Ingabe i-VPN ekhokhelwayo ingagunyaza izikhathi ngaphandle kwe-akhawunti yakho?
Amathokheni angenakuxhunyaniswa angahlukanisa ukuhlolwa kokufaneleka nesikhathi uqobo. Okubalulekile ukwakheka kokukhishwa nokukhululwa, hhayi ilebula ekungeneni.
Ukukhokhela umhubhe akusho ukuthi kufanele uveze ubunikazi bokukhokha kukho konke ukuxhumana. Umklamo ungahlola ukufaneleka kanye, unikeze iklayenti amathokheni e-cryptographic, futhi uvumele isango ukuthi lamukele ithokheni kamuva ngaphandle kokubona i-akhawunti engemuva kwayo. Ukuthi lokho kufihla into ngempela kuncike ekukhetheni kokukhishwa nokukhululwa, ngakho kuthatha njengomsebenzi wokucacisa onezigaba ezine hhayi isici osivulayo.
Hlukanisa isinyathelo sokuthenga nesinyathelo sesikhathi
Isakhiwo se-Privacy Pass ku-RFC 9576 sinikeza amazwi: iklayenti, umqinisekisi, umkhiphi kanye nomthombo. Iklayenti lifakazela isici esithile kumkhiphi futhi lamukele amathokheni; kamuva lethula elilodwa kumthombo, olinquma ukuthi uzolisebenzela yini. Uma kusetshenziswa ku-VPN, isici esiqinisekiswayo singaba yiyunithi eyodwa yokufinyelela.
Ukukhokha kusabona lokho okudingwa inqubo yako, futhi akekho osho okuhlukile. Umgomo omncane ukuthi ukukhululwa kamuva akukwazi ukuxhunyaniswa nokuthenga okwakhiqize ithokheni. Leso isici esithile, esingahlolwa, futhi yiso esifanele ukubhalwa phansi.
Umucu we-bearer obonakala ungenasizathu awukunikezi lokho. Uma umkhiphi egcina inani eduze kwerekhodi leklayenti futhi isango lingabuza leso sixhumanisi, ukusebenzisana kokubili kuxhunyaniswa yidathabhasi hhayi i-cryptography. Ukwakhiwa kufanele kwenza umkhiphi angakwazi ukuphendula lowo mbuzo, futhi ukusetshenziswa kufanele kuvimbe umkhiphi nesango ekuhlanganiseni imibono yabo.
Nquma ukuthi ithokheni elilodwa ligunyaza ini
«Ithokheni elilodwa lithenga ukufinyelela» akusho cishe lutho ngokusebenza. Iyunithi ingukuxhumana okukodwa, isabelo sesikhathi, noma ivolumu? Iklayenti elilahlekelwe impendulo lingaqhubeka nalo mhlomulo? Kwenzekani uma idivayisi ixhumanisa kabusha phakathi noshintsho lwenethiwekhi? Lezo zimpendulo zinquma ukuthi umklamo uyasebenza yini, futhi ngayinye inomphumela wobumfihlo.
| Reuse rule | What it buys | What it leaks |
|---|---|---|
| Single use per connection | Strongest unlinkability between sessions | Frequent reissuance, more purchase-to-use timing pairs |
| Bounded time window | Fewer tokens, reconnects work | Activity inside the window is linkable |
| Long-lived grant | Operationally simple | Behaves like an account reference with extra steps |
Khetha okukodwa ngamabomu futhi ubhale indlela yokuziphatha lapho kwehluleka eduze kwakho. Iklayenti elizama futhi ngelungelo elisha ngemva kokuphela kwesikhathi lisebenzisa enye iyunithi, okuyisimanga sokukhokha kanye nophawu lwabumfihlo ngasikhathi sinye.
Bhala inqubomgomo yokusetshenziswa kabusha nokuhoxiswa
Ukuhoxiswa yilapho imiklamo engaziwa ivame ukwephula isethembiso sayo. Ukukhansela ukubhalisa nokwenza amathokheni asekhishiwe angasebenzi kuyimisebenzi ehlukene, futhi isango elenza ngokuthula uphenyo lwe-akhawunti ukuze linqume alisenawo umfihlo ngaleso sikhathi.
Khetha ukuphela kwesikhathi, umkhawulo wokukhishwa kanye nendaba yokuhoxiswa ezihambisana. Bese uhlola amarekhodi esango uqobo ukuthi akukho yini izinkambu ezibuyisela isixhumanisi osusisusile.
sudo grep -rIl --include='*.log' -e 'Bearer ' -e 'account_id' /var/log/vpn/
Lolo phenyo lubala amafayela e-log anezinkambu zethokheni noma ze-akhawunti, okuyindawo yokuqala umklamo oqaphile owopha kuyo ngokoqobo. Irekhodi lesikhathi eligcina inani lethokheni eduze kwesihlonzi se-akhawunti lichitha ukwakhiwa konke, futhi ngokuvamile liza ngoshintsho lokulungisa iziphazamisi okungabuyelwanga kulo muntu.
Chaza futhi ukuthi isango ligcina ini ngemva kokuphela kwesikhathi. Ubude besikhathi, amabhayithi nendawo yokugcina ziwusizo ekusebenzeni, futhi ngayinye iyingxenye yendida umbonisi angayifuna. Gcina isikhathi sokugcina sifushane nohlu lwezinkambu lufushane, bese uhlola kokubili lapho ushintsho lokulungisa iziphazamisi lwengeza ikholomu. Akekho oqaphela inkambu entsha ye-log kuze kube isineminyaka eyodwa ilapho.
Shono isimangalo, bese kuba ukubona okusalayo
Bhala isimangalo sobumfihlo emshweni owodwa nezimo zaso: yiluphi uhlangothi okufanele lungakwazi ukuxhumanisa izimo zini, nokuthi kwenzekani uma umkhiphi nesango beqhathanisa amanothi. Umklamo ophumelela lowo msho uyahlolwa; lowo ochazwa kuphela ngokuthi «ulwazi olungu-zero» awunakho.
Bese ubala lokho okusabonakala noma kanjani. Amakheli omsuka, izikhathi zokuxhumana, usayizi wamaphakethe kanye neqiniso elilula lokuthi ukuthenga kwenzeka ngaphambi nje kokuba kuvele ukuxhumana okusha okuwukuphela kwakho — konke kungaphandle kwe-cryptography. Iklayenti elilodwa elithenga iyunithi eyodwa futhi lixhumane kanye lingaxhunyaniswa ngesikhathi kuphela, futhi akukho mklamo wethokheni oshintsha lokho.
Umphumela othembekile isixhumanisi esincane phakathi kwe-akhawunti nokusetshenziswa, hhayi isikhathi esingabonakali. Kusafanele ukwakhiwa, inqobo nje uma imibhalo isho kanjalo futhi amarekhodi okusebenza ahambisana nesimangalo.