Heerka ugu sarreeya ee badbaadada kombuyuutarku waa in uu noqdo mid hawo ah. Waa habka kaliya ee lagu dhimi karo fursada kombayutarka la jabsado ilaa ugu dhow eber intii suurtogal ah. Wax kasta^(Anything) oo ka yar iyo hacker ka go'an ayaa u geli doona si uun.

Maxay tahay sababta aan u rabo in aan hawada ka saaro farqiga u dhexeeya kombiyuutarka?^{(Why Would I Want To Air Gap a Computer?)}

Qofka caadiga ah uma baahna inuu hawada ka saaro farqiga u dhexeeya kombiyuutarka. Tani inta badan waa qaybta shirkadaha iyo dawladaha. Dawladdu, waxay u noqon kartaa xog-ururin^(database) xasaasi ah , mashruuc, ama laga yaabo inay maamusho nidaamka hubka. Shirkad, waxa ay hoy u noqon kartaa siraha ganacsiga, macluumaadka maaliyadeed, ama socodsiinta habka warshadaha. Kooxaha firfircooni^{(Activist groups)} waxay sidoo kale samayn karaan tan si ay uga hortagaan in shaqadooda la xidho.

Waxaa laga yaabaa inaadan ka welwelin waxyaalahaas haddii aad ku shaqaynayso kombayutarka guriga oo keliya. Weli, fulinta hal ama laba ka mid ah tillaabooyinkan ayaa si weyn u kordhin doona ammaankaaga^{(increase your security)} .

Waa maxay farqiga hawada?^{(What’s An Air Gap?)}

Marka aad hawada ka saarto kombiyuuterka ma jiro wax u dhexeeya kumbiyuutarka iyo adduunka intiisa kale marka laga reebo hawada. Dabcan, tan iyo markii WiFi ay la timid waxay isu beddeshay in ay la macno tahay in aan wax xidhiidh ah la lahayn dunida dibadda. Ma jiro wax aan horay ugu jirin kombuyuutarku waa inuu awoodi karaa inuu fuulo. Ma jiro wax kumbiyuutarka ku jira oo aan awoodin in laga saaro.

Sideen Kumbuyuutarkayga u kala fogaadaa?^{(How Do I Air Gap My Computer?)}

Kala fogaanshaha hawada^(Air) kumbiyuutarku maaha mid sahlan sida oo kaliya in la furo fiilada shabakadda^{(network cable)} oo la joojiyo wifi-^{(disabling the wifi)} ga . Xasuusnoow^(Remember) , tani waa bartilmaameedka qiimaha sareeyo ee loogu talagalay tuugada dambiilayaasha ah^{(criminal hackers)} iyo Jilayaasha Qaranka-State ( NSAs ) ee u shaqeeya dawlado shisheeye. Waxay heleen lacag iyo waqti. Intaa waxaa dheer waxay jecel yihiin loolan, markaa ka dib kombuyuutar hawo-mareen ah ayaa soo jiidanaya iyaga.

Aan ka soo bilowno dibadda kombayutarka oo aan ka shaqeyno gudahayaga:

1. Ammaanka hawlgalka ( OpSec ) waa muhiim. OpSec waa la fududayn karaa iyadoo lagu saleynayo baahida-la-ogaanshaha. Qofna uma baahna inuu ogaado waxa qolka ku jira, iskaba daayee waxa kombayutarka loogu talagalay ama cidda loo oggol yahay inay ku shaqeyso. Ula dhaqan sidii aysan jirin. Haddii dadka aan la oggolayn ay wax ka og yihiin, waxay u nuglaadaan weerarrada injineernimada bulshada^{(social engineering attacks)} . 

1. Hubi^(Make) inay ku jirto qol ammaan ah. Qolku waa inuu lahaadaa hal albaab oo albaab ah waana inuu xidhnaadaa mar kasta. Haddii aad gudaha u gasho shaqada, albaabka gadaashaada xidh. Kaliya hawl wadeenada la oggolaaday ee PC waa inay galaangal u yeeshaan. Sida aad tan u sameyso adiga ayay ku xiran tahay. Qufulka casriga ah ee^{(electronic smart locks)} jirka iyo elegtarooniga ah mid walbaa wuxuu leeyahay faa'iidooyin iyo khasaare.
   
   Ka digtoonow saqafka hoos u dhaca. Haddi weeraryahan uu ka soo bixi karo saqaf saqaf ah oo uu ka dul mari karo gidaarka, albaabka xiran macneheedu waa waxba. Ma jiro daaqado, sidoo kale. Ujeedada kaliya ee qolka waa in la dejiyo kombiyuutarkaas. Haddii aad wax ku kaydinayso halkaas, markaa waxaa jirta fursad aad ku dhuumato oo aad ku qariso kamarada webka^{(web camera)} , makarafoonka^(microphone) , ama qalabka dhegeysiga RF.

1. Hubi^(Make) inay tahay qol ammaan ah. Badbaadada kombayutarka^(Safe) , taasi waa. Qolku waa inuu bixiyaa jawiga ku habboon kombayuutarka^{(ideal climate for the computer)} si uu u sii jiro inta suurtogalka ah. Mar kasta oo kombayutarka^(Anytime) hawada ka baxaya uu jabo oo meesha la saaro, waxaa jirta fursad aad ku heli karto macluumaadka kumbiyuutarka la tuuray.
   
   Waxaad sidoo kale u baahan doontaa xakamaynta dabka badbaadsan ee kombiyuutarka Wax isticmaalaya gaas aan shaqaynayn ama xeryahooda halocarbon ayaa ku habboon. Waa in uu ahaado mid aan wax u dhimayn kombayutarka, ama waxa laga yaabaa in jabsiga uu isku dayo in uu burburiyo kombayutarka isaga oo daaraya rusheeyaha haddii ay awoodaan.

1. Ka ilaali dhammaan qalabka kale ee elegtarooniga ah ee aan loo baahnayn qolka. Ma jiraan daabacayaal^(printers) , teleefannada gacanta^(cellphones) , tablets , USB flash drives , ama foobyada furaha ah. Haddii uu batari ku jiro ama uu koronto isticmaalo ma galo qolkaas. Ma waxaynu ka naxaynaynaa? Maya. Eeg cilmi-baadhista farqiga hawada ee Dr. Mordechai Guri^{(air-gap research Dr. Mordechai Guri)} samaynayo oo arag waxa suurtagal ah. 

1. Isagoo ka hadlaya USB , ku xidh ama ka saar ^(USB)dekedaha USB-ga ee^{(USB ports)} aan loo baahnayn . Waxaa laga yaabaa inaad u baahato deked USB ah ama laba kumbuyuutarka iyo jiirka^{(keyboard and mouse)} . Qalabkaas waa in lagu xidhaa meesha oo aan laga saari karin. Deked kasta oo USB ah waa in meesha laga saaraa ama la xannibaa iyadoo la isticmaalayo shay sida xannibaadaha dekedaha USB^{(USB port blocker)} . Weli ka sii wanagsan, u isticmaal USB to PS/2 keyboard and mouse converter adapter , oo leh PS/2 keyboard iyo mouse . Markaa gabi ahaanba uma baahnid wax dekedo USB ah oo dibadda ah.

1. Tirtir dhammaan hababka isku xirka^{(methods of networking)} suurtagalka ah. Ka saar WiFi , Ethernet , iyo qalabka Bluetooth -ka ama ku bilow kombiyuutar aan midna lahayn. Kaliya^(Just) daminta aaladahaas kuma filna. Fiilooyin kasta oo^(Any) lagama maarmaan ah ayaa loo baahan yahay in la ilaaliyo. Waxa laga yaabaa inay noqoto kontaroolaha habka warshadaha si fiilooyinka qaarkood ay daruuri u noqdaan.

1. Demi dhammaan dekedaha shabakadaha guud ee^{(common network ports)} kombiyuutarka. Tani waxay ka dhigan tahay dekedaha sida 80 ee HTTP , 21 ee FTP , iyo dekedaha kale ee farsamada. Haddii jabsiga si uun uu jidh ahaan ugu xidhmo kombayutarka, ugu yaraan dekedahani kuma fadhiyi doonaan halkaas iyagoo diyaar ah oo sugaya.

1. Si aad u dejiso darawalka adag Haddi uu wali kombiyutarku soo gaadho, ugu yaraan xogtu waa la sifeeyay oo iyaga waxba uma tarto.

1. Xir^(Shut) kumbuyuutarka mar kasta oo aan loo baahnayn. Ka fur, xataa

Hadda Kombuyuutarkayga miyuu bedqabaa?^{(Is My Computer Safe Now?)}

La qabso^(Get) ereyada halista la aqbali karo oo si macquul ah u ammaan. Ilaa iyo inta ay jiraan hackers, labadaba koofiyad cad iyo koofiyad madow^{(white hat and black hat)} , siyaabo cusub oo lagu boodo farqiga hawada ayaa sii wadi doona horumarinta. Waxa jira wax badan oo aad samayn karto, laakiin marka aad hawada ka saarto kombayutarkaagu waa ugu yaraan bilow wanaagsan.

How To Air Gap a Computer

The highest level of security for a computer is for it to be аir-gapped. It’s the only way tо reduce the chance of thе compυter being hacked to aѕ close tо zero as possible. Anything less аnd a dedicated hacker will get into it somehow.

Why Would I Want To Air Gap a Computer?

The average person doesn’t need to air gap a computer. This is mostly the domain of corporations and governments. For a government, it could be a sensitive database, project, or maybe controlling a weapons system. For a corporation, it could house trade secrets, financial information, or running an industrial process. Activist groups might also do this to prevent having their work shut down.

You’re probably not worried about those things if you’re only running a home computer. Still, implementing just one or two of these measures will increase your security dramatically.

What’s An Air Gap?

When you air gap a computer there’s nothing between the computer and the rest of the world but air. Of course, since WiFi came along it has changed to mean no connection to the outside world at all. Nothing that isn’t already on the computer should be able to get on it. Nothing on the computer should be able to be taken off of it.

How Do I Air Gap My Computer?

Air gapping a computer is not as simple as just unplugging the network cable and disabling the wifi. Remember, this is a high-value target for criminal hackers and Nation-State Actors (NSAs) who work for foreign governments. They’ve got money and time. Plus they love a challenge, so going after an air-gapped computer is enticing to them.

Let’s start from the outside of the computer and work our way inside:

1. Operational security (OpSec) is important. OpSec can be oversimplified as being on a need-to-know basis. No one needs to know what’s in the room, let alone what the computer is for or who is authorized to operate it. Treat it as if it didn’t exist. If unauthorized people know about it, they’re susceptible to social engineering attacks. 

1. Make sure it’s in a secure room. The room should have just one entrance and it must be locked at all times. If you go inside to work, lock the door behind you. Only authorized operators of the PC should have access. How you do this is up to you. Physical and electronic smart locks each have their pros and cons.
   
   Be cautious of drop ceilings. If an attacker can pop out a ceiling tile and go over the wall, the locked door means nothing. No windows, either. The room’s sole purpose should be to house that computer. If you’re storing stuff in there, then there’s an opportunity to sneak in and hide a web camera, microphone, or RF listening device.

1. Make sure it’s a safe room. Safe for the computer, that is. The room should provide the ideal climate for the computer so that it lasts as long as possible. Anytime an airgap computer breaks down and there’s disposal, there’s a chance to get information off the discarded computer.
   
   You’ll need computer-safe fire suppression as well. Something using inert gases or halocarbon compounds is appropriate. It has to be non-destructive to the computer, or the hacker may try to destroy the computer by turning on the sprinklers if they can.

1. Keep all other unnecessary electronic devices out of the room. No printers, cellphones, tablets, USB flash drives, or key fobs. If it has a battery in it or uses electricity it doesn’t go in that room. Are we being paranoid? No. Check out the air-gap research Dr. Mordechai Guri is doing and see what’s possible. 

1. Speaking of USB, plug or remove any unnecessary USB ports. You might need a USB port or two for the keyboard and mouse. Those devices should be locked in place and not removable. Any other USB port should be removed or blocked using something like a USB port blocker. Better yet, use a USB to PS/2 keyboard and mouse converter adapter, with a PS/2 keyboard and mouse. Then you don’t need any external USB ports at all.

1. Eliminate all methods of networking possible. Remove the WiFi, Ethernet, and Bluetooth hardware or start with a computer that doesn’t have any of that. Just disabling those devices isn’t enough. Any necessary network cable needs to be shielded. It might be a controller for an industrial process so some cables may be necessary.

1. Disable all common network ports on the computer. This means the ports like 80 for HTTP, 21 for FTP, and other virtual ports. If the hacker somehow gets physically connected to the computer, at least these ports won’t be sitting there ready and waiting.

1. Encrypt the hard drive. If the hacker still gets to the computer, at least the data is encrypted and useless to them.

1. Shut the computer down whenever it isn’t needed. Unplug it, even.

Is My Computer Safe Now?

Get used to the terms acceptable risk and reasonably secure. As long as there are hackers, both white hat and black hat, new ways to jump the air gap will continue to be developed. There’s only so much you can do, but when you air gap your computer it’s at least a good start.

Related posts

• Ku rakibida GIMP Plugins: Habka-Hagaha

• Sida Loo Bedelo Kumbuyuutarkaaga Server-ka Warbaahinta DLNA

• Sida Loo Ogaado Hadii Kombayutarkaga Lala Soconayo

• Sida Loo Raro Profile-kaaga Thunderbird & iimaylka Kumbiyuutarka Cusub ee Windows

• Sida Loogaga Wici karo Taleefoonka Computerkaaga Lacag La'aan

• Sida loo cusboonaysiiyo Raspberry Pi

• Sida Bogag Badan Loogu Sawiro Hal Fayl oo PDF ah

• Ku samee Gmail Desktop App leh 3-dan macmiil ee iimaylka ah

• Sida loo damiyo Furaha Daaqadaha

• Sida Loo Joojiyo Xidhiidhada Fog ee Kumbuyuutarka Windows ama Mac

• Sida loo ilaaliyo erayga sirta ah PDF si uu ammaan u ilaaliyo

• Sida loo qariyo shabakadaha kale ee WiFi marka lagu xidhidhinayo Computerkaaga

• Talooyin ka saarida Spyware ee kumbiyuutarkaaga ama taleefankaaga casriga ah

• 7 Farsamo Farsamo Kobcinta SEO ee Mareegaha Kasta

• Sida Loo Helo Qaabka Kombayutarkaga Daaqadaha

• Sida Muusiga loogu daro Google Slides

• Sida Computerka Loogu Xidho Meesha Mobilka Ah

• Sida Loo Akhriyo Qoraalka Kombayutarkaga

• 99 Siyaabood Oo Aad Kombayutarkaga Uga Dhigi Karto Mid Dhakhso leh

• Sida Loo Arkiyo Bogagga Cajiska Ah Iyo Faylasha Ka Soo Baxa Browserkaaga