Jya ku bikubiyemo
Subira kuri Nymchat

Ubumenyi shingiro Munsi ya hood

Kugenzura inyubako

Gufungura isoko bifasha gusa niba code ukoresha ari code yari byatangajwe. Nymchat yubatswe muburyo bwihariye kugirango ubashe kugenzura ko wowe ubwawe, uhereye imbere porogaramu cyangwa kuva muri terminal.

Imyororokere yubaka

Kubaka porogaramu bisohora a build-manifest.json ikubiyemo inkomoko yiyemeje, a SHA-256 hash kuri buri serivisi yatanzwe HTML, JavaScript na CSS, hamwe numwe bundleHash hejuru yumutungo wose washyizweho.

Ibisohoka biterwa gusa ninkomoko yibirimo - niyo byanditswe byubaka igihe ni kwiyemeza igihe cyagenwe aho kuba umwanya wubatswe - kuburyo umuntu wese yubaka kimwe kwiyemeza kubona byte-dosiye zisa kandi kimwe bundleHash.

Igikorwa cya GitHub noneho cyubaka buri cyemezo cyigenga kandi kigasinya kubaka-gihamye attestations kuri hash nibigaragara, nuko hariho inyandiko yasinywe ihuza a bundleHash kwiyemeza mububiko, byakozwe nibindi bitari i Kohereza.

Niki Kubyerekeye Ikiganiro Kugenzura

Ibyerekeye mumutwe uyobora cheque live, muri mushakisha yawe.

Nymchat Kubijyanye n'ikiganiro, yerekana verisiyo, kubaka ubunyangamugayo na warrant ya canary status.
Ibyerekeye Ikiganiro: verisiyo, kubaka ubunyangamugayo, warrant canary n'umurongo utaziguye kubateza imbere.

Irongera igarura buri mutungo page ikora mubyukuri, ikayihuza na Web Crypto API, na igereranya n'ibigaragara. Hanyuma - kandi iki nigice cyingenzi - ni isubiramo bundleHash Kuva ni kubarwa gusa, ntabwo biva ikintu icyo ari cyo cyose kigaragara gisaba, kandi kireba hejuru mububiko bwashyizweho umukono binyuze muri GitHub API.

Nibyo bihagarika gahunda yo kwiyemeza ubwayo: gukorera dosiye zahinduwe hamwe guhuza kugaragara birananirana, kuko hash hasubijwe hash nta attestation.

ImiterereIbisobanuro
& kugenzura; Porogaramu yemewe (n / n)Buri mutungo uhuye, bundle yongeye kubarwa hash ihamijwe nububiko, na urupapuro rutangwa kuva kumurongo wemewe.
Yubatswe neza · ntabwo ari porogaramu yemeweKode nukuri kandi iremejwe, ariko iyi ni indorerwamo kurundi rwego. Indorerwamo ntishobora gukuraho iyi miburo itabanje kugenzurwa.
GuhuzaUmutungo ntushisha kubyo manifeste ivuga.
Build Kubaka bitemeweBundle yongeye kubarwa hash nta gihamya iva mububiko - kwigaragaza wenyine.
⚠ Amafaranga atagerwahoGitHub API ntishobora kugerwaho, bityo attestation ntishobora kugenzurwa muburyo bumwe.

Kugenzura wenyine

Ongera wiyemeze kubyerekeye amazina y'ibiganiro hanyuma ugereranye:

git clone https://github.com/Spl0itable/NYM
cd NYM
git checkout <commit shown in the About dialog>
npm ci
npm run build   # prints "Build hash: <bundleHash>"

Icapiro hash igomba guhuza byombi mubijyanye na dialog hamwe nimwe mubyo wiyemeje kubaka-kwemeza gukora incamake. Urashobora kandi kugenzura umukono neza na GitHub CLI:

gh attestation verify dist/build-manifest.json --repo Spl0itable/NYM

Canary

Canary canary ni itangazo, ryatangajwe kuri gahunda ihamye, uwatezimbere afite ntabwo yakiriye itegeko rya leta rwihishwa babujijwe gutangaza - a Ibaruwa y’umutekano y’igihugu, itegeko rya FISA. Iterambere rirashobora guhatirwa guceceka kubyerekeye itegeko nkiryo, ariko ntirishobora guhatirwa kubeshya, kanari rero igenda ihagarara cyangwa izimira ni ubwacyo ikimenyetso.

Ituye canary.json ku mizi yububiko kandi izanwa mu buryo butaziguye kuva muri GitHub, amateka yacyo rero arasuzumwa atitaye kubyo urubuga rwoherejwe ruvuga. Ibyerekeye Ikiganiro Ibara-kode:

IbaraIbisobanuro
Icyatsi - byose birasobanutseByasinywe, bigezweho, kandi umukono uhuye nurufunguzo rwabatezimbere. Nta tegeko ryibanga ryakiriwe.
Umuhondo - igihe cyarenze, cyangwa ntabwo byose bisobanutseNtabwo yigeze agarurwa nitariki yavuzwe, cyangwa iyayo allClear ibendera ni ibinyoma. Icyemezo cyacecetse ntigishobora kuvaho.
Umutuku - umukono utemewe, cyangwa wagiyeUmukono ntabwo uhuye nurufunguzo rwuwitezimbere, cyangwa dosiye yakuweho burundu. Fata nk'ikuburira rikomeye.

Icyuma gishya

Canary yashyizweho umukono ikubiyemo uburebure bwa Bitcoin ihagaritse hamwe na hash mugihe cyo gusinya. Iyo hash ntabwo yashoboraga kumenyekana mbere yuko blok ibaho, byerekana ko kanari yari yashyizweho umukono nyuma ingingo yihariye mugihe aho kubanza gusinywa mumezi menshi mbere. Ibyerekeye Ikiganiro gihuza inanga n'umushakashatsi uhagarika kugirango ubashe kugenzura.