Gargaɗin sa ido kan hanyar sadarwa ta Android: karanta canjin amana
Sanarwar sa ido, CA da aka shigar da ita, da manufar da ake gudanarwa abubuwa uku ne daban. Duba wanne Android ke bayarwa kafin ka share takardun shaidar.
Sanarwa uku suna kama da juna a waya, kuma ɗaya ne kawai daga cikinsu ke magana kan takardar shaida. Layin matsayin VPN, gargaɗin ajiyar amana, da banner na na'urar da ake gudanarwa kowanne yana ambaton wani iko daban, kuma aikace-aikacen da ke kan allo a wannan lokacin mai yiwuwa bai mallaki ɗaya daga cikinsu ba. Karanta ainihin kalmomin da farko yana ceton ka daga share abin da bai dace ba. Yi gwaje-gwaje biyar da ke ƙasa bisa tsari kuma ka tsaya a farkon wanda ya kasa, domin aikin da ya dace yana canzawa gaba ɗaya a kowane mataki.
Mataki 0: gane wace sanarwa kake kallo
Kalmomin sun fi alamar muhimmanci. Sanarwar matsayin VPN tana nufin wani aikace-aikace yana riƷe da VpnService mai aiki. Gargaɗin takardar shaida yana nufin an shigar da wani abu a cikin ajiyar amana. Sanarwar na'urar da ake gudanarwa tana nufin wani mai gudanarwa ya yi amfani da manufa, wadda ƙila ta shigar da amana a matsayin ɓangare na wannan manufar.
| Notice | What it asserts | First check |
|---|---|---|
| VPN status | An app is running a local VPN service | Which app holds the active VPN right now |
| Certificate authority installed | A CA exists in a trust store | Issuer, validity and which store holds it |
| Managed device or profile | An administrator owns part of the configuration | Whether device policy installed the credential |
Lokacin da rubutun ya faɗi kai tsaye «Network may be monitored», mai aikawa tsarin ne ba mai ba da VPN ba: Android yana buga wannan layin duk lokacin da aikace-aikace ke riƷe da VpnService mai aiki, don haka babban abokin ciniki na kasuwanci yana samar da shi ba tare da sanya komai a cikin ajiyar amana ba. Biyu daga cikin sanarwar uku na iya kasancewa gaskiya a lokaci ɗaya, wanda shine dalilin da yasa ƙorafi yawanci ke ambaton wanda bai dace ba. Idan jumlar ta ce an shigar da CA, VPN ba shi da wani matsayi fiye da wanda ake zargi, kuma cire shi na iya barin gargaɗin daidai inda yake.
Mataki 1: nemo takardar shaidar da ajiyarta
A Android 9 zuwa 12 hanyar ita ce Saituna, sannan Tsaro, sannan Ƙulla da takardun shaida, sannan Takardun shaidar da aka amince da su; Android 13 da waɗanda suka biyo baya suna motsa wannan allon zuwa Tsaro da sirri, sannan Ƙarin saitunan tsaro, kuma fatun OEM suna sake sunan matakan, don haka nemi «Takardun shaidar da aka amince da su» a cikin manhajar saituna idan hanyar ba ta dace ba. Shafin Mai amfani yana ɗauke da hukumomin da mutum ko aikace-aikace ya shigar, kuma shafin Tsarin yana ɗauke da abin da ya zo da ginin. Hukumar da gudanarwa ta tura tana bayyana ta hanyar manufar na'urar ko cikin bayanin aikin, ba a matsayin taɓawa na yau da kullum a cikin ajiyar mai amfani ba.
Rubuta mai bayarwa, kwanakin inganci da wanda ya shigar da shi. Idan shigarwar ba ta cikin ajiyar mai amfani kwata-kwata, tsaya a nan, domin abu ne na tsarin ko na gudanarwa kuma ba naka ba ne don share shi daga allon saituna. Share layin da bai dace ba a can shine yadda waya ke rasa Wi-Fi ko shiga aikin aiki yayin da tambayar amana ta kasance ba amsa.
Mataki 2: raba CA na bayanin VPN daga amanar wayar
Bayanin OpenVPN, ko kowane abokin ciniki da ke tabbatar da uwar garkensa ta TLS, na iya ɗauke da CA da shi kaɗai yake amfani da ita don tabbatar da uwar garkensa. Bayanin WireGuard ba ya ɗauke da CA kwata-kwata: yana dogara da nau'ikan maɓallan jama'a, don haka hukumar da ke cikin ajiyar amana ta Android ba za ta taɓa fitowa daga tsarin WireGuard ba. Wannan takardar shaidar ta cikin gida ba ta isa wani aikace-aikace ba, kuma kwafa ta cikin ajiyar amana ta tsarin aiki ne daban tare da yankin tasiri daban. Raba su biyun shine dukan manufar wannan mataki, domin na biyun ne kawai ke canza abin da sauran aikace-aikace za su karɓa.
Don haka bayanin VPN da ke ɗauke da CA ba hujja ba ce ta satar bayanai, kuma aikace-aikacen VPN ba shine mai shigarwar amana da bai taɓa ƙirƙira ba. Gwajin ba shi da tsada: dakatar da VPN ka sake karanta sanarwar. Idan gargaɗin takardar shaida yana nan, VPN bai sanya shi a can ba kuma cire aikace-aikacen ba zai cire shi ba.
Mataki 3: bambanta ikon uwar garke daga asalin abokin ciniki
Takardar shaidar asalin abokin ciniki da maɓallin sirrinta suna tabbatar da wannan na'urar ga uwar garke. Ana amincewa da CA don tabbatar da uwar garke ga aikace-aikace. Ana ajiye su tare kuma suna kama da juna a cikin jeri, amma suna yin ayyuka mabanbanta gaba ɗaya.
Cire asalin abokin ciniki na iya karya tabbatarwar Wi-Fi ko VPN ba tare da yin komai game da amanar HTTPS ba, kuma cire CA yana shafar kowane aikace-aikacen da ke karɓar wannan hukumar. Yanke shawara wanne daga cikin biyun kake kallo kafin ka danna wani abu, domin amsar tana ambaton mai shi da hanyar dawo da ita.
Mataki 4: tambaya waɗanne aikace-aikace ne suke amincewa da ita da gaske
Tsarin Tsaron Hanyar Sadarwa na Android yana ƙayyade iyakar aikace-aikacen. Aikace-aikacen da ke nufin API 24 ko sama da haka suna amincewa da hukumomin tsarin bisa ga misali, yayin da aikace-aikacen da ke nufin API 23 ko ƙasa da haka suma suna amincewa da hukumomin da mai amfani ya ƙara bisa ga misali, kuma aikace-aikace na iya ambaton anka nasa, ƙara dokoki na kowane yanki, ko ficewa gaba ɗaya daga misalan.
Don haka «an shigar da shi a waya» ba ya bayyana amanar HTTPS na kowane aikace-aikace: hukumar da mai amfani ya ƙara na iya samun girmamawa daga tsohuwar aikace-aikace, watsi daga ta yanzu, da kuma amincewa a fili daga aikace-aikacen da ke ɗauke da anka nasa. Idan an shigar da hukumar don Wi-Fi na aiki, sabis na yanar gizo na sirri ko tsarin bincike da aka amince da shi, tambayar da ta dace ita ce waɗanne aikace-aikace da bayanai suka dogara da ita. Jagorar Tsarin Tsaron Hanyar Sadarwa ita ce madogara kan yadda nisa hukumar da aka shigar ta kai a cikin wani aikace-aikace, kuma ita ce ɓangaren da yawancin taƙaitattun wannan gargaɗin ke barshi.
Mataki 5: yanke shawara, sannan rubuta mai shi da shirin fita
Idan ana tsammanin hukumar, rubuta wanda ya shigar da ita, waɗanne hanyoyin sadarwa suka dogara da ita da yadda za a cire ta. Aminta da hukuma yanke shawara ce mai ma'ana koda babu satar bayanai a yau, domin amana ce ke sa satar bayanai ta yiwu daga baya.
Idan ba a tsammani ba, bincika ta hanyar mai na'urar ko sabis kafin ka shigar da bayanai masu mahimmanci a wannan wayar. Idan ta tsufa, cire wannan takamaiman abu ta hanyar wanda ya shigar da ita, bayan ka duba abin da ya dogara da ita, kuma kada ka taɓa farawa da share dukan takardun shaida. Ɓoye gargaɗin yana canza nunin kawai ba wani abu ba. Ba za a taɓa loda maɓallin sirri ko cikakken bayani zuwa sabis na duba takardar shaida na jama'a don warware tambayar ba.
Kafin ka bar allon kana son amsoshi uku: wanda ya shigar da ita, waɗanne hanyoyin sadarwa suka dogara da ita, da yadda za a cire ta.