Xagee ku qorataa jumlada soo kabashada jeebka?
Jumlada soo kabashada waxay ku deelan tahay socodka soo kabashada jeebka laftiisa, ma aha wada-hadal taageero ama mashiin macmal ah oo la soo amaahday. Raac halka sirta la geliyo iyo cidda daawan karta.
Soo kabashada jeebku waxay u egtahay hawsha qoraalka la gelinayo laakiin dhab ahaan waa hawsha ilaalinta furayaasha. Jumlada aad qorato ma aha ereysir uu server hubiyo; waa gelinta hawl-dhaliye kaas oo dib u dhisaya isla furayaasha gaarka ah ee jeebku lahaa ka hor inta uusan lumin. Wax kasta oo wakhtigaas akhrin kara riixidda furayaasha, sabuuradda koobiyeyska ama xusuusta habsocodka ayaa sidoo kale dib u dhisi kara. Sidaas darteed diyaarintu waxay ka dhigan tahay go'aan ka gaarista halka sirta loo oggol yahay inuu jiro, ka hor inta uusan jirin.
Raac jumlada laga bilaabo qalabka ilaa furaha la soo saaray
Mnemonik qaab BIP-39 ah waa la caadiyeeyaa, lagu kordhiyaa PBKDF2-HMAC-SHA512 iyada oo loo isticmaalayo jumlad sir ah oo ikhtiyaari ah milix ahaan, waxaana loo beddelaa iniin jeebku furayaash ka soo saaro. Tan waxaa si toos ah ka yimaada laba natiijo. Enska, jumladu waa awood waar ah ee ma aha aqoonsi kulanka, sidaas darteed dib u dhigis dhanka serverka ah ma jiro haddii ay baxdo. Labaad, jumlada sirta ikhtiyaariga ah waxay ka qayb qaadataa soo saarista, taasina waa sababta soo kabasho u muuqata inay abuurto jeeb madhan badanaa macnaheedu yahay jumlad sir ah oo khaldan ayaa la geliyey, ee ma aha jumlad khaldan.
Tallaabo kasta oo ka dambaysa caadiyeynta waxay dhacdaa gudaha habsocodka aad ku qortay. Tani waa qaybta hanuuninta soo kabashada intooda badan seegaan: dusha soo-gaadhista waa dariiqa gelinta iyo xusuusta habsocodkaas, ma aha shabakadda idinka iyo websaydhka dhexdeeda.
Habsocodka sharci ah wuxuu ku xiran yahay jeebka. Qalabka adag wuxuu leeyahay is-dhexgal soo kabasho oo u gaar ah qalabka; jeebka software-ka wuxuu leeyahay shaashad soo kabasho oo la diiwaangeliyey oo ku jirta nuqul la xaqiijiyey. Midkoodna ma aha wada-hadal taageero, midkoodna ma aha bog ku bixiya inuu adiga kuu hubiyo jumlad.
Nidaamka martida ah wuxuu dhaxlaa kalsoonida martigeliyahiisa
Mashiinka macmal ah wuxuu u muuqdaa sida kombuyuutar gooni ah mana aha xad kalsooni madaxbannaan. Hanuunka NIST ee ku saabsan macmalaynta buuxda wuxuu si toos ah u qeexayaa ku-tiirsanaanta: ammaanka martida wuxuu ku xiran yahay martigeliyaha iyo hypervisor-ka hoostiisa, khayraadka la wadaago sida sabuuradda koobiyeyska ama isku-xirka galbeedka ayaa ballaadhiya kanaalka dhexdooda. Ku rakibidda marti mashiin aad hore uga shakisan tahay ma abuurto dariiq gelin cusub.
| Control | What it addresses | What it leaves exposed |
|---|---|---|
| Verified wallet build | Running the code the publisher actually signed | Everything the running process can read once it starts |
| Live-boot environment, no persistent disk | Secrets left in swap, caches or a saved session | The firmware, the keyboard and the display path |
| Full-disk encryption on the host | Recovery material at rest after shutdown | The same material while the machine is unlocked |
| Tunnel to a trusted exit | Who can observe traffic in transit | Local processes, screen capture and input hooks |
Daadashada la taaban karo waxay raacdaa isla khadkaas. Sabuuradda koobiyeyska la wadaago waxay qaaddaa wax kasta oo aad koobisay. Sawirrada iyo faylasha xaaladda la joojiyey waxay qabsan karaan xusuusta jumlada ku jirta. Ku-darka martida oo leh gelitaan nidaamka faylasha martigeliyaha waxay martida siinayaan aragtida dariiqyada martigeliyaha iyo martigeliyaha aragtida dariiqyada martida. Midkoodna ma aha weerar qalaad; waa astaamo ka dhigaya mashiinka macmal ah mid ku habboon.
Gunaanadka daacadnimada leh wuu ka cidhiidhi yahay «mashiinka macmal ah ma aha ammaan». Mashiinka macmal ah wuxuu noqon karaa weelka saxda ah ee shaqada marka martigeliyuhu yahay mashiinka aad aaminto oo aad ka saartay astaamaha wadaagga. Ma badbaadin karo martigeliyaha aadan aaminin.
Waxa tunnel sir ah uu dhab ahaan daboolo
VPN waxay ilaalisaa baakadaha u dhexeeya laba dhammaad. Ma laha ra'yi ku saabsan cidda shaashadda akhrinaysa dhammaad kasta, mana joojiso habsocod maxalli ah inuu fiiriyo waxa aad daaqadda ku qorato. Sidaas darteed tunnel waa muhiim marka walaacu yahay dariiqa, mana aha muhiim marka walaacu yahay martigeliyaha.
Farqigani waa muhiim sababtoo ah labadaba waa la wada iibiyaa. «Xiriir sir ah» wuxuu qeexayaa gudbinta; «qalab la aamino» wuxuu qeexayaa dhammaadka. Habka soo kabashada wuxuu u baahan yahay jawaab gooni ah labadaba, midkoodna kaliya ayaa adeegga shabakaddu ka jawaabi karaa.
Xaqiijinta waxa aad soo dejisatay waxay ka tirsan tahay isla qoyska su'aalaha dhammaadka. Hubinta hash iyo hubinta saxeexa waxay caddeeyaan in kaydku la jaanqaado waxa daabacuhu soo saaray; wax ma sheegaan mashiinka fulin doona.
sha256sum -c SHA256SUMS.txt
gpg --verify SHA256SUMS.txt.sig SHA256SUMS.txtDiyaari deegaanka ka hor inta uusan maaddadu soo muuqan
Nidaamku waa ka muhiimsan yahay qalabka. Go'aami martigeliyaha, ka saar astaamaha wadaagga, ka gooy wax aan u baahnayn in la xiro, oo markaas ka dib ka soo saar diiwaanka soo kabashada kaydkiisa. In sidaas lagu sameeyo nidaamka qalloocan waxay ka dhigan tahay in sirta horey ugu jirto xusuusta inta aad weli go'aaminayso halka ay tahay inay aaddo.
Kadib sirta ku hay socodka uu soo saaraha jeebku diiwaangeliyey. Ku geli is-dhexgalka soo kabashada ee jeebka laftiisa, shabakadda uu jeebku filayo, oo kaliya ansixi hawlo aad ku xaqiijin karto shaashadda la aamino ee uu jeebku bixiyo. Wadahadal miis caadi ah ma aha caddayn in qalabku ogolaan doono waxa wadahadalku sheeganayo.
Haddii aad ka shakisan tahay soo-gaadhis, jooji gelinta maaddada nidaamkaas oo u guur deegaan aad si madaxbannaan u aamini karto. Xiridda mashiinka macmal ah, beddelidda ereysirka VPN ama dib u rakibidda app-ka jeebka ma beddelo awoodda jeebka; kaliya u raridda hantida jeeb cusub oo leh furayaash cusub oo la abuuray ayaa sidaas sameeya. Sirta ceyriinka ah ka fogee wada-hadal kasta oo taageero inta aad helayso tallaabooyinka gaarka ah ee jeebka, sababtoo ah hab taageero sharci ah midna uma baahna. Hal qaynuunkaas ayaa ka hortagaya khasaare ka badan liis kasta oo adkayn.