Ubumenyi shingiro / Munsi ya hood

Kugenzura inyubako

Gufungura isoko bifasha gusa niba code ukoresha ari code yari byatangajwe. Nymchat yubatswe muburyo bwihariye kugirango ubashe kugenzura ko wowe ubwawe, uhereye imbere porogaramu cyangwa kuva muri terminal.

Uru rupapuro rwahinduwe imashini kugirango byorohe. Umwimerere wicyongereza ni verisiyo ikoreshwa.

Imyororokere yubaka

Kubaka porogaramu bisohora a build-manifest.json ikubiyemo inkomoko yiyemeje, a SHA-256 hash kuri buri serivisi yatanzwe HTML, JavaScript na CSS, hamwe numwe bundleHash hejuru yumutungo wose washyizweho.

Ibisohoka biterwa gusa ninkomoko yibirimo - niyo byanditswe byubaka igihe ni kwiyemeza igihe cyagenwe aho kuba umwanya wubatswe - kuburyo umuntu wese yubaka kimwe kwiyemeza kubona byte-dosiye zisa kandi kimwe bundleHash.

Igikorwa cya GitHub noneho cyubaka buri cyemezo cyigenga kandi kigasinya kubaka-gihamye attestations kuri hash nibigaragara, nuko hariho inyandiko yasinywe ihuza a bundleHash kwiyemeza mububiko, byakozwe nibindi bitari i Kohereza.

Niki Kubyerekeye Ikiganiro Kugenzura

Ibyerekeye mumutwe uyobora cheque live, muri mushakisha yawe.

Irongera igarura buri mutungo page ikora mubyukuri, ikayihuza na Web Crypto API, na igereranya n'ibigaragara. Hanyuma - kandi iki nigice cyingenzi - ni isubiramo bundleHash Kuva ni kubarwa gusa, ntabwo biva ikintu icyo ari cyo cyose kigaragara gisaba, kandi kireba hejuru mububiko bwashyizweho umukono binyuze muri GitHub API.

Nibyo bihagarika gahunda yo kwiyemeza ubwayo: gukorera dosiye zahinduwe hamwe guhuza kugaragara birananirana, kuko hash hasubijwe hash nta attestation.

Kugenzura wenyine

Ongera wiyemeze kubyerekeye amazina y'ibiganiro hanyuma ugereranye:

git clone https://github.com/Spl0itable/NYM
cd NYM
git checkout <commit shown in the About dialog>
npm ci
npm run build   # prints "Build hash: <bundleHash>"

Icapiro hash igomba guhuza byombi mubijyanye na dialog hamwe nimwe mubyo wiyemeje kubaka-kwemeza gukora incamake. Urashobora kandi kugenzura umukono neza na GitHub CLI:

gh attestation verify dist/build-manifest.json --repo Spl0itable/NYM

Porogaramu za Android na iOS

Igenzura hejuru ni igenzura rya porogaramu, kandi impamvu irakwiriye kubivuga neza: porogaramu kavukire ntashobora gukora ikintu kimwe wenyine. Ikora kuri terefone yawe ni kode yimashini, ntabwo ari inkomoko mu bubiko, kandi nta kintu na kimwe porogaramu ishobora kubara ku gikoresho gifitanye isano na ikindi.

Android irashobora gukora ikintu cyiza gikurikira. Byashyizweho .apk ni dosiye porogaramu ishobora gusoma na hash, na hash ya buri cyasohotse cyasohotse ni rusange: gutangaza kuri Zapstore asinya ibirori bya Nostr bitwaye SHA-256 ya APK hamwe nicyemezo cyo gusinya SHA-256. Noneho Android Ibyerekeye Ikiganiro gifite APK ikora kuva, izana ibyasinywe ibyabaye, ibika gusa ibyasinywe nurufunguzo rwabatezimbere, kandi ugereranya. Irerekana byombi hashes nayo, urashobora rero gusubiramo kugenzura igikoresho: gukuramo APK yatangajwe, kora sha256sum kuri yo, kandi urebe ibyabaye wenyine.

Porogaramu yashyizwe muri Google Play ntishobora kugenzurwa muri ubu buryo, kandi ibyo ntibivuze ko hari ikibazo. Google isubiramo gusinya buri kintu cyose cyamanutse ikoresheje uruhushya rwayo bwite kandi ikora APK yihariye kuri buri kirango cy'icyuma, nuko icyo kugeza kuri telefoni yawe si wo mwandiko wasubijwe n'umuhanga (developer) kandi hashya (hash) rwayo ntuburangerana n'ikindi cyose cyashyirwa hanze. Iyi porogaramu menya ko yashyizwe muri telefoni binyuze muri Play Store kandi ikabivuga aho kuzobera ko hari ikibazo. Kugira ngo wigezaho kubigerageza, shyira muri telefoni yawe APK yashyizwe hanze mu buryo butaziguye.

iOS ntishobora kugenzurwa na gato. Apple irabika kandi ikongera gusinya buri gukuramo kugiti cye, rero hash yabazwe kuri iPhone yawe yihariye iPhone yawe kandi ntacyo ihuye byatangajwe ahantu hose. Ibyerekeye Ikiganiro kivuga neza aho kwerekana icyizere imiterere ntacyo ivuze. Niba ushaka Nymchat ushobora kugenzura kubikoresho bya Apple, koresha urubuga porogaramu, igenzura buri dosiye ikora.

Canary

Canary canary ni itangazo, ryatangajwe kuri gahunda ihamye, uwatezimbere afite ntabwo yakiriye itegeko rya leta rwihishwa babujijwe gutangaza - a Ibaruwa y’umutekano y’igihugu, itegeko rya FISA. Iterambere rirashobora guhatirwa guceceka kubyerekeye itegeko nkiryo, ariko ntirishobora guhatirwa kubeshya, kanari rero igenda ihagarara cyangwa izimira ni ubwacyo ikimenyetso.

Ituye canary.json ku mizi yububiko kandi izanwa mu buryo butaziguye kuva muri GitHub, amateka yacyo rero arasuzumwa atitaye kubyo urubuga rwoherejwe ruvuga. Ibyerekeye Ikiganiro Ibara-kode:

Icyuma gishya

Canary yashyizweho umukono ikubiyemo uburebure bwa Bitcoin ihagaritse hamwe na hash mugihe cyo gusinya. Iyo hash ntabwo yashoboraga kumenyekana mbere yuko blok ibaho, byerekana ko kanari yari yashyizweho umukono nyuma ingingo yihariye mugihe aho kubanza gusinywa mumezi menshi mbere. Ibyerekeye Ikiganiro gihuza inanga n'umushakashatsi uhagarika kugirango ubashe kugenzura.