Ƙoƙarin VPN mara kyau: wace nau'in shaidar shiga ta tsallaka iyaka?
Ƙoƙari da ya gaza yana iya ba da babu komai, ko ya miƙa kalmar sirri ga wanda ya amsa. Raɓa kayan aikin kafin ka yanke shawarar abin da za a soke.
Ka haɗa da VPN mara kyau, kuma abokin ciniki ya ba da rahoton gazawa. Ko hakan yana da muhimmanci ya dogara da abin da ya tsallaka layi kafin gazawar, kuma kalmar kanta ba ta faɗa maka haka. Wasu musafaha ba sa ɗaukar wani sirri kwata-kwata, yayin da wasu ke miƙa kalmar sirri ga duk wanda ya amsa adireshin. Gano wanne daga cikin biyun ya faru kafin ka soke wani abu.
Tsaya ka ajiye shaidun
Ka adana log ɗin abokin ciniki, bayanin da aka zaɓa, adireshin da ka rubuta da kimanin lokacin. Rubuta su a waje da abokin ciniki, domin gyaran bayani ko sake shigarwa na lalata rikodin da za ka buƙata. Ka hana kowane ƙoƙari na gaba har sai an tabbatar da maƙasudin ta hanyar da kake sarrafawa.
Kada ka taɓa buga bayani ko log ba tare da share abubuwa ba a dandalin jama'a yayin da kake tambayar ko ƙoƙarin ya kasance lafiya. Waɗannan takardu galibi suna ɗauke da hanyar maɓallin sirri, sunan mai masaukin ciki ko alama, don haka fara sharewa sannan ka raba da mai kula da ke da maƙasudin.
Abin da zai iya tsallaka iyaka
Mafi yawan ruɗani yana zuwa daga ɗaukar kowace gazawa a matsayin nau'in abu ɗaya. Abubuwa huɗu daban-daban na iya isa wancan gefen: takardar shaida ta jama'a, sa hannu da ke tabbatar da an yi amfani da maɓalli, kalmar sirri ko lambar amfani ɗaya, da fayil da ka zaɓa da kanka. Kowanne yana da sakamakonsa da gyaran kansa. Raɓa kayan aikin shi ne matakin da ke yanke duk abin da zai biyo baya.
Yanayin takardar shaida shi ne mafi sauƙi, domin abin da ke tafiya na jama'a ne bisa ƙira kuma an riga an ga filayen tantancewarsa ga duk wanda ya haɗa. Sa hannu a kan ƙalubale yana cewa an yi amfani da maɓallin, ba cewa an aika shi ba. Kalmar sirri ita ce akasin haka: duk wanda ya karɓa zai iya gwada ta wani wuri, kuma sabis da aka gina don tabbatar da kalmomin sirri shi ne wanda aka nufa ya karɓi wannan darajar.
Tabbacin maɓalli ba lodin maɓalli ba ne
TLS na zamani yana ajiye waɗannan ra'ayoyi biyu dabam da gangan. RFC 8446 ya bayyana saƙon CertificateVerify, inda abokin ciniki ke sa hannu a kan ƙalubale da maɓallin sirri da ya dace da takardar shaidarsa. Sa hannun yana nuna mallaka ba tare da ɗaukar maɓallin ba, shi ya sa ƙoƙarin da aka tabbatar da takardar shaida ba ya zama lalacewar maɓalli kai tsaye.
Wannan tabbaci yana da iyaka da ya kamata a faɗa. Shaidar tana nuna maɓallin ya shiga wannan musayar, kuma ba ta faɗin komai game da abin da wani shiri na gida a cikin na'ura zai iya karantawa tukuna. Haka kuma ba ta faɗin komai game da yadda ƙoƙari da ba a sani ba ya yi nisa a zahiri, shi ya sa log ɗin har yanzu ya fi ka'ida muhimmanci.
Kalmomin sirri suna bin tsarin aminci daban. Mai tattarawa da aka saita da mai tabbatarwa na waje na iya tura darajar da aka gabatar, don haka karɓar ta aikin da aka nufa ne kuma wuri mara kyau fallasa ce ta gaske ba ta ka'ida ba.
Sake gina ƙoƙarin daga log ɗin
Hujjoji huɗu suna sake gina ƙoƙarin: adireshin da aka tuntuɓa da gaske, ko an tabbatar da asalin uwar garke, wace hanyar tabbatarwa aka zaɓa, da inda tsarin ya tsaya. Kowanne yana bayyana a log ɗin abokin ciniki, kuma kowanne yana kawar da wani labari daban. Kuskure game da hanyoyi ko adireshin da aka ba shi ba ya faɗin komai game da abin da ya riga ya kasance a layi, domin tabbatarwa na iya kammalawa kafin saitin rami ya gaza.
Ciro waɗannan hujjoji daga log ɗin abokin ciniki kansa ba daga ƙwaƙwalwa ba. Ɗan matattara mai kunkuntar yana ajiye fitarwa gajarta isa sharewa da rabawa:
grep -n -i -E 'verify|authentication|certificate|error|timeout' client.log | tail -30Kada ka maye gurbin sunan mai masauki da kowane ɗaya daga cikin waɗannan. Sanannen suna, amsar DNS ta yanzu da gargaɗin takardar shaida da manhajar ke nunawa suna bayyana yanzu ba haɗin baya ba. Haka kuma tambayar kalmar sirri ba hujja ba ce da an aika wani abu, domin abokin ciniki na iya gazawa kafin ya gabatar da ita.
Yanke shawara, sannan ka yi aiki
Shawarar ta biyo daga kayan aikin, ba daga yadda gazawar ta yi kama da tsoro ba. Karanta layuka huɗu a kan hujjojin da ka sake ginawa:
| Decision | Evidence that puts you here | Evidence that rules it out |
|---|---|---|
| Change the password now | A password was submitted and a server reply arrived | The log stops before any submission |
| Review active sessions | A one-time code was accepted by the wrong endpoint | The code was never sent, or was rejected before use |
| Revoke and reissue | The file you selected contained key material, not just settings | The upload was a profile with no embedded key |
| No further action | The attempt ended before any authentication value was offered | You later find an earlier attempt you had forgotten |
Idan kalmar sirri ta isa wani sabis da ba a nufa ba, canza ta ta hanyar sarrafa asusu kuma ka duba inda aka sake amfani da ita. Lambar amfani ɗaya da ta ƙare tana rufe wannan hanyar, amma zaman da aka ƙirƙira da ita ba ya rufe, don haka nemi mai kula da asali ya duba zama. Idan an ɗora fayil ɗin maɓalli da gaske, bi hanyar sokewar ƙungiyar da ta bayar maimakon jiran shaidar cin zarafi.
Sannan rubuta iyakantaccen sakamakon: abin da aka aika, abin da ya rage ba a sani ba, da wace shaidar shiga ke buƙatar mataki. Wannan rikodin ne wani bita daga baya zai nema, kuma ya fi amfani fiye da kowane ɗaya daga cikin kammalawa biyu masu daɗi.