{"id":74,"date":"2009-11-16T17:25:28","date_gmt":"2009-11-16T14:25:28","guid":{"rendered":"http:\/\/info-it.talentirosit.ro\/?p=74"},"modified":"2012-12-14T22:22:02","modified_gmt":"2012-12-14T22:22:02","slug":"verificarea-username-ului-si-parolele-principiul-client-server","status":"publish","type":"post","link":"https:\/\/juverdeanu.ro\/blog\/verificarea-username-ului-si-parolele-principiul-client-server","title":{"rendered":"Verificarea username-ului \u015fi a parolelor. Principiul client-server"},"content":{"rendered":"<p>Ideea de verificare vine din partea unui comentator <a href=\"http:\/\/www.stiinta.info\/de-ce-nu-se-pot-sparge-parolele-de-yahoo-messenger\/news\/851\/103\/\">\u015ftiin\u0163a.info <\/a>care acuz\u0103 precedentul articol de penibilitate pentru c\u0103 exist\u0103 o fraz\u0103 ce suna cam a\u015fa:<\/p>\n<blockquote><p>Dup\u0103 care vor fi decodate parolele \u00een func\u0163ie de username, \u015fi \u00eentoarse la client pentru verificare \u2013 ceea ce nu este tocmai greu, \u00eens\u0103 depinde foarte mult de encodarea lor. Dac\u0103 sunt pe md5, md4 \u2013 difer\u0103.<\/p><\/blockquote>\n<p>Articolul este bazat pe ipoteze. Teoretic, nici dac\u0103 s-ar \u015fti tipul de codificare folosit de c\u0103tre cei de la Yahoo nu s-ar fi publicat. MD5, MD4, Hexadecimale, Hash, etc &#8211; sunt simple exemple.\u00a0 <!--more--><\/p>\n<p>Revenind la subiect: un sistem server client func\u0163ioneaz\u0103 pe\u00a0principiul schimbului de date. Permanent. Asta \u00eenseamn\u0103 c\u0103 un utilizator se conecteaz\u0103 printr-un client la server. Lu\u00e2nd exemplul yahoo messenger-ului, el, adic\u0103 utilizatorul,\u00a0va trebui s\u0103 introduc\u0103 informa\u0163ii\u00a0\u00a0gen \u00a0username \u015fi password. \u00cen traducere &#8211; numele de utilizator \u015fi parola.<\/p>\n<p>Dup\u0103 ce face asta, clientul trimite datele spre server. Pentru asta, informa\u0163iile respective nu pot circula a\u015fa cum au fost trecute.\u00a0Fiind vorba de securitate, ele\u00a0sunt codate (encodate). Trec pe linie, prin routere, p\u00e2n\u0103 la server. Serverul decodific\u0103 informa\u0163ia, \u00eens\u0103 nu pe acela\u015fi limbaj de interfa\u0163\u0103, ci \u00eentr-unul la fel de securizat. Teoretic nici cei de la Yahoo nu ar cunoa\u015fte parola real\u0103 ci doar echivalentul ei codat, \u00eens\u0103 nu e neap\u0103rat s\u0103 fie a\u015fa.<\/p>\n<p>Mai departe &#8211; informa\u0163ia verificat\u0103 de server pleac\u0103 \u00eenapoi, \u00eentr-o alta codificare. Circul\u0103 pe linie, prin routere \u015fi ajunge la client. Acesta face verificare daca informa\u0163iile trimise de server sunt corecte. Dac\u0103 e a\u015fa, \u00eenseamn\u0103 c\u0103 are acces \u015fi poate intra pe contul respectiv f\u0103r\u0103 nicio problem\u0103.<\/p>\n<p>Dac\u0103 nu e a\u015fa, serverul incrementeaz\u0103 un num\u0103r de gre\u015feli \u015fi trimite la client o informa\u0163ie prin care acesta va afi\u015fa: username \u015fi parola gre\u015fit(e). Utilizatorul poate atunci s\u0103 introduc\u0103 din nou datele respective. Dac\u0103 sunt gre\u015fite iar, serverul mai face o incrementare. La un anumit num\u0103r de autentific\u0103ri e\u015fuate, contul respectiv poate fi blocat.<\/p>\n<p>\u015ei cam \u0103sta ar fi un mecanism prin care s-ar baza, \u00een mod logic, un sistem server client sau client server de tipul Yahoo Messenger.\u00a0\u00a0Dac\u0103 clientul nu va fi nevoit s\u0103 fac\u0103 decodificarea \u015fi verificarea men\u0163ionat\u0103, datele ar fi reprimite \u00eentr-un mod ce ar l\u0103sa pe oricare ar folosi un software gen sniffer s\u0103 vad\u0103 ce \u015fi cum se retransmite.<\/p>\n<p>A\u015fadar, cam c\u00e2t de gre\u015fit\u0103 ar fi acum expresia din articolul anterior?<\/p>\n<p>Ca s\u0103 nu uit &#8211; Iar\u0103\u015fi informa\u0163iile folosite sunt ipotetice. (Nu voi intra in detalii despre coduri binare, transferul pe biti, pachete,\u00a0etc)<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Ideea de verificare vine din partea unui comentator \u015ftiin\u0163a.info care acuz\u0103 precedentul articol de penibilitate pentru c\u0103 exist\u0103 o fraz\u0103 ce suna cam a\u015fa: Dup\u0103 care vor fi decodate parolele \u00een func\u0163ie de username, \u015fi \u00eentoarse la client pentru verificare \u2013 ceea ce nu este tocmai greu, \u00eens\u0103 depinde foarte mult de encodarea lor. Dac\u0103&hellip; <a class=\"more-link\" href=\"https:\/\/juverdeanu.ro\/blog\/verificarea-username-ului-si-parolele-principiul-client-server\">Continu\u0103 lectura <span class=\"screen-reader-text\">Verificarea username-ului \u015fi a parolelor. Principiul client-server<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[272],"tags":[717,613,718,719,720],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v17.9 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Verificarea username-ului \u015fi a parolelor. Principiul client-server - Cristi Juverdeanu<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/juverdeanu.ro\/blog\/verificarea-username-ului-si-parolele-principiul-client-server\" \/>\n<meta property=\"og:locale\" content=\"ro_RO\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Verificarea username-ului \u015fi a parolelor. Principiul client-server - Cristi Juverdeanu\" \/>\n<meta property=\"og:description\" content=\"Ideea de verificare vine din partea unui comentator \u015ftiin\u0163a.info care acuz\u0103 precedentul articol de penibilitate pentru c\u0103 exist\u0103 o fraz\u0103 ce suna cam a\u015fa: Dup\u0103 care vor fi decodate parolele \u00een func\u0163ie de username, \u015fi \u00eentoarse la client pentru verificare \u2013 ceea ce nu este tocmai greu, \u00eens\u0103 depinde foarte mult de encodarea lor. Dac\u0103&hellip; Continu\u0103 lectura Verificarea username-ului \u015fi a parolelor. Principiul client-server\" \/>\n<meta property=\"og:url\" content=\"https:\/\/juverdeanu.ro\/blog\/verificarea-username-ului-si-parolele-principiul-client-server\" \/>\n<meta property=\"og:site_name\" content=\"Cristi Juverdeanu\" \/>\n<meta property=\"article:published_time\" content=\"2009-11-16T14:25:28+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2012-12-14T22:22:02+00:00\" \/>\n<meta name=\"twitter:label1\" content=\"Scris de\" \/>\n\t<meta name=\"twitter:data1\" content=\"Cristi Juverdeanu\" \/>\n\t<meta name=\"twitter:label2\" content=\"Timp estimat pentru citire\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebSite\",\"@id\":\"https:\/\/juverdeanu.ro\/blog\/#website\",\"url\":\"https:\/\/juverdeanu.ro\/blog\/\",\"name\":\"Cristi Juverdeanu\",\"description\":\"F\\u0103c\\u0103tor de site-uri \\u0219i desf\\u0103c\\u0103tor de calculatoare.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/juverdeanu.ro\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"ro-RO\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/juverdeanu.ro\/blog\/verificarea-username-ului-si-parolele-principiul-client-server#webpage\",\"url\":\"https:\/\/juverdeanu.ro\/blog\/verificarea-username-ului-si-parolele-principiul-client-server\",\"name\":\"Verificarea username-ului \\u015fi a parolelor. Principiul client-server - Cristi Juverdeanu\",\"isPartOf\":{\"@id\":\"https:\/\/juverdeanu.ro\/blog\/#website\"},\"datePublished\":\"2009-11-16T14:25:28+00:00\",\"dateModified\":\"2012-12-14T22:22:02+00:00\",\"author\":{\"@id\":\"https:\/\/juverdeanu.ro\/blog\/#\/schema\/person\/59951c8ae086411a67c5fbc3c834a885\"},\"breadcrumb\":{\"@id\":\"https:\/\/juverdeanu.ro\/blog\/verificarea-username-ului-si-parolele-principiul-client-server#breadcrumb\"},\"inLanguage\":\"ro-RO\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/juverdeanu.ro\/blog\/verificarea-username-ului-si-parolele-principiul-client-server\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/juverdeanu.ro\/blog\/verificarea-username-ului-si-parolele-principiul-client-server#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/juverdeanu.ro\/blog\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Verificarea username-ului \\u015fi a parolelor. Principiul client-server\"}]},{\"@type\":\"Person\",\"@id\":\"https:\/\/juverdeanu.ro\/blog\/#\/schema\/person\/59951c8ae086411a67c5fbc3c834a885\",\"name\":\"Cristi Juverdeanu\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/juverdeanu.ro\/blog\/#personlogo\",\"inLanguage\":\"ro-RO\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/0ac17d404aa9aa5502284abef534633e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/0ac17d404aa9aa5502284abef534633e?s=96&d=mm&r=g\",\"caption\":\"Cristi Juverdeanu\"},\"url\":\"https:\/\/juverdeanu.ro\/blog\/author\/cristi\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Verificarea username-ului \u015fi a parolelor. Principiul client-server - Cristi Juverdeanu","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/juverdeanu.ro\/blog\/verificarea-username-ului-si-parolele-principiul-client-server","og_locale":"ro_RO","og_type":"article","og_title":"Verificarea username-ului \u015fi a parolelor. Principiul client-server - Cristi Juverdeanu","og_description":"Ideea de verificare vine din partea unui comentator \u015ftiin\u0163a.info care acuz\u0103 precedentul articol de penibilitate pentru c\u0103 exist\u0103 o fraz\u0103 ce suna cam a\u015fa: Dup\u0103 care vor fi decodate parolele \u00een func\u0163ie de username, \u015fi \u00eentoarse la client pentru verificare \u2013 ceea ce nu este tocmai greu, \u00eens\u0103 depinde foarte mult de encodarea lor. Dac\u0103&hellip; Continu\u0103 lectura Verificarea username-ului \u015fi a parolelor. Principiul client-server","og_url":"https:\/\/juverdeanu.ro\/blog\/verificarea-username-ului-si-parolele-principiul-client-server","og_site_name":"Cristi Juverdeanu","article_published_time":"2009-11-16T14:25:28+00:00","article_modified_time":"2012-12-14T22:22:02+00:00","twitter_misc":{"Scris de":"Cristi Juverdeanu","Timp estimat pentru citire":"2 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebSite","@id":"https:\/\/juverdeanu.ro\/blog\/#website","url":"https:\/\/juverdeanu.ro\/blog\/","name":"Cristi Juverdeanu","description":"F\u0103c\u0103tor de site-uri \u0219i desf\u0103c\u0103tor de calculatoare.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/juverdeanu.ro\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"ro-RO"},{"@type":"WebPage","@id":"https:\/\/juverdeanu.ro\/blog\/verificarea-username-ului-si-parolele-principiul-client-server#webpage","url":"https:\/\/juverdeanu.ro\/blog\/verificarea-username-ului-si-parolele-principiul-client-server","name":"Verificarea username-ului \u015fi a parolelor. Principiul client-server - Cristi Juverdeanu","isPartOf":{"@id":"https:\/\/juverdeanu.ro\/blog\/#website"},"datePublished":"2009-11-16T14:25:28+00:00","dateModified":"2012-12-14T22:22:02+00:00","author":{"@id":"https:\/\/juverdeanu.ro\/blog\/#\/schema\/person\/59951c8ae086411a67c5fbc3c834a885"},"breadcrumb":{"@id":"https:\/\/juverdeanu.ro\/blog\/verificarea-username-ului-si-parolele-principiul-client-server#breadcrumb"},"inLanguage":"ro-RO","potentialAction":[{"@type":"ReadAction","target":["https:\/\/juverdeanu.ro\/blog\/verificarea-username-ului-si-parolele-principiul-client-server"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/juverdeanu.ro\/blog\/verificarea-username-ului-si-parolele-principiul-client-server#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/juverdeanu.ro\/blog"},{"@type":"ListItem","position":2,"name":"Verificarea username-ului \u015fi a parolelor. Principiul client-server"}]},{"@type":"Person","@id":"https:\/\/juverdeanu.ro\/blog\/#\/schema\/person\/59951c8ae086411a67c5fbc3c834a885","name":"Cristi Juverdeanu","image":{"@type":"ImageObject","@id":"https:\/\/juverdeanu.ro\/blog\/#personlogo","inLanguage":"ro-RO","url":"https:\/\/secure.gravatar.com\/avatar\/0ac17d404aa9aa5502284abef534633e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/0ac17d404aa9aa5502284abef534633e?s=96&d=mm&r=g","caption":"Cristi Juverdeanu"},"url":"https:\/\/juverdeanu.ro\/blog\/author\/cristi"}]}},"amp_enabled":true,"_links":{"self":[{"href":"https:\/\/juverdeanu.ro\/blog\/wp-json\/wp\/v2\/posts\/74"}],"collection":[{"href":"https:\/\/juverdeanu.ro\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/juverdeanu.ro\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/juverdeanu.ro\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/juverdeanu.ro\/blog\/wp-json\/wp\/v2\/comments?post=74"}],"version-history":[{"count":0,"href":"https:\/\/juverdeanu.ro\/blog\/wp-json\/wp\/v2\/posts\/74\/revisions"}],"wp:attachment":[{"href":"https:\/\/juverdeanu.ro\/blog\/wp-json\/wp\/v2\/media?parent=74"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/juverdeanu.ro\/blog\/wp-json\/wp\/v2\/categories?post=74"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/juverdeanu.ro\/blog\/wp-json\/wp\/v2\/tags?post=74"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}