Shintsha iphasiwedi ye-VPN ngaphandle kokuvala zonke izinto

Amafoni amathathu, i-router eyodwa kanye nokuhlolwa kokugada okukodwa kusabambe iphasiwedi endala, futhi eyodwa yazo ixhuma kabusha njalo ngemizuzwana engamashumi ayisishiyagalolunye. Iphasiwedi ye-akhawunti yashintshwa emizuzwini eyishumi edlule, ngakho iklayenti ngalinye lalawa lisebetha inani elilenqatshwa iseva. Yilapho inganekwane igqashuka khona: ukushintsha iphasiwedi kuthinta i-akhawunti, hhayi amakhophi enani elidala asesithombeni ngasinye. Okulandelayo umsebenzi okungawenzanga ukushintsha.

Inganekwane: ukushintsha okukodwa, yonke indawo ngesikhathi esisodwa

Inkolelo iwukuthi ukushintsha iphasiwedi kuphuma konke futhi kuphoqelela ukungena kabusha okuhlanzekile. Akwenzeki kanjalo, ngoba iseva ilandelela kuphela ukuthi yiluphi ubufakazi bokungena eyakugcina ekugcineni, kuyilapho amaklayenti egcina lokho ekuqophile. Idivayisi enephasiwedi egciniwe iyizama futhi ngohlelo lwayo, futhi yehluleka buthule kuze kube umuntu uqaphela ukuthi i-akhawunti ivaliwe. Uma wamukela ukuthi amakhophi aphila ngaphandle kwe-akhawunti, ukujikeleza akusabonakali njengesenzo esisodwa.

Akukho kulokhu okuphikisana nokujikeleza. Kukhuthaza ukuthatha amakhophi agciniwe njengengxenye yoshintsho hhayi umcabango wangemva. Ukuvalwa kuvame ukuvela ekuzameni okuhambisanayo: idivayisi ngayinye iqhubeka nokuthumela inani elidala ngohlelo lwayo kuze kube isibali siyasebenza. Ngaleso sikhathi i-akhawunti ibonakala ihlaselwe kuyilapho inikezwa kuphela ubufakazi bokungena obungekho muntu obushintshile. Lowo mehluko ubalulekile, ngoba isisombululo uhlu lwamadivayisi hhayi inqubomgomo yokuvala eqinile.

Bhala uhlu lwamakhophi ngaphambi kokujikeleza

Bhala uhlu ngaphambi kokuvula ifomu lephasiwedi. Bhala wonke iklayenti, iskripthi, ukusebenza okuzenzakalelayo kanye nephrofayili ephethwe efakaza njengale akhawunti: ifoni exhumanayo ngokwayo, i-router eyahlelwa eminyakeni emibili edlule, ikhompyutha ephathekayo evuka ngoMsombuluko kuphela, kanye nokuhlolwa kokugada okuzama njalo ngomzuzu. Kwesinye ngasinye, bhala ukuthi ubufakazi bokungena bugcinwe kuphi, ukuthi idivayisi ingafinyelelwa yini ngesikhathi soshintsho, nokuthi iyiphi indlela yokubuyisela ekhona uma ingakwazi ukuxhuma kabusha. Lolo hlu yilona oluguqula ushintsho oluyingozi lube oluhleliwe, futhi kufanele lube khona ngaphambi kokuthi iphasiwedi endala iyeke ukusebenza.

Amadivayisi angaxhunyiwe yikho ukukhohlwa okuvamile. Ikhompyutha ephathekayo esekhabetheni iyabuya emavikini amathathu kamuva futhi yethule inani elidala ngesikhathi esibi kakhulu. Bhala indawo yayo nohlelo lwayo futhi, ngoba kuzodingeka uyixoshe esikhundleni sokuyilinda.

Ebangeni le-Linux ukucinga kungokomshini hhayi kobuhlakani. Funa amaphrofayili akhomba kufayela lobufakazi bokungena, bese ufuna amafayela obufakazi bokungena ngokwawo, ngoba uhlu lwesibili yilona okufanele lubhalwe kabusha. Phinda umsebenzi kumaklayenti edeskithophu nakumafoni, lapho isitoreji siyiphrofayili noma umbhalo wekeychain hhayi indlela. Inhloso uhlu ongasebenza ngalo, hhayi ukusesha okuthi kuthole wonke amakhophi.

grep -rl auth-user-pass /etc/openvpn /etc/NetworkManager
grep -rl auth-user-pass ~/.config 2>/dev/null

Linganisa amakhophi nabantu abawaphethe. Idivayisi okungekho muntu oyifunayo yidivayisi okungekho muntu ozoyibuyekeza, futhi iyona enethuba elikhulu lokuqhubeka nokuzama.

Yimuphi umfihlo owujikelezayo ngempela

Iphasiwedi ye-akhawunti iwubufakazi bokungena obubodwa ekusetshenzisweni kwe-VPN. Umusho wokungena wokhiye, ubunikazi besitifiketi kanye nomfihlo womlingani ongakhethiwe, ngakunye kunendlela yalo yokushintsha kanye nomnikazi walo. Ukushintsha iphasiwedi ye-akhawunti akwenzi lutho kudivayisi efakaza ngesitifiketi, futhi ukukhipha kabusha isitifiketi akwenzi lutho kuklayenti eliphethe iphasiwedi egciniwe. Qamba umfihlo ngaphambi kokuthi uqambe isisombululo.

Uma ukujikeleza kuqhutshwa ukusola hhayi inqubomgomo, inqubo yesigameko iphambili kunohlelo lokunethezeka. Khansela lokho okudingwa ubufakazi futhi wamukele umsebenzi owengeziwe kuhlu lwamadivayisi. Leso sinqumo ngesomnini wesigameko, hhayi sanoma ubani ophethe ifomu lokusetha kabusha iphasiwedi ngengozi.

Shintsha inani eligciniwe lapho lihlala khona

Shintsha ubufakazi bokungena ngendlela echazwe yisevisi, bese ubuyekeza ikhophi egciniwe noma wenze uhlelo lokungena kudivayisi ngayinye ohlose ukuyigcina. Ungahleli ukucushwa okukhiqiziwe ngemuva komphathi okubhala kabusha, ngoba umphathi ubuyisela inani elidala ekusebenzeni okulandelayo futhi ukuhlela kuba ukwehluleka okubambezelekile. Buyekeza umthombo ofundwa umphathi, noma sebenzisa isitoreji sobufakazi bokungena seklayenti uqobo. Noma kunjalo, idivayisi kufanele igcine inani elisha endaweni elisebenza ngempela iklayenti.

Iklayenti eligcina ifayela lephasiwedi lidinga ifayela elibhalwe kabusha, kuyilapho iklayenti elibuza lidinga ukungena okuqediwe. I-NetworkManager igcina umfihlo ngaphakathi kwephrofayili yokuxhumana, ngakho ushintsho ludlula ku-nmcli hhayi kuhleli kombhalo:

nmcli connection modify work vpn.secrets "password=NEW"
nmcli connection up work

Iphrofayili efunda ifayela lobufakazi bokungena iyisimo sesithathu. Shintsha okuqukethwe kwalelo fayela, gcina izimvume zalo zivaliwe, futhi ulayishe kabusha iklayenti esikhundleni sokuhlela iphrofayili ekhomba kulo. Iphrofayili ayishintshanga; kuphela umfihlo ewufundayo oshintshile.

Xhuma kabusha idivayisi ngayinye ehlosiwe kanye, ngamabomu, futhi ubheke ukuthi yiziphi ehlulekayo. Uma idivayisi iqhubeka nokwehluleka, bheka i-akhawunti ekhomba kuyo kanye nesitoreji esifundayo ngaphambi kokushintsha iphasiwedi futhi, ngoba ukushintsha kwesibili kuphindaphinda amakhophi adinga ukubuyekezwa. Idivayisi ehluleka kabili ngokuvamile ikhomba ku-akhawunti engalungile noma ifunda isitoreji ongakasitholi. Lungisa lokho, bese uxhuma kabusha.

Amaseshini namathokheni aphila isikhathi eside kunephasiwedi

Ukushintsha iphasiwedi akufakazeli ukuthi amaseshini akhona noma izitifiketi ezihlukene zikhanseliwe. Ezinye izinsizakalo zigcina iseshini iphila kuze kuphele isikhathi noma kuqedwe ngokusobala, futhi amathokheni akhishiwe anempilo yawo. Hlola okwenziwa yinsizakalo ngempela esikhundleni sokucabanga ukuthi ushintsho lwalusemhlabeni wonke. Uma ushintsho lwaqhubekiswa ukusola, qeda amaseshini ngokusobala futhi uqinisekise umphumela.

Umhlahlandlela womjikelezo wokuphila kobufakazi bokungena ku-NIST SP 800-63B ugcina iziqinisekisi namaseshini ezigabeni ezihlukene, yingakho ukushintsha iphasiwedi nokuphuma emhlabeni wonke kuyimisebenzi ehlukene. Zithathe njengemisebenzi emibili enemibandela emibili yokuqedwa. Eyokuqala iqedwa lapho inani elisha lisebenza, eyesibili lapho amaseshini amadala engasekho.

Bhala ukuqedwa ngaphandle kokubhala iphasiwedi entsha emrekhodini. Ilogi yokujikeleza equkethe ubufakazi bokungena isigameko esisha esilindile kudiski eyabiwe. Bhala usuku, amadivayisi abuyekezwayo kanye namadivayisi asalele.