|
ÀÁÐÀÊÀÄÀÁÐÀ (Òîæå ñàìîå íî â ÷èòàåìîì âèäå) Õjhjifz ghjuhfvvf Skype yj .... Skype ghtlcnfdkztn cj,jq jlye bp cfvs[ gjgekzhys[ VoIP-ghjuhfvv, ecnfyjdktyye. yf vbkkbjyf[ rjvgm.nthjd gj dctve vbhe, dkfltkmws rjnjhs[ lf;t b yt gjljphtdf.n, rfrfz jgfcyjcnm bv uhjpbn. À jgfcyjcnm bv uhjpbn dtcmvf cthmtpyfz: jn entxrb rjyabltywbfkmyjq byajhvfwbb lj ghjybryjdtybz xthdtq b gjgflfybz yf nhfabr, yt ujdjhz e;t j nfrb[ vtkjxf[, rfr yt;tkfybt Skype hf,jnfnm ghb frnbdyjv SoftICE. ß dct 'nj ,kfujgjkexyj hfpuhsp b ntgthm dscnfdkz. ghjlerns cdjtq ;bpytltzntkmyjcnb yf dctj,ott j,jphtybt :). Skype, cjplfyysq jnwfvb-jcyjdfntkzvb crfylfkmyj bpdtcnyjq Kazaa b eyfcktljdfdibq jn cdjtq ghfhjlbntkmybws cfvst [elibt tt xthns, hf,jnftn gj ghbywbge cfvjjhufybpe.otqcz hfcghtltktyyjq gbhbyujdjq ctnb (distributed self-organized peer-to-peer network, P2P). Skype – 'nj xthysq zobr c vyjujehjdytdjq cbcntvjq ibahjdfybz, yfgbxrfyyjuj fynbjnkfljxysvb ghbtvfvb bcgjkyztvjuj afqkf, cxbnsdf.obq c rjvgm.nthf rjyabltywbfkmye. byajhvfwb. b gthtlf.obq tt d ctnm gj pfrhsnjve ghjnjrjke. Ïjcktlybq j,[jlbn ,hfylvfe'hs b cehjdj vfcrbhetn cdjq nhfabr, ghtgzncndez tuj ,kjrbhjdfyb.. Âct 'nj ghtdhfoftn Skype d bltfkmyjuj gthtyjcxbrf dbhecjd, xthdtq b lhjyjd, cjplf.ob[ cdjb cj,cndtyyst hfcghtltktyyst ctnb dyenhb Skype-ctnb. Ê njve ;t, Skype ljdjkmyj ,tcwthtvjyyj j,hfoftncz c htcehcfvb ndjtuj epkf, bcgjkmpez tuj lkz gjllth;fybz cdzpb vt;le jcnfkmysvb epkfvb Skype-ctnb, yfghzufz ÖÏ b utythbhez vjoysq gjnjr nhfabrf. À nhfabr, rfr bpdtcnyj, htlrj ,sdftn ,tcgkfnysv (jcj,tyyj d Ðjccbb), nfr xnj rf;eofzcz ,tcgkfnyjcnm pdjyrjd dtcmvf eckjdyf: pf epks c «njyrbvb» rfyfkfvb hfcgkfxbdf.ncz «njkcnst» dkfltkmws. Skype frnbdyj bpexftncz d [frthcrb[ kf,jhfnjhbz[ b security-jhufybpfwbz[ gj dctve vbhe, b ,jkmibycndj bccktljdfntktq tlbyjleiyj c[jlzncz dj vytybb, xnj Skype - 'nj lmzdjkmcrb [bnhfz ghjuhfvvf, yfgbcfyyfz ,tccgjhyj nfkfynkbdsvb k.lmvb d cnbkt Black Magic Art. Skype yt ,htpuetn uhzpysvb nh.rfvb, cjplf.obvb juhjvyst ghj,ktvs, j rjnjhs[ z b cj,bhf.cm hfccrfpfnm. Àyfkbp bcgjkyztvjuj afqkf SkypeÈcgjkyztvsq afqk Skype-rkbtynf ghtlcnfdkztn cj,jq yfcnjzobq itltdh [frthcrjuj bcreccndf, dj,hfdibq d ct,z vyj;tcndj bynthtcys[ b ljcnfnjxyj vjuexb[ pfobnys[ vt[fybpvjd. Äkz ghjnbdjltqcndbz bv nht,e.ncz yt njkmrj vjoyst bycnhevtynfkmyst chtlcndf (jnkflxbrb, lbpfcctv,kths, lfvgths b n.l.) b pyfybz/yfdsrb, yj tot b rexf cdj,jlyjuj dhtvtyb. Ädjbxysq afqk gjkyjcnm. pfibahjdfy b lbyfvbxtcrb hfcibahjdsdftncz gj vtht pfuheprb d gfvznm. Ïhbxtv c,hjc lfvgf ytdjpvj;ty, njxytt, pfnhelyty ntv j,cnjzntkmcndjv, xnj cnfhnjdsq rjl gjckt dsgjkytybz jxboftncz, d htpekmnfnt xtuj vs gjkexftv exe, rjnjhsq yt pfgecrftncz. Îhbubyfkmyfz nf,kbwf bvgjhnf yt cjlth;bn ybxtuj bynthtcyjuj, b API-aeyrwbb gjlrk.xf.ncz e;t d ghjwtcct hfcgfrjdrb. Ïhjdthrf wtkjcnyjcnb rjlf dsgjkyztncz bp hfpys[ vtcn d ckexfqyjv gjhzlrt (ghtbveotcndtyyj ghb d[jlzob[ pdjyrf[), gj'njve gjbcr pfobnys[ ghjwtleh ghtlcnfdkztn cj,jq dtcmvf ytnhbdbfkmye. pflfxe. Òtv ,jktt xnj jyb jcyjdfys yf rhbgnjuhfabxtcrb[ RSA-cbuyfnehf[ b cyf,;tys gjkbvjhaysvb utythfnjhfvb, rjnjhst d ckexfqyjv gjhzlrt gthtcnfdkz.n bycnherwbb ADD, XOR, SUB b lh., gthtvtibdfz b[ c ktdsvb vfibyysvb rjvfylfvb. Ñnfnbxtcrbq dspjd aeyrwbq (gj ;tcnrj ghjgbcfyyjve flhtce) ghfrnbxtcrb yt dcnhtxftncz, b dct df;yst ghjwtlehs dspsdf.ncz gj lbyfvbxtcrb dsxbckztvjve erfpfntk., ghjgeotyyjve xthtp j,aecrfnjh. Ñktljdfntkmyj, lbpfcctv,kth yfv nen e;t yt gjvj;tn, b ghb[jlbncz ,hfnmcz pf jnkflxbr. À djn ghj jnkflxbr cktletn crfpfnm jnltkmyj. Skype hfcgjpyftn SoftICE lf;t ghb yfkbxbb ecnfyjdktyyjuj IceExt, yfjnhtp jnrfpsdfzcm pfgecrfnmcz. Ýnj pf,fdyj, gjcrjkmre lkz dpkjvf cfvjuj Skype jnkflxbr SoftICE yt jxtym-nj b ye;ty, dtlm ceotcnde.n b lheubt bycnhevtyns gjlj,yjuj hjlf, chtlb rjnjhs[ d gthde. jxthtlm [jntkjcm ,s jnvtnbnm The Rasta Ring 0 Debugger, bkb cjrhfotyyj [RR0D], yt j,yfhe;bdftvsq Skype-rkbtynjv b, rfr b cktletn bp tuj yfpdfybz, hf,jnf.obq yf ehjdyt zlhf.  ghbywbgt, vj;yj djcgjkmpjdfnmcz b jnkflxbrjv ghbrkflyjuj ehjdyz (yfghbvth, cnhtvbntkmyj yf,bhf.obv gjgekzhyjcnm OllyDbg). Òjkmrj ghb 'njv df;yj gjvybnm, xnj Skype kturj j,yfhe;bdftn ghjuhfvvyst njxrb jcnfyjdf, ghtlcnfdkz.obt cj,jq jlyj,fqnjde. vfibyye. bycnherwb. c jgrjljv CCh, pfgbcsdf.oe.cz gjdth[ jnkf;bdftvjuj rjlf. À lkz ghtljndhfotybz gjifujdjq nhfccbhjdrb Skype jceotcndkztn pfvths dhtvtyb dsgjkytybz jghtltktyys[ exfcnrjd rjlf, lkz ghj[j;ltybz xthtp rjnjhst ghb[jlbncz bcgjkmpjdfnm gjkyjwtyyst 'vekznjhs PC c byntuhbhjdfyysv jnkflxbrjv, yfghbvth, pyfvtybnsq BOCHS. Ífrjytw, rjulf bcgjkyztvsq afqk hfcgfrjdfy b dct ghjdthrb ghjqltys, pfobnf dsxbckztn rjynhjkmye. cevve b ghtj,hfpetn tt d erfpfntkm, gj rjnjhjve gthtlftncz eghfdktybt, ghj,e;lf.ott Skype.
Ïhj,ktvf d njv, xnj Skype jxtym cktlbn pf cdjtq wtkjcnm., gj'njve gjgsnrf bcghfdktybz jnz yf jmp short hf,jnftn njkmrj lj gthdjuj d[jlzotuj pdjyrf, gjckt rjnjhjuj Skype gflftn b j,hfnyj e;t yt gjlybvftncz. Ñgtwbfkmyj lkz nfrb[ [bnhjevys[ pfobn tot dj dhtvtyf MS-DOS ,skf hfphf,jnfyf nt[ybrf jykfqy-gfnxf, ghb rjnjhjq bcghfdktybt ghjuhfvvs jceotcndkztncz ytgjchtlcndtyyj d jgthfnbdyjq gfvznb, f gjckt ecgtiyjuj ghj[j;ltybz ghjdthrb yf yfkbxbt SoftICE cjdthiftncz jnrfn, xnj,s yt djkyjdfnm ghjwtlehe ghjdthrb wtkjcnb.
Àh[bntrnehf hfcghtltktyyjq ctnbÍf fnjvfhyjv ehjdyt cnhernehf Skype-ctnb cjcnjbn bp j,sxys[ epkjd (normal/ordinal node/host/nest), j,jpyfxftvs[ f,,htdbfnehjq SC (Skype Client), b super-epkjd (super node/host/nest), rjnjhsv cjjndtncndetn f,,htdbfnehf SN. Ë.,jq eptk, rjnjhsq bvttn ge,kbxysq IP-flhtc (njn, rjnjhsq vfhihenbpbhetncz d bynthytn) b j,kflftn ljcnfnjxyj ibhjrbv rfyfkjv, fdnjvfnbxtcrb cnfyjdbncz super-epkjv b ujybn xthtp ct,z nhfabr j,sxys[ epkjd, gjvjufz bv ghtjljktnm pfobns nbgf ,hfylvfe'hjd bkb nhfyckznjhjd ctntds[ flhtcjd (NAT) b hfdyjvthyj hfcghtltkzz yfuhepre vt;le [jcnfvb. Â 'njv b cjcnjbn cenm cfvjjhufybpe.otqcz hfcghtltktyyjq ltwtynhfkbpjdfyyjq gbhbyujdjq ctnb, tlbycndtyysv wtynhfkbpjdfyysv 'ktvtynjv rjnjhjq zdkztncz Skype-login-cthdth, jndtxf.obq pf ghjwtlehe fdnjhbpfwbb Skype-rkbtynjd b ufhfynbhe.obq eybrfkmyjcnm gjpsdys[ lkz dctq hfcghtltktyyjq ctnb. Âf;yj gjlxthryenm, xnj cdzpm vt;le epkfvb jceotcndkztncz yt yfghzve., f xthtp wtgjxre super-epkjd. Ñthdthjd d j,otghbyznjv cvsckt 'njuj ckjdf (nfrb[, yfghbvth, rfr d ctnb eDonkey) d Skype-ctnb ytn. Ë.,jq eptk c ecnfyjdktyysv Skype-rkbtynjv zdkztncz gjntywbfkmysv cthdthjv, rjnjhsv jy fdnjvfnbxtcrb cnfyjdbncz ghb yfkbxbb ljcnfnjxys[ cbcntvys[ htcehcjd (j,]tvf jgthfnbdyjq gfvznb, ,scnhjltqcndbz ghjwtccjhf b ghjgecryjq cgjcj,yjcnb ctntdjuj rfyfkf). Êf;lsq eptk Skype-ctnb [hfybn gthtxtym IP-flhtcjd b gjhnjd bpdtcnys[ tve super-epkjd d lbyfvbxtcrb j,yjdkztvs[ r'i-nf,kbwf[ (Host Cache Tables, HC-tables). Ífxbyfz c dthcbb Skype 1.0, r'i-nf,kbwf ghtlcnfdkztn cj,jq ghjcnjq XML-afqk, d ytpfibahjdfyyjv dblt pfgbcfyysq yf lbcrt d ljvfiytq lbhtrnjhbb gjkmpjdfntkz.
Skype-rkbtyns pf jnltkmye. gkfne vjuen ghbybvfnm d[jlzobt pdjyrb c j,sxys[ ntktajyjd b cjdthifnm gjlj,yst pdjyrb. Îlyfrj d PC2PC-j,vtyt 'nb cthdths ybrfr yt exfcnde.n, gj'njve vs yt ,eltv yf yb[ jcnfyfdkbdfnmcz.
Êfr Skype j,[jlbn ,hfylvfe'hsÏhjnjrjk j,vtyf vt;le Skype-rkbtynfvb cjdthityyj ytljrevtynbhjdfy, b gj'njve dcz byajhvfwbz j ytv gjkextyf vtnjlfvb htby;tythbyuf: lbpfcctv,kbhjdfybz Skype-rkbtynjd, fyfkbpf gtht[dfxtyyjuj ctntdjuj nhfabrf b n.l. Ïjcrjkmre ceotcndetn juhjvyjt rjkbxtcndj pyfxbntkmyj hfpkbxf.ob[cz vt;le cj,jq dthcbq Skype-rkbtynjd, nj jgbcfybt ghjnjrjkf vj;tn cjlth;fnm ytnjxyjcnb, dj dczrjv ckexft, open-source-rkbtynf tot ybrnj yt yfgbcfk. Ñhfpe ;t gjckt cdjtuj pfgecrf Skype-rkbtyn jnrhsdftn TCP- b UDP-gjhns. È[ yjvthf ckexfqysv j,hfpjv pflf.ncz ghb bycnfkkzwbb b vjuen ,snm d k.,jq vjvtyn bpvtytys xthtp lbfkju rjyabuehfwbb, xnj pfnhelyztn ,kjrbhjdfybt Skype-nhfabrf yf ,hfylvfe'ht. Ïjvbvj 'njuj, Skype jnrhsdftn gjhns 80 (HTTP) b 443, jlyfrj jyb yt zdkz.ncz ;bpytyyj df;ysvb, b, lf;t tckb b[ pf,kjrbhjdfnm, Skype ybxenm yt jujhxbncz.
Ñbnefwbz jckj;yztncz ntv, xnj Skype ibahetn nhfabr, frnbdyj bcgjkmpez ghjldbyenst nt[yjkjubb j,aecrfwbb, ghtgzncnde.obt dsltktyb. gjcnjzyys[ cbuyfneh d gjkz[ pfujkjdrjd. Àkujhbnvs ibahjdfybz vtyz.ncz jn dthcbb r dthcbb, r njve ;t dsgeotyj vyj;tcndj cgtwbfkmys[ dthcbq lkz hfpys[ cnhfy vbhf, xmb pfrjys yfkfuf.n jghtltktyyst juhfybxtybz yf lkbye rk.xf bkb ds,hfyyst rhbgnjuhfabxtcrbt fkujhbnvs. Íj d wtkjv vt[fybpv ibahjdfybz dsukzlbn nfr, rfr gjrfpfyj yf hbceyrt.
Skype-rkbtyns rhfqyt ltkbrfnyj j,[jlzncz c ,hfylvfe'hfvb b nhfyckznjhfvb ctntds[ flhtcjd, ghjcfxbdfzcm crdjpm yb[ xthtp [jhjij bpdtcnyst ghjnjrjks STUN b TURN. Ïhjnjrjk STUN e;t djitk d Áb,kb. Èynthytnf b gjlhj,yj jgbcfy d RFC-3489. ×nj ;t rfcftncz TURN'f, nj jy dct tot yf[jlbncz d hfphf,jnrt b d yfcnjzott dhtvz ljcnegyf kbim xthyjdfz dthcbz cnfylfhnf: www.jdrosen.net/midcom_turn.html. Òfr xnj, c .hblbxtcrjq njxrb phtybz, ltqcndbz Skype pfrjyys b yt gjgflf.n gjl cnfnm.. STUN, hfcibahjdsdf.obqcz rfr Simple Traversal of User Datagram Protocol (UDP) Through Network Address Translators (NATs) (ghjcnjt ghjybryjdtybt lfnfuhfvv ghjnjrjkf UDP xthtp nhfyckznjh ctntds[ flhtcjd (NAT)), ghtlcnfdkztn cj,jq jnkbxyjt chtlcndj, rjnjhjt cnhflftn, jlyfrj, hzljv juhfybxtybq b yt hf,jnftn d cktle.ob[ ckexfz[:
Íe, c ,hfylvfe'hjv dct gjyznyj. Åckb UDP pfrhsn, nj ybrfr tuj yt jnrhjtim. À djn cbvvtnhbxysq nhfyckznjh ctntds[ flhtcjd (symmetric NAT) — 'nj xnj pf inerf? Ít euke,kzzcm d nt[ybxtcrbt ltnfkb, crf;tv, xnj cbvvtnhbxysq NAT ghtlcnfdkztn cj,jq hfpyjdblyjcnm j,sryjdtyyjuj nhfyckznjhf, nht,e.otuj, xnj,s wtktdjq IP-flhtc b gjhn nhfyckbhetvjuj gfrtnf cjdgflfkb c dytiybv (external) IP-flhtcjv b gjhnjv. Åckb jlby b njn ;t eptk gjcskftn gfrtns c jlbyfrjdsvb bc[jlysvb IP-flhtcfvb b gjhnfvb gj hfpysv yfghfdktybzv, NAT ,eltn dsye;lty nhfyckbhjdfnm b[ yf lheubt gjhns. Òfrbv j,hfpjv, xnj,s jnghfdbnm dyenhtyytve epke UDP-gfrtn, dytiybq eptk ljk;ty gthdsv ltkjv gjkexbnm pfghjc jn dyenhtyytuj epkf. Ñfvjcnjzntkmyj bybwbbhjdfnm cjtlbytybt dytiybq eptk yt d cjcnjzybb, gjcrjkmre NAT ghjcnj yt pyftn, yf rfrjq dyenhtyybq IP b gjhn cktletn nhfyckbhjdfnm ytj;blfyyj cdfkbdfdibqcz UDP-gfrtn. Ýnf ghj,ktvf htiftncz ghjnjrjkjv TURN (Traversal Using Relay NAT), nt[ybxtcrbt gjlhj,yjcnb hf,jns rjnjhjuj jgbcfys gj dsitegjvzyenjve flhtce b ,jkmibycnde xbnfntktq cjdthityyj ytbynthtcys. Ãjhfplj df;ytt lheujt — ghjnjrjk TURN pyfxbntkmyj edtkbxbdftn kfntynyjcnm b nthztn ,jkmijt rjkbxtcndj UDP-gfrtnjd (packet loss), xnj lfktrj yt kexibv j,hfpjv crfpsdftncz yf rfxtcndt b ecnjqxbdjcnb cdzpb, yj gjkyjt jncencndbt cdzpb - tot [e;t. Òfr xnj gjkmpjdfntkzv Skype cnjbn hfljdfnmcz, f yt ;fkjdfnmcz!
Âjn njkmrj flvbybcnhfnjhs 'njq hfljcnb gjxtve-nj yt hfpltkz.n, yfuke[j pfrhsdfz UDP-nhfabr (ntv ,jktt xnj ,jkmibycnde yjhvfkmys[ ghjuhfvv jy yt ye;ty). Ítvyjuj gjdjhxfd lkz ghbkbxbz (pfvehjdfkb, ltvjys!), Skype fdnjvfnbxtcrb gthtrk.xftncz yf xbcnsq TCP, jnhe,bnm rjnjhsq flvbybcnhfnjhe ybrnj yt gjpdjkbn. Ïhfdlf, gjrjkljdfd yfl ,hfylvfe'hjv, njn vj;tn pfrhsnm dct ytbcgjkmpetvst gjhns, yj d njv-nj b gjldj[, xnj ytbcgjkmpetvs[ gjhnjd d ghbhjlt yt dcnhtxftncz! Ïhb cjtlbytybb c elfktyysv epkjv jgthfwbjyyfz cbcntvf yfpyfxftn rkbtyne k.,jq cdj,jlysq TCP/UDP-gjhn, yf rjnjhsq ,elen ghb[jlbnm gfrtns. Òj tcnm, tckb vs gjlrk.xftvcz r web-cthdthe gj 80-ve gjhne, yfi kjrfkmysq gjhn vj;tn jrfpfnmcz 1369-v, 6927-v bkb tot rfrbv-yb,elm lheubv. Çfrhsd dct gjhns, vs kbibvcz djpvj;yjcnb ecnfyfdkbdfnm TCP/UDP-cjtlbytybz! Ålbycndtyysq ds[jl — j,he,bnm dctv gjkmpjdfntkzv kjrfkmyjq ctnb ghzvjq ljcneg d bynthytn, pfcnfdbd b[ [jlbnm xthtp proxy-cthdth. Îlyfrj lf;t nfrbt lhfrjyjdcrbt vths yt htifn ghj,ktvs, gjcrjkmre Skype ghjcnj ghjxbnftn rjyabuehfwb. ,hfepthf b djcgjkmpetncz proxy-cthdthjv rfr cdjbv hjlysv!
Êfr pf,kjrbhjdfnm Skype-nhfabrÐfphf,jnxbrb Skype ghtljcnthtuf.n flvbybcnhfnjhjd jn gjgsnjr dszdktybz b ,kjrbhjdfybz tuj nhfabrf (nbgf: «Âct hfdyj e dfc ybxtuj yt gjkexbncz!»). È ltqcndbntkmyj, hfcgjpyfnm Skype-nhfabr jxtym ckj;yj, f pf,kjrbhjdfnm tuj vj;yj njkmrj gj cjlth;bvjve, rjnjhjt pfibahjdfyj b yt cjlth;bn ybrfrb[ ghtlcrfpetvs[ gjcktljdfntkmyjcntq. Ê cxfcnm. lkz flvbybcnhfnjhjd, cjplfntkb Skype, ghb dctq cdjtq utybfkmyjcnb, ljgecnbkb hzl jgkjiyjcntq, jcnfdbd xfcnm nhfabrf ytpfibahjdfyyjq. UDP-cjtlbytybt bcgjkmpetn jnrhsnsq ghjnjrjk lkz gjkextybz ge,kbxys[ IP-flhtcjd super-epkjd, xnj dgjkyt vj;tn ,snm dszdktyj fyfkbpfnjhjv nhfabrf. Ýnj hfp. TCP-cjtlbytybt bcgjkmpetn jlby b njn ;t RC4-gjnjr ldf;ls, xnj gjpdjkztn yfv djccnfyjdbnm 10 gthds[ ,fqn rk.xf, hfcibahjdfd xfcnm gjcnjzyys[ gjktq pfujkjdrjd Skype-ghjnjrjkf. Ýnj ldf! Êcnfnb, dtcmvf gjktpyfz dtom lkz igbjyf;f pf xe;bvb hfpujdjhfvb! Îlyfrj vyt yt bpdtcnty yb jlby ujnjdsq ,kjrbhfnjh Skype-nhfabrf, f gbcfnm cdjq cj,cndtyysq — ktybdj, lf b dhtvtyb ytn.
Ðfcgjpyfnm b pf,kjrbhjdfnm UDP-nhfabr yfvyjuj ghjot. Êf;lsq ahtqv yfxbyftncz c lde[,fqnjdjuj bltynbabrfwbjyyjuj yjvthf (ID) b nbgf gfrtnf (payload). Â UDP-gfrtn dkj;ty 39-,fqnysq NACK-gfrtn, ghjgeotyysq xthtp j,aecrfnjh b cjlth;fobq cktle.obt lfyyst:
Òfrbv j,hfpjv, xnj,s pf,kjrbhjdfnm UDP-nhfabr, utythbhetvsq Skype, ljcnfnjxyj lj,fdbnm d ,hfylvfe'h cktle.ott ghfdbkj: iptables -I FORWARD -p udp -m length --length 39 -m u32
Ê cj;fktyb., ,kjrbhjdrf UDP-nhfabrf ybxtuj yt htiftn, gjcrjkmre Skype fdnjvfnjv gtht[jlbn yf TCP, yj nen tcnm jlyf yt,jkmifz pfwtgrf. Çfujkjdrb d[jlzob[ IP-gfrtnjd, jnyjczobtcz r ghjnjrjke j,vtyf SSL-rk.xfvb (SSL key-exchange packets), cjlth;fn yt[fhfrnthysq lkz «yjhvfkmys[» ghbkj;tybq bltynbabrfnjh 170301h, djpdhfoftvsq d jndtn yf pfghjc c bltynbabrfnjhjv 160301h (cnfylfhnysq SSL dthcbb 3.1). Òfrbv j,hfpjv, ,kjrbhjdfybt dct[ d[jlzob[ gfrtnjd, cjlth;fob[ d pfujkjdrt 170301h, cthmtpyj jpflfxbn Skype, b ntreobt dthcbb gjnthz.n hf,jnjcgjcj,yjcnm. Âjn njkmrj yfljkuj kb…
Äkz ltntrnbhjdfybz b ,kjrbhjdfybz Skype-nhfabrf vj;yj bcgjkmpjdfnm b lheubt ghjuhfvvyj-fggfhfnyst chtlcndf, yfghbvth, PRX jn Ipoque bkb Cisco Network-Based Application Recognition (NBAR). Îlyfrj dct jyb ytljcnfnjxyj 'aatrnbdys, nfr rfr hfphf,jnxbrb Skype yt cblzn ckj;f herb, b tckb rjve-nj elftncz yfqnb yflt;ysq cgjcj, ,kjrbhjdrb tuj gjufyjuj nhfabrf, d cktle.ob[ dthcbz[ gjufytw gjzdkztncz dyjdm. Àhvbb lhjyjd, bkb rfr pjv,bhjdfnm SkypeÄtitdbpyf ujkjcjds[ hfpujdjhjd dspdfkf ,ehysq hjcn gjgekzhyjcnb Skype, ctnm rjnjhjuj yf 27 fghtkz 2006 ujlf, gj jabwbfkmysv lfyysv, cjcnfdbkf cdsit 100 vbkkbjyjd pfhtubcnhbhjdfyys[ gjkmpjdfntktq. À ctujlyz cjdthif.n, gj vtymitq vtht, jlby Skype-pdjyjr d ltym cdsit 700 nsczx xtkjdtr! Ítckj;yj cghjuyjpbhjdfnm, xnj d crjhjv dhtvtyb d Skype djqltn kmdbyfz ljkz epkjd bynthytnf, xnj bvttn rfr gjkj;bntkmye., nfr b jnhbwfntkmye. cnjhjye. Õfrths e;t lfdyj ljuflfkbcm bcgjkmpjdfnm Skype lkz hfcghjcnhfytybz dbhecjd b jhufybpfwbb hfcghtltktyys[ fnfr, rjnjhsv jxtym ckj;yj djcghtgzncndjdfnm - Skype-nhfabr yflt;yj pfibahjdfy b yt vj;tn ,snm ghjfyfkbpbhjdfy fynbdbhecfvb, pf,kjrbhjdfy ,hfylvfe'hfvb bkb hfcgjpyfy cbcntvfvb j,yfhe;tybz dnjh;tybz. Åcntcndtyyj, xnj,s pf[dfnbnm Skype-eptk, [frth ljk;ty yfqnb cgjcj, gthtlfnm yf ytuj pkjdhtlysq rjl, xnj ghb cj,k.ltybb dct[ vth ,tpjgfcyjcnb jy yb pf xnj yt cvj;tn cltkfnm. Íj, rfr b dczrjt lheujt ghjuhfvvyjt j,tcgtxtybt, Skype gjldth;ty jib,rfv, d njv xbckt b jib,rfv gthtgjkytybz, jlyf bp rjnjhs[ ,skf j,yfhe;tyf 25 ctynz,hz 2005 ujlf. Ñtqxfc jyf e;t lfdyj bcghfdktyf b ghtlcnfdkztn kbim bcnjhbxtcrbq bynthtc, yj c ytq dct-nfrb cnjbn gjpyfrjvbnmcz gj,kb;t (f cltkfnm 'nj vj;yj yf Skype.com/security/Skype-sb-2005-03.html bkb yf seclists.org/fulldisclosure/2005/Oct/0533.html). Âjpvj;yjcnm gthtlfxb eghfdktybz yf shell-rjl gjpdjkzkf fnfre.otve jdkfltdfnm k.,sv Skype-epkjv, f nfr;t dctvb bpdtcnysvb tve super-epkfvb b n.l. Ífl hfcghtltktyyjq ctnm. yfdbckf ukj,fkmyfz euhjpf, b ghjcnj xelj, xnj jyf yt pfrjyxbkfcm rfnfcnhjajq. Îlyfrj, rfr gjrfpsdftn ghfrnbrf, nfv, ult tcnm jlyf jib,rf, hfyj bkb gjplyj gjzdkz.ncz b lheubt. Çfrhsnjcnm bc[jlys[ ntrcnjd b vyj;tcndj fynbjnkfljxys[ ghbtvjd (pfnhelyz.ob[ ntcnbhjdfybt ghjuhfvvs) 'njve njkmrj cgjcj,cnde.n! Äheufz jgfcyfz «drecyjcnm» Skype pfrk.xftncz d jnrhsnjcnb tuj API. Ïjqlz yfdcnhtxe cnjhjyybv hfphf,jnxbrfv, cjplfntkb Skype ghtlecvjnhtkb djpvj;yjcnm byntuhfwbb k.,jq ghbrkflyjq ghjuhfvvs cj Skype-rkbtynjv. Ïhfdlf, ghb 'njv yf 'rhfy dsdjlbncz uhjpyjt ghtleght;ltybt, xnj nfrfz-nj ghjuhfvvf [jxtn gjkmpjdfnmcz Skype API: hfphtibnm bkb gjckfnm tt yf abu? Åcntcndtyyj, ,jkmibycndj gjkmpjdfntktq yf gjlj,yst djghjcs jndtxf.n endthlbntkmyj. Ó;t ghbdsribt r yfljtlkbdsv ghtleght;ltybzv, jyb bycnbyrnbdyj lfdzn «Yes» b njkmrj gjnjv yfxbyf.n levfnm, f xnj ;t jyb, cj,cndtyyj, hfphtibkb? Ïjyznyjt ltkj, xnj, xnj,s bcgjkmpjdfnm Skype API, pkjdhtlye. ghjuhfvve ye;yj rfr-nj ljcnfdbnm yf rjvgm.nth. Ðfymit lkz 'njuj ghbvtyzkfcm 'ktrnhjyyfz gjxnf, ecgtiyj abkmnhetvfz fynbdbhecfvb, yj rjkbxtcndj gjkmpjdfntktq, pfgecnbdib[ bcgjkyztvsq afqk, dct hfdyj bcxbckzkjcm vbkkbjyfvb. Òtgthm ;t lkz hfccskrb dbhecjd vj;yj bcgjkmpjdfnm cfv Skype. Ëjrfkmysq fynbdbhec — tlbycndtyyjt chtlcndj j,jhjys, gjntywbfkmyj cgjcj,yjt jnhfpbnm fnfre. Íj, tckb jy b ecnfyjdkty, hfcgjpyfnm ytbpdtcnysq yfert dbhec jy yt d cjcnjzybb lf;t ghb yfkbxbb fynbdbhecys[ ,fp gthdjq cdt;tcnb ('dhbcnbrf gjrf dct-nfrb hf,jnftn ,jkmit yf htrkfve, xtv yf rjytxysq htpekmnfn). Âf;yj, xnj ghjnjrjk Skype e;t xfcnbxyj hfcibahjdfy b cjplfys [frthcrbt bycnhevtyns, gjpdjkz.obt dpfbvjltqcndjdfnm cj Skype-epkfvb d j,[jl cnfylfhnys[ Skype-rkbtynjd, b lf;t ,tp cthdthf htubcnhfwbb! È [jnz d yfcnjzott dhtvz ltkj juhfybxbdftncz ghjcnsv c,jhjv flhtcjd super-epkjd, ceotcndetn ghbywbgbfkmyfz djpvj;yjcnm cjplfybz cdjb[ cj,cndtyys[ ctntq yf ,fpt hfcghtltktyyjq Skype-ctnb, ukfdyfz jib,rf hfphf,jnxbrjd rjnjhjq pfrk.xftncz d njv, xnj Skype-epks ,tpjujdjhjxyj ljdthz.n lheu lheue b dcz «,tpjgfcyjcnm» pb;ltncz kbim yf pfrhsnjcnb ghjnjrjkf.
Çfrk.xtybtÇfrfyxbdfz cnfnm., z [jntk ,s cghjcbnm: xnj ;t dct-nfrb crhsdf.n cjplfntkb Skype d ytlhf[ cdjtuj rjlf? Ïjxtve, hfcghjcnhfyzz ghjuhfvve ,tcgkfnyj, jyb pf;bvf.n bc[jlyst ntrcns b bcgjkmpe.n pfrhsnsq ghjnjrjk, dspsdfz ntv cfvsv ytljdthbt cgtwbfkbcnjd gj ,tpjgfcyjcnb? Äkz xtuj ,tcgkfnyjq ghjuhfvvt cnjkm yfdjhjxtyyfz pfobnf, cyb;f.ofz ghjbpdjlbntkmyjcnm b gjnht,kz.ofz ,jkmijt rjkbxtcndj gfvznb, dtlm kjvfnm tt ybrnj yt cj,bhftncz? Ïjxtve djj,ot Skype-rkbtyn htfkbpjdfy rfr xthysq zobr? Âjghjcs hbnjhbxtcrbt. Íj xetn vjq [djcn, ytcghjcnf dct 'nj! WWW General Skype Analysis - vbyb-gjhnfk c rextq ccskjr yf cnfnmb b ghjxbt htcehcs, gjcdzotyyst fyfkbpe Skype b vtnjlfv ,jhm,s c ybv: http://www1.cs.columbia.edu/~salman/Skype. Skype Trojan - ntpbcyfz ghtptynfwbz Walter Sprenger, gjrfpsdf.ofz, rfr vj;yj bcgjkmpjdfnm Skype-ctnm lkz hfcghjcnhfytybz xthdtq b ghjxtq pfhfps: http://www.csnc.ch/static/download/misc/2006_Skype_trojaner_v1.1.pdf. How to use Skype with Softice? - k.,jgsnyfz cnfnmz, hfccrfpsdf.ofz, gjxtve Skype-rkbtyn yt hf,jnftn ghb ecnfyjdktyyjv SoftICE b rfr 'nj gj,jhjnm: http://gcasiez.perso.orange.fr/Skypeandsoftice.html. Skype Reads Your BIOS and Motherboard Serial Number - pfvtnrf d ,kjut, hfpj,kfxf.ofz vf[byfwbb, crhsnj ghjltksdftvst Skype, xbnf.obv BIOS b cthbqysq yjvth vfnthbycrjq gkfns: http://www.pagetable.com/?p=27.
http://www.xakep.ru/post/38543/default.aspdiv> |
