- Ukubethela kusukela ekuqaleni kuze kube sekupheleni kusetshenziswa iphrothokholi yesignali ukuqinisekisa ubumfihlo obuphelele.
- Yakhiwe yinhlangano engenzi nzuzo futhi isekelwe kukhodi yomthombo ovulekile.
- Ukuqoqwa kwemethadatha okuncane uma kuqhathaniswa nezinye izindlela zokuhweba.
- Izici ezithuthukisiwe njengemiyalezo yesikhashana kanye nokuphathwa kobunikazi kusetshenziswa amagama abasebenzisi.
Uma wake wazizwa ubukwa ngenkathi uxoxa noma ukhathazekile ngedatha yakho yomuntu siqu egcina isezandleni zabakhangisi, kungenzeka ukuthi uke wezwa ngeSignal. Leli thuluzi akuyona uhlelo lwakho lokusebenza olujwayelekile lokuthumela imiyalezo olutholakala yonke indawo; seliyindinganiso yegolide yobumfihlo kulabo abangathembi izinkampani ezinkulu zobuchwepheshe.
Nakuba ingase ingabi nabasebenzisi abaningi be-WhatsApp, i-Signal iyindlela ekhethwa kakhulu ochwepheshe bezokuphepha kanye nezishoshovu. Akukhona nje ukuthumela imiyalezo, kodwa ukwenza kanjalo endaweni eyimfihlo kakhulu lapho ngisho nabadali bohlelo lokusebenza bengakwazi ukufunda lokho okubhalayo noma ukulalela izingcingo zakho.
Iyini ngempela iSignali futhi ivelaphi?
I-Signal empeleni iyipulatifomu yokuthumela imiyalezo esheshayo yamahhala ebeka phambili ukuphepha ngaphezu kwakho konke okunye. Umlando wayo uyathakazelisa impela, njengoba yadalwa nguMoxie Marlinspike noStuart Anderson nge-Whisper Systems. Ekuqaleni yayaziwa ngokuthi i-TextSecure yemiyalezo kanye ne-RedPhone yezingcingo, lezi zici zahlanganiswa zaba uhlelo lokusebenza olulodwa ngo-2015 ngaphansi kwegama esilaziyo namuhla.
Isici esiyinhloko ekukhuleni kwayo udumo kwakuyisincomo sika- Edward Snowden , owathi kwakuyi-app ayeyisebenzisa mathupha ukuxhumana. Ngaphezu kwalokho, ukukhula kwayo kwanda kakhulu ngesikhathi sokungezwani kwezepolitiki emhlabeni wonke, lapho abantu beqala ukufuna indawo yokukhosela ekuqapheni nasekuvinjelweni kukahulumeni.
Ngokungafani nezinye izinkampani, iSignal iphethwe yiSignal Foundation , inhlangano engenzi nzuzo engu-501(c)(3). Lokhu kusho ukuthi abanabanikazi bamasheya abangacindezela noma idatha ukuthi bayithengise; basekelwa yiminikelo kanye nokusekelwa kwabantu abanjengoBrian Acton, umsunguli we-WhatsApp, owanikela ngezigidi zamaRandi ukuqinisekisa ukuthi uhlelo lokusebenza luhlala luzimele.
Ubuchwepheshe obusekela ukubethela: I-Signal Protocol
Okwenza lolu hlelo lokusebenza luhlonishwe kangaka yinjini yalo yobuchwepheshe. Lusebenzisa ukubethela kusukela ekuqaleni kuya ekugcineni (E2EE), okusho ukuthi umlayezo ukhiyiwe efonini yakho futhi uvuliwe kuphela kowamukelayo. Le Signal Protocol iqinile kangangokuthi ngisho ne-WhatsApp isiyisebenzisile ngendlela yayo yokwakha.
Ukuze kufinyelelwe leli zinga lokuphepha, kuncike ezinsikeni ezintathu eziyisisekelo:
- I-X3DH (i-Extended Triple Diffie-Hellman): Ivumela abantu ababili ukuthi basungule ukhiye oyimfihlo owabiwe ngaphandle kokuthi iseva yesignali iqaphele. Muva nje ibuyekezwe ku-PQXDH ukuze imelane ne-quantum computing.
- I-Double Ratchet: Le algorithm ibangela ukuthi okhiye bokubethela bashintshe njalo. Ngakho-ke, uma umuntu ekwazi ukususa ukubethela umlayezo, ngeke akwazi ukusebenzisa lolo lwazi ukufunda imiyalezo yangaphambilini noma elandelayo, okuqinisekisa ukuthi imfihlo ephelele phambili.
- Isesame: Inesibopho sokuphatha izikhathi kumadivayisi amaningi nokuqinisekisa ukuthi imiyalezo ifika ngokuhlelekile, noma ngabe kunezinkinga zokuxhumeka.
Ngaphezu kwalokho, i-Signal iyisofthiwe yomthombo ovulekile . Lokhu kusho ukuthi noma yimuphi umhleli wezinhlelo emhlabeni angabuyekeza ikhodi ku-GitHub ukuqinisekisa ukuthi azikho izithiyo noma ubuthakathaka. Lokhu kucaca yikho okwakha ukwethembana emphakathini wezobuchwepheshe.
Izici eziyinhloko nokusebenza
Uma wazi ukuthi ungayisebenzisa kanjani i-WhatsApp, ngeke ube nenkinga yokuqalisa nge-Signal. Kuyaqondakala kakhulu: ubhalisa ngenombolo yakho yocingo, usethe iphrofayela yakho, bese uqala ukuxoxa. Kodwa-ke, inikeza izinketho ezidlula izinto eziyisisekelo, njengekhono lokufiphaza ubuso bakho ezithombeni ngaphambi kokuzithumela ukuze wengeze ungqimba olwengeziwe lokungaziwa.
Phakathi kwemisebenzi yayo ephawuleka kakhulu sithola:
- Imilayezo ye-Ephemeral: Ungalungiselela ukuzibhubhisa kwezingxoxo kusukela kumasekhondi angu-5 kuya kwesonto elilodwa.
- Izingcingo namakholi wevidiyo: Ibethelwe ngokuphelele futhi inokusekelwa kwamaqembu abantu abangafika ku-50.
- Izingxoxo zeqembu elikhulu: Isekela amalungu afinyelela ku-1.000 ngezilawuli zokuphatha ezinemininingwane.
- Izindaba: Okuqukethwe okubonakalayo okunyamalala ngemva kwamahora angu-24, ngezilungiselelo eziqinile zokuthi ubani ongakubona.
Ukuze uvikele ukufinyelela okungokoqobo efonini ephathekayo, uhlelo lokusebenza lukuvumela ukuthi usethe i -PIN yokuphepha bese ukhiya uhlelo lokusebenza usebenzisa iminwe noma ukuqashelwa kobuso, ukuvimbela othile othatha ifoni yakho ukuthi ingafinyeleli ezingxoxweni zakho.
Ukuqhathanisa: Isignali vs. ezinye iziqhwaga
Abantu abaningi bayazibuza ukuthi kungani bengazihluphi ngokushintsha izinhlelo zokusebenza uma sebevele benayo i-WhatsApp noma i-Telegram. Impendulo emfushane ukuphathwa kwe-metadata . Ngenkathi i-WhatsApp (ephethwe yi-Meta) ikwazi ukuthi ukhuluma nobani, nini, futhi isikhathi esingakanani, i-Signal ayigcini lutho. Njengoba kuboniswe enkantolo, bagcina kuphela usuku lokubhalisa kanye nesikhathi sokugcina u-inthanethi.
Uma kuqhathaniswa ne-SMS yendabuko, umehluko mkhulu kakhulu. Imiyalezo ye-SMS empeleni iyincwadi evulekile engafunda noma yimuphi umqhubi noma i-ejensi kahulumeni. Ngakolunye uhlangothi, i-Signal iguqula ukuxhumana kube umhubhe ophephile.
Uma siqhathanisa iSignal neThreema, sibona ukuthi lesi sakamuva sibi kakhulu ngokungadingi inombolo yocingo ukuze ubhalise. Kodwa-ke, iSignal iyaphumelela ngokusebenza ngenxa yesibalo sayo esikhulu sabasebenzisi uma siqhathaniswa neThreema, okwenza kube lula ukuthi oxhumana nabo bashintshele epulatifomu.
Ezinye izinto ezingaqondakali kanye nokukhathazeka ngokuphepha
Akuzona zonke izinto eziphelele, futhi kunezinye izinto abasebenzisi abathuthukile abavame ukuzixoxa. Isibonelo, ukuthembela ku- Amazon Web Services (AWS) ukuthi ibambe ingqalasizinda yayo kungaba yingozi ecatshangelwayo uma uhulumeni wase-US enquma ukuthatha amaseva, yize ukubethela kuvikela okuqukethwe yimilayezo.
Kube nokukhulunywa ngama-enclave e-Intel SGX, asetshenziswa yi-Signal ukuvumela abasebenzisi ukuthola oxhumana nabo ngaphandle kokuba inkampani ikwazi ukufinyelela incwadi yamakheli. Nakuba kusebenza kahle, abanye ochwepheshe bakhomba ukuthi ukuhlaselwa kweziteshi eziseceleni kungalimaza imethadatha ethile.
Ekugcineni, isenzakalo se-Signalgate sabonisa ukuthi ubuchwepheshe bungaphelela, kodwa abantu abaphelele. Lapho intatheli igcina iyingxenye yeqembu lezokuphepha lesizwe lase-US, kwakungengenxa yephutha lohlelo lokusebenza, kodwa kwakungenxa yephutha lomuntu ekumemeni umuntu ongafanele. Lokhu kusikhumbuza ukuthi ukuphepha kuncike kakhulu kusofthiwe njengoba kunjalo nangomqondo ojwayelekile.
Lolu hlelo lokusebenza luhlala luyindlela elinganiselayo kakhulu kulabo abafuna imiyalezo enamandla ngaphandle kokudela ubumfihlo babo, luvimbela impilo yangasese ukuthi ibe yimpahla yabakhangisi ngenxa yemodeli yalo engenzi nzuzo kanye nokwakheka okusobala.