kwakhona abanye ababoneleli be-VPN bayamenywa ukuba basebenzisane, kuba banokusebenzisa umthetho olandelwayo ngaphandle kwezithintelo. Ukunyusa kufuna ukusetyenziswa kweenkqubo zomhlaba kunye neCeedling. Ukuthunyelwa kuyilwe njengethala leencwadi onokulisebenzisa ukudibanisa VPN umxhasi kunye nokusebenza kweseva kwizicelo zakho.
Ekugqibeleni, ukuba unomdla wokwazi okungakumbi ngayo kolu setho, unokujonga iinkcukacha Kule khonkco ilandelayo.