Codsiyada fariimaha ayaa ah kuwa ugu-haddii aysan ahayn kuwa^{(the )} ugu-badan-app-yada muhiimka ah ee aan isticmaalno maalin walba. Haddi ay tahay inaad la xidhiidho qoyska iyo asxaabta aduunka oo dhan, la xidhiidh asxaabtaada, ama socodsiiso hawlaha ganacsiga, fariimaha abka sida WhatsApp , iMessage , Skype iyo Facebook Messenger ayaa qayb muhiim ah ka ciyaara wada xidhiidhka maalinlaha ah.

Waxaan inta badan wadaagnaa waxyaabo ay ka mid yihiin sawiro shaqsiyeed, sirta ganacsiga iyo dukumeentiyada sharciga ah ee apps-ka fariimaha lagu diro, macluumaadka aynaan doonayn in ay helaan dadka khaldan. Laakiin ilaa intee ayaan ku aamini karnaa abkaaga fariimaha si ay u ilaaliyaan dhammaan fariimahayaga sirta ah iyo macluumaadka xasaasiga ah?

Kuwa soo socda waa qaar ka mid ah tilmaamaha kaa caawin doona inaad qiimeyso heerka amniga ee fariimaha aad jeceshahay ku siin doono.

Kelmado kooban oo ku saabsan sirta

Dabcan, dhammaan goobaha fariimaha la isku diro waxay qirtaan inay sirayaan xogtaada^{(encrypt your data)} . Sirintu waxay isticmaashaa isla'egyada xisaabta si ay u xoqdo xogtaada xilliga kala guurka si ay uga hortagto dhageystayaasha inay awoodaan inay akhriyaan fariimahaaga.

Sirta saxda ah waxay hubisaa in kaliya soo diraha iyo qaataha fariinta ay ogaan doonaan waxa ku jira. Si kastaba ha ahaatee dhammaan noocyada sirta looma wada sinna.

Barnaamijyada fariimaha ugu ammaansan waa kuwa bixiya sirta dhamaadka-ilaa-dhamaadka (E2EE)^{(end-to-end encryption (E2EE))} . Barnaamijyada E2EE waxay^(E2EE) ku kaydiyaan furayaasha furaha aaladaha isticmaaleyaasha oo keliya. E2EE kaliya kama ilaaliso isgaarsiintaada kuwa dhagaha dhagaha ah, laakiin sidoo kale waxay hubisaa in shirkada martigelinaysa codsiga aysan awoodi doonin inay akhrido fariimahaaga. Tani waxay sidoo kale ka dhigan tahay in fariimahaaga laga ilaalin doono jebinta xogta iyo dammaanad-qaadista wakaalado saddex xaraf ah.

Codsiyada fariimaha oo aad iyo aad u badan ayaa bixinaya sirta dhamaadka-ilaa-dhamaadka. Signal wuxuu ahaa mid ka mid ah aaladaha ugu horreeya ee taageera E2EE . Sanadihii la soo dhaafay, codsiyada kale waxay qaateen nidaamka sirta ah ee Signal ama waxay sameeyeen tignoolajiyada E2EE iyaga u gaar ah. Tusaalooyinka^(Examples) waxaa ka mid ah WhatsApp , Wickr iyo iMessage.

Facebook Messenger iyo Telegram sidoo kale waxay taageeraan fariimaha E2EE , in kasta oo aan la awoodin si toos ah, taas oo ka dhigaysa ammaankooda. Skype sidoo kale waxay ku dartay ikhtiyaarka "Wadahadalka Gaarka ah" dhawaan kaas oo ku siinaya sir dhamaadka-ilaa-dhamaadka hal wadahadal oo aad dooratay.

Google's Hangouts ma taageerto sirta dhamaadka-ilaa-dhamaadka, laakiin shirkadu waxay bixisa Allo iyo Duo , fariimaha qoraalka ah iyo barnaamijyada shirarka fiidyowga kuwaas oo ah dhamaadka-ilaa-dhamaadka sir.

Tirtiridda Fariinta

Waxaa jira wax ka badan oo amniga ku saabsan oo aan ahayn siraynta fariimaha. Ka warran haddii qalabkaaga ama qalabka qofka aad la sheekaysanayso la jabsado ama uu galo gacmo qaldan? Xaaladdaas, sirtu waxay noqon doontaa faa'iido yar, sababtoo ah jilaaga xaasidnimada ah wuxuu awoodi doonaa inuu arko fariimaha qaabkooda aan qarsoodi ahayn.

Sida ugu fiican ee aad fariimahaaga u ilaalin karto waa in aad ka takhalusto marka aanad u baahnayn. Tani waxay hubinaysaa in xitaa haddii qalabkaagu uu xumaado, jilayaasha xaasidnimada leh ma heli doonaan fariimahaaga qarsoodiga ah iyo kuwa xasaasiga ah.

Dhammaan abka fariimaha ayaa bixiya nooc ka mid ah fariinta tirtirka, laakiin mar labaad, dhammaan sifooyinka saarista fariimaha si isku mid ah ammaan uma aha.

Tusaale ahaan, Hangouts iyo iMessage waxay awood kuu siinayaan inaad tirtirto taariikhdaada sheekaysiga. Laakiin inta fariimaha laga saarayo qalabkaaga, waxay ku sii jirayaan aaladaha dadka aad la sheekaysatay.

Sidaa darteed, haddii qalabkoodu uu xumaado, waxaad weli waayi doontaa xogtaada xasaasiga ah. Mahadsaniddeeda , Hangouts waxay haysataa ikhtiyaar ay ku baabi'iso taariikhda sheekaysiga, taas oo si toos ah uga saari doonta dhammaan fariimaha ka dib fadhi kasta.

Gudaha Telegram , Signal , Wickr iyo Skype , waxaad tirtiri kartaa fariimaha dhammaan dhinacyada wada hadalka. Tani waxay hubin kartaa in isgaarsiinta xasaasiga ah aysan ku sii jirin mid ka mid ah aaladaha ku lug leh wada hadalka.

WhatsApp ayaa sidoo kale ku dartay ikhtiyaarka "Delete for all" 2017, laakiin waxaad u isticmaali kartaa inaad tirtirto kaliya fariimaha aad dirtay 13-kii saac ee la soo dhaafay. Facebook Messenger sidoo kale wuxuu ku daray muuqaal "aan la soo dirin" dhawaan, in kasta oo ay shaqeyso kaliya 10 daqiiqo ka dib markaad dirto fariin.

Signal , Telegram iyo Wickr ayaa sidoo kale bixiya fariin is-burburin ah, taas oo isla markiiba ka saari doonta farriimaha dhammaan qalabka ka dib markii la habeeyey wakhti wakhti ah. Habkani wuxuu si gaar ah ugu fiican yahay sheekeysiga xasaasiga ah, wuxuuna kaa badbaadinayaa dadaalka gacanta lagu masaxo fariimaha.

Xogta badan

Farriin kastaa waxay la socotaa qadar macluumaad kaabayaal ah, oo sidoo kale loo yaqaano metadata, sida diraha iyo aqoonsiga^(IDs) qaataha , wakhtiga fariinta la diray, la helay oo la akhriyay, cinwaanada IP, lambarada taleefanka, aqoonsiga^(IDs) aaladda , iwm.

Seerfarrada fariimaha ayaa kaydiya oo habeeya macluumaadka noocaas ah si loo hubiyo in fariimaha la gaarsiiyo qaataha saxda ah iyo wakhtiga loogu talagalay iyo si ay awood ugu siiso isticmaalayaasha inay baadho oo habeeyaan diiwaankooda sheekeysiga.

In kasta oo xogta badan aysan ku jirin qoraalka fariinta, gacmaha khaldan, waxay noqon kartaa mid aad u dhib badan waxayna muujin kartaa wax badan oo ku saabsan hababka isgaarsiinta isticmaalayaasha sida goobta juqraafi ahaan, waqtiyada ay isticmaalaan apps-kooda, dadka ay la xiriiraan, iwm.

Haddii ay dhacdo in adeegga farriimaha uu dhibbane u noqdo jebinta xogta, macluumaadka noocan ah waxa ay u gogol xaarayaan weerarrada internetka sida phishing iyo nidaamyada kale ee injineernimada bulshada.

Inta badan adeegyada fariimaha waxay ururiyaan hanti badan oo xog badan ah, nasiib darrose, ma jirto hab la hubo oo lagu ogaado nooca adeegyada fariimaha macluumaadka kaydiya. Laakiin waxa aan ognahay, Signal ayaa leh rikoorka raadraaca ugu fiican. Sida laga soo xigtay shirkadu, Server-keedu waxa ay diwaan galiyaan oo kaliya lambarka teleefoonka aad ku samaysatay akoonkaaga iyo taariikhda ugu dambaysa ee aad akoonkaaga gasho.

Hufnaan

Horumariye kasta ayaa kuu sheegi doona in abka farimahoodu uu badbaado yahay, laakiin sidee baad u hubin kartaa? Sideed ku ogaataa in appku aanu qarinayn albaab danbe oo ay dawladdu ku beeratay? Sideed ku ogaanaysaa in horumariyuhu uu shaqo fiican ka qabtay tijaabinta codsiga?

Codsiyada ayaa ka dhigaya koodhka isha codsigooda mid si guud loo heli karo, oo sidoo kale loo yaqaan “ilo furan,” ayaa ah kuwa la isku halayn karo sababtoo ah khubarada amniga madaxa banaan ayaa baadhi kara oo xaqiijin kara inay ammaan yihiin iyo in kale.

Signal , Wickr iyo Telegram waa barnaamijyo farimo il-furan, taas oo macnaheedu yahay in khubaro madax-banaani ay dib u eegeen. Sigaarku^(Signal) wuxuu si gaar ah u haystaa taageerada khubarada amniga sida Bruce Schneier iyo Edward Snowden .

WhatsApp iyo Facebook Messenger waa ilo-xiran, laakiin waxay adeegsadaan habka isha furan ee borotokoolka^{(Signal Protocol)} si ay u xafidaan fariimahooda. Tani waxay ka dhigan tahay in aad ugu yaraan ku nasan karto in Facebook , oo leh labada apps, ma eegayo nuxurka fariimahaaga.

Codsiyada isha si buuxda u xiran sida iMessage-ka Apple, waa inaad si buuxda u aamintaa horumariyaha si aad uga fogaato samaynta khaladaad amni oo xun.

Si loo caddeeyo, il-furan macnaheedu maaha ammaan buuxa. Laakiin ugu yaraan waxaad hubin kartaa in appku aanu qarinayn wax xun oo daboolka hoostiisa ah.

Is Your Messaging App Really Secure?

Messaging applications are one of the most—if not the most—important apps that we use every day. Whether it’s to stay in touch with family and friends across the world, contact coworkers, or run business operations, messaging apps like WhatsApp, iMessage, Skype and Facebook Messenger play an important part in our daily communications.

We often share things such as personal pictures, business secrets and legal documents on messaging apps, information that we don’t want to make available to the wrong people. But how far can we trust your messaging apps to protect all our confidential messages and sensitive information?

Following are some guidelines that will help you assess the level of security that your favorite messaging app will provide.

A Few Words on Encryption

Of course, all messaging platforms profess to encrypt your data. Encryption uses mathematical equations to scramble your data in transition to prevent eavesdroppers from being able to read your messages.

Proper encryption makes sure that only the sender and the recipient of a message will be aware of its content. However not all types of encryption are made equal.

The most secure messaging apps are those that offer end-to-end encryption (E2EE). E2EE apps store decryption keys on users’ devices only. E2EE not only protects your communications against eavesdroppers, but also makes sure that the company that hosts the application won’t be able to read your messages. This also means that your messages will be protected against data breaches and intrusive warrants by three-letter agencies.

More and more messaging applications are providing end-to-end encryption. Signal was one of the first platforms to support E2EE. In recent years, other applications have adopted Signal’s encryption protocol or have developed their own E2EE technology. Examples include WhatsApp, Wickr and iMessage.

Facebook Messenger and Telegram also support E2EE messaging, though it’s not enabled by default, which makes them less secure. Skype also added a “Private Conversation” option recently which gives you end-to-end encryption on one conversation of your choice.

Google’s Hangouts does not support end-to-end encryption, but the company provides Allo and Duo, text messaging and video conferencing apps that are end-to-end encrypted.

Message Deletion

There’s more to security than just encrypting messages. What if your device or the device of the person you’re chatting with gets hacked or falls into the wrong hands? In that case, encryption will be of little use, because the malicious actor will be able to see messages in their unencrypted format.

The best way to protect your messages is to get rid of them when you don’t need them anymore. This makes sure that even if your device becomes compromised, malicious actors won’t get access to your confidential and sensitive messages.

All messaging apps provide some form of message deletion, but again, not all message removal features are equally secure.

For instance, Hangouts and iMessage enable you to clear your chat history. But while messages will be removed from your device, they will remain on the devices of the people you have been chatting with.

Therefore, if their devices become compromised, you’ll still lose hold of your sensitive data. To its credit, Hangouts has an option to disable chat history, which will automatically remove messages from all devices after each session.

In Telegram, Signal, Wickr and Skype, you can delete messages for all parties to a conversation. This can make sure that sensitive communications don’t remain in any of the devices involved in a conversation.

WhatsApp also added a “delete for everyone” option in 2017, but you can use it to delete only those messages you’ve sent within the last 13 hours. Facebook Messenger also added an “unsend” feature very recently, though it only works for 10 minutes after you send a message.

Signal, Telegram and Wickr also provide a self-destructing message feature, which will immediately remove messages from all devices after a configured period of time passes. This feature is especially good for sensitive conversations, and saves you the effort of manually wiping messages.

Metadata

Every message comes with an amount of auxiliary information, also known as metadata, such as sender and receiver IDs, the time a message was sent, received and read, IP addresses, phone numbers, device IDs, etc.

Messaging servers store and process that kind of information to make sure messages are delivered to the right recipients and on time and to enable users to browse and organize their chat logs.

While metadata doesn’t contain message text, in the wrong hands, it can be very harmful and reveal a lot about users’ communication patterns such as their geographical location, the times they use their apps, the people they communicate with, etc.

In case the messaging service falls victim to a data breach, this kind of information can pave the way for cyberattacks such as phishing and other social engineering schemes.

Most messaging services collect a wealth of metadata and unfortunately, there’s no sure way to know what type of information messaging services store. But from what we know, Signal has the best track record. According to the company, its servers only register the phone number with which you created your account and the last date you logged in to your account.

Transparency

Every developer will tell you their messaging app is secure, but how can you be sure? How do you know the app is not hiding a government-implanted backdoor? How do you know the developer has done a good job at testing the application?

Applications make the source code of their application publicly available, also known as “open-source,” are more reliable because independent security experts can examine and confirm whether they’re secure or not.

Signal, Wickr and Telegram are open-source messaging apps, which means they have been peer-reviewed by independent experts. Signal in particular has the support of security experts such as Bruce Schneier and Edward Snowden.

WhatsApp and Facebook Messenger are closed-source, but they use the open-source Signal Protocol to encrypt their messages. This means that you can at least rest assured that Facebook, which owns both apps, won’t be looking into the content of your messages.

For fully closed-source applications such as Apple’s iMessage, you must fully trust the developer to avoid making disastrous security mistakes.

To be clear, open-source doesn’t mean absolute security. But at least you can make sure that the app isn’t hiding anything nasty under the hood.

Related posts

• Sida loo Furo Qoraalka Xaqiiqda Weyn iyo Faylasha CSV

• Sida Loo Sameeyo Bogga WordPress Mid Sugan

• 4 siyaabood oo Facebook Messenger looga dhigi karo App-ka taagan

• 3 siyaabood oo aad ku heli karto erayga sirta ah ee ugu ammaansan

• Dhab ahaantii ilaaliyayaasha qalliinka ma shaqeeyaan?

• Sida Loo Helo Maalmaha Dhalashada Facebook-ga

• Khilaafku Aan Furmin? 9 Siyood Oo Loo Hagaajiyo

• Sida loo Hagaajiyo Steam "Xawaalad la sugayo" Khaladka

• OLED vs MicroLED: Ma tahay inaad sugto?

• Sida loo soo dejiyo fiidiyowyada Twitch

• Sida Loo Furo Fayl Aan Kordhin Lahayn

• Sida loo ogaado Computer & Email Monitoring ama Basaas Software

• Sida loo soo dejiyo oo loogu rakibo Peacock on Firestick

• Kombuyuutarkaaga si aan kala sooc lahayn ma isagaa u shidmay?

• Sida Loo Abuuro Asal Daah Furan gudaha GIMP

• Sida looga takhaluso raadinta Yahoo gudaha Chrome

• DVI vs HDMI vs DisplayPort - Waxa aad u baahan tahay inaad ogaato

• Waa maxay Qiimaynta Uber Rakaabka iyo sida loo hubiyo

• Sida loogu shubo Roku TV ka PC ama Mobile

• 3 Siyaabood oo Sawir ama Fiidyow Looga Qaado Buugga Chrome-ka