Ukuza kuthi ga ngoku andicingi ukuba ndichukumise enye yeengoma zam endizithandayo, ukhuseleko lwekhompyutha, kwaye ndiyakholelwa ukuba esi iya kuba sisihloko endiza kukuxelela sona namhlanje Ndiyathemba ukuba emva kweli nqaku lifutshane unganombono ongcono wento enokukunceda ulawule ngcono umngcipheko wakho kunye nendlela yokunciphisa ezininzi ngaxeshanye.
Iingozi kuyo yonke indawo
Ayinakuphepheka, kulo nyaka kuphela, sele sinobungozi obungaphezulu kwe-15000 obufunyenwe babelwa ngendlela loluntu. Ndazi njani? Ngenxa yokuba inxenye yomsebenzi wam kukujonga ii-CVEs kwiinkqubo esizisebenzisayo kwi-Gentoo ukubona ukuba sisebenzisa isoftware esemngciphekweni, ngale ndlela sinokuyihlaziya kwaye siqinisekise ukuba wonke umntu osasazekayo unezixhobo ezikhuselekileyo.
CVE
Ukonakala okuqhelekileyo kunye nokuchazwa Isifinyezo sayo ngesiNgesi, zezona zinto zichazayo ezizodwa ezinikezelwe kulowo nalowo usemngciphekweni. Ndingatsho ngovuyo olukhulu ukuba abathuthukisi abaninzi be-Gentoo baxhasa ukulunga koluntu, baphanda kwaye bapapasha iziphumo zabo ukuze zilungiswe kwaye zilungiswe. Elinye lamatyala okugqibela endikonwabeleyo kukufunda ngalawa Okukhethiweyo Umngcipheko ochaphazele iiseva zeApache kwihlabathi liphela. Kutheni ndisithi ndiyazingca ngalento? Kungenxa yokuba benza okuhle emhlabeni, ukugcina ubungozi emfihlakalweni kuyanceda kuphela ezimbalwa, kwaye iziphumo zoku zinokuba yintlekele ngokuxhomekeke kwinjongo.
NAC
Ii-CNAs zizinto ezijongana nokucela kunye / okanye ukwabela ii-CVEs, umzekelo, sine-CNA kaMicrosoft, ejongene nokubeka esichengeni ubuthathaka babo, ukuzisombulula nokuzinika CVE ukubhaliswa kamva ekuhambeni kwexesha.
Iindidi zamanyathelo
Masiqale ngokuchaza ukuba akukho zixhobo zikhuselekileyo okanye ziya kukhuseleka nge-100%, kwaye njengesiqhelo esiqhelekileyo esasisithi:
Ikhompyuter ekhuselekileyo ye-100% kuphela etshixiwe kwigumbi elingasasebenziyo, liqhawulwe kwi-intanethi kwaye icinyiwe.
Kuba kuyinyani, umngcipheko uyakuhlala ukho, owaziwayo okanye ongaziwayo, yinto nje yexesha ukuze xa ujongene nomngcipheko sinokwenza oku kulandelayo:
Ukunciphisa
Ukunciphisa umngcipheko ayikho enye into ngaphandle kokunciphisa (Hayi rhoxisa). Oku kubaluleke kakhulu kwaye kubaluleke kakhulu kokubini kwishishini nakwinqanaba lomntu, umntu akafuni "ukuqhekeka", kodwa ukuthetha inyani eyona nto ibuthathaka kwikhonkco ayisiyo ikhompyuter, hayi inkqubo, nkqu nenkqubo , umntu.
Sonke sinomkhwa wokugxeka abanye, nokuba ngabantu okanye izinto, kodwa kukhuseleko lwekhompyuter, uxanduva kwaye luya kuhlala luyinto yabantu, isenokungabi nguwe ngqo, kodwa ukuba awulandeli indlela elungileyo, uya kuba Inxalenye yengxaki. Emva kwexesha ndiza kukunika iqhinga elincinci lokuhlala ukhuselekile kancinci 😉
Ukugqithisela
Lo ngumgaqo owaziwayo, kufuneka siwucinge njenge banco. Xa ufuna ukuyikhathalela imali yakho (ndithetha ngokwasemzimbeni), eyona nto ikhuselekileyo kukushiya umntu onokwazi ukuyikhusela ngcono kunawe. Awudingi ukuba neyakho igumbi (nangona kungangcono kakhulu) ukuze ukwazi ukukhathalela izinto, kufuneka kuphela umntu (omthembileyo) wokugcina into ebhetele kunawe.
Yamkele
Kodwa xa owokuqala nowesibini engasebenzi, kulapho umbuzo obaluleke ngokwenene ungena khona. Lubaluleke kangakanani oluovimba / idatha / njl. Ukuba impendulo ininzi, kuya kufuneka ucinge ngezi zimbini zokuqala. Kodwa ukuba impendulo ngu akunjaloMhlawumbi kufuneka wamkele umngcipheko.
Kuya kufuneka ujongane nayo, ayizizo zonke izinto ezinokuthambeka, kwaye ezinye izinto ezinokuncitshiswa ziya kuxabisa izixhobo ezininzi kangangokuba kube nzima ukufaka isisombululo sokwenyani ngaphandle kokutshintsha kwaye utyale ixesha elininzi nemali. Kodwa ukuba uyakwazi ukuhlalutya into ozama ukuyikhusela, kwaye ayifumani ndawo yayo kwinyathelo lokuqala okanye lesibini, emva koko yithathe kwinyathelo lesithathu ngeyona ndlela ilungileyo, ungayiniki ixabiso elingaphezulu kunelo unayo, kwaye sukuyixuba nezinto ezixabiseke ngokwenene.
Ukugcina usesikhathini
Le yinyaniso esinda kumakhulu abantu nakumashishini. Ukhuseleko lwekhompyuter aluthethi ngokuthobela uphicotho-zincwadi lwakho amatyeli amathathu ngonyaka kwaye ungalindelanga ukuba kwenzeke nakwezinye iintsuku ezingama-3. Kwaye oku kuyinyani kubalawuli abaninzi benkqubo. Ekugqibeleni ndakwazi ukuziqinisekisa njenge IiLFCS (Ndiyishiyela kuwe ukuze ndifumane apho ndiyenze khona) kwaye eli ngumba obaluleke kakhulu ngexesha lesifundo. Ukugcina izixhobo zakho kunye neenkqubo zazo zisemgangathweni kubalulekile, luleke kakhulu, ukunqanda umngcipheko omkhulu. Ngokuqinisekileyo abaninzi apha baya kundixelela, kodwa inkqubo esiyisebenzisayo ayisebenzi kuhlobo olulandelayo okanye into efanayo, kuba inyani kukuba inkqubo yakho yibhombu yexesha ukuba ayisebenzi kuhlobo lwamva nje. Kwaye oko kusizisa kwicandelo elidlulileyo, Ungayinciphisa?, Ungayidlulisa?, Ungayamkela? ...
Inyaniso mayixelelwe, ukugcina nje engqondweni, ngokwezibalo iipesenti ezingama-75 zokuhlaselwa kukhuseleko kwikhompyuter zivela ngaphakathi. Oku kunokuba ngenxa yokuba unabasebenzisi abangalindelanga okanye abakhohlakeleyo kwinkampani. Okanye ukuba iinkqubo zabo zokhuseleko azenzanga nzima kwi Hacker qhekeza kwindawo yakho okanye kuthungelwano. Kwaye phantse ngaphezulu kwe-90% yokuhlaselwa kubangelwa yisoftware ephelelwe lixesha, hayi ngenxa yobuthathaka be usuku zero.
Cinga njengomatshini, hayi njengomntu
Le iya kuba yingcebiso encinci endikushiya kuyo apha:
Cinga njengoomatshini
Kwabo abangaqondiyo, ngoku ndikunika umzekelo.
Ndikwazisa UYohane. Phakathi kwabathandi bezokhuseleko yenye yezona ndawo zokuqala ezifanelekileyo xa uqala kwihlabathi le i-ethicla hacking. John uyavana ngokumangalisayo nomhlobo wethu ziwe. Kwaye ngokusisiseko ubamba uluhlu alunikiweyo kwaye aqale ukuvavanya indibaniselwano ade afumane isitshixo esisombulula iphasiwedi ayikhangelayo.
ziwe ngumvelisi wendibaniselwano. oku kuthetha ukuba ungachaza ukuba ufuna igama eligqithisiweyo elinobumba abali-6 ubude, eliqukethe oonobumba abakhulu nabancinci kunye ne-crunch eya kuqala ukuvavanya nganye nganye ...
aaaaaa,aaaaab,aaaaac,aaaaad,....
Kwaye uyazibuza ukuba kuthatha ixesha elingakanani ukuya kulo lonke uluhlu ngokuqinisekileyo ... ayithathi ngaphezulu kokumbalwa imizuzu. Kwabo bashiyekileyo bevule imilomo, makhe ndichaze. Njengoko besitshilo ngaphambilana, elona khonkco libuthathaka kwikhonkco ngumntu, kunye nendlela yakhe yokucinga. Kwikhompyuter akukho nzima ukuvavanya indibaniselwano, iphindaphindeka kakhulu, kwaye kule minyaka idlulileyo abaqhubekekisi bebenamandla kangangokuba kungathathi ngaphezulu komzuzwana ukwenza iwaka, okanye nangaphezulu.
Kodwa ngoku into elungileyo, umzekelo wangaphambili ukunye ukucinga kwabantu, ngoku siye ngayo ukucinga ngomatshini:
Ukuba sixelela crunch ukuba ivelise ipassword ngo 8 amanani, phantsi kweemfuno ezifanayo zangaphambili, simkile kwimizuzu ukuya iiyure. Kwaye uqikelele ukuba kwenzeka ntoni ukuba sixelela ukuba usebenzise ngaphezulu kwe-10, ziye zibe iintsuku. Ngaphezulu kwe-12 esele sinayo iinyangaUkongeza kwinto yokuba uluhlu luya kuba ngamanani angenakugcinwa kwikhompyuter eqhelekileyo. Ukuba sifika kuma-20 sithetha ngezinto ikhompyuter engazukukwazi ukuziqonda kumakhulu eminyaka (kunye neeprosesa ezikhoyo zekhosi). Oku kunenkcazo yemathematika, kodwa ngenxa yezizathu zendawo andizukuyichaza apha, kodwa eyona nto inomdla inento yokwenza nayo Imvume, Las indibaniselwano kunye indibaniselwano. Ukuchaneka ngakumbi, kunonobumba ngamnye ongeze kubude sinama-50 amathuba, ke siya kuba nento efana nale:
20^50 Ukudityaniswa okunokwenzeka kwiphasiwedi yethu yokugqibela. Ngenisa elo nani kwikhalityhuleyitha lakho ukuze ubone ukuba maninzi kangakanani amathuba anokubakho kubude beesimboli ezingama-20.
Ndingacinga njani njengomatshini?
Akululanga, ngaphezulu komntu omnye oza kundixelela ukuba ndicinge ngegama eligqithisiweyo elinonobumba abangama-20 ngokulandelelana, ngakumbi ngombono wakudala wokuba amagama agqithisiweyo amagama isitshixo. Kodwa masibone umzekelo:
dXfwHd
Oku kunzima ukuba umntu akhumbule, kodwa kulula kakhulu kumatshini.
caballoconpatasdehormiga
Oku kwelinye icala kulula kakhulu ukuba umntu akukhumbule (nokuba kuyahlekisa) kodwa sisihogo ziwe. Kwaye ngoku ngaphezulu kwesinye sizakundixelela, kodwa akucebisi na ukuba utshintshe amaqhosha ngokulandelelana? Ewe kuyacetyiswa, ke ngoku sinokubulala iintaka ezimbini ngelitye elinye. Caba lenyanga ndiyayifunda UDon Quixote de la Mancha, umqulu I. Kwiphasiwedi yam ndiza kubeka into efana nale:
ElQuijoteDeLaMancha1
Iimpawu ezingama-20, into ekunzima ukuyifumana ungandazi, kwaye eyona nto intle kukuba xa ndiyigqibile incwadi (ndicinga ukuba bafunda rhoqo 🙂) baya kwazi ukuba kufuneka batshintshe ipassword yabo, bade batshintshele ku:
ElQuijoteDeLaMancha2
Sele iqhubekile 🙂 kwaye ngokuqinisekileyo iya kukunceda ugcine amagama akho okugcina ukhuselekile kwaye kwangaxeshanye kukukhumbuze ukuba uyigqibe incwadi yakho.
Endikubhalileyo kwanele, kwaye nangona ndingathanda ukukwazi ukuthetha ngemiba emininzi yezokhuseleko, siza kuyishiya ngelinye ixesha.
Inika umdla kakhulu!!
Ndiyathemba ukuba ungalayisha izifundo kwi-Linux, kuya kuba kuhle.
Nibuliso!
Molo, kulungile, ungandinika ixesha, kodwa ndikwabelana ngezixhobo endizifumana zinomdla kakhulu 🙂
https://wiki.gentoo.org/wiki/Security_Handbook
Le ayiguqulelwa kwiSpanish 🙁 kodwa ukuba umntu othile ubuganga bokunika isandla kunye nokunceda kuya kuba kuhle 🙂
Phendula nge quote
Ndinomdla kakhulu, kodwa kwimbono yam uhlaselo lomkhosi ongenangqondo luya luphelelwa, kwaye ukuveliswa kwamaphasiwedi afana ne "ElQuijoteDeLaMancha1" akubonakali ngathi sisisombululo, kungenxa yokuba ngobunjineli obuncinci bezentlalo kunokwenzeka ukuba ufumane iiPassword ze Olu hlobo, lukhulu kuphela xa luphandwa ngumntu kwaye yena ngokwakhe uya kusityhilela oko, nokuba kukwiinethiwekhi zakhe, kubahlobo bakhe okanye emsebenzini, yinxalenye yobuntu.
Ngokombono wam, esona sisombululo sisiso kukusebenzisa umphathi wegama eligqithisiweyo, kuba kukhuselekile ukusebenzisa ipaswedi enamanani ayi-100 kunelinemivo engama-20, ukongeza, kukho ithuba lokuba ngokwazi igama eliyimfihlo kuphela, akunakwenzeka ukuba utyhile kwanasentshona amagama okugqitha avelisiweyo kuba aziwa.
Lo ngumphathi wegama eligqithisiweyo, ngumthombo ovulekileyo kwaye ngokulinganisa ikhibhodi, iyakhuseleka kwizitshixo.
https://www.themooltipass.com
Ewe, andizenzi ngathi ndinika isisombululo esikhuseleke ngokupheleleyo (ndikhumbula ukuba akukho nto ingu-100% engenakudlula) ngamagama ayi-1500 kuphela I (andifuni ukubhala ngaphezulu kwalonto ngaphandle kokuba kunyanzelekile) kodwa njengokuba usitsho I-100 ingcono kune-20, kulungile i-20 ngokuqinisekileyo ingcono kune-8 🙂 kwaye, njengokuba besesitshilo ekuqaleni, elona khonkco libuthathaka yindoda, yiyo loo nto ingqwalaselo ihlala ihleli. Ndiyazi "iinjineli zentlalo" ezininzi ezingazi kakhulu ngetekhnoloji, kodwa zanele kuphela ukwenza umsebenzi wokubonisana nokhuseleko. Eyona nto inzima ngakumbi kukufumana abahlaseli abachanekileyo abafumana iziphene kwiinkqubo (usuku lwe-zero olaziwayo).
Ukuba sithetha ngezisombululo "ezingcono" sele singenisa isihloko sabantu abanobungcali ebaleni, kwaye ndabelana ngalo naluphi na uhlobo lomsebenzisi 🙂 kodwa ukuba uyathanda singathetha ngezisombululo "ezingcono" ngelinye ixesha. Kwaye enkosi ngekhonkco, qiniseka ngokulunga kunye nokubi, kodwa ayizukuyenza lukhulu kumphathi wegama eligqithisiweyo, ungothuka ngokulula kunye nomnqweno ababahlasela ngawo, emva kwayo yonke ... uloyiso olunye lubonisa izitshixo ezininzi kutyhilwe.
Phendula nge quote
Inqaku elinomdla, uChrisADR. Njengomphathi wenkqubo yeLinux, esi sisikhumbuzo esihle sokuba ungabanjiswa ngokunganiki eyona nto ibalulekileyo efunekayo namhlanje ukugcina iipaswedi zihlaziyiwe kunye nokhuseleko olufunekayo kumaxesha anamhlanje. Nokuba eli linqaku elinokuba luncedo kakhulu kubantu abaqhelekileyo abacinga ukuba iphasiwedi ayinguye unobangela we-90% yentloko. Ndingathanda ukubona amanqaku ngakumbi kukhuseleko lwekhompyuter kunye nendlela yokugcina ukhuseleko oluphezulu ngaphakathi kwenkqubo yethu yokusebenza esiyithandayo. Ndiyakholelwa ukuba kuhlala kukho into eyokufundwa ngaphaya kolwazi umntu ayifumana ngezifundo noqeqesho.
Ngaphandle koko ndihlala ndibuza le bhlog ukufumana malunga nenkqubo entsha yeGnu Linux yokufumana izandla zam kuyo.
Nibuliso!
Ngaba ungachaza kancinci ngeenkcukacha, ngamanani kunye nobungakanani, kutheni "iDonQuijoteDeLaMancha1" ("DonQuijote de La Mancha" ingekho; p) ikhuselekile kune "• M¡ ¢ 0nt®a $ 3Ñ @ •"?
Andazi kwanto malunga nokudibanisa izibalo, kodwa andikaqiniseki ngombono ophindaphindiweyo wokuba iphasiwedi ende eneseti yomlinganiswa elula ibhetele kunaleyo imfutshane eneseti yomlinganiswa omkhulu. Ngaba inani lokudityaniswa okunokwenzeka likhulu ngokwenyani usebenzisa oonobumba besiLatin kunye namanani kunokusebenzisa yonke i-UTF-8?
Ukubulisa
Molo Dani, masiye kwiindawo ukuyenza icace… ukhe wayifumana enye yeesutikheyisi ezinokudityaniswa kwamanani njengeqhaga? Makhe sijonge le meko ilandelayo ... ucinga ukuba bafikelela kwisithoba sinento efana nale:
| 10 | | 10 | | 10 |
Inye inamathuba e-diaz, ke ukuba ufuna ukwazi inani lendibaniselwano enokwenzeka, kuya kufuneka uphindaphinde ngokulula, u-10³ ukuze ube ngqo okanye u-1000.
Itafile ye-ASCII inamagama angama-255 abalulekileyo, esihlala sisebenzisa amanani, oonobumba abancinci, oonobumba abakhulu kunye nezinye iimpawu zokubhala. Masithi ngoku siza kuba negama elinegama eligqithisiweyo elineenombolo ezi-6 malunga neenketho ezingama-70 (oonobumba abakhulu, oonobumba abancinci, amanani kunye nezinye iisimboli)
| 70 | | 70 | | 70 | | 70 | | 70 | | 70 |
Njengoko unokucinga, linani elikhulu, li-117 ukuba lichane. Kwaye zonke ezo zinto zinokudityaniswa okunokubakho kwisithuba esineenombolo ezi-649. Ngoku siza kunciphisa ukubonwa kwamathuba ngakumbi, masiqhubeke ukuba sisebenzisa kuphela ama-000 (amagama asezantsi, amanani kunye nophawu lwamaxesha ngamanye) kodwa ngegama eligqithisiweyo elide, masithi mhlawumbi ngamanani angama-000 (Lowo ngumzekelo ine-6).
| 45 | | 45 | | 45 | | 45 | | 45 | | 45 | | 45 | | 45 | | 45 | | 45 | | 45 | | 45 | | 45 | | 45 | | 45 | | 45 | | 45 | | 45 | | 45 | | 45 |
Inani lamathuba liba… 1 159 445 329 576 199 417 209 625 244 140 625… Andazi ukuba libalwa njani elo nani, kodwa kum lixesha elide :), kodwa siza kulinciphisa nangakumbi , Siza kusebenzisa amanani u-0 ukuya ku-9 kuphela, kwaye masibone ukuba kwenzeka ntoni kubungakanani
| 10 | | 10 | | 10 | | 10 | | 10 | | 10 | | 10 | | 10 | | 10 | | 10 | | 10 | | 10 | | 10 | | 10 | | 10 | | 10 | | 10 | | 10 | | 10 | | 10 |
Ngalo mthetho ulula unokuza nokudityaniswa okumanyeneyo 100. Kungenxa yokuba inani ngalinye elongezwa kwi-equation lonyusa inani lezinto ezinokubakho ngokucacileyo, ngelixa ukongeza amathuba ngaphakathi kwebhokisi enye kuyonyusa ngokulandelelana.
Kodwa ngoku siya kwizinto "ezilungileyo" kuthi bantu.
Kukuthatha ixesha elingakanani ukubhala “• M¡ ¢ 0nt®a $ 3Ñ @ •” ngokwemigaqo esebenzayo? Masicinge umzuzwana ukuba kufuneka ubhale yonke imihla, kuba awuthandi ukuyigcina kwikhompyuter. Lo iba ngumsebenzi odinisayo ukuba kuya kufuneka wenze iziphikiso zezandla ngeendlela ezingaqhelekanga. Ngokukhawuleza (ngokombono wam) kukubhala amagama onokuwabhala ngokwendalo, kuba enye into ebalulekileyo kukutshintsha amaqhosha rhoqo.
Kwaye okokugqibela kodwa kungaphelelanga apho ... Kuxhomekeke kakhulu kwimeko yomntu ophuhlise inkqubo yakho, usetyenziso, inkqubo, ukubanakho ukusebenzisa ngokuzolileyo bonke abalinganiswa be-UTF-8, kwezinye iimeko inokukhubaza ukusetyenziswa kwe Ibalulekile kuba isicelo "siguqula" ezinye zegama eligqithisiweyo kunye nokwenza ukuba lingasetyenziswanga ... Ke mhlawumbi kungcono ukuyidlala ikhuselekile ngoonobumba osoloko uyazi ukuba bayafumaneka.
Ndiyathemba ukuba oku kuyanceda ngamathandabuzo 🙂 Ndiyabulisa