Game da wannan jerin
Shafukan ƙananan sana'o'i da yawa da ayyukan masu haɓaka manhaja na ɗauke da raunin tsaro da za a iya kiyaye su, waɗanda ke kasancewa a ɓoye har sai wani ya yi amfani da su ta hanyar da ba ta dace ba. Wannan sabis yana duba mafi yawan waɗannan matsalolin kafin hakan ta faru.
Muna gudanar da cikakken binciken ƙwarewa ba tare da shafar aikace-aikacen gidan yanar gizonku ba, sannan mu miƙa muku rahoton PDF mai sauƙin karantawa wanda ke lissafa kowace matsala da aka samu, tare da matakai masu amfani don magance kowannensu.
Binciken yana duba:
- Tsarin SSL/TLS — tabbatar da cewa shaidar shafinku tana aiki, an saita ta daidai, kuma ba ta barin maziyarta cikin haɗarin hare-haren rage darajar tsaro (downgrade attacks).
- Giɓin matakan tsaro na header — duba kasancewa da kuma saitin kariya daidai kamar Content Security Policy, X-Frame-Options da Strict-Transport-Security, waɗanda galibi ba sa nan amma suna da sauƙin ƙarawa da zarar an gano su.
- Fayiloli masu muhimmanci da kowa zai iya gani — neman fayilolin tsari (configuration files), ma'ajiyar bayanan baya (backup archives), hanyoyin shiga na admin ko wasu abubuwan da ya kamata a ɓoye amma suka bayyana bisa kuskure.
- Haɗarin tantance asusu (account enumeration) — gwada ko shafukan shiga ko na yin rajista suna nuna sunayen masu amfani ko adiresoshin imel da ke akwai, wani rauni da maharan intanet ke yawan amfani da shi a matsayin mafari.
Kowane bincike yana kasancewa ba tare da kawo cikas ba: babu hare-hare masu ɓarna, babu yunƙurin hana bayar da sabis (denial-of-service), babu shiga ba tare da izini ba ta kowace hanya, kuma babu abin da ya wuce iyakokin da kuka amince da su.
An rubuta sakamakon rahoton PDF ta yadda masu shafi da ba su da ilimin fasaha da kuma masu haɓaka manhaja za su iya fahimta. Kowace matsala tana ɗauke da ma'aunin girmanta, bayani a sarari, da kuma takamaiman shawarwari don gyara ta.
Wannan ya dace da masu ƙananan sana'o'i da ke neman kwanciyar hankali, masu haɓaka manhaja da ke kammala aiki ko miƙa aiki, da duk wanda ke son gano raunin tsaro kafin wani daban ya gano shi.
Lura: dole ne ku kasance mai gidan yanar gizon ko kuma kuna da rubutaccen izini daga mai shi kafin mu ci gaba. Wannan sharaɗi ne mai ƙarfi kuma yana kare ɓangarorin biyu.
