Hubiyaha Jebinta Ereyga Sirta oo Bilaash ah
Hubi in erey sir ah uu ka soo muuqday jebin xog oo la yaqaan iyadoo loo marayo Have I Been Pwned β iyadoo la adeegsanayo k-anonymity, sidaa darteed ereyga sirta ah waxaa lagu hash-gareeyaa gudaha oo kaliya 5 xaraf oo hash bilow ah ayaa la diraa. Ereyga sirta ah laftiisu weligii kama tago browser-kaaga.
Furahaaga sirta ah marnaba meel kasta lama diro. Waxaa lagu hash-eeyaa SHA-1 gudaha browserkaaga, oo kaliya 5-ta xaraf ee ugu horreeya ee hash-kaas ayaa loo diraa API-ga Have I Been Pwned range. Serverku wuxuu soo celiyaa hash kasta oo jabsanay oo wadaaga horgaladaas, isbarbardhigguna wuxuu ka dhacaa maxalliga ahaan β kani waa qaabka k-anonymity, marka adeeggu marnaba ma barto furahaaga sirta ah ama hash-kiisa buuxa.
Hubintani waxay sameysaa hal codsi shabakadeed β waxay u dirtaa 5-ta xaraf ee horgalka hash-ka api.pwnedpasswords.com. Furahaaga sirta ah iyo hash-kiisa buuxa marnaba lama diro.
Sida Ay U Shaqeyso
Wuxuu ku hubiyaa furaha kaydka Have I Been Pwned ee bilyoono furayaal la burburiyay β isagoon waligiis dirin furaha meel kasta. Wuxuu isticmaalaa qaabka k-anonymity: 5-ta xaraf ee ugu horreeya ee hash-ka SHA-1 ee furaha oo keliya ayaa ka baxa biraawsarkaaga.
- 1Furaha waxaa si maxalli ah loo hash gareeyaaFurahaaga waxaa si maxalli ah loogu hash gareeyaa SHA-1 iyadoo biraawsarkaaga la adeegsanayo Web Crypto API. Furaha laftiisu waligiis kama baxo aaladdaada.
- 25 xaraf oo keliya ayaa la diraa5-ta xaraf ee ugu horreeya ee hash-ka waxaa loo diraa API-ga kala duwan ee Have I Been Pwned, kaas oo soo celiya hash kasta oo la burburiyay oo wadaaga bilowgaas.
- 3Isku-dhafka waxaa lagu hubiyaa biraawsarkaagaBiraawsarkaagu wuxuu ka raadinayaa dhamaadka hash-kaaga liiskaas, wuxuuna muujiyaa immisa jeer (haddii ay jirto) furuhu ku soo muuqday burbur. Adeeggu waligiis ma ogaan doono midkaaga uu ahaa.
Kani waa aaladda kaliya ee LibraTool ee sameysa codsi shabakadeed, oo xitaa markaas furahaaga iyo hash-kiisa oo dhammu waligood kama baxaan biraawsarkaaga β 5-xaraf oo bilow hash ah oo keliya ayaa baxa.
Qalabka La Xiriira
Hubiyaha Xoogga Password-ka
Hubi intee in le'eg ay xoog u tahay password-kaaga adiga oo isticmaalaya falanqaynta entropy, qiyaasaha waqtiga jebinta, iyo liis faahfaahsan oo shuruudo ah. Wuxuu gebi ahaanba ka shaqeeyaa browser-kaaga.
Tijaabada Daadidda IP-ga WebRTC
Hubi in WebRTC uu soo daadinayo cinwaankaaga shabakadda maxalliga ah ama IP-gaaga dadweynaha ee VPN-kaaga ku wareegsan. Wuxuu ku shaqeeyaa xiriir dhab ah oo peer-to-peer browser-kaaga oo adeegsanaya server-yo STUN oo dadweyne ah β waxba lama soo geliyo.
Imtixaanka Weheliyaha (Speaker)
Imtixaan kanaallada stereo-ga midig/bidix, sweep dhan 20Hz-20kHz si aad u hubiso xadka maqalkaaga, oo shaydi imtixaan wajiga stereo-ga β dhammaantood waxaa laga sameeyaa toos biraawsarkaaga, faylal cod ah lama isticmaalo.