Uphi okufanele ubhale khona umusho wokubuyisa isikhwama?
Umusho wokubuyisa ungowohlelo lokubuyisa lwesikhwama uqobo, hhayi ingxoxo yosizo noma umshini wobuciko obolekiwe. Landelela lapho imfihlo ifakwa khona nokuthi ubani angabuka.
Ukubuyisa isikhwama kubonakala kuwumsebenzi wokuthayipha umbhalo kodwa empeleni uwumsebenzi wokugcina okhiye. Umusho owubhalayo awuyona iphasiwedi ehlolwa iseva; kungukufakwa komsebenzi wokukhiqiza ophinde wakhe okhiye abafihliwe abafanayo nalabo isikhwama esasinawo ngaphambi kokulahleka. Noma yini engafunda ngaleso sikhathi ukucindezelwa kokhiye, ibhodi lokunamathisela noma imemori yezinqubo ingaphinda iwakhe futhi. Ngakho ukulungiselela kusho ukunquma lapho kuvunyelwe khona imfihlo ukuba ibe khona, ngaphambi kokuba ibekhona.
Landelela umusho kusukela endaweni kuya kukhiye okhiqiziwe
Umusho wokukhumbuza wendlela ye-BIP-39 uyalungiswa, weluliwe nge-PBKDF2-HMAC-SHA512 kusetshenziswa umusho wephasiwedi ongakhethwa njengosawoti, bese uguqulwa ube yimbewu isikhwama esikhiqiza okhiye kuyo. Kulokhu kulandela imiphumela emibili ngokuqondile. Okokuqala, umusho uyigunya elihlala njalo hhayi ubufakazi besikhathi, ngakho akukho ukusetha kabusha ohlangothini lweseva uma uphuma. Okwesibili, umusho wephasiwedi ongakhethwa uyabamba iqhaza ekukhiqizeni, yingakho ukubuyisa okubonakala kukhiqiza isikhwama esingenalutho ngokuvamile kusho ukuthi kufakwe umusho wephasiwedi ongafanele, hhayi umusho ongafanele.
Isinyathelo ngasinye ngemva kokulungiswa senzeka ngaphakathi kwenqubo owubhale kuyo. Lena yingxenye imihlahlandlela eminingi yokubuyisa eyiyeka: indawo yokuchayeka ingumzila wokufaka kanye nememori yaleyo nqubo, hhayi inethiwekhi phakathi kwakho newesayithi.
Ikuphi inqubo esemthethweni kuncike esikhwameni. Idivayisi yehadiwe inesixhumi sayo sokubuyisa kudivayisi uqobo; isikhwama sesofthiwe sinesikrini sokubuyisa esibhalwe embhalweni oqinisekisiwe. Akukho kukho okungukuxoxa kosizo, futhi akukho okungukhasi olunikeza ukuhlola umusho esikhundleni sakho.
Isistimu yesivakashi izuza ukwethenjwa komsingathi wayo
Umshini wobuciko uzwa sengathi uyikhompyutha ehlukile futhi awuwona umngcele wokwethenjwa ozimele. Umhlahlandlela we-NIST mayelana nokwenziwa komshini wobuciko ngokuphelele uchaza lokhu kuncika ngqo: ukuphepha kwesivakashi kuncike kumsingathi nakusihlukanisi esingaphansi kwawo, futhi izinsiza ezabiwe njengebhodi lokunamathisela noma ukuhlanganiswa kwamafolda zandisa umzila phakathi kwazo. Ukufaka isivakashi emshinini osusola wona akudali umzila omusha wokufaka.
| Control | What it addresses | What it leaves exposed |
|---|---|---|
| Verified wallet build | Running the code the publisher actually signed | Everything the running process can read once it starts |
| Live-boot environment, no persistent disk | Secrets left in swap, caches or a saved session | The firmware, the keyboard and the display path |
| Full-disk encryption on the host | Recovery material at rest after shutdown | The same material while the machine is unlocked |
| Tunnel to a trusted exit | Who can observe traffic in transit | Local processes, screen capture and input hooks |
Ukuvuza okungokoqobo kulandela umugqa ofanayo. Ibhodi lokunamathisela elabiwe lithwala konke okukopishile. Izithombe zesimo kanye namafayela esimo esimisiwe kungenzeka babambe imemori equkethe umusho. Izengezo zesivakashi ezinokufinyelela kusistimu yamafayela yomsingathi zinika isivakashi umbono wemizila yomsingathi futhi zinika umsingathi umbono wemizila yesivakashi. Akukho kwalokhu okungukuhlasela okuyivelakancane; yizici ezenza umshini wobuciko ube lula.
Isiphetho esithembekile sincane kunokuthi «umshini wobuciko awuphephile». Umshini wobuciko ungaba yisitsha esifanele salo msebenzi lapho umsingathi kuwukhona umshini omethembayo futhi usususile izici zokwabelana. Awukwazi ukusindisa umsingathi ongamthembi.
Yini umhubhe obethelwe oyivalayo ngempela
I-VPN ivikela amaphakethe phakathi kwamaphoyinti amabili okugcina. Ayinawo umbono wokuthi ubani ufunda isikrini kunoma yiluphi uhlangothi, futhi ayivimbeli inqubo yendawo ukuthi ibuke okuthayiphayo efasiteleni. Ngakho umhubhe ubalulekile lapho ukukhathazeka kuwumzila, futhi awubalulekile lapho ukukhathazeka kuwumsingathi.
Lo mehluko ubalulekile ngoba kokubili kudayiswa ndawonye. «Uxhumano olubethelwe» luchaza ukudluliswa; «idivayisi ethembekile» ichaza iphoyinti lokugcina. Inqubo yokubuyisa idinga impendulo ehlukile kukho kokubili, futhi kukodwa kuphela okungaphendulwa isevisi yenethiwekhi.
Ukuqinisekisa lokho okulandiwe kungaphansi komndeni ofanayo wemibuzo mayelana nephoyinti lokugcina. Ukuhlolwa kwe-hash nokuhlolwa kwesiginesha kuqinisekisa ukuthi ingobo yemibhalo ihambisana nalokho okukhishwe umshicileli; akusho lutho mayelana nomshini ozoyisebenzisa.
sha256sum -c SHA256SUMS.txt
gpg --verify SHA256SUMS.txt.sig SHA256SUMS.txtLungiselela indawo ngaphambi kokuba into ivela
Ukulandelana kubaluleke kunezinsimbi zokusebenza. Nquma umsingathi, susa izici zokwabelana, nqamula lokho okungadingi ukuxhunyaniswa, bese kuthi ngemva kwalokho kuphela ukhiphe irekhodi lokubuyisa endaweni yalo yokugcina. Ukwenza lokho ngokulandelana okuphambene kusho ukuthi imfihlo isivele isememorini ngenkathi usanquma ukuthi kufanele iye kuphi.
Bese ugcina imfihlo emgudwini obhalwe umakhi wesikhwama. Yifake esixhunyanweni sokubuyisa sesikhwama uqobo, kunethiwekhi isikhwama esiyilindele, futhi ugunyaze kuphela izenzo ongaziqinisekisa esibukweni esethenjwayo esinikezwa isikhwama. Ibhokisi lengxoxo lekhompyutha elijwayelekile akubona ubufakazi bokuthi idivayisi izogunyaza lokho okushiwo yibhokisi lengxoxo.
Uma usola ukuchayeka, yeka ukufaka into kuleyo sistimu futhi uye endaweni ongayethemba ngokuzimela. Ukuvala umshini wobuciko, ukushintsha iphasiwedi ye-VPN noma ukufaka kabusha uhlelo lokusebenza lwesikhwama akukushintshi igunya lesikhwama; ukuhambisa izimpahla esikhwameni esisha esinokhiye abasanda kwenziwa kuphela okwenza lokho. Gcina umusho ongahluziwe ngaphandle kwanoma iyiphi ingxoxo yosizo ngenkathi uthola izinyathelo eziqondene nesikhwama, ngoba akukho nqubo yosizo esemthethweni eyudingayo. Lowo mthetho owodwa uvimbela ukulahleka okuningi kunanoma yiluphi uhlu lokuhlola lokuqinisa.