Mai shigar da VPN daga madubi? Fara tabbatar da mai wallafa

Ramin ya yi aiki, mai mu'amala ya bayyana, kuma zaman ya kasance tabbatacce tsawon mako guda. Babu ɗaya daga cikin waɗannan da zai gaya maka wanda ya gina mai shigarwa. Abokin ciniki na VPN yana aiki da isasshen izini don sake rubuta hanyoyi da karanta bayanan shiga, don haka mai wallafa yana cikin tsarin barazana, ba bayanin ƙasa ba.

Yi dubawa cikin tsari kuma ka tsaya a farkon wanda ya kasa. Suna da arha, kuma kowanne yana rufe wani gibi daban.

Mataki na ɗaya: Sauke daga tashar da aikin ya ambata

Kowane aiki yana rubuta inda fitarwarsa take, kuma wannan shafin shine ma'auni. Ginawa na al'umma, jerin shaguna da tashoshin masu sayarwa duk tashoshi ne halal. Kowanne halal ne kawai idan aikin da kansa ya nuna gare shi. Wannan shine gwajin, kuma ba daidai yake da kamanceceniya da hukuma ba.

Fayil mai sunan aikin ba ya tabbatar da komai. Canza sunan mai shigarwa aiki ne na daƙiƙa ɗaya, kuma sunan shine abin da sakamakon bincike ke nunawa da fari.

Mataki na biyu: Tabbatar da sa hannu da sanannen asali

Tabbatar da sa hannu yana amsa tambaya mai kunkuntar da kyau. Yana gaya maka cewa wani asali ya sanya hannu a wannan fayil ɗin binary kuma fayil ɗin bai canza ba tun lokacin. Yana amsa tambaya ɗaya kuma ya ƙi wata. Ba zai iya gaya maka ko wannan asalin shine wanda kake son amincewa da shi ba.

# macOS: who signed this app, and is the signature intact?
codesign -dv --verbose=4 /Applications/Tunnel.app
spctl -a -vvv -t install /Applications/Tunnel.app

# Windows: signature and publisher of the installer
Get-AuthenticodeSignature .\tunnel-setup.exe | Format-List Status, SignerCertificate

# Linux: detached signature from the project's release page
gpg --verify tunnel-1.4.2.tar.gz.asc tunnel-1.4.2.tar.gz

Karanta asalin, ba kalmar matsayi ba. Wani mai haɓakawa da ba shi da alaƙa da ingantaccen takardar shaida yana samar da ingantaccen sa hannu. Tsarin aiki da ke ba da rahoton sanannen mai wallafa ya gaya maka kawai wani ya biya kuɗin takardar shaida.

Mataki na uku: Kwatanta hash da tushe mai zaman kansa

Jimillar dubawa tana tabbatar da daidaito da ƙimar ma'auni. Idan ma'aunin ya zo tare da saukewar, duka biyun na iya zama kuskure tare kuma kwatancen zai ci gaba. Wannan shine yanayin gazawa a yawancin koyarwa. Hash ɗin yana kan shafi ɗaya da fayil ɗin da yake kwatanta.

# Linux and macOS
shasum -a 256 tunnel-1.4.2.dmg

# compare against the value published on the project's own release page
# not against a value copied from the same mirror

Inda aiki ya wallafa jimillolin dubawa masu sa hannu ko bayanin fitarwa mai sa hannu, tabbatar da sa hannun a kan jerin maimakon kowane fayil daban. Ta haka ma'auni ɗaya amintacce yana rufe duk fitarwar.

Bayan shigarwa: Ka riƙe hanyar sabuntawa

Tashar da ake tallafawa tana ci gaba da muhimmanci bayan an gama shigarwa. Ginawa da aka sake fakiti na iya ɗaukar sabuntawarsa, kuma wannan sabuntawar ita ce ke tantance abin da zai gudana wata mai zuwa. Ginawa da ba a taɓa sabuntawa ba ta fi aminci ba. Tana da tsufa kawai.

Rubuta yadda ya kamata abokin ciniki ya sabunta da kuma ko tsarin gudanarwa ne ke da wannan matakin. Idan amsar ita ce saukewa da hannu daga dandalin tattaunawa, tambayar sarkar samarwa ba ta taɓa rufewa da gaske ba.

Asali biyu, ba ɗaya ba

Mai haɓaka abokin ciniki da mai fitar da bayanin martaba ɓangarori ne daban. Abokin ciniki na hukuma da ke shigo da bayanin martaba daga ma'aikacin da ba shi da alaƙa tsari ne na al'ada, kuma bayanin martabar ya cancanci nasa binciken: wanene ya fitar da shi, yadda aka isar da shi, da kuma ko takardar shaidar uwar garken ta yi daidai da sunan da kake tsammani.

Ka riƙe asalin biyu a bayyane a cikin bayananka. Lokacin da aka maye gurbin abokin ciniki ko aka dawo da na'ura daga ajiya, waɗannan layuka biyu ne ke hana wani ginawa da ba a sani ba ko bayanin martaba da ba a sani ba dawowa tare da sauran bayanan.