Munguva pfupi yapfuura kuburitswa kweshanduro nyowani yakagadzikana yeTor 0.4.4.5 yakaunzwa, yaishandiswa kuronga basa reasina kuzivikanwa Tor network. Tor 0.4.4.5 inoonekwa sekutanga yakagadzika vhezheni yebazi 0.4.4, izvo zvakachinja pamwedzi mishanu yapfuura.
Bazi 0.4.4 richachengetwa sechikamu chenguva dzose yekuchengetedza kutenderera; kuburitswa kwematsva kuchamiswa mushure memwedzi mipfumbamwe (munaJune 9) kana mwedzi mitatu mushure mekuburitswa kwebazi re2021.x.
Uye zvakare, yakareba rutsigiro kutenderera (LTS) inopihwawo kubazi re0.3.5, izvo zvigadziriso zvichaburitswa kusvika Kukadzi 1, 2022. Rutsigiro rweiyo 0.4.0.x, 0.2.9.x uye 0.4.2. matavi. 0.4.1.x amiswa. Tsigiro yebazi 20.x ichavhuniwa muna Chivabvu 0.4.3 uye 15 muna Kukadzi 2021, XNUMX.
Kune avo vachiri kusaziva nezve iyo Tor chirongwa (Iyo Onion Router). Ichi chirongwa chine tarisiro huru kuvandudza network yekutaurirana yakagoverwa ne low latency uye yakasimudzwa pamusoro pe internet, umo kufambiswa kwemashoko kuchinjana pakati pevashandisi hakuratidze hunhu hwavo, ndiko kuti, iyo IP kero (kusazivikanwa padanho reneti) uye izvo, mukuwedzera, inochengetedza kuvimbika uye kuvanzika kweruzivo rwunofamba napo.
Iyo sisitimu yakagadzirirwa nekuchinjika kunodiwa kuitira kuti ikwanise kuita kuvandudzwa, kuendeswa mune chaiko nyika uye inogona kumira mhando dzakasiyana dzekurwisa. Nekudaro, ine isina kusimba mapoinzi uye haigone kutariswa seyakaoma system.
Main nyowani maficha eTor 0.4.4.5
Iyi vhezheni itsva yaTor inouya neshanduko dzinoverengeka uye kugadzirisa, kwavari tinoratidza zvakakosha se yakavandudzwa sentinel node yekusarudza algorithm, mune iro dambudziko nekuyera mutoro, pamwe nekuvandudza kugadzirwa uye chengetedzo.
Imwe shanduko huru, Ndiko kuti kugona kurodha zviyero masevhisi eanyanisi akaitwa. Sezvo sevhisi yakavakirwa pane yechitatu vhezheni yeprotocol ichigona ikozvino kuita seyakagadziriswa yeOnionBalance, iyo yakagadzirirwa uchishandisa iyo HiddenServiceOnionBalanceInstance sarudzo.
Izvo zvakare zvakasimbiswa izvo iro runyorwa rwemasipare dhairekitori maseva akagadziridzwa, iyo isina kuvandudzwa kubvira gore rapfuura, uye zana nemakumi mashanu nesere remaseva anoramba achishanda (iro runyorwa nyowani runosanganisira zvinyorwa gumi nemana zvakagadzirwa muna Chikunguru.
Muma relays, inobvumidzwa kushanda nemaExpEND2 masero izvo zviripo chete pane iyo IPv6 kero, uye cheni kuwedzera pamusoro pe IPv6 inobvumidzwawo kana mutengi uye iyo relay inotsigira IPv6.
Kana, nekuwedzera ngetani dzenodhi, sero rinogona kuwanikwa panguva imwe chete kuburikidza ne IPv4 ne IPv6, ipapo IPv4 kana IPv6 kero inosarudzwa zvisina tsarukano. Iyo iripo IPv6 yekubatanidza inogona kuwedzera ketani. Iko kushandiswa kwemukati IPv4 uye IPv6 kero kwakarambidzwa.
Mukuwedzera akawedzera huwandu hwekodhi iyo inogona kuremerwa kana uchitanga Tor pasina kudzosera rutsigiro.
Zvakare, zvakare kubatwa kwakaringana kwemiparamende yeDoS yekudzivirira yeonion sevhisi inotaurwa. Zvakanaka, zvisati zvaitika, zvimiro zvekubvumirana zvebasa reDoS zvidziviriro zvaizonyora maparamende akaiswa neanoshanda sevhisi kuburikidza HiddenServiceEnableIntroDoSDefense.
Chimwe chakakosha kugadzirisa chigumburu idhigi raive kurerutsa huwandu hwese kubva kunetiweki yeTor network hanyanisi, ichiregeredza chero traffic inotangira kubva kune vatengi.
kunze kwaizvozvo migero uchishandisa echinyakare vhezheni yeTor handshake haichakwanise kupfuura cheki canonity yemakero. (Iyi ingori nyaya diki, sezvo nzira dzakadai dzisina nzira yekumisikidza makiyi ed25519 uye nekudaro dzinofanira kugara dzichirambwa kumatunhu anotsanangura mazita eed25519.)
Yeimwe shanduko izvo zvinomira pachena:
- Zviremera izvozvi zvinokurudzira protocol zvinyorwa zvinoenderana neTor 0.3.5 uye gare gare.
- Dzorerazve rutsigiro rweGADZIRA NEW / UP / PASI kudzora zviitiko zvechiteshi.
- Wedzera IPv6 rutsigiro kune tor_addr_is_valid ().
- Wedzera bvunzo yeshanduko dziri pamusoro uye tor_addr_is_null ().
- Rega vatengi uye vatumire kutumira IPv2-chete, huviri-stack EXTEND6 masero.
- Rega Tor kuvaka pamapuratifomu paisingazive maitiro ekuzivisa iyo syscall yakakonzera Linux seccomp2 sandbox kuparara.
- Bvumira iyo unlinkat () system yekufona, iyo inoshandiswa neLibc kuitisa unlink ().
- Wakawedzera 3 nyowani SocksPort YakawedzerwaMakanganiso (F2, F3, F7) ichizivisa mhando nyowani yekusashanda kwekubatanidza sevhisi.
Chekupedzisira, kana iwe uchida kuziva zvakawanda nezvazvo, unogona kutarisa izvo zvinyorwa mu inotevera chinongedzo.