Xut bn Security In A Box (https://info.securityinabox.

org)
Trang ch > Bn in PDF > Bn in PDF

11. Lm th no s dng in thoi thng minh mt

cch bo mt nht
Trong Chng 9: Lm th no s dng in thoi di ng mt cch bo mt nht [1] , chng ti tho lun v cc
vn bo mt khi s dng cc loi in thoi di ng c bn bao gm cc vn v dch v lin lc thoi v tin
nhn (SMS/MMS). Nhng loi in thoi ny ch yu (nu khng phi trng hp c bit) da trn h tng mng in
thoi di ng truyn nhn cc cuc gi v d liu.
Vi s pht trin v cng ngh em li cho cho cc dng in thoi di ng hin nay kh nng cung cp cc dch v v
tnh nng tng t nh nhng chic my tnh bn hay my tnh xch tay. Cc loi in thoi thng minh em li nhiu
phng thc mi cho php lin lc, ghi v ph bin thng tin. c th p ng nhng chc nng mi ny, cc in
thoi thng minh khng ch s dng mng h tng di ng m cn c kh nng kt ni mng Internet qua kt ni khng
dy (tng t nh mt chic my tnh xch tay ti qun Internet caf) hoc s dng cc kt ni d liu qua mng h tng
di ng ca nh cung cp dch v.
Trong khi vn c th thc hin vic gi in thoi, tt nhin ri, vi mt chic in thoi thng minh, bn nn coi nhng
chic in thoi thng minh l nhng thit b my tnh nh. iu ny c ngha l cc cng c gii thiu trong chng ny
s hu ch cho bn khi s dng in thoi thng minh cng nh khi s dng my tnh.
in thoi thng minh thng h tr nhiu tnh nng a dng duyt web, th in t, thoi v nhn tin qua Internet, ghi,
lu tr v truyn m thanh, phim v hnh nh, cho php kt ni mng x hi, tr chi trc tuyn, giao dch ngn hng trc
tuyn v nhng hot ng khc. Tuy nhin nhiu trong s nhng cng c v tnh nng ny mang li cc vn v bo
mt mi hoc khin cc mi nguy c bo mt ang tn ti tr nn nghim trng hn.
Ly v d, mt s in thoi thng minh c tch hp thit b nh v v tinh ton cu (GPS [2] ), iu ny c ngha l theo
mc nh chng c th cung cp v tr chnh xc ca bn cho nh cung cp dch v di ng cng nh cho nhiu ng dng
ci t trn in thoi ca bn ( nh cc ng dng mng x hi, bn , trnh duyt v cc ng dng khc). Nh
cp, cc in thoi thng thng cng chuyn tip thng tin v tr ca bn ti nh cung cp dch v di ng (y l mt
phn tnh nng c bn ca in thoi di ng). Tuy nhin, tnh nng GPS khng nhng gia tng chnh xc v thng tin
v tr ca bn m cn gia tng v s lng v tr c th xc nh v chuyn tip thng tin. Bn nn xem li tt c cc vn
bo mt lin quan ti in thoi di ng cp trong Chng 9: Hng dn s dng in thoi di ng mt
cch bo mt nht [3] bi tt c nhng vn ny cng lin quan ti vic s dng in thoi thng minh. Chuong 9 [3]
bao gm nhng vn bo mt lin quan ti nghe ln, chn tin nhn hay cuc gi, cc vn lin quan ti th SIM
v cc bin php phng v. Trong chng ny chng ta s cng xem cc vn bo mt mi lin quan ti in thoi
thng minh.

Ti xch, V, in thoi thng minh

Chng ta c th thy rt r rng li ch ca vic gi gn ti xch hay v tin mt cch an ton bi chng cha rt nhiu
thng tin nhy cm, v nu nh mt th nhiu thng tin ring t v s an ton b nh hng. Ngi ta thng t ch hn
ti lng thng tin c nhn c lu tr trong nhng chic in thoi thng minh, v coi vic b mt in thoi ch l iu
phin toi hn l mt nguy c. Hy ngh rng chic in thoi thng minh l mt thit b my tnh lun kt ni vo mng
v thng xuyn c mang theo mnh, bn s thy r s khc bit quan trng gia thit b lu tr thng tin ri rc, v
tnh (nh chic v), vi mt thit b lu tr thng tin ng c tnh tng tc nh mt chic in thoi thng minh.
Mt v d thc hnh n gin gip bn tng tng r s khc bit ny:
Hy b ht tt c trong v hoc ti xch ca bn ra v kim tra nhng vt cha thng tin nhy cm. thng thng bn s
thy:
Nhng tm hnh ca ngi thn (~5 tm)
Cc loi th chng nhn (bng li xe, th hi vin, th an sinh x hi)
Thng tin Bo him sc khe (~2 th)
Tin (~5 t)
Th Credit/Debit (~3 th)
Gi hy tm hiu xem nhng g c cha trong chic in thoi thng minh ca bn. Mt ngi dng in thoi thng
minh thng thng c th thy tt c nhng thng tin pha trn vi s lng nhiu hn, v trong mt s trng hp cn c
nhiu thng tin gi tr hn rt nhiu:
Nhng tm hnh ca ngi thn (~100 tm hnh)
ng dng th in t c lu mt khu
Th in t (~500 emails)
Videos (~50 videos)
ng dng mng x hi c lu mt khu
ng dng ngn hng trc tuyn (vi truy cp vo cc ti khon ngn hng)

Cc ti liu nhy cm
Cc bn ghi cc m thoi nhy cm
Mt kt ni trc tuyn ti thng tin nhy cm ca bn
S dng in thoi thng minh cng nhiu, bn cng cn ch ti cc nguy c lin quan v c nhng hnh ng bo v
ph hp. in thoi thng mnh l thit b khuch i v phn tn d liu c nhn ca bn mt cch mnh m. Chng
c thit k cung cp kh nng kt ni ti a v lin kt ti cc dch v mng x hi theo mc nh. S d nh vy l
bi thng tin c nhn ca bn c gi tr v c th c tng hp, tm kim v bn sinh li nhun. Trong Chng 5: Lm
th no khi phc thng tin b xa [4] chng ti tho lun tm quan trng ca vic sao lu d liu. iu ny
cng ng c bit i vi in thoi thng minh. C th l thm ha nu bn mt in thoi v khng c bn sao
lu nhng d liu quan trng ti mt ni an ton (nh cc thng tin lin lc). Bn cnh vic thc hin sao lu d liu, hy
chc chn bn bit cch khi phc li d liu. Hy chun b r rng mt bn ghi trn giy cc bc cn thc hin vic
khi phc d liu mt cch nhanh chng trong trng hp khn cp. Trong chng ny chng ti s bt u bng vic
gii thiu mt s iu c bn v in thoi thng minh tm hiu mt s nn tng khc nhau v cc quy trnh ci t c
bn bo mt cho thng tin v lin lc ca bn. Cc phn tip theo ca chng ny s bao gm cc cnh bo c bit
trong cch s dng in thoi thng minh mt cch thng thng. Cc mc k tip s tm hiu cc vn bo mt ca:

Cc nn tng, Thit lp v Ci t
Cc nn tng v H iu hnh
Ti thi im bi vit, nhng in thoi thng minh c s dng rng ri nht l iPhone ca Apple v Android ca
Google, theo sau l sn phm s dng Blackberry v Windows. S khc bit quan trng nht gia Android v cc h
iu hnh khc l Android, hu ht mi trng hp, l h thng Ngun M (FOSS [5] ), cho php h iu hnh ny c
kim tra mt cch c lp xc nhn kh nng bo v thng tin ngi dng v phng thc lin lc an ton. iu ny
cng cho php tng cng pht trin cc ng dng bo mt cho nn tng ngun m ny. Nhiu nh pht trin phn
mm c thc v bo mt pht trin cc ng dng cho Android vi s ch trng v an ton v bo mt cho ngi dng.
Mt s ng dng ny s c cp r trong phn sau ca chng ny.
Cho d bn ang dng loi in thoi thng minh no, c nhng vn bn lun cn ch khi s dng in thoi c kt
ni Internet v c cc tnh nng nh GPS [6] hay kh nng kt ni khng dy. Trong chng ny chng ti ch trng ti
cc thit b s dng nn tng Android vi l do cp pha trn y l cch d dng hn bo mt d liu v cc
kt ni lin lc. Tuy nhin, hng dn thit t c bn cho mt s ng dng trn cc thit b chy h iu hnh khc
Android cng s c cung cp. in thoi Blackberry thng c gii thiu l thit b nhn tin v gi th in t an
ton. iu ny l bi cc tin nhn v email c truyn trn knh bo mt qua cc my ch ca Blackberry, nm ngoi
phm vi kim sot ca nhng i tng nghe ln. Tht khng may l ngy cng nhiu cc chnh quyn yu cu truy cp
cc knh kt ni ny vi l do nhu cu chng li nguy c khng b v ti phm c t chc. n , Lin hip cc vng
quc rp, rap x ut, Inddoonexxia v Liban l cc v d v chnh quyn kim sot vic s dng cc thit b Blackberry
v yu cu truy cp d liu ngi dng ti cc quc gia ny.

Feature Phones
Mt dng in thoi di ng c gi vi nhng tnh nng cao cp hn in thoi di ng c bn nhng cha phi l
in thoi thng minh gi l 'feature phones' (v d Nokia 7705 Twist hay Samsung Rogue). Gn y, feature phones
c tng cng cc tnh nng c in thoi thng minh. Nhng nhn chung, h iu hnh ca dng feature phones'
thng t kh nng truy cp do c hi xy dng ng dng v ci thit bo mt l rt hn ch. Chung ti khng cp
ring ti dng in thoi feature phones d nhiu vn cp trong chng ny c th cng hu ch cho c dng
in thi feature phones.

in thoi thng minh gn nhn hng v kha mng

in thoi thng minh thng c bn sau khi c gn nhn bi nh cung cp dch v hoc kha mng. Kha
mng in thoi thng minh ngha l thit b ny ch c th hot ng vi mt mng ca chnh nh cung cp vi th SIM
c cp l th duy nht hot ng vi thit b ny. Cc nh cung cp dch v di ng thng thng hiu ha in
thoi h bn ra bng cch ci t phn mm lp gia (firmware) hoc phn mm ring ca h ln in thoi. H cng c
th thm hoc bt mt s tnh nng ca chic in thoi ny. Vic thng hiu ha l mt cch cc cng ty tng
cng doanh thu bng cch nh hng vic s dng in thoi thng minh, thng thng bao gm c vic thu thp
thng tin bn s dng in thoi hay cho php vic truy cp t xa vo in thoi ca bn.
Vi nhng l do trn, chng ti khuyn bn nn mua mt in thoi khng b thng hiu ha bi nh cung cp nu bn
c la chn. Mt in thoi b kha mng c nguy c cao hn v d liu ca bn s c nh tuyn qua mt nh mng
ni tp trung mi lung d liu kt ni ca bn v bn khng th thay i SIM card ca nh cung cp dch v khc
phn tn d liu trn cc mng khc nhau. Nu in thoi ca bn b kha mng, hy nh ai tin tng c gip bn
m kha.

Thit t chung
in thoi thng minh c nhiu thit t cho php kim sot bo mt ca thit b. Mt iu rt quan trng l ch cch
in thoi thng minh ca bn c thit t nh th no. Trong Hng dn Thc hnh bn di chng ti s cnh bo
bn v cc thit t bo mt in thoi nht nh c th c s dng nhng khng c kch hot theo mc nh cng

nh nhng thit t mc nh khin in thoi ca bn khng an ton.

Thc hnh: Hy bt u vi Hng dn Ci t c bn Android [7]
Thc hnh: Hy bt u vi Hng dn Ci t C bn iPhone [8]

Ci t v cp nht cc ng dng
Cch thng dng ci t phn mm mi ln in thoi thng minh ca bn l s dng Gian hng ng dng iPhone
(iPhone Appstore) hoc gian hng Google Play, ng nhp vi thng tin ng nhp ngi dng sau ti v v ci t
ng dng mong mun. Vi vic ng nhp bn lin kt vic s dng gian hng trc tuyn vi ti khon ngi dng ng
nhp. Ch gian hng trc tuyn lu tr thng tin lc s trnh duyt v la chn ng dng ca ngi dng.
Cc ng dng c cho bn trn cc gian hng trc tuyn chnh thc c chng nhn bi ch gian hng (Google hay
Apple), tuy nhin trn thc t iu ny cung cp s bo v t i v cc hot ng ca ng dng sau khi c ci t trn
in thoi ca bn. V d, mt s ng dng c th sao lu v gi danh sch a ch lin lc ca bn sau khi c ci ln
my in thoi. Trn cc my Android mi ng dng cn yu cu, trong qu trnh ci t nhng hnh ng g c cho
php khi ng dng chy. Bn cn cn thn ti vic cho php yu cu no, v liu nhng s chp thun ny c ph
hp vi tnh nng tng ng ca ng dng ang ci t hay khng.
Cc ng dng Android cng c sn t nhng ngun bn ngoi cc knh cung cp chnh thc ca Google. Bn cn nhn
chn ty chn Unknown sources trong Application settings c th s dng nhng trang cung cp ng dng ny.
Rt hu ch khi bn s dng cc trang thay th nu bn mun gim thiu lin lc trc tuyn vi Google. Chng ti gii
thiu F-Droid [9] ('Free Droid'), chuyn cung cp cc ng dng Ngun M FOSS [10] . Trong hng dn ny, F-Droid l a
ch ngun chnh cho cc ng dng chng ti gii thiu, v chng ti s ch lin kt bn ti Google Play cho ng dng
khng c sn trn F-Droid.
Nu bn khng mun (hoc khng th) kt ni trc tuyn truy cp cc ng dng, bn c th truyn cc ng dng t
in thoi ca ngi khc bng cch copy cc tp .apk [11] (vit tt ca cm t 'android application package' gi ng
dng android) qua kt ni bluetooth. Mt cc khc l ti cc tp .apk vo th nh Micro SD cho in thoi ca bn hay s
dng cp kt ni ti cc tp v t mt my tnh PC. Sau khi lu cc tp vo in thoi, bc n gin tip theo l
n vo tn tp v bn s c hng dn ci t ng dng. (Lu : hy ht sc ch khi s dng kt ni bluetooth
hy tm hiu Chng 9.2.4: Cc tnh nng khc ngoi thoi v nhn tin [12] ).

Lin lc (Thoi v Tin nhn) dng in thoi Thng

minh
Hi thoi An ton
C bn v in thoi
Trong chng [9.2.2 s n danh [13] chng ti tho lun cc phng php khc nhau bn nn cn nhc gim nguy
c b chn nghe ln khi s dng mng h tng in thoi di ng ca nh cung cp dch v m thoi.
S dng in thoi thng minh kt ni Internet hay WiFi c th cung cp cc cch lin lc bo mt hn c th k n
nh s dng thoi qua giao thc IP VoIP [14] v p dng cc phng thc bo mt knh truyn lin lc ny. Mt s cng
c cho in thoi thng minh cn c th m rng cch thc bo mt cho khng ch VoIP, m c cho cc cuc gi in
thoi di ng. (Xem Redphone bn di).
Di y l danh sch cc cng c vi cc im mnh v yu:

Skype
L ng dng VoIP thng mi ph bin nht, Skype [15] , c phin bn cho mi nn tng in thoi thng minh v hot
ng hiu qu khi kt ni khng dy ca bn n nh. Kt ni qua ng mng in thoi di ng km n nh hn.
Trong Phn 3 [16] ca Chng 7: Lm th no bo mt truyn thng Internet [16] , chng ti cp ti nguy c
khi s dng Skype cng vi nguyn nhn ti sao nu c th th nn trnh s dng. Nhn chung, Skype l mt phn mm
khng phi Ngun M v rt kh c th xc nhn mt cch c lp mc bo mt ca phn mm ny. Hn th
na, Skype b s hu bi Microsoft, h c li ch thng mi quan tm ti vic tm hiu bn s dng Skype khi no
v u. Skype cng c th cho php cc c quan thc thi lut php truy xut mi thng tin lch s lin lc ca bn.

Cc ng dng VoIP khc

Lin lc s dng ng dng VoIP thng l min ph (hoc gim chi ph ng k so vi cc cuc gi di ng thng
thng) v li it du vt lin lc. Trn thc t mt phin lin lc VoIP bo mt l cch an ton nht m thoi.
CSipSimple [17] l phn mm VoIP mnh m cho cc in thoi Android c pht trin v duy tr tt cng vi nhiu tnh

nng tr gip thit t cho cc dch v VoIp khc nhau.

Mng Thoi Bo mt Kin trc M (OSTN) [18] v my ch cung cp bi d n Guardian, ostel.me [19] , gn y a ra
mt trong nhng phng thc kt ni thoi bo mt nht. Hiu r v tin tng n v vn hnh my ch VoIP bn s
dng kt ni l mt s cn nhc quan trng. Nh cung cp my ch cho dch v ny - Guardian Project [20] ni ting
v c uy tn trong cng ng.
Khi s dng CsipSimple, bn khng bao gi kn ni trc tip vi i tc lin lc, thay vo lung d liu s c nh
tuyn qua my ch Ostel. iu ny khin cho vic theo di d liu v tm ra i tc lin lc ca bn. Hn na, Ostel
khng lu tr bt k thng tin d liu no ngoi thng tin ti khon cn ng nhp. Tt c d liu thoi c m ha
bo mt v ngay c siu d liu, thng rt kh khai thc, cng s tr nn kh khn hn khi thng tin c nh
tuyn qua my ch ostel.me. Nu bn ti v CsipSimple t ostel.me, chng trnh s c cu hnh trc s dng
my ch ostel.me khin cho vic ci t v s dng rt d dng.
RedPhone [21] l ng dng Min ph v Ngun M thc hin vic m ha d liu lin lc thoi gia hai thit b s dng
phn mm ny. Chng trnh rt d ci t v s dng vi giao din quay s v lin lc truyn thng. i tc lin lc
ca bn cn ci t v s dng RedPhone m thoi vi bn. thun tin, RedPhone s dng s in thoi ca
bn lm thng tin xc nhn (ging nh tn ngi dng tron cc ng dng VoIP khc). Tuy nhin iu ny s kin vic
phn tch d liu v truy tm ngc ra bn d dng hn, qua s in thoi ca bn. RedPhone s dng mt my ch
trung tm, l im tp trung d liu v do cho php RedPhone v tr quan trng (v kim sot mt s thng tin trn).
Hng dn Thc hnh CsipSimple, Ostel.me v Redphone s c gii thiu ti y. Bn c th tm hiu thm thng tin
theo cc ng dn cung cp pha trn.

Gi Tin nhn An ton

Bn nn lu khi gi tin nhn SMS v khi nhn tin trc tuyn trn in thoi thng minh.

SMS
Nh m t trong Chng 9.2.3 Lin lc qua Tin nhn SMS / Tin nhn [22] , Trao i SMS mc nh l rt khng
an ton. Bt k ai c th truy cp h tng mng vin thng di ng u c kh nng chn nghe ln cc tin nhn ny d
dng v y l iu xy ra thng xuyn trong nhiu trng hp. Khng tin tng s dng vic nhn tin trong cc tnh
hung nghim trng cn bo mt. Khng c cch no xc thc tin nhn SMS, do s khng th xc nh c ni dung
tin nhn c b thay i trong qu trnh truyn hay liu ngi gi tin nhn c thc s l ai m h t nhn khng.

Bo mt SMS
TextSecure [23] l cng c Ngun M Min ph FOSS [24] cho php gi v nhn SMS bo mt trn in thoi Android.
Chng trnh cho php gi tin nhn m ha v khng m ha nn bn c th s dng lm ng dng SMS mc nh.
trao i tin nhn m ha, ng dng ny cn c ci t trn c my in thoi ca ngi nhn v ngi gi, do bn
s cn yu cu i tc lin lc ci t ng dng ny ln in thoi ca h. Textsecure t ng xc nh khi mt tin nhn
m ha c gi n t mt ngi dng Textsecure khc. Chng trnh cho php bn gi tin nhn m ha ti nhiu hn
mt ngi nhn. Cc tin nhn s c t ng k s cho php vic thay i ni dung tin nhn trn ng truyn l gn
nh khng th. Trong phn hng dn thc hnh Textsecure chung ti s gii thch chi tit cc tnh nng ca cng c
ny cng nh cch s dng.
Thc hnh: Hy bt u vi Hng dn Textsecure [25]

Nhn tin trc tuyn An ton

Tin nhn v tr chuyn trc tuyn s dng in thoi c th to ra nhiu thng tin c nguy c b chn nghe ln. Nhng
cuc hi thoi nh vy c th c s dng chng li bn bi cc th lc th ch v sau ny. Chnh v vy bn nn ht
sc cnh gic v nhng g s trao i qua tin nhn trn in thoi khi nhn tin trc tuyn. C mt s cch nhn tin trc
tuyn an ton. Cch ti u l dng phng php m ha t gi ti nhn, bng cch ny bn c th chc chn rng ngi
u kia chnh l ngi bn mun trao i tin tc.
Chng ti khuyn ngh s dng Gibberbot [26] l ng dng nhn tin trc tuyn cho in thoi Android. Gibberbot cung cp
tnh nng m ha mnh v d s dng nhn tin vi giao thc Nhn tin Off-the-Record [27] . Vic m ha ny cung cp
kh nng xc thc (bn c th xc thc rng bn ang trao i vi ng ngi) v kh nng bo mt c lp cho tng
phin lin lc m bo nu vic m ha ca mt phin lin lc b l, cc phin lin lc trong qu kh v tng lai s vn
m bo an ton. Gibberbot c thit k lm vic vi Orbot nn tin nhn trc tuyn ca bn s c nh tuyn qua
mng n danh Tor [28] . iu ny khin cho vic truy du vt hoc thm ch vic pht hin c lin lc s rt kh khn.
Thc hnh: Hy bt u vi Gibberbot Guide [29]
Vi in thoi iPhone, tin ch ChatSecure [30] cung cp tnh nng tng t, tuy nhin s khng d dng thit t tin
ch s dng vi mng n danh Tor [28] . Phn Hng dn Thc hnh ChatSecure s sm c gii thiu. Bn c th xem
thm thng tin ti trang ch [30] . Vi bt k ng dng no bn s s dng, hy lun cn nhc xem ti khon no bn s s
dng cho vic nhn tin trc tuyn. V d khi bn s dng ti khon Google Talk, Google s bit thng tin ng nhp v
thi gian truy cp ca bn. ng thi hy ng vi i tc lin lc v vic khng lu li lch s trao i c bit l khi
nhng hi thoi ny khng c m ha.

Lu tr Thng tin trn in thoi Thng minh

in thoi thng minh thng c kh nng lu tr cao. Tht khng may l d lieuj lu tr trn thit b ca bn c th d
dng b truy cp bi bn th ba, c th l truy cp t xa hoc truy cp trc tip vo in thoi. Mt s lu gim thiu
vic truy cp khng ph hp ti cc thng tin ca bn c gii thch trong Hng dn Ci t C bn cho Android [7]
v Hng dn Ci t C bn cho iPhone [8] . Ngoi ra, bn c th thc hin cc bc m ha cc thng tin nhy
cm trn in thoi s dng cc cng c ring.

Cc tin ch m ha d liu
Cng c Android Privacy Guard (APG) [31] cho php s dng OpenGPG m ha cho tp v th in t. Vic m ha
gip lu tp v ti liu ca bn mt cch an ton trn in thoi cng nh khi gi th in t.
Thc hnh: hy bt u vi Hng dn APG [32]
Cryptonite [33] l mt cng c m ha tp Ngun M Min ph. Cryptonite c nhiu tnh nng cao cp c bit dnh cho
in thoi Android c cu hnh ton quyn iu khin (rooted) vi phn mm trung gian ty chnh. Xem thm phn S
dng Nng cao in thoi Thng minh [34] c thm hng dn.
Thc hnh: Hy bt u vi Hng dn Cryptonite [35]

Gi Mt khu An ton
Bn c th qun l tt c cc mt khu cn thit trong mt tp c m ha bo mt s dng Keepass. Bn s ch cn
mt mt khu ch truy cp tt c cc mt khu c qun l. Vi Keepass bn c th s dng nhng mt khu
mnh cho tng ti khon s dng v Keepass s ghi nh cc mt khu ny cho bn v tin ch ny cng cung cp tnh
nng sinh mt khu to nhng mt khu mi. Bn c th ng b c s d liu mt khu trong Keepass gia in
thoi v my tnh ca mnh. Chng ti khuyn bn ch nn thc hin vic ng b cc mt khu bn s dng trn in
thoi. Bn c th to mt c s d liu mt khu ring nh hn trn my tnh ng b vi in thoi thay v sao chp
ton b c s d liu vi tt c cc mt khu bn s dng ln trn in thoi ca mnh. ng thi, v mi mt khu s
c qun l bi mt mt khu ch, mt iu ht sc quan trng l la chn v s dng mt khu ch tht mnh
qun l c s d liu mt khu vi Keepass. Hy tham kho Chng 3: Lm th no to v duy tr mt khu bo
mt [36] .
Thc hnh: Hy bt u vi Hng dn MiniKeepass [37]

Gi Th in t dng in thoi Thng minh

Trong phn ny chng ti s cp ngn gn v vic s dng th in t trn in thoi thng minh. Chng ti khuyn
khch cc bn tm hiu thm cc phn Bo mt th in t [38] v Mo phn ng khi nghi ng hm th b theo di [39]
trong Chng 7: Lm th no bo mt truyn thng trn Internet ca bn [40]
Ngay ban u hy cn nhc xem liu bn c thc s cn truy cp th in t s dng in thoi hay khng. Bo mt cho
my tnh v cc thng tin trn v tng th s n gin hn so vi i vi thit b di ng nh in thoi thng minh.
in thoi thng minh rt d b mt cp, theo di v xm nhp.
Nu bn thc s cn phi truy cp th in t s dng chic in thoi thng minh, c mt s hnh ng bn cn thc
hin gim thiu nguy c bo mt.
Khng s dng in thoi thng minh l phng tin chnh truy cp th in t. Vic ti v (v di chuyn) th t
my ch th v ch lu tr ln in thoi l khng nn thc hin. bn c th ci t ng dng th in t ti v
bn sao ca cc th in t t my ch th.
Nu bn s dng vic m ha th in t vi mt s i tc lin lc, hy cn nhc vic ci t tin ch m ha ny
ln in thoi thng minh. iu ny c thm li ch l cc th in t m ha s vn an ton trong trng hp in
thoi ca bn ri vo tay k xu.
Lu cc kha m ha ring trn my in thoi c th kh ri ro. Nhng li ch ca vic c th gi v lu tr th in t
m ha bo mt c th s ln hn ri ro ny. Hy cn nhc vic to ra cc cp kha m ha ch dng trong trng hp
s dng cc thit b di ng ( s dng tin ch APG [31] ) khi bn s khng cn sao chp kha ring t my tnh vo
in thoi. Hy lu rng iu ny i hi bn phi yu cu cc i tc lin lc cng m ha th in t s dng kha
cng khai dnh cho thit b di ng ca bn.
Thc hnh: Hy bt u vi Hng dn K9 v APG [41]

Ghi hnh nh vi in thoi Thng minh

Vic ghi hnh nh, phim hay m thanh s dng in thoi thng minh c th l cng c hu hiu ghi v chia s cc s
kin quan trng. Tuy nhin, mt iu ht sc quan trng l phi cn trng v tn trng quyn ring t cng nh an ton

ca nhng ngi c chp nh ghi hnh hay ghi m. V d, nu bn chp hnh hay quay phim v ghi m mt s kin
quan trng no , c th s nguy him cho bn thn bn hay cho nhng ngi c ghi hnh nu chic in thoi ca
bn ri vo tay k xu. Trong trng hp ny, nhng gi sau c th hu ch:
C mt c ch ti an ton cc tp ghi hnh nh ln mt a a ch lu tr trc tuyn c bo mt v xa nhng tp
ny khi in thoi ngay lp tc ( ngay khi bn c th) sau khi ghi hnh.
S dng cng c lm nhe nh mt ca nhng ngi xut hin trong hnh hoc phim hay lm mo ting ca m
thanh c ghi v ch lu cc tp phim nh lm nhe nh mt v mo ting trn in thoi ca bn.
Bo v hoc xa cc thng tin siu d liu v thi gian v a im trong cc tp phim v hnh nh.
Guardian Project [20] pht trin mt ng dng Ngun M Min ph FOSS [24] l ObscuraCam [42] c kh nng nhn
dng khun mt v lm m nh mt. Bn c th chn ch lm m nh v tt nhin l c i tng cn lm nhe.
Obscuracam cng c th xa cc bc nh gc v nu bn thit t mt my ch lu tr cc hnh nh chp, tin ch
ny h tr tnh nng ti nh ln rt d dng.
Thc hnh: Hy bt u vi *Hng dn Obscuracam * [43]
Ti thi im bi vit ny, t chc nhn quyn Witness [44] ang hp tc vi Guardian project v gii php cho c ba
im nu trn.

Truy cp Internet mt cch Bo mt qua in thoi

Thng minh
Nh tho lun trong Chuong 7: Lm th no bo mt truyn thng Internet ca bn [40] v Chng 8: Lm
th no m bo nc danh v vt qua s kim duyt trn mng Internet [45] , truy cp ni dung trn Internet,
hoc ng ti cc thng tin trc tuyn nh hnh nh hoc cc on phim, s li nhng du vt tit l bn l ai v bn
ang lm g. iu ny c th khin bn gp nguy him. Vic s dng in thoi thng minh truy cp Internet s khin
nhng nguy c trn mc ln hn.

Truy cp qua kt ni WiFi hoc Mng Di ng

in thoi thng minh cho php bn la chn cch bn kt ni vo Internet: c th qua kt ni khng dy t mt thit b
pht khng dy (nh trong mt qun caf Internet), hoc qua kt ni d liu mng di ng, nh GPRS, EDGE, hay UMTS
c cung cp bi nh cung cp dch v mng di ng.
S dng kt ni khng dy s gim cc du vt d liu bn c th li trong mng ca nh cung cp dch v di ng
(bi khng kt ni s dng cc thng tin ng k dch v di ng). Tuy nhin, trong nhiu trng hp, kt ni qua mng
thng tin di ng l cch duy nht. Rt khng may l cc giao thc kt ni d liu cho mng in thoi di ng ( nh
EDGE hay UMTS) u khng phi l cc chun m. Cc nh pht trin c lp v cc k s bo mt khng th tm hiu
v kim tra cc giao thc ny hiu r v cch cc giao thc ny c ci t nh th no bi cc nh cung cp dch
v di ng.
mt s quc gia cc n v cung cp dch v in thoi di ng hot ng trong iu kin php l khc bit so vi cc
n v cung cp dch v kt ni Internet, iu ny cho php vic gim st v theo di s cht ch hn bi cc nh cung
cp v chnh quyn cc nc ny.
D bn phi s dng phng thc kt ni d liu no qua in thoi thng minh, bn lun c th gim thiu cc nguy c
l d liu bng cc s dng cc cng c nng danh v m ha.

S nc danh
truy cp cc thng tin mt cch nc danh, bn c th s dng ng dng Android l Orbot [46] . Orbot nh tuyn lung
thng tin lin lc ca bn qua mng n danh Tor.
Thc hnh: Hy bt u vi Hng dn Orbot [47]
Mt tin ch khc, Orweb, l mt trnh duyt web c cc tnh nng bo mt tng cng ging nh s dng cc my ch
trung chuyn v khng lu li lc s truy cp. Orbot v Orweb kt hp vt qua cc b lc chn v tng la v cho
php truy cp trc tuyn nc danh.
Thc hnh: Hy bt u vi Hng dn Orweb [48]

My ch trung chuyn
Phin bn dnh cho di ng ca Firefox [49] - Firefox mobile [50] c th c tch hp cc tin ch m rng my ch trung
chuyn gip nh tuyn d liu kt ni ca bn ti mt my ch trung chuyn. T my ch trung gian ny d liu ca
bn c chuyn ti trang web bn truy cp. Gii php ny hu ch trong trng hp mng b kim duyt, nhng s vn
l yu cu truy cp ca bn tr khi kt ni t trnh duyt ca bn ti my ch trung chuyn c m ha. Chng ti
khuyn dng tin ch m rng Proxy Mobile [51] (cng c pht trin bi Guardian Project [52] , cho php to kt ni my

khuyn dng tin ch m rng Proxy Mobile

(cng c pht trin bi Guardian Project , cho php to kt ni my
ch trung chuyn d dng vi Firefox. y cng l cch duy nht nh tuyn kt ni t trnh duyt Firefox mobile ti
Orbot v s dng mng nc danh Tor [28] .

Bo mt Nng cao in thoi Thng minh

To quyn truy cp y vo in thoi thng minh ca bn
Hu ht cc in thoi thng minh c nhiu tnh nng hn nhng g h iu hnh ci t sn, cc phn mm ca nh
sn xut (phn mm lp gia), hay cc chng trnh ca nh cung cp dch v in thoi cho php. Nhiu chc nng b
kha mt cch nghch l khin ngi dng khng th s dng hoc thay th cc tnh nng ny, v chng tn ti ngoi
tm kim sot ca ngi dng. Trong hu ht cc trng hp, nhng tnh nng ny khng thc s cn thit cho ngi
dng in thoi thng minh. Tuy nhin c nhng tnh nng v ng dng c th nng cao tnh bo mt cho d liu v kt
ni trn in thoi thng minh. ng thi c nhng tnh nng ci t sn cn c g b trnh cc nguy c bo mt.
V iu ny v nhng l do khc, nhiu ngi dng in thoi thng minh chn cch can thip v ci t cc phn mm
v chng trnh ln in thoi thng minh ca h t c quyn truy cp y cho php h ci t mt s chc
nng nng cao hay g b hoc gim bt nhng tnh nng khc.
Tin trnh thc hin vic vt qua cc hn ch ca h iu hnh ci t bi cc nh cung cp dch v mng hay nh sn
xut trn in thoi thng minh c gi l m kha rooting (i vi cc thit b Android) v jailbreaking ( trong thng
hp cc thit b dng iOS, nh iPhone hay iPad). Thng thng, vic m kha thnh cng s cho bn ton quyn truy
cp c th ci t v s dng cc ng dng b sung, cho php thay i cc cu hnh trc khi m kha khng th
thc hin c, v ton quyn kim sot vic lu tr d liu v th nh ca in thoi thng minh.
CNH BO: Vic m kha (Rooting hay jailbreaking) c th l qu trnh khng khi phc li trng thi c c, v
thng yu cu kinh nghim v ci t v cu hnh phn mm. Hy cn nhc k cc iu sau trc khi tin hnh m
kha:
S c ri ro khin int thoi ca bn khng th hot ng c na, hay mt ht chc nng.
Bo hnh ca nh sn xut hay nh cung cp dch v di ng c th b t chi.
mt s ni, vic m kha phn mm l phm php.
Tuy nhin, nu bn thc hin cn thn, vic m kha thit b l cch trc tip c quyn kim sot chic in thoi
thng minh ca bn v khin n tr nn an ton hn.

Phn mm Lp gia Thay th

Nu bn s hu in thoi Android, bn c th cn nhc ci t thay th phn mm lp gia tng cng thm kh
nng kim sot chic in thoi ca mnh. Hy lu rng c th ci t phn mm lp gia thay th, bn cn trc
ht phi c quyn truy cp ti a bng vic m kha in thoi ca mnh.
Mt v d v phn mm lp gia thay th cho in thoi Android l Cyanogenmod [53] cho php bn, ly mt v d, g b
cc ng dng mc h thng trn in thoi ca bn (v d cc ng dng c ci bi nh sn xut hoc nh cung cp
dch v di ng). Bng cch , bn c th gim bt nguy c thit b ca mnh b theo di, nh kh nng t ng gi d
liu ti nh cung cp dch v m bn khng h hay bit.
Hn th na, Cyanogenmod mc nh c ci t sn ng dng OpenVPN, ng dng ny c th kh kh t ci t.
VPN ( mng ring o) l mt trong cc cch bo mt nh tuyn kt ni Internet ca bn (hy xem bn di).
Cyanogenmod ng thi cung cp ch truy cp Incognito, vi ch ny lch s lin lc ca bn khng c lu li
trn in thoi.
Cyanogenmod bao gm nhiu tnh nng khc. Tuy nhin phn mm lp gia ny khng c h tr bi mi thit b
Android, v vy trc khi thc hin ci t, hy kim tra danh sch cc thit b h tr [54] .

M ha ton b cc a
Nu in thoi ca bn c m kha, bn c th cn nhc vic m ha ton b thit b lu tr d liu hoc to mt
vng nh trn in thoi bo v mt s thng tin trn . Luks Manager [55] cho php vic m ha tc thi n gin
cc vng nh vi giao din ngi dng rt thn thin. Chng ti ht sc khuyn ngh bn s dng cng c ny trc khi
lu tr d liu trn chic in thoi Android ca mnh v s dng a M ha c to bi Luks Manager lu tr d
liu ca mnh.
D n Whisper Systems ang pht trin ng dng WhisperCore [56] cho php m ha ton b thit b Android ca bn.

Mng Ring o (VPN)

Mt kt ni VPN cung cp mt knh m ha qua mng Internet gia thit b ca bn v my ch VPN. Knh ny c
gi l ng hm, v khng ging nh cc knh truyn m ha khc, nh https, knh ny n ton b ccs dch v, giao

thc v ni dung. Mt ng hm VPN c thit lp mt ln v tn ti n khi bn quyt nh tt kt ni .

Hy lu , do lung d liu ca bn s i qua my ch trung chuyn hay my ch VPN, bn th ba ch cn truy cp c
vo my ch ny phn tch theo di cc hot ng lin lc ca bn. V vy mt iu quan trng l phi chn cn thn
nh cung cp dch v my ch trung chuyn v VPN. Mt iu nn thc hin l s dng cc my ch trung gian v/hoc
my ch VPN v vic phn tn lung d liu s gip gim nguy c b nh hng bi mt dch v b kim duyt.
Chng ti gii thiu s dng my ch RiseUp VPN [57] . Bn c th s dng my ch VPN RiseUp trn thit b Android
sau khi ci t Cyanogenmod (xem pha trn). Vic thit lp kt ni ti my ch RiseUp VPN cho in thoi iPhone cng
kh d dng hy xem thm ti y [58] .
URL ngun (c tm thy vo ngy 04/11/2015 - 03:17): https://info.securityinabox.org/vi/chuong-11
Cc lin kt:
[1] https://info.securityinabox.org/vi/chuong-10
[2] https://info.securityinabox.org/vi/Glossary#GPS
[3] https://info.securityinabox.org/vi/chuong-9
[4] https://info.securityinabox.org/vi/chuong-5
[5] https://info.securityinabox.org/vi/Glossary#FOSS
[6] https://info.securityinabox.org/vi/glossary#GPS
[7] https://info.securityinabox.org/vi/android_basic
[8] https://info.securityinabox.org/vi/iphone_basic
[9] http://f-droid.org
[10] https://info.securityinabox.org/vi/glossary#FOSS
[11] https://info.securityinabox.org/en/glossary#apk
[12] https://info.securityinabox.org/vi/chuong_9_2_4
[13] https://info.securityinabox.org/vi/chuong_9_2_2
[14] https://info.securityinabox.org/en/Glossary#VoIP
[15] https://info.securityinabox.org/vi/glossary#skype
[16] https://info.securityinabox.org/vi/chuong_7_3
[17] http://f-droid.org/repository/browse/?fdid=com.csipsimple&fdpage=4
[18] https://guardianproject.info/wiki/OSTN
[19] https://ostel.me
[20] https://guardianproject.info
[21] https://play.google.com/store/apps/details?id=org.thoughtcrime.redphone
[22] https://info.securityinabox.org/vi/chuong_9_2_3
[23] https://play.google.com/store/apps/details?id=org.thoughtcrime.securesms
[24] https://info.securityinabox.org/en/glossary#FOSS
[25] https://info.securityinabox.org/vi/textsecure_main
[26] https://guardianproject.info/apps/gibber/
[27] https://info.securityinabox.org/vi/glossary#OTR
[28] https://info.securityinabox.org/vi/glossary#Tor
[29] https://info.securityinabox.org/vi/gibberbot_main
[30] https://chatsecure.org
[31] https://info.securityinabox.org/vi/APG_main
[32] https://info.securityinabox.org/en/APG_main
[33] https://code.google.com/p/cryptonite/
[34] https://info.securityinabox.org/vi/chuong_11_8
[35] https://info.securityinabox.org/vi/Cryptonite_main
[36] https://info.securityinabox.org/vi/chuong-3
[37] https://info.securityinabox.org/vi/KeepassDroid_main
[38] https://info.securityinabox.org/vi/chapter_7_1
[39] https://info.securityinabox.org/en/chuong_7_2
[40] https://info.securityinabox.org/vi/chuong-7
[41] https://info.securityinabox.org/vi/K9_main
[42] https://guardianproject.info/apps/obscuracam/
[43] https://info.securityinabox.org/vi/Obscuracam_main
[44] https://info.securityinabox.org/vi/www.witness.org
[45] https://info.securityinabox.org/vi/chuong-8
[46] https://www.torproject.org/docs/android.html.en
[47] https://info.securityinabox.org/vi/Orbot_main
[48] https://info.securityinabox.org/vi/Orweb_main
[49] https://info.securityinabox.org/vi/glossary#Firefox
[50] http://f-droid.org/repository/browse/?fdid=org.mozilla.firefox
[51] https://guardianproject.info/apps/proxymob-firefox-add-on/
[52] https://guardianproject.info/
[53] http://www.cyanogenmod.com
[54] http://www.cyanogenmod.com/devices
[55] http://www.whispersys.com/
[56] http://www.whispersys.com/whispercore.html
[57] https://help.riseup.net/en/vpn
[58] https://support.apple.com/kb/HT1424