Isisekelo solwazi Ngaphansi kwesigqoko

Ukuqinisekisa isakhiwo

Umthombo ovulekile usiza kuphela uma ikhodi oyisebenzisayo kuyikhodi ebikade ikhona eshicilelwe. I-Nymchat yakhiwe ngokunqunywa ukuze ukwazi ukuzihlolela ngokwakho, ngaphakathi uhlelo lokusebenza noma kutheminali.

Leli khasi lihunyushwe ngomshini ukuze kube lula. IsiNgisi sangempela inguqulo esebenzayo.

Ukwakhiwa kabusha

Ukwakha uhlelo lokusebenza kukhipha a build-manifest.json equkethe ukuzibophezela komthombo, a I-SHA-256 hash yayo yonke i-HTML enikeziwe, i-JavaScript ne-CSS, kanye neyodwa bundleHash phezu kwaleyo mpahla yonke.

Okukhiphayo kuncike kuphela kokuqukethwe komthombo - ngisho nesikhathi sokwakha esirekhodiwe yisona isitembu sesikhathi sika-commit kunesikhathi okwaqala ngaso ukwakha - ngakho-ke noma ubani owakha kabusha okufanayo commit ithola amafayela afanayo nge-byte futhi okufanayo bundleHash.

Isenzo se-GitHub sibe sesiphinda sakha kabusha ukuzibophezela ngakunye ngokuzimela futhi sisayine ubufakazi bokwakha ubufakazi be-hashi ne-manifest, ngakho-ke kukhona irekhodi esayiniwe elihlanganisa a bundleHash ukuzibophezela endaweni yokugcina, ekhiqizwe enye into ngaphandle kwe- ukuthunyelwa.

Okuhlolwayo ibhokisi elithi Mayelana

Mayelana kunhlokweni kuqhuba isheke bukhoma, esipheqululini sakho.

Ingxoxo ye-Nymchat Mayelana, ebonisa inguqulo, yakha ubuqotho kanye nesimo se-canary eqinisekisayo. — Ingxoxo ethi Mayelana: inguqulo, yakha ubuqotho, i-warrant canary kanye nomugqa oqondile oya kunjiniyela.

Iphinda ilande impahla ngayinye ikhasi elisebenza ngayo, isheshise nge-Web Crypto API, kanye kuqhathaniswa ne-manifest. Bese - futhi lena yingxenye ebalulekile - yona ubala kabusha i bundleHash kusukela emahhashi yona kubalwe nje, hhayi kusukela noma yini efunwa yi-manifest, futhi ibheka lokho kubufakazi obusayiniwe benqolobane ngokusebenzisa i-GitHub API.

Yilokho okuvimba ukuthunyelwa ekuziqinisekiseni ngokwako: ukusebenzisa amafayela aguquliwe kanye i-manifest efanayo isahluleka, ngoba i-hash eyenziwe kabusha ayinabo ubufakazi.

Isimo	Kusho
&hlola; Uhlelo lokusebenza olusemthethweni oluqinisekisiwe (n/n)	Yonke impahla ifana, ihashi lenqwaba elenziwe kabusha lifakazelwa yinqolobane, futhi ikhasi linikezwa kusuka esizindeni esisemthethweni.
⚠ Isakhiwo esiqinisekisiwe · hhayi uhlelo lokusebenza olusemthethweni	Ikhodi iyiqiniso futhi ifakazelwe, kodwa lesi yisibuko kwesinye isizinda. Isibuko asikwazi ukususa lesi sexwayiso ngaphandle kokuqinisekisa okuhlulekayo.
✗ Ukungafani	Impahla ayisheshi kulokho okushiwo yi-manifest.
✗ Ukwakhiwa okungagunyaziwe	I-hashi yenqwaba ehlanganisiwe ayinabo ubufakazi obusuka endaweni yokugcina - i-manifest ezenzele yona.
⚠ Ukwakheka akufinyeleleki	I-GitHub API ayikwazanga ukufinyelelwa, ngakho-ke ubufakazi abukwazanga ukubhekwa noma ngayiphi indlela.

Ukuziqinisekisa ngokwakho

Yakha kabusha amagama engxoxo ye-About bese uqhathanisa:

git clone https://github.com/Spl0itable/NYM
cd NYM
git checkout <commit shown in the About dialog>
npm ci
npm run build   # prints "Build hash: <bundleHash>"

I-hashi ephrintiwe kufanele ifane kokubili okukungxoxo ye-About kanye naleyo ekuleso sibopho ukwakha-provenance run summary. Ungabheka futhi isiginesha ngqo nge-GitHub CLI:

gh attestation verify dist/build-manifest.json --repo Spl0itable/NYM

I-warrant canary

I-warrant canary yisitatimende, esishicilelwe ohlelweni olumisiwe, unjiniyela analo hhayi bathole umyalelo kahulumeni oyimfihlo abanqatshelwe ukudalula - a Incwadi Yezokuphepha Kazwelonke, i-oda le-FISA. Umthuthukisi angaphoqeleka ukuthi athule mayelana umyalo onjalo, kodwa awukwazi ukuphoqelelwa ukuba uqambe amanga, ngakho-ke i-canary idala noma inyamalala ngokwayo isignali.

Ihlala phakathi canary.json empandeni yenqolobane futhi ilandwa ngokuqondile kusuka ku-GitHub, ngakho-ke umlando wayo ungacwaningwa ngokuzimela kunoma yini eshiwo isiza esisetshenzisiwe. Ibhokisi lombala lebhokisi elimayelana nalo liyayikhodi:

Umbala	Kusho
Okuhlaza - konke kucacile	Okusayiniwe, okwamanje, kanye nesiginesha kufana nokhiye wonjiniyela. Awukho umyalo oyimfihlo owamukelwe.
Okuphuzi - sekwephuzile, noma akucacile konke	Ayizange ivuselelwe ngosuku lwayo olushiwo, noma lwayo `allClear` ifulege lingamanga. Umyalelo othulisiwe awukwazi ukukhishwa.
Okubomvu - isiginesha engavumelekile, noma ihambile	Isiginesha ayifani nokhiye kanjiniyela, noma ifayela likhishwe ngokuphelele. Phatha lokhu njengesixwayiso esibucayi.

Ihange elisha

I-canary esayiniwe ishumeka ukuphakama kwebhulokhi ye-Bitcoin yakamuva kanye ne-hashi ngesikhathi sokusayina. Leyo hashi yayingeke yaziwe ngaphambi kokuba kube khona ibhulokhi, okufakazela ukuthi i-canary yayikhona kusayiniwe ngemva iphoyinti elithile ngesikhathi kunokuba usayine kusengaphambili ngenqwaba ezinyangeni ngaphambili. Ibhokisi elithi Mayelana lixhumanisa ihange kusihloli esivimbayo ukuze usihlole.