Ingabe i-VPN ivikela ku-KRACK? Ukulungisa kushintshani

Uma uthenga i-VPN ngoba isihloko sathi i-KRACK yephula ukubethela kwe-Wi-Fi, ulungisa isendlalelo esingalungile. Lokho kwembulwa kuka-2017 kwachaza umndeni wokuhlaselwa kokufaka kabusha ukhiye okubhekene nokuxhawana kwezinyathelo ezine kwe-WPA2, futhi ukulungiswa kwafika njengezibuyekezo zesistimu yokusebenza, izigaxa zomshayeli ongenantambo kanye nefirmware yomzila. Ithumela lingafihla ithrafikhi yakho kunethiwekhi yendawo, kodwa alikwazi ukulungisa ukuxhawana okuphela ngaphansi kwalo. Ngakho umbuzo wokuqala awuwona wokuthi iyiphi i-VPN okufanele uyithenge; uwukuthi iziphi izinto zakho ezisasebenzisa isitaki esingenantambo esingakalungiswa.

Umehluko ofanayo uphendula nokukhathazeka ngebhajethi. Lowo ongakwazi ukukhokhela ukubhalisa akakaze akhishwe esisombululweni sangempela, ngoba isisombululo kwakuwukubuyekezwa kwamahhala. Imali isetshenziswa ekushintsheni ihadiwe engasayitholi imbuyekezo.

Ukuhlasela kwashintsha ini ngempela

I-WPA2 ikhipha ukhiye omusha wababili ngesikhathi sokuxhumana ngokuxhawana kwezinyathelo ezine. Indawo yokufinyelela ithumela i-nonce, iklayenti liphendula ngeyalo, izinhlangothi zombili zibala ukhiye wesikhashana wababili, futhi indawo yokufinyelela iqinisekisa ngomlayezo owamukelwa iklayenti. Ukuhlasela kokufaka kabusha ukhiye kuphazamisa lokho kulandelana esikhundleni sokuqagela umusho wokungena, futhi kuphoqa iklayenti ukuthi lifake ukhiye elivele likufakile. Ukufakwa kabusha ngakunye kungasetha kabusha i-nonce yokudlulisa kanye nesibali sokuphinda kwamukele.

Lapho lezo zibali zihlehla, ingxenye yethrafikhi okwakufanele yenqatshwe iyavunywa futhi. Kuye ngohlobo nokusetshenziswa, umhlaseli osendaweni yomsakazo wayengaphinda adlale amafremu, awakhiphe ngemfihlo noma awafake. Ukuxhawana kokhiye weqembu nokuxhawana kokushintsha okusheshayo kwakunezinhlobo zako, yingakho isexwayiso sabala amagama amaningi okuhlasela esikhundleni sokukodwa.

I-Android 6.0 nangaphezulu kwakuyisimo esibi kakhulu. Izinguqulo zayo ze-wpa_supplicant zaziphogeleka ukufaka ukhiye wamazero onke, okwenza ukukhipha ngemfihlo kube lula kakhulu kunasezinkundleni lapho ukufaka kabusha kusetha kabusha izibali kuphela. Leyo mininingwane yahlukanisa ubuthakathaka bethiyori nobuthakathaka bangempela kunkundla yocingo eyayivame kakhulu ngaleso sikhathi.

Ukulungiswa kuhlala esitakini esingenantambo

Isilungiso sasemthonjeni waphezulu satshela ama-supplicant nezindawo zokufinyelela ukuthi zishaye indiva umlayezo wokuxhawana othunyelwe futhi lapho ukhiye usufakiwe. Izakhiwo ezilungisiwe ze-wpa_supplicant ne-hostapd zaziwuphethe, futhi izabelo zawubuyisela emagatshani amadala, ngakho umucu okhishwa i-wpa_supplicant -v uyindawo yokuqala hhayi isinqumo. Funda isexwayiso sokuphepha sesabelo futhi uqinisekise isigaxa esithile, hhayi inombolo yenguqulo kuphela. Isakhiwo esibika inguqulo endala singase silungiswe, futhi isakhiwo esinenguqulo entsha singase sintule ukubuyiselwa komkhiqizi.

Zombili iziphetho zokuxhumana zidinga ukunakwa. Umzila olungisiwe awulungisi i-laptop exhumna kuwo, futhi i-laptop elungisiwe ayilungisi umzila. Abakhiqizi bashicilela izexwayiso ngomkhiqizo ngamunye, futhi ukulungiswa komzila kwakuvame ukusala ngemuva kwezibuyekezo zocingo ngoba imodeli ngayinye idinga isakhiwo sayo sefirmware. Uma ukukhishwa kokugcina kwedivayisi kungaphambi kwesexwayiso, kuyiphatha njengengakalungiswa kuze kusho okunye umkhiqizi.

Kumishini ongakwazi ukuyibuyekeza, izinketho zincane futhi azikhangi. Yikhiphe ekusetshenzisweni, yigcine kude nezethiwekhi ezithwala ithrafikhi ebucayi, noma yikhawulele engxenyeni lapho abangane bayo kuphela nabo bengalahlwa ngokufanayo. Akukho kulezi zinketho okudinga ukubhalisa, futhi akukho okuba ngcono ngokukhetha omunye umhlinzeki wethumela.

Ithumela limbozani

I-VPN ihambisa umngcele. Idvayisi yakho ibethela iphakethe ngalinye bese iyithumela kuseva ye-VPN, eyikhipha ngemfihlo bese iyidlulisela. Lowo ophatha ukuxhumana kwe-Wi-Fi ubona amaphakethe angaphandle ethumela, hhayi umthwalo ongaphakathi, ngakho ukuhlasela kokufaka kabusha okudalula amafremu esendlalelo sokuxhumana akudaluli ngokuzenzakalela okuqukethwe kokuxhumana okusethumeleni. Lokho kuvikela kusasebenza ngisho lapho isitaki esingenantambo esingaphansi sisengozini, futhi yikho kanye okwenza lezi zilawuli zimbili zididaniswe.

Umbundela uthi "kuthumeleni". Ukuthumela okuhlukanisiwe, uhlu lokudlula noma ukukhishwa kwengosi yokubamba kuthumela ingxenye yethrafikhi ngaphandle kwethumela, futhi leyothrafikhi ayitholi nzuzo kulo. Kuyafana nangethrafikhi yezinye izinto ezikuleyo nethiwekhi ezingakaze zifake iklayenti. Ithumela liyisinqumo sedivayisi ngayinye nomzila ngamunye, hhayi isici segumbi, futhi i-VPN esezingeni lomzila imboza kuphela lokho okudlula ngempela kumzila.

Into ethumela elingakwazi ukuyenza ukulungisa umshayeli, ukumisa uzamcolo wokungaqinisekisi noma ukuvimbela umhlaseli ekuphazamiseni isiteshi. Alikwazi futhi ukuvikela ukuxhumana okungangeni kulo. Lezi yizinkinga zokutholakala nesendlalelo sokuxhumana, futhi zihlala nesitaki esingenantambo kungakhathaliseki ukuthi iqoqo lokubethela lethumela linamandla kangakanani.

I-HTTPS nethumela zivikela ukugxuma okuhlukene

Ukulayisha ikhasi elilodwa kungase kuhlanganise izivikelo ezintathu ezihlukene: ukuxhumana kwe-Wi-Fi, ithumela eliya kuseva ye-VPN kanye nesikhathi se-TLS esiya kuwebhusayithi. Ngakunye kuxoxwa ngakho ngokuzimela. I-TLS enesitifiketi esivumelekile nenguqulo yesimiso yesimanje ikunikeza ukubethela okuqinisekisiwe phakathi kwesiphequluli nesayithi ngisho lapho ukugxuma kokuqala kunobutha, ngoba ukuhlola isitifiketi yikho okuvimbela umkhohlisi ukuthi afake ukhiye wakhe.

Lokho kuhlola kunezindawo ezibuthakathaka emikhawulweni. Ukuqondisa kabusha kusuka ku-HTTPS kuya ku-HTTP, ikhasi elilayisha amaskripthi nge-HTTP evamile, noma umsebenzisi oqhumayo esexwayisweni sesitifiketi — konke kuhambisa ithrafikhi ngaphandle kwesikhathi esivikelwe. I-HSTS namakhasi aphakathi esiphequluli akhona ngoba lawo maphutha avamile, hhayi ngoba i-TLS intekenteke.

Ukugcina i-HTTPS nethumela akwenzi ukusetshenziswa okungenantambo kuphele ukuba sengozini. Amafremu asakhipha ngemfihlo umshayeli onephutha; umehluko ukuthi umhlaseli uthola ini ngaphakathi nokuthi lokho okuqukethwe kwakuvikelwe yini ngenye into.

Ukulandelana kokulungisa kunethiwekhi ehlangene

Qala endaweni yokufinyelela, ngoba iyona divayisi oyilawulayo futhi wonke amaklayenti ancike kuyo. Bese udlula ezistimini zokusebenza zamaklayenti, kusukela kwezakudala, ngoba izinkundla eziyeke ukuthola izibuyekezo yizona ezingasoze zalungiswa. Kuphela lapho lolo hlu seluphelile umqondo wesinqumo se-VPN uba khona, futhi kuyisinqumo ngokuchayeka, hhayi ngokulungisa. Ukukwenza ngokulandelana okuphambene, ithumela kuqala bese kuba ifirmware, kushiya iphutha langempela endaweni yalo inqobo nje uma ukubhalisa kuqhubeka.

Bhala lokho okuqinisekisile, kuhlanganise nenguqulo yefirmware nosuku. "Kubuyekezwe" akusona isimo umuntu angasihlola kamuva.

Ukuhlola okuthathu kumboza ingxenye enkulu yomsebenzi, futhi kuhamba ngalokhu kulandelana. Ungakweqi okwesithathu ngoba okubili kokuqala kwabuya kuhlanzekile.

• Ifirmware yomzila: qhathanisa inguqulo efakiwe nekhasi lesexwayiso somkhiqizi, hhayi inkinobho yokubuyekeza.
• I-OS yeklayenti: qinisekisa izinga lezigaxa elihlanganisa ukulungiswa okungenantambo kucingo ngalunye, i-laptop nethebhulethi.
• Okusele: bhala izinto ezingenayo indlela yesigaxa bese unquma ukuzikhipha, ukuzihlukanisa noma ukuzamukela.

Uma uhlu lokusele lulude, inethiwekhi yezivakashi enokuhlukaniswa kwamaklayenti ithenga isikhathi ngenkathi ihadiwe ishintshwa. Bese uhlola iklayenti elilodwa elaziwayo kubhande ngalinye, bhala umphumela futhi uhlole futhi ngemuva kokukhishwa kwefirmware okulandelayo. Uhlu lwehadiwe yilo olwenza isexwayiso esilandelayo sisheshe; ithumela yilo elimboza igebe phakathi kwesikhathi.