Isixwayiso se-VPN ehlungiwe noma eqashwe ku-Mac: empeleni ivumela ini
Isaziso se-macOS siyisicelo semvume sokuthi osebenzisayo angabona ini endleleni emboziwe, hhayi isinqumo se-malware futhi hhayi ubufakazi bokuthi ithrafikhi yakho iyahlukaniswa.
Leso sixwayiso siyiphepha lemvume, hhayi ukuxilongwa. Lapho i-macOS ithi ukulungiselelwa kuzohlunga noma kuqaphe ithrafikhi, ikutshela ukuthi ingxenye oyivumile ingabona indlela eyembozayo futhi iyabuza ukuthi lokho kuyamukeleka yini. Ibhokisi lengxoxo alikwazi ukukutshela ukuthi ubani osebenzisa ingxenye, iqopha ini, noma iyahlukanisa yini. Lezo zimpendulo zikuphrofayela, ohlwini lwezithasiselo, nakumasertifikhethi asemtshinini, ngakho qala lapho esikhundleni sokuphinda ufunde umusho.
Funda isicelo njengombuzo wobubanzi
Saziso ngasinye sokusebenza sikhomba izinto ezimbili ngaphandle kokuqamba amagama azo ngokucacile: isithasiselo esizobhekana nethrafikhi nokulungiselelwa okuqondisa ithrafikhi kuso. Ku-macOS yamanje lezi zingxenye ziyizithasiselo zesistimu ze-NetworkExtension, futhi ukufaka noma ukusebenzisa esisodwa kudinga imvume kuzilungiselelo zesistimu. Amagama ahlala ebanzi ngoba isistimu yokusebenza ayikwazi ukwazi ukuthi ovumayo uwumnyango we-IT, i-VPN yokubhalisa, noma i-ejenti yokuhlunga ehamba nokunye.
Yingakho umbhalo ofanayo uhlanganisa izinhlelo ezintathu ezihlukene. I-Mac ephethwe ithola iphrofayela kusuka ekuphathweni kwedivayisi, i-Mac yomuntu siqu ithola ukulungiselelwa kusuka kuhlelo lokusebenza olufakile, futhi umkhiqizo wokuphepha ungafaka isihlungi esingazethuli njenge-VPN. Akukho nalunye lwalezi zimpawu olunquma inhloso. Zivele zikutshela ukuthi ubuze kubani kuqala.
Imiyalo emibili ihlukanisa lezo zimo ngokushesha. Eyokuqala ibala izithasiselo zesistimu ezifakiwe nokuthi ngayinye iyasebenza yini, kanti eyesibili ibala amaphrofayela okulungiselelwa kanye nempahla yawo nenhlangano eyasayinayo.
systemextensionsctl list
profiles show -type configurationHlukanisa ithuneli kwisihlungi
Ithuneli lephakethe linikeza i-Mac indlela futhi lithwala konke okuthunyelwa ithebula lendlela kulo. Isihlungi sokuqukethwe sihlala ezingeni lokugeleza, sibheka ukuxhumana ngakunye futhi singakuvumela, kuvimbe, noma kuqondise kabusha. Umkhiqizo ungahlinzeka kokubili ngesikhathi esisodwa, futhi isixwayiso asishintshi lapho wenza kanjalo. Umehluko ubalulekile ngoba ubufakazi ongabuqoqa kanye nokwehluleka ozokubona kuhlukile.
Bheka isigaba sesithasiselo, hhayi igama lokukhangisa. Ithuneli livame ukuvela njengokulungiselelwa kwe-VPN nanjengesithasiselo senethiwekhi, kanti isihlungi kungenzeka singabi nawo ngisho umsebenzi we-VPN. Uma umkhiqizo unikeza izindlela zombili, ukulungiselelwa okusebenzayo kukhetha okukodwa, futhi ukushintsha indlela kungashintsha okumboziwe ngaphandle kokushintsha umhlinzeki.
Uhlu lwemisebenzi ye-VPN luyindlela esheshayo yokubona ukuthi ithuneli likhona yini. Isihlungi okungebona i-VPN ngeke sivele kulolo hlu, futhi lokho ngokwako kuwulwazi olusizayo.
scutil --nc listIbheji lokuxhumeka akubona ubufakazi bokumbozwa. Izinhlelo zokusebenza zingakhishwa ngezimithetho yohlelo ngalunye, futhi ithrafikhi eya kumanethiwekhi endawo ivame ukweqa ithuneli ngokomklamo. Lapho uhlelo olulodwa luziphatha sengathi aluqashwa, soloya indlela noma ukukhishwa ngaphambi kokucabanga ukuthi umqaphi uphukile.
Osebenzisayo ufunda ini ngaphandle kokufunda impahla
I-metadata ayisona isipho sokududuzeka. Amakheli, amachweba, amagama e-DNS, izikhathi zokuxhumana, isibalo samabhayithi, kanye nobuwena obuqinisekisiwe konke kubonakala engxenyeni esendleleni. Ukuvakasha okuphindaphindiwe esiphathweni esisodwa ngehora elifanayo kwakha umkhuba, futhi umkhuba ungasho okuningi kunekhasi elilodwa.
Yilokho impendulo eqotho embuzweni ojwayelekile. Osebenzisayo angabona kuphi futhi nini, ngisho noma okuqukethwe kuhlala kuvaliwe.
Ukubonakala kwempahla kudinga ushintsho lwesibili, olukhulu. Isikhathi se-HTTPS esiqinisekiswe kahle sihlala singabonakali kuthuneli noma kwisihlungi sokugeleza, kanjalo namafayela endawo kanye nethrafikhi engalokothi ingene endleleni emboziwe. Ukufunda imizimba yamakhasi kudinga isiphathimandla sesertifikhethi i-Mac esevele iyethemba, okungukuthi isertifikhethi yokungenelela efakwe ngemvume yayo.
Ububanzi futhi buma kudivayisi. Ithuneli kukhompyutha ephathekayo eyodwa alimbozi ifoni, ithebhulethi, noma umshini womunye umuntu ku-Wi-Fi efanayo, futhi iklayenti lebhizinisi alikwazi ukubala amanye amakhasimende ekhefi. Isofthiwe yokuphatha idivayisi ingaqoqa okuningi kunalokho okwembulwa ithuneli, kodwa lokho kuwukulawula okuhlukile okunomunye umnikazi wenqubomgomo.
| Artifact | Visible on the covered path | Extra step required |
|---|---|---|
| Destination address and port | Yes | None |
| DNS names and query timing | Usually | None |
| HTTPS request and response bodies | No | Trusted root certificate |
| Files already stored on the Mac | No | Endpoint agent |
| Other devices on the same Wi-Fi | No | Separate enrollment |
Hlola isitolo sesertifikhethi ngaphambi kokwethuka
Impande ethenjwayo iwumehluko phakathi kokubuka ithrafikhi nokuyifunda. Hlola isikhiya sesistimu ukuthi sineziphathimandla ongazazi yini, futhi qaphela lezo ezavela ngesikhathi isicelo savela. I-Mac ephethwe ingaba nempande yokuhlola eyathunyelwa umqashi ngokusemthethweni, futhi lapho ingxoxo iba ngeyomlawuli. I-Mac yomuntu siqu eyithole ngephutha inokutholakele okufanele kwenziwe okuthile ngakho. Bhala igama elivamile, okhiphile, nosuku lokwengezwa ukuze umbuzo uphendulwe kamuva.
Qhathanisa lolo hlu nalokho okubikwa ukuphathwa kwedivayisi. Uma uhlu lwamaphrofayela nohlu lwamasertifikhethi lungavumelani, uhlu lwamasertifikhethi yilo olunquma ukuthi i-Mac izokwamukela ini.
Imiyalo emibili ihlanganisa ingxenye enkulu yokuhlola. Eyokuqala iphrinta amaphrofayela okulungiselelwa; eyesibili iphrinta amasertifikhethi kusikhiya sesistimu esiphethwe umlawuli, okuyindawo okujwayele ukugcina kuyo impande eyengeziwe.
profiles show -type configuration
security find-certificate -a -p /Library/Keychains/System.keychainIzimpande ezihlinzekwa i-Apple zisesikhiyeni esihlukile futhi akusona isikhathazo lapha. Umphumela ongenalutho ovela kumyalo wesibili uvamile ku-Mac yomuntu siqu. Umphumela ogcwele ufanele ukufundwa isihloko ngesihloko ngaphambi kokuwulahla.
Thatha isinqumo, bese ubhala ukuthi kungani
Imvume iyafaneleka lapho ungasho osebenzisayo, ingxenye, nesizathu, futhi lapho isicelo sihambisana nokukhethwa okwenziwe yiwe noma inhlangano yakho. Uphenyo luyimpendulo efanele lapho isicelo sifika ngaphandle komongo, ikakhulukazi ngemuva koshintsho lwenethiwekhi noma ukufakwa okungahlobene. Qala ngokunqamula, qopha isihlonzi sephrofayela nesithasiselo, bese uthatha isinqumo. Ukususa kuyindlela yesithathu, futhi kubuyisela indlela yangaphambili ngaphandle kokuthinta i-akhawunti.
Thatha imvume nokukususa njengezinqumo ezimbili ezihlukile ezenziwe ngezikhathi ezihlukene. Ukuvuma isihlungi namuhla akukubophi ukuthi usigcine, futhi ukususa iphrofayela akususi amarekhodi asesiphathimandla salokho okwabonwa ngesikhathi sisebenza.
Uma isaziso silandela ukubuyekezwa kwesofthiwe osetshenzisayo kakade, funda amanothi okukhishwa alolo hlobo ngaphambi kokuchofoza. Abahlinzeki bashintsha ngempela ukwakheka kwezithasiselo phakathi kwezinguqulo, futhi isihlungi esisha singeza nokubuyekezwa okuvamile. Uma isaziso silandela ukujoyina inethiwekhi entsha, thatha isikhathi njengobufakazi futhi uhlole ukuthi kwashintsha ini.
Gcina irekhodi elifushane: igama lephrofayela, isihlonzi sesithasiselo, osebenzisayo, isigxivizo somunwe sesertifikhethi uma kwengezwe, nosuku. Umuntu olandelayo angase aqale kuleyo uhla lwezikhathi hhayi emazwini ebhokisi lengxoxo.