Umthetho we-firewall we-SSID uyekile ukuhlunga ngemuva kokushintsha i-Wi-Fi
I-firewall esekelwe ku-SSID ihluleka ivulekile lapho i-Android ibuyisela igama lenethiwekhi elingaziwa. Hlukanisa ubunikazi nokuphoqelela bese unikeza okungaziwa inqubomgomo yako.
Umthetho wawulula: hlunga ithrafikhi kuphela ngesikhathi ifoni ixhunywe ku-Wi-Fi yasehhovisi. Waqhubeka izinyanga, kwathi ngolunye usuku ekuseni ifoni yayiku-SSID efanayo inesithonjana sokhiye esifanayo futhi ukuhlunga kwase kumile. Akukho okwase kushintshile kunethiwekhi; okwashintshayo ukuthi uhlelo lwalukwazi ukubona igama lenethiwekhi. Ku-Android, «ikuphi i-Wi-Fi engikuyo» kanye «vimba le thrafikhi» kuyimisebenzi emibili ehlukene, futhi i-firewall ehlanganisa yomibili yehluleka ivulekile lapho igama lingatholakali.
Uphawu: ubunikazi bunyamalala futhi inqubomgomo iyalandela
Umthetho we-SSID ufunda inani bese ukhetha igatsha. Lapho ukufunda kungabuyisi lutho olusizayo, ikhodi kufanele yenze okuthile, futhi okuzenzakalelayo okuvamile ukuthi «akuyona inethiwekhi elindelekile, ngakho ungahlungi». Lokho kuzenzakalela kuguqula inkinga yemvume ibe ukuvuza kwethrafikhi. Isithonjana sokhiye sihlala sibonakala ngoba insizakalo ye-VPN isasebenza; imane iphoqelela elinye igatsha.
Bheka ukulandelana kwezigameko, hhayi inethiwekhi. Ibhokisi lemvume elinqatshiwe, isibuyekezo sesistimu esahambisa ukufinyelela kwe-SSID ngemuva kwemvume enye, izinsizakalo zendawo ezicishiwe, noma ushintsho lwenqubomgomo yephrofayela yomsebenzi konke kungaveza umphumela ofanayo ngenkathi ifoni isahlezi endaweni yokufinyelela efanayo.
Kungani igama lingabuya lingaziwa
WifiInfo.getSSID() ibuyisela isihlonzi sesethi yensizakalo yenethiwekhi yamanje, futhi i-Android ibhala ukuthi ukufinyelela emikhakheni ezwela indawo kuncike emvumeni. Lapho ukufinyelela kungatholakali, ucingo lubuyisela UNKNOWN_SSID esikhundleni sokwehluleka ngomsindo. Ngakho inani elingenalutho noma elingaziwa akubona ubufakazi bokuthi ifoni ishiye i-Wi-Fi; ubufakazi bokuthi uhlelo alukwazi ukuhlukanisa inethiwekhi.
Ukuhlola okubili kwehlukanisa lezi zimo. Qinisekisa ukuthi ifoni ixhunyiwe futhi ubheke ukuthi isistimu ibika ini, bese uqinisekisa ukuthi uhlelo lunemvume edingekayo kule ngxenye ye-Android:
adb shell cmd wifi status
adb shell dumpsys package <your.app> | grep -i -E "ACCESS_FINE_LOCATION|NEARBY_WIFI_DEVICES"Uma umugqa wesimo ukhombisa inethiwekhi exhunyiwe kuyilapho uhlelo lubona igama elingaziwa, inkinga yakho ingeyemvume noma yezinga le-API, hhayi inkinga ye-Wi-Fi. Lungisa lokho ngaphambi kokuthinta imithetho ye-firewall, ngoba wonke umthetho olandelayo uhlolwa ngokumelene nenani uhlelo olungakwazi ukulifunda.
Ukuhlunga kusebenza kuphi ngempela
I-firewall yasendaweni ye-Android ivamise ukusebenzisa imodeli ye-VpnService ngaphandle kokuthumela ithrafikhi kuseva ekude: ithatha isixhumi esibonakalayo esingokoqobo, isebenzisa imithetho yayo bese idlulisela lokho eyikuvumelayo. Ipulatifomu ivumela insizakalo eyodwa ye-VPN esebenzayo ngephrofayela yomsebenzisi, futhi eyesibili ithatha indawo yeyokuqala esikhundleni sokugxila phezu kwayo. Ngakho uhlelo olwahlukile lwe-firewall ne-VPN yomsebenzi ehlukile akwenzi iketanga yezinyathelo ezimbili; olunye lwazo luyanqoba.
Lokho kubalulekile emthethweni we-SSID ngoba iphuzu lokuphoqelela nephuzu lokubheka ziyingxenye ehlukene. I-VpnService inquma ukuthi yini ephuma kudivayisi; i-API ye-Wi-Fi inikeza ilebula kuphela. Uhlelo lungaphoqelela ngendlela efanele futhi luhlukanise ngokungalungile, futhi yilokho kanye ukwehluleka kule ndatshana.
Nikeza okungaziwa inqubomgomo yako
Thatha ubunikazi benethiwekhi njengezimo ezintathu, futhi ubhale inqubomgomo yazo zonke ngaphambi kokukhipha umthetho. Isimo sesithathu yiso esikhohlwakayo, futhi yiso lapho umhlaseli noma ukumiswa okungalungile kuzokubeka khona.
| Observation | Policy to specify |
|---|---|
| Expected SSID is readable | The explicit filtering policy you designed |
| A different SSID is readable | The default policy for untrusted networks |
| Unknown, changing or unreadable | Fail closed until classification is reliable |
Ukwehluleka kuvaliwe kusho ukuthi isimo esingaziwa sizuza inqubomgomo eqinile kunazo zonke ezinengqondo esikhundleni eyona elula. Uma lokho kwenza ifoni ingasebenzi kunethiwekhi entsha, isisombululo esifanele ukukhethekile okwenziwe ngamabomu nokubonakalayo, hhayi isinqumo sokuthemba esithule esifihliwe ekuhloleni inani elingenalutho.
I-SSID eyaziwayo iyilebula, hhayi ubufakazi bomqhubi wenethiwekhi. Noma ubani angasebenzisa iphuzu lokufinyelela ngegama lehhovisi, ngakho ukufana kwegama akufanele kube ukuphela kwento phakathi kwesikhathi esibuthakathaka nengxenye engathembekile.
Hlola ukushintsha, hhayi isimo esizinzile
Ukuhlolwa kwesimo esizinzile kudlula kunethiwekhi lapho wakhela khona umthetho. Ukwehluleka kuhlala ekushintsheni: imvume enqatshiwe, i-Wi-Fi eya kuselula, i-SSID eyodwa eya kwelinye, insizakalo ye-VPN eqalwa kabusha, nolunye uhlelo lwe-VPN oluthatha isixhumi. Kokunye ngakunye, ncika ukuthi izixhumanisi ezikhona ziyabuyekezwa yini nokuthi ithrafikhi evikelwe ihlala ivinjiwe ngenkathi isimo singaziwa.
Bhala umphumela emishweni emithathu: isimo esibonwayo, ingxenye ephoqelela isinqumo, nokuhlehla okwenziwe ngamabomu. Uma kukhona okungekho kokuthathu, umthetho awukabi yinqubomgomo; kuwukuqagela okusebenza ngenhlanhla kunethiwekhi yasehhovisi.