- Ukusetshenziswa kwamapulatifomu akhethekile namathuluzi ahlanganiswe nesiphequluli ukuthola ukwephulwa kwezokuphepha.
- Izingozi ezihlobene nokusetshenziswa kabusha kokhiye, njengokuhlaselwa kwe-Credential Stuffing.
- Izindlela ezibalulekile zokuvimbela ngokusebenzisa abaphathi bamaphasiwedi kanye nokuqinisekiswa kwezinyathelo ezimbili.
Cishe uke wabhekana nokuthola isaziso efonini yakho noma i-imeyili ngokushesha, ikuxwayisa ngokuthi idatha yakho ivezwe ekwephulweni kokuphepha. Endaweni yedijithali lapho cishe konke esikwenzayo kungena khona nge-akhawunti ye-imeyili, ukuphepha kweziqinisekiso zethu kuyindlela yokuqala yokuzivikela kulabo abafuna ukwenza izimpilo zethu zibe lusizi.
Ngeshwa, amaqhinga ezinkampani ezinkulu avamile, futhi sivame ukungatholi kuze kube sekwephuzile. Ukwazi ukuthi amaphasiwedi akho asakazwa yini ku-Dark Web akuyona nje indaba yelukuluku, kodwa kuyindlela eyisisekelo yokuhlanzeka kwedijithali yokuvimbela othile ukuthi angebi ubuwena bakho noma akhiphe i-akhawunti yakho yasebhange.
Amathuluzi okuthola ukuvuza kwedatha
Kunezindlela eziningana zokulandelela ukuthi ulwazi lwakho luwele ezandleni ezingafanele yini. Inketho endala nehlonishwa kakhulu yi- Have I Been Pwned (HIBP) , i-portal ehlanganisa izigidigidi zama-akhawunti asengozini. Ufaka nje ikheli lakho le-imeyili, bese uhlelo luzokutshela ukuthi livele yini kunoma yiziphi izizindalwazi ezivuzayo. Uma isikrini siphenduka sibe luhlaza, ungaphefumula kalula, kodwa uma siba bomvu, kusho ukuthi idatha yakho ivele obala ngesikhathi esithile.
Ezinye izindlela ezinamandla zifaka phakathi i-Cybernews kanye ne-Firefox Monitor , ezinikeza izinsizakalo ezifanayo zokuskena zamahhala. Uma ufuna okuthile okubanzi okungaphezu kwe-imeyili, i-DeHashed ingalandelela ngisho namakheli e-IP nezinombolo zocingo, yize ezinye zezici zayo ezithuthukisiwe zidinga inkokhelo. Kulabo abathanda isofthiwe yomthombo ovulekile, kukhona amathuluzi afana noSean Brickenridge kanye ne -KeePassXC , akuvumela ukuthi uqinisekise ukuphepha kwephasiwedi ngaphandle kokuthembela ngokuphelele efwini.
Akudingeki ube uchwepheshe wekhompyutha ukuze uhlale uvikelekile, njengoba iziphequluli zanamuhla zenza umsebenzi omningi. I-Google Chrome ifaka umphathi wephasiwedi onesici esithi "Hlola" esikwazisa uma unamaphasiwedi abuthakathaka, asetshenziswe kabusha, noma asengozini. Mane nje uye kuzilungiselelo zokugcwalisa ngokuzenzakalela ukuze ubone uhlu lwama -akhawunti angaba sengozini.
Uma ungumsebenzisi we-Apple, uhlelo lwe-iOS kanye ne-Safari lusebenza kahle ngokulinganayo. Kuzilungiselelo zephasiwedi ze-iPhone yakho, ungavumela inketho ethi "Thola Amaphasiwedi Avukile", ezokuthumela isaziso esisheshayo uma ithola idatha yakho kusizindalwazi esisengozini, okukuvumela ukuthi uyishintshe ngokuchofoza okukodwa.
Ingozi yokusebenzisa kabusha amaphasiwedi kanye nokugcwalisa iziqinisekiso
Iphutha elikhulu esilenzayo ukusebenzisa iphasiwedi efanayo ye-imeyili, i-Facebook, kanye nebhange. Lokhu kuvula umnyango wendlela ebizwa ngokuthi i-credential stuffing , lapho izigebengu ze-inthanethi zithatha khona i-imeyili nephasiwedi evuvukile kusayithi elingavikelekile bese ziyizama ngokuzenzakalelayo kwamanye amawebhusayithi amaningi. Uma ususebenzise kabusha iphasiwedi yakho, empeleni uzinika ukufinyelela kuyo yonke impilo yakho yedijithali.
Uma i-akhawunti isengozini, izimpawu zivame ukuba sobala: ama-imeyili ongawathumelanga, izexwayiso zokungena ngemvume ezivela emazweni akude njengeRussia, noma izinguquko ezingalindelekile kuzilungiselelo zokuphepha. Uma ubona noma yini engavamile, ungalindi uhlelo ukuthi lukwazise; thatha isinyathelo ngokushesha ngoba umonakalo ungakhula ngokushesha ube ukwebiwa kobunikazi noma ukukhwabanisa ngezezimali.
Izinyathelo okufanele uzithathe uma idatha yakho iveziwe
Uma uqinisekisa ukuthi iphasiwedi yakho isengozini, into yokuqala ongase ucabange ukuthi ukwethuka… ngiyadlala nje! Into yokuqala okufanele uyenze ukuhlala uzolile futhi ushintshe iphasiwedi yakho ngokushesha . Ungagxili nje kusayithi elithintekile; uma usebenzise leyo phasiwedi efanayo kwamanye amapulatifomu, kufanele uwashintshe wonke ngaphandle kokukhetha. Kunconywa kakhulu futhi ukuthi uphume kuzo zonke izikhathi ezisebenzayo ukuze uvimbele noma yibaphi abahlaseli ekutholeni ukufinyelela.
Ukuze kuvinjelwe lokhu kungenzeki futhi, ikhambi ukusebenzisa ukuqinisekiswa kwezinto ezimbili (2FA) . Ngale ndlela, noma ngabe umgebengu unephasiwedi yakho, uzodinga ikhodi ethunyelwe efonini yakho ephathekayo ukuze afinyelele. Ukuze ugweme inkinga yokubamba ngekhanda amaphasiwedi ayinkimbinkimbi, ikhambi elifanele ukusebenzisa umphathi wephasiwedi njenge-NordPass, i-1Password, noma i-Bitwarden, ekhiqiza amaphasiwedi aqinile futhi iwagcine ngendlela ebethelwe.
Indlela yokuklama iphasiwedi efana ne-bunker
Iphasiwedi evikelekile akuyona elula ukuyikhumbula, kodwa iyinto engenakwenzeka ukuthi umshini uyiqagele. Indinganiso yamanje incoma amaphasiwedi okungenani ayizinhlamvu ezingu-12 noma ezingu-14, ukuxuba izinhlamvu ezinkulu nezincane, izinombolo, kanye nezimpawu. Khohlwa ngokusebenzisa izinsuku zokuzalwa noma amagama ezilwane ezifuywayo; kungcono ukudala ukulandelana okungahleliwe okungaveli kunoma yisiphi isichazamazwi.
Kwabathuthukisi noma abasebenzisi bezobuchwepheshe, kunezindlela zokusebenzisa ezifana ne -Google Cloud reCAPTCHA Enterprise ezisebenzisa izitsha ze-Docker ukuqinisekisa iziqinisekiso zisebenzisa ama-hashe. Lolu hlelo luphephile kakhulu ngoba lusebenzisa umqondo we- k-Anonymity , luthumela ingxenye eyodwa kuphela ye-hash yephasiwedi kuseva, okuqinisekisa ukuthi ukhiye wangempela awuphumi kudivayisi yomsebenzisi.
Ukugcina ukuphepha kwedijithali kudinga umzamo oqhubekayo, kusukela ekusebenziseni amathuluzi okuqinisekisa njenge-HIBP kuya ekwamukeleni abaphathi ababalulekile kanye ne-MFA. Isihluthulelo silele ekungazethembi ngokungazi izinkampani ezigcina idatha yethu kanye nokusebenzisa indlela yokuthatha isinyathelo, ukushintsha amaphasiwedi njalo nokugwema ukusetshenziswa kabusha kweziqinisekiso ngazo zonke izindleko ukuze kuncishiswe umthelela wanoma yikuphi ukwephulwa kokuphepha okungenzeka.
