Ezinsukwini ezithile ezedlule I-ExpressVPN iveze ukuqaliswa komthombo ovulekile we-Lightway protocol, eklanyelwe ukufeza izikhathi ezimbalwa zokusetha uxhumano ngenkathi kugcinwa amazinga aphezulu okuphepha nokuthembeka. Ikhodi ibhalwe ngo-C futhi isatshalaliswa ngaphansi kwelayisense le-GPLv2.
Ukuqaliswa icwecwe kakhulu futhi ingena emigqeni eyizinkulungwane ezimbili yekhodi, Ngaphezu kwalokho, kumenyezelwe ukwesekwa kweLinux, Windows, MacOS, iOS, amapulatifomu e-Android, ama-routers (Asus, Netgear, Linksys) neziphequluli.
Mayelana ne-Lightway
Ikhodi ye-Lightway isebenzisa imisebenzi ye-cryptographic eqinisekisiweukulungele ukusetshenziswa okunikezwe umtapo wezincwadi we-wolfSSL isivele isetshenzisiwe kuzisombululo eziqinisekisiwe ze-FIPS 140-2.
Kwimodi ejwayelekile, umthetho olandelwayo isebenzisa i-UDP ukudlulisa idatha ne-DTLS ukwakha isiteshi sokuxhumana esibethelwe. Njengenketho yokuqinisekisa ukusebenza kumanethiwekhi we-UDP angathembekile noma anqunyelwe, iseva inikeza imodi yokudlulisa ethembekile, kepha ehamba kancane, evumela ukudluliswa kwedatha nge-TCP ne-TLSv1.3.
Ngonyaka odlule, abasebenzisi bethu bakwazile ukubona ukuthi ukuxhumana kwabo kushesha kangakanani nge-Lightway, ukuthi bangaluthola ngokushesha kangakanani uxhumano lwe-VPN, imvamisa ngesigamu somzuzwana, nokuthi ukuxhumana kwabo kunokwethenjelwa kangakanani, noma kuguquka. amanethiwekhi. I-Lightway ngesinye futhi isizathu, kanye nengqalasizinda ye-bandwidth ethuthukile nengqalasizinda esiyakhe, singanikeza insiza ye-VPN engcono kakhulu kubasebenzisi bethu.
Futhi manje, noma ngubani angazibonela ngokwakhe ukuthi yini efakiwe kwikhodi eyinhloko ye-Lightway, futhi afunde ukuhlolwa okuzimele kokuphepha kukaLightway yinkampani yokuphepha kwe-cyber iCure53.
Ukuhlolwa yi-ExpressVPN kukhombisile ukuthi uma kuqhathaniswa nephrothokholi endala (i-ExpressVPN isekela i-L2TP / IPSec, i-OpenVPN, i-IKEv2, i-PPTP, ne-SSTP, kepha ayisho imininingwane ngokwenziwe ngokuqhathanisa), ukushintshela ku-Lightway kunciphise isikhathi sokusetha izingcingo i isilinganiso sezikhathi ezingama-2,5 (ngaphezulu kwesigamu samacala, isiteshi sokuxhumana senziwa ngaphansi komzuzwana).
Iphrothokholi entsha iphinde yehlisa inani lokunqanyulwa kumanethiwekhi weselula angathembekile anezinkinga zekhwalithi yokuxhumana ngama-40%.
Engxenyeni ye- ukuphepha wokuqalisa singakubona esimemezelweni esishiwo ukuthi kuqinisekiswa ngomphumela wocwaningomabhuku oluzimele olwenziwa yiCure53, okwake kwenziwa ukuhlolwa kwamabhuku kwe-NTPsec, SecureDrop, Cryptocat, F-Droid, neDovecot.
Ukucwaningwa kwamabhuku kuhilela ukuqinisekiswa kwekhodi yomthombo futhi kwafaka izivivinyo zokukhomba ukuba sengozini okungaba khona (izingqinamba ezihlobene nokubhala ngokufihla amagama azange zicatshangwe).
Ngokuvamile, ikhwalithi yekhodi ibilinganiswe phezulu, Kodwa-ke, ukucwaningwa kwamabhuku kuveze ukuba sengozini okuthathu okungaholela ekwenqabelweni kwensizakalo kanye nokuba sengozini okukodwa okuvumela ukuthi umthetho olandelwayo usetshenziswe njengesikhulisi sethrafikhi ngesikhathi sokuhlaselwa kwe-DDoS.
Izingqinamba ezibikiwe manje sezilungisiwe futhi nempendulo mayelana nokuthuthukiswa kwamakhodi ibhekiwe. Ukucwaninga kuphinde kwagxila ebucayini obaziwayo nasezindabeni ezithintekayo ezingxenyeni zezinkampani zangaphandle, njenge-libdnet, i-WolfSSL, i-Unity, i-Libuv ne-lua-crypt. Iningi lezinkinga lincane, ngaphandle kweMITM kuWolfSSL (CVE-2021-3336).
Ukuthuthukiswa kokuthunyelwa inkomba yomthetho olandelwayo kuzokwenzeka ku-GitHub ngokunikezwa ithuba lokubamba iqhaza ekuthuthukiseni abamele umphakathi (ukuze kudluliswe izinguquko, kudingeka basayine isivumelwano se-CLA sokudluliswa kobunikazi bamalungelo kukhodi).
Futhi abanye abahlinzeki be-VPN bayamenywa ukuthi babambisane, ngoba bangasebenzisa umthetho olandelwayo ngaphandle kwemingcele. Ukukhweza kudinga ukusetshenziswa kwezinhlelo zokukhweza zasemhlabeni nezamaCeedling. Ukuthunyelwa kufakwe umtapo wolwazi ongawusebenzisa ukuhlanganisa ukusebenza kwamakhasimende we-VPN kanye neseva kuzinhlelo zakho zokusebenza.
Ekugcineni, uma unentshisekelo yokwazi kabanzi ngakho kwalokhu kuqaliswa, ungabheka imininingwane Kulesi sixhumanisi esilandelayo.