Guest
Guest
Sep 16, 2026
12:35 AM
|
Bao mat B52Club: Kien truc phong thu nhieu lop va nhung gi nguoi choi can tu lam
Bao mat B52Club khong phai mot tinh nang don le duoc tick vao danh sach marketing, ma la mot chuoi kiem soat trai dai tu tang ha tang mang cho toi thoi quen go mat khau cua tung nguoi dung. Trong hon sau nam lam viec voi cac he thong giai tri truc tuyen tai thi truong dong Nam a, toi nhan ra mot dieu kha thu vi: phan lon su co mat tai khoan khong den tu viec nen tang bi hack, ma den tu viec nguoi dung bi lua lay ma OTP hoac dung lai mat khau cu o mot dien dan khac. Bai viet nay se mo xe Bao mat B52Club theo ca hai huong do, phia he thong va phia nguoi dung.
Lop nen: ma hoa duong truyen va luu tru
diem dau tien toi luon kiem tra o bat ky nen tang nao la chung chi va giao thuc truyen tai. B52Club hien dung TLS 1.3 voi chung chi EV, nghia la toan bo du lieu giua thiet bi nguoi dung va may chu duoc ma hoa theo kieu duong ham, ke dung giua trong cung mot mang Wi-Fi quan ca phe gan nhu khong the doc duoc noi dung goi tin. Phien ban TLS cu 1.0 va 1.1 da bi vo hieu hoa hoan toan tu giua nam 2022, day la chi tiet nho nhung quan trong vi nhung giao thuc cu ton tai lo hong BEAST va POODLE da duoc cong bo tu lau.
o tang luu tru, mat khau nguoi dung khong duoc luu dang van ban thuan ma bam bang bcrypt voi salt rieng cho tung tai khoan, cost factor dat o muc 12. Con so nay co y nghia thuc te: mot may GPU don le can khoang vai chuc nam de do het khong gian mat khau 8 ky tu hon hop neu chi tan cong brute force offline tren mot hash duy nhat. Du lieu giao dich nhay cam nhu so tai khoan ngan hang duoc ma hoa doi xung AES-256-GCM va tach khoi may chu ung dung, chi dich vu thanh toan noi bo moi co khoa giai ma.
Xac thuc hai lop va co che OTP
Bao mat B52Club dat xac thuc hai lop lam mac dinh, khong phai tuy chon an trong menu cai dat. Khi dang nhap tu thiet bi hoac dai IP chua tung xuat hien, he thong chen them mot buoc xac minh bang ma 6 chu so gui qua SMS hoac ung dung xac thuc TOTP. Ma co hieu luc 60 giay va chi dung duoc mot lan. Neu nhap sai qua 5 lan lien tiep, tai khoan bi tam khoa 15 phut va co email canh bao gui toi dia chi da dang ky.
Toi tung gap truong hop mot nguoi choi o Hai Phong bi mat 12 trieu dong chi vi doc ma OTP cho ke gia danh nhan vien ho tro qua Zalo. Ke do noi tai khoan dang bi treo, can ma de mo. Thuc te khong co bo phan ho tro nao cua bat ky nen tang hop le nao hoi OTP cua khach. day la quy tac bat di bat dich: ma OTP la chia khoa nha ban, khong dua cho ai, ke ca nguoi tu xung la quan tri vien.
Quan ly phien va phat hien thiet bi la
Mot chi tiet it duoc noi toi la vong doi cua phien dang nhap. Tren B52Club, phien mac dinh het han sau 30 phut khong hoat dong, hoac toi da 12 gio ke ca khi ban van dang thao tac. Moi lan dang nhap, he thong ghi lai dia chi IP, loai thiet bi, he dieu hanh va trinh duyet vao nhat ky hoat dong co the tra cuu trong 90 ngay gan nhat. Neu ban thay mot phien tu tinh thanh minh chua tung toi, do la dau hieu phai doi mat khau ngay lap tuc.
Tinh nang dang xuat khoi tat ca thiet bi cung nam ngay trong trang cai dat bao mat, khong bi chon duoi ba lop menu. Khi kich hoat, toan bo token phien tren cac thiet bi khac bi thu hoi trong vong vai giay. Voi nguoi dung hay dang nhap tren dien thoai cong cong hoac may tinh o quan net, day la cong cu phai dung truoc khi roi may.
Chong lua dao va ten mien gia mao
Phan lon cac vu chiem doat tai khoan trong linh vuc nay bat dau bang mot ten mien nhin gan giong ten mien that, sai mot ky tu hoac doi duoi tu .com sang .net. Nhung trang do sao chep giao dien gan nhu hoan hao, tham chi giu nguyen logo va mau sac, roi du nguoi dung nhap tai khoan mat khau. Cach phong thu hieu qua nhat van la luu dia chi chinh thuc vao bookmark va chi truy cap tu do, tuyet doi khong bam vao duong link gui qua tin nhan rieng hay binh luan tren mang xa hoi.
Bao mat B52Club cung ap dung nguyen tac khong bao gio yeu cau nguoi dung cung cap mat khau qua dien thoai, email hay chat. Neu ai do hoi, gan nhu chac chan la lua dao. Mot dau hieu nhan biet khac la cac trang gia mao thuong ep nguoi dung dang nhap ngay, khong co buoc xac thuc hai lop, vi chung khong kiem soat duoc he thong that nen danh bo qua buoc nay.
Quy trinh rut tien va vai tro cua xac minh danh tinh
o goc do van hanh, xac minh danh tinh hai mat la lop phong thu chong rua tien va chong chiem doat tai khoan. Khi nguoi dung yeu cau rut so tien vuot nguong nhat dinh, he thong yeu cau khop ten chu tai khoan ngan hang voi ten da dang ky. Neu ke gian co duoc mat khau nhung khong kiem soat tai khoan ngan hang cung ten, tien khong the chay ra ngoai. day la ly do vi sao viec giu kin thong tin ca nhan quan trong khong kem viec giu kin mat khau.
Thoi gian xu ly rut tien trung binh dao dong tu 5 den 30 phut tuy ngan hang va khung gio. Con so nay khong chi la van de tien loi; giao dich cang nhanh va cang it buoc thu cong thi cang it diem tiep xuc cho ke tan cong xa hoi xen vao giua.
Nhung sai lam pho bien cua nguoi dung
Sai lam so mot la dung cung mot mat khau cho tai khoan game va email. Khi mot dien dan nho bi ro ri co so du lieu, ke tan cong thu ngay to hop email va mat khau do tren hang chuc nen tang khac, ky thuat goi la credential stuffing. Ti le thanh cong cua cach nay cao dang ngac nhien, doi khi tren 20 phan tram neu mat khau yeu va nguoi dung luoi doi.
Sai lam thu hai la luu mat khau trong ghi chu dien thoai khong ma hoa hoac trong tin nhan tu gui cho chinh minh. dien thoai bi mat hoac bi cai phan mem theo doi la coi nhu mat tai khoan. Sai lam thu ba la dang nhap vao Wi-Fi cong cong khong mat khau roi thuc hien giao dich lon. Du TLS bao ve noi dung, ke tan cong van co the chay tan cong DNS gia de day ban sang trang phishing co chung chi tu ky.
Cach xay dung thoi quen bao mat ben vung
Mat khau tot nen dai it nhat 12 ky tu, tron chu hoa chu thuong, so va ky hieu, va khong chua ten nguoi hay ngay sinh. Nhung thanh that ma noi, khong ai nho noi muoi hai mat khau kieu do. Giai phap thuc te la dung trinh quan ly mat khau nhu Bitwarden, 1Password hoac KeePass, chi can nho mot mat khau chu duy nhat. Mot so trinh quan ly con co tinh nang kiem tra xem mat khau cua ban da xuat hien trong cac vu ro ri du lieu nao chua.
Voi OTP, ung dung xac thuc TOTP an toan hon SMS. Ly do rat cu the: SMS co the bi chan qua tan cong SIM swap, khi ke gian thuyet phuc nha mang cap lai SIM so cua ban. Ma TOTP sinh cuc bo tren thiet bi, khong di qua bat ky kenh vien thong nao, nen khong the bi chan giua duong.
Khi tai khoan co dau hieu bi xam nhap
Neu nghi ngo bi tan cong, thu tu hanh dong quan trong hon ca toc do. doi mat khau truoc, vi phien dang mo cua ke tan cong thuong bi vo hieu hoa khi mat khau thay doi. Sau do dang xuat toan bo thiet bi, kiem tra lai nhat ky dang nhap trong 90 ngay, roi lien he bo phan ho tro qua kenh chinh thuc de bao cao va dong bang giao dich neu can. dung dang bai trong cac hoi nhom mang xa hoi voi day du thong tin tai khoan, vi chinh nhung bai do la mo vang cho ke lua dao tiep theo.
Bao mat B52Club o tang he thong lam kha tot phan viec cua no voi TLS 1.3, bcrypt cost 12, hai lop xac thuc va nhat ky phien luu 90 ngay. Nhung khong co lop ma hoa nao cuu duoc nguoi tu doc ma OTP cho ke la. Ranh gioi giua an toan va mat trang nhieu khi chi la mot cu click vao duong link sai, hoac mot lan luoi doi mat khau da dung tu nam 2019. Giu thoi quen dung, kiem tra nhat ky dinh ky, va tuyet doi khong chia se ma xac thuc cho bat cu ai — do la toan bo cau chuyen, va no nam trong tay ban nhieu hon ban tuong.
|
To enhance your user experience on our website, this site uses cookies.
If you continue to browse, you accept the use of cookies on our site.
See our Privacy Policy
for more information.
