Isifaki se-VPN esivela kusibuko? Qinisekisa umshicileli kuqala

Umhubhe wawusebenza, isixhumi-mboni savela futhi isikhathi sokuxhumana sahlala sizinzile isonto lonke. Akukho kulokho okukutshela ukuthi ubani owakha isifaki. Ikliyenti ye-VPN isebenza ngamalungelo anele okubhala kabusha imizila nokufunda ubufakazi, ngakho umshicileli uyingxenye yemodeli yezinsongo, hhayi umbhalo waphansi.

Yenza iziqinisekiso ngokulandelana futhi ume kokokuqala okuhlulekayo. Zizofuphi, futhi ngayinye ivale isikhala esihlukile.

Isinyathelo sokuqala: Landa esiteshini esishiwo yiphrojekthi

Iphrojekthi ngayinye ibhala ukuthi izinguqulo zayo zikuphi, futhi lelo khasi liyireferensi. Izakhiwo zomphakathi, izinhlu zezitolo kanye namasango abadayisi konke kuyimigudu esemthethweni. Ngamunye usemthethweni kuphela lapho iphrojekthi ngokwayo ikhomba kuwo. Leyo yisivivinyo, futhi akufani nokubonakala kusemthethweni.

Ifayela eliqanjwe ngephrojekthi alifakazi lutho. Ukushintsha igama lesifaki kungumsebenzi womzuzwana, futhi igama yilo eliboniswa kuqala umphumela wokusesha.

Isinyathelo sesibili: Qinisekisa isiginesha ngokuqhathanisa nobunikazi obaziwayo

Ukuqinisekiswa kwesiginesha kuphendula kahle umbuzo omncane. Kukutshela ukuthi ubunikazi obuthile busayine le bhinari nokuthi ibhinari ayizange ishintshe kusukela lapho. Ipendula umbuzo owodwa futhi inqabe omunye. Ayikwazi ukukutshela ukuthi lobo bunikazi yibo obufuna ukuthembela kubo.

# macOS: who signed this app, and is the signature intact?
codesign -dv --verbose=4 /Applications/Tunnel.app
spctl -a -vvv -t install /Applications/Tunnel.app

# Windows: signature and publisher of the installer
Get-AuthenticodeSignature .\tunnel-setup.exe | Format-List Status, SignerCertificate

# Linux: detached signature from the project's release page
gpg --verify tunnel-1.4.2.tar.gz.asc tunnel-1.4.2.tar.gz

Funda ubunikazi, hhayi igama lesimo. Unjiniyela ongahlobene onezitifiketi ezivumelekile uveza isiginesha esivumelekile. Uhlelo lokusebenza olubika umshicileli oqashelwayo lukutshele kuphela ukuthi othile ukhokhele isitifiketi.

Isinyathelo sesithathu: Qhathanisa ihashi nomthombo ozimele

Isamba sokuqinisekisa sibonisa ukuvumelana nenani lereferensi. Uma ireferensi ifike eduze kokulanda, kokubili kungahle kube nephutha ndawonye futhi ukuqhathanisa kudlule noma kunjalo. Leyo yindlela yokwehluleka ezincwadini eziningi. Ihashi isekhasini elifanayo nefayela eliyichazayo.

# Linux and macOS
shasum -a 256 tunnel-1.4.2.dmg

# compare against the value published on the project's own release page
# not against a value copied from the same mirror

Uma iphrojekthi ishicilela amasamba okuqinisekisa asayiniwe noma imanifesti yenguqulo esayiniwe, qinisekisa isiginesha ohlwini hhayi kufayela ngalinye ngokwehlukana. Ngaleyo ndlela ireferensi eyodwa ethembekile ihlanganisa yonke inguqulo.

Ngemva kokufaka: Gcina indlela yokubuyekeza

Isiteshi esisekelwayo sisabalulekile ngemva kokuphela kokufaka. Izakhiwo ezipakishwe kabusha zingathwala isibuyekezi sazo, futhi leso sibuyekezi sinquma ukuthi yini ezosebenza ngenyanga ezayo. Isakhiwo esingakaze sibuyekezwe asiphephile kakhudlwana. Simane sidala.

Bhala ukuthi ikliyenti kufanele ibuyekezwe kanjani nokuthi ingabe uhlelo lokuphatha lulo lwalelo sinyathelo. Uma impendulo iwukulanda ngesandla kusuka kunkundla, umbuzo wochungechunge lwempahla awukaze uvalwe ngempela.

Imithombo emibili, hhayi eyodwa

Unjiniyela wekliyenti nomkhiphi wephrofayela bangamabhange ahlukene. Ikliyenti esemthethweni eletha iphrofayela kusuka kumsebenzisi ongahlobene liyilungiselelo elivamile, futhi iphrofayela ifanele ukuhlolwa kwayo: ubani oyikhiphile, ifike kanjani, nokuthi isitifiketi seseva sihambisana yini negama olilindele.

Gcina kokubili imithombo kukhonjwa emibhalweni yakho. Ngesikhathi ikliyenti ishintshwa noma idivayisi ibuyiselwa kusuka kusipele, yileyo mitsetjhana emibili evimbela isakhiwo esingaziwa noma iphrofayela engaziwa ukuthi zingabuya kanye nolunye idatha.