aparaadh

aparaadh (sampeedan anupaat soochana-leak koo aasaan banaaya gayaa) ack suraksha bhedyata haye joe sampeedan kaa upayog karane vaale aich. tii. tii. aiss. aur spuddy protocol mein haye, joe gupt web cookies kii samagri koo leak curr sakata haye. jaba gupt pramanikaran cookies kii samagri koo punarpraapt karane key liye upayog kiya jaataa haye, tou yeh ack hamlawar koo ack pramaanit web satra parr satra apaharan karane kii anumati detaa haye, jisase aage key hamalon koo shuru karane kii anumati milati haye. aparaadh saunpa gayaa thaa.
vivaran.
bhedyata kaa dohan chune gaye saade paath key hamale aur anajaane mein detta sampeedan key madhyam seey jaankaari risaav kaa ack sanyojan haye joe 2002 mein cryptographer johnn kelsey dwara varnit thaa. yeh hamlawar parr nirbhar kartaa haye kii vaha brouser dwara bheje gaye cyfertext key aakar kaa nireekshan karane mein saksham haye, jabaki usee samay brouser koo lakshit site parr kaee saavdhaanipoorvak taiyar kiye gaye web connection banaane key liye prerit kartaa haye. hamlawar taba sampeedit anurodh payload key aakar mein parivartan kaa nireekshan kartaa haye, jisamen brouser dwara kewal lakshit site parr bheji jaane vaali gupt kuki aur hamlawar dwara banaai gaee charr samagri donon shamil hoti hain, kyonki charr samagri mein badalaav kiya jaataa haye. jaba sampeedit samagri kaa aakar cumm hoe jaataa haye, tou yeh anuman lagaaya jaa sakata haye kii yeh sambhav haye kii inject kii gaee samagri kaa kuchh hissa srot key kuchh hisse seey mell khaata haye, jisamen vaha gupt samagri shamil haye jise hamlawar khojana chaahata haye. vibhajit karein aur takneekon koo jeeten, phir apekshaakrit cumm sankhya mein jaanch prayason mein vaastavik gupt samagri parr ghar mein upayog kiya jaa sakata haye joe kii baramad kiye jaane vaale gupt bites kii sankhya kaa ack chhota gunak haye.
aparaadh shoshan kii parikalpana addam langley dwara kii gaee thee, aur sabse pahale suraksha shodhkartaon juliano rizo aur thaai duong dwara pradarshit kiya gayaa thaa, jinhone pashu shoshan bhee banaaya thaa. 2012 key acoparty suraksha sammelan mein iss shoshan kaa puuraa khulasa honey vaalaa thaa. rizo aur duong ney aparaadh koo ack samanya hamale key roop mein prastut kiya joe badee sankhya mein protocol key khilaf prabhaavi dhang seey kaam kartaa haye, jisamen spuddy (joe hamesha anurodh shirshakon koo sampeedit kartaa haye), tls (joe record koo sampeedit curr sakata haye) aur http (joe pratikriyaon koo sampeedit curr sakata haye) shamil hain lekin seemit naheen hain.
roktham.
sampeedan key upayog koo rokane seey aparaadh koo haraaya jaa sakata haye, yaa tou graahak key anta mein, brouser dwara spuddy anurodhon key sampeedan koo aksham karke, yaa website dwara tls protocol kii protocol vaarta suvidhaon kaa upayog karke aise lenden parr detta sampeedan key upayog koo rokkar. jaisa kii "parivahan parat suraksha (tii. ell. aiss.) protocol sanskaran 1.2" mein vistrit haye, graahak apane clienthalo sandesh mein sampeedan algorithm kii ack soochi bhejata haye, aur server unamen seey ack koo chunata haye aur ise apane serverhello sandesh mein vaapas bhejata haye. server kewal ack sampeedan vidhi kaa chayan curr sakata haye joe graahak ney pesh kii haye, isaliye yadi graahak kewal 'koee naheen' (koee sampeedan naheen) pradaan kartaa haye, tou detta koo sampeedit naheen kiya jaayega. isi tarah, choonki sabhi tii. ell. aiss. grahakon dwara 'koee sampeedan' kii anumati naheen dee jaani chaahiye, isaliye ack server hamesha sampeedan kaa upayog karane seey incar curr sakata haye.
shaman.
spuddy aur tls-star key sampeedan key khilaf aparaadh shoshan koo crome aur firefox web brouser key tatkalin sabse vilambit sanskaranon mein cumm kiya gayaa thaa. kuchh websites ney apane anta mein jawabi kadam uthaaye hain. aine. jee. aine. aiks. web-server aparaadh key prati samvedansheel naheen thaa kyonki 1.0.9/1.1.6 (octuber/navambar 2011) opensl 1.0 + kaa upayog curr rhaa thaa, aur 1.2.2/1.3.2 (juuna/julaai 2012) opensl key sabhi sanskaranon kaa upayog curr rhaa thaa.
dhyaan dein kii disambar 2013 taka aich. tii. pee. sampeedan key khilaf aparaadh shoshan koo bilkul bhee cumm naheen kiya gayaa haye. rizo aur duong ney chetavani dee haye kii yeh bhedyata spuddy aur tls sampeedan sanyukt kii tulanaa mein aur bhee adhik vyaapak hoe sakati haye.
ullanghan.
agast 2013 key black hait sammelan mein, shodhkartaon ney gluck, harris aur prado ney ullanghan naamak aich. tii. tii. pee. sampeedan key khilaf aparaadh shoshan key ack prakaar kii ghoshana kii (brouser tohi aur hypertext key anukuli sampeedan key madhyam seey nishkasana key liye sankshipt). yeh network yatayat koo cumm karane key liye web server dwara upayog kiye jaane vaale inbuilt aich. tii. pee. detta sampeedan parr hamla karke aich. tii. tii. aiss. key rahasyon koo ujagar kartaa haye.

