{"id":111476,"date":"2026-07-24T00:44:40","date_gmt":"2026-07-23T22:44:40","guid":{"rendered":"https:\/\/www.infokuryr.cz\/n\/?p=111476"},"modified":"2026-07-23T18:44:12","modified_gmt":"2026-07-23T16:44:12","slug":"microsoft-vam-do-pocitace-s-windows-vypalil-tajne-cislo-vpn-ho-nedokaze-skryt","status":"publish","type":"post","link":"https:\/\/www.infokuryr.cz\/n\/2026\/07\/24\/microsoft-vam-do-pocitace-s-windows-vypalil-tajne-cislo-vpn-ho-nedokaze-skryt\/","title":{"rendered":"Microsoft v\u00e1m do po\u010d\u00edta\u010de s Windows vyp\u00e1lil tajn\u00e9 \u010d\u00edslo \u2013 VPN ho nedok\u00e1\u017ee skr\u00fdt"},"content":{"rendered":"
<\/div>\n
\n
\n

N\u00e1stroj, kter\u00fd odhalil skute\u010dn\u00e9ho hackera, je identicky p\u0159\u00edtomen v po\u010d\u00edta\u010di ka\u017ed\u00e9ho nevinn\u00e9ho u\u017eivatele.<\/span><\/h4>\n

Devaten\u00e1ctilet\u00fd mlad\u00edk si p\u0159ed obli\u010dejem dr\u017eel v\u011bj\u00ed\u0159 vyroben\u00fd ze stodolarov\u00fdch bankovek a fotku zve\u0159ejnil na Snapchatu. O n\u011bkolik dn\u00ed d\u0159\u00edve poslal p\u0159\u00e1tel\u016fm fotku estonsk\u00e9 policejn\u00ed stanice s popiskem: \u201eC\u00edt\u00edm se jako Raymond Reddington, 1. s\u00e9rie, 1. epizoda\u201c \u2013 odkaz na televizn\u00edho padoucha, kter\u00fd jde do \u00fast\u0159ed\u00ed FBI a s\u00e1m se ud\u00e1. Pozd\u011bji p\u0159i\u0161el cit\u00e1t, kter\u00fd nezest\u00e1rne dob\u0159e: \u201eFeder\u00e1lov\u00e9 nemaj\u00ed tu\u0161en\u00ed, co pr\u00e1v\u011b zpackali,\u201c napsal.<\/span><\/p>\n

Feder\u00e1lov\u00e9 to v\u011bd\u011bli. V\u011bd\u011bli to u\u017e p\u0159es rok. A to, co Peter Stokes odhalil, nebyl p\u0159e\u0159eknut\u00ed, zr\u00e1dce ani prolomen\u00e9 heslo. Byl to jeho notebook s Windows, kter\u00fd d\u011blal p\u0159esn\u011b to, k \u010demu ho Microsoft navrhl.<\/span><\/p>\n

Stokes, kter\u00fd m\u00e1 dvoj\u00ed ob\u010danstv\u00ed USA a Estonska a \u017eil v Tallinnu, byl zat\u010den ve Finsku p\u0159i pokusu o n\u00e1stup do letadla a vyd\u00e1n do Chicaga, kde \u010del\u00ed obvin\u011bn\u00edm souvisej\u00edc\u00edm s hackerskou skupinou Scattered Spider.<\/span><\/p>\n

Vl\u00e1da skupinu obvi\u0148uje z v\u00edce ne\u017e 100 naru\u0161en\u00ed s\u00edt\u011b od roku 2022, z v\u00fdkupn\u00e9ho ve v\u00fd\u0161i p\u0159esahuj\u00edc\u00edho 100 milion\u016f dolar\u016f a z \u0159ady \u00fatok\u016f na spole\u010dnosti, kter\u00e9 vypadaj\u00ed jako \u017eeb\u0159\u00ed\u010dek \u201ekdo je kdo\u201c v obchodn\u00edm sv\u011bt\u011b.<\/span><\/p>\n

St\u00e1tn\u00ed z\u00e1stupci tvrd\u00ed, \u017ee Stokes pomohl nabourat se do prodejny luxusn\u00edch \u0161perk\u016f, ukr\u00e1st jeho data a vyd\u00edrat p\u0159ibli\u017en\u011b 8 milion\u016f dolar\u016f v kryptom\u011bn\u00e1ch. Spole\u010dnost odm\u00edtla zaplatit, ale i tak p\u0159i\u0161la o \u0161kodu ve v\u00fd\u0161i nejm\u00e9n\u011b 2 milion\u016f dolar\u016f.<\/span><\/p>\n

Ale to nen\u00ed d\u016fvod, pro\u010d v\u00fdzkumn\u00edci v oblasti kybernetick\u00e9 bezpe\u010dnosti, in\u017een\u00fd\u0159i ochrany dat a cel\u00e1 \u0159ada b\u011b\u017en\u00fdch u\u017eivatel\u016f Windows tento t\u00fdden z\u00edrali na soudn\u00ed spis. D\u016fvodem je jedin\u00fd \u0159et\u011bzec znak\u016f skryt\u00fd v ob\u017ealob\u011b FBI \u2013 \u010d\u00edslo, o kter\u00e9m v\u011bt\u0161ina majitel\u016f Windows nikdy nesly\u0161ela a kter\u00e9 nem\u016f\u017ee naj\u00edt ani ve sv\u00fdch vlastn\u00edch po\u010d\u00edta\u010d\u00edch.<\/span><\/p>\n

Kopii ob\u017ealoby jsme v\u00e1m poskytli\u00a0ke sta\u017een\u00ed\u00a0<\/span>zde .<\/span><\/a><\/p>\n

Microsoft tomu \u0159\u00edk\u00e1\u00a0<\/span>Glob\u00e1ln\u00ed identifik\u00e1tor za\u0159\u00edzen\u00ed (GDID)<\/span><\/strong>\u00a0. GDID je d\u016fvodem, pro\u010d byl zlo\u010dinec, kter\u00fd ud\u011blal t\u00e9m\u011b\u0159 v\u0161e spr\u00e1vn\u011b, p\u0159esto dopaden \u2013 a nyn\u00ed je ve va\u0161em po\u010d\u00edta\u010di.<\/span><\/p>\n

Jedna v\u011bc, kterou VPN nem\u016f\u017ee skr\u00fdt<\/span><\/h2>\n

Stokes nebyl neopatrn\u00fd, pokud jde o anonymitu. Sv\u00e9 aktivity sm\u011broval p\u0159es VPN (virtu\u00e1ln\u00ed priv\u00e1tn\u00ed s\u00ed\u0165), standardn\u00ed n\u00e1stroj pro skryt\u00ed skute\u010dn\u00e9 polohy na internetu.<\/span><\/p>\n

VPN nahrazuje va\u0161i skute\u010dnou IP adresu \u2013 \u010d\u00edseln\u00fd identifik\u00e1tor va\u0161eho internetov\u00e9ho p\u0159ipojen\u00ed \u2013 adresou VPN serveru. Webov\u00e9 str\u00e1nky vid\u00ed server, ne v\u00e1s. V\u00e1\u0161 poskytovatel internetov\u00fdch slu\u017eeb vid\u00ed \u0161ifrovan\u00fd provoz do VPN, nikoli webov\u00e9 str\u00e1nky, kter\u00e9 nav\u0161t\u011bvujete. P\u0159i spr\u00e1vn\u00e9m pou\u017eit\u00ed je to skute\u010dn\u00fd \u0161t\u00edt \u2013 stejn\u00fd \u0161t\u00edt, na kter\u00fd se spol\u00e9haj\u00ed novin\u00e1\u0159i, aby chr\u00e1nili sv\u00e9 zdroje, aktivisty pracuj\u00edc\u00ed pod nep\u0159\u00e1telsk\u00fdmi vl\u00e1dami a ob\u011bti zneu\u017e\u00edv\u00e1n\u00ed, kter\u00e9 se skr\u00fdvaj\u00ed p\u0159ed stalkery.<\/span><\/p>\n

VPN sice splnila svou funkci. Co ale nedok\u00e1zala, bylo zm\u011bnit identitu po\u010d\u00edta\u010de za n\u00ed.<\/span><\/p>\n

Podle spole\u010dnosti Microsoft je glob\u00e1ln\u00ed identifik\u00e1tor za\u0159\u00edzen\u00ed \u201etrval\u00fd identifik\u00e1tor souvisej\u00edc\u00ed se za\u0159\u00edzen\u00edm, kter\u00fd se pou\u017e\u00edv\u00e1 k jedine\u010dn\u00e9 identifikaci instalace opera\u010dn\u00edho syst\u00e9mu Windows na za\u0159\u00edzen\u00ed \u2013 a\u0165 u\u017e jde o fyzick\u00e9 za\u0159\u00edzen\u00ed (nap\u0159. mobiln\u00ed telefon nebo notebook), nebo virtu\u00e1ln\u00ed po\u010d\u00edta\u010d.\u201c<\/span><\/p>\n

Jednodu\u0161e \u0159e\u010deno: Kdy\u017e se syst\u00e9m Windows nainstaluje do po\u010d\u00edta\u010de, p\u0159i\u0159ad\u00ed t\u00e9to instalaci s\u00e9riov\u00e9 \u010d\u00edslo a hl\u00e1s\u00ed jej spole\u010dnosti Microsoft. Toto \u010d\u00edslo putuje s telemetri\u00ed \u2013 neust\u00e1l\u00fdm proudem diagnostick\u00fdch a aktivitn\u00edch dat, kter\u00e1 syst\u00e9m Windows odes\u00edl\u00e1 na servery spole\u010dnosti Microsoft. Nez\u00e1le\u017e\u00ed na tom, jakou IP adresu dan\u00fd den pou\u017e\u00edv\u00e1te; \u010d\u00edslo sleduje instalaci.<\/span><\/p>\n

Spole\u010dnost Microsoft soudu sd\u011blila, \u017ee identifik\u00e1tor \u201ez\u016fst\u00e1v\u00e1 konzistentn\u00ed nap\u0159\u00ed\u010d aktualizacemi opera\u010dn\u00edho syst\u00e9mu Windows v za\u0159\u00edzen\u00ed\u201c. P\u0159i p\u0159einstalaci syst\u00e9mu Windows z\u00edsk\u00e1te nov\u00fd GDID, ale ten star\u00fd nezmiz\u00ed ze z\u00e1znam\u016f spole\u010dnosti Microsoft. Spole\u010dnost si jej uchov\u00e1v\u00e1 a st\u00e1le jej lze p\u0159i\u0159adit k za\u0159\u00edzen\u00ed, ze kter\u00e9ho poch\u00e1z\u00ed. Nelze se odhl\u00e1sit. V Nastaven\u00ed nen\u00ed \u017e\u00e1dn\u00fd p\u0159ep\u00edna\u010d, kter\u00fd by v\u00e1m umo\u017enil tuto funkci vypnout. Nikdy jste nebyli dot\u00e1z\u00e1ni.<\/span><\/p>\n

Od s\u00e9riov\u00e9ho \u010d\u00edsla k tv\u00e1\u0159i<\/span><\/h2>\n

Podle Stokesovy vlastn\u00ed \u010dasov\u00e9 osy to znamen\u00e1, \u017ee aby se hacke\u0159i nabourali do klenotnictv\u00ed, nainstalovali na servery spole\u010dnosti n\u00e1stroj s n\u00e1zvem ngrok.<\/span><\/p>\n

Ngrok vytv\u00e1\u0159\u00ed \u0161ifrovan\u00fd tunel, kter\u00fd obch\u00e1z\u00ed s\u00ed\u0165ovou obranu a umo\u017e\u0148uje vn\u011bj\u0161\u00edm osob\u00e1m p\u0159\u00edstup k po\u010d\u00edta\u010d\u016fm, kter\u00e9 by jinak m\u011bly b\u00fdt nep\u0159\u00edstupn\u00e9. Ob\u017ealoba uv\u00e1d\u00ed, \u017ee skupina jej pou\u017eila \u201ek obejit\u00ed s\u00ed\u0165ov\u00e9 obrany spole\u010dnosti F a umo\u017en\u011bn\u00ed trval\u00e9ho neopr\u00e1vn\u011bn\u00e9ho p\u0159\u00edstupu do datov\u00e9ho centra spole\u010dnosti F\u201c a n\u00e1sledn\u00e9mu \u00faniku dat t\u00edmto tunelem.<\/span><\/p>\n

Nastaven\u00ed slu\u017eby ngrok vy\u017eadovalo vytvo\u0159en\u00ed \u00fa\u010dtu. Tento \u00fa\u010det byl vytvo\u0159en 12. kv\u011btna 2025 z adresy VPN proxy kon\u010d\u00edc\u00ed na .168. VPN skryla identitu u\u017eivatele. Neskryla v\u0161ak instalaci Windows. Z\u00e1znamy spole\u010dnosti Microsoft uk\u00e1zaly, \u017ee p\u0159esn\u011b ve stejnou minutu, kdy byl \u00fa\u010det ngrok vytvo\u0159en, nav\u0161t\u00edvilo p\u0159ihla\u0161ovac\u00ed str\u00e1nku slu\u017eby ngrok za\u0159\u00edzen\u00ed s GDID g:6755467234350028.<\/span><\/p>\n

O t\u0159i hodiny pozd\u011bji se ze stejn\u00e9ho za\u0159\u00edzen\u00ed, s pou\u017eit\u00edm stejn\u00e9 proxy, dostalo k webov\u00fdm str\u00e1nk\u00e1m klenotnictv\u00ed. Po\u010d\u00edta\u010d, kter\u00fd nainstaloval \u00fato\u010dn\u00fd n\u00e1stroj, m\u011bl jm\u00e9no, a\u010dkoli jeho majitel ho nem\u011bl.<\/span><\/p>\n

Od s\u00e9riov\u00e9ho \u010d\u00edsla k tv\u00e1\u0159i<\/span><\/h2>\n

Identifik\u00e1tor za\u0159\u00edzen\u00ed je pro vy\u0161et\u0159ovatele bezcenn\u00fd, dokud jej nemohou propojit s osobou. V tomto okam\u017eiku p\u0159estal b\u00fdt GDID technickou kuriozitou a stal se p\u00e1te\u0159\u00ed p\u0159\u00edpadu.<\/span><\/p>\n

Proto\u017ee identifik\u00e1tor putuje pomoc\u00ed telemetrie, mohl Microsoft p\u0159edat FBI n\u011bco, co VPN nikdy nem\u016f\u017ee smazat: nep\u0159etr\u017eitou historii IP adres, kter\u00e9 dan\u00e9 za\u0159\u00edzen\u00ed pou\u017e\u00edvalo po cel\u00e9 m\u011bs\u00edce. Vy\u0161et\u0159ovatel\u00e9 tuto historii um\u00edstili vedle z\u00e1znam\u016f o p\u0159ihl\u00e1\u0161en\u00edch k \u00fa\u010dt\u016fm, o kter\u00fdch se ji\u017e domn\u00edvali, \u017ee pat\u0159\u00ed Stokesovi \u2013 jeho Snapchatu, jeho Facebooku, dvou \u00fa\u010dt\u016f Apple a jeho p\u0159ihla\u0161ovac\u00edch \u00fadaj\u016f k online h\u0159e Growtopia.<\/span><\/p>\n

\"\"
[V\u00fdvojov\u00fd diagram zn\u00e1zor\u0148uj\u00edc\u00ed protokoly RDP namapovan\u00e9 na r\u016fzn\u00e9 odpov\u011bdi od Snapchatu, Apple a Microsoftu s uveden\u00fdmi IP adresami.]<\/span><\/figcaption><\/figure>\n

4. \u010dervna 2024 za\u0159\u00edzen\u00ed GDID pou\u017e\u00edvalo IP adresu v Tallinnu. B\u011bhem n\u011bkolika hodin se stejn\u00e1 adresa p\u0159ihl\u00e1sila do Stokesov\u00fdch \u00fa\u010dt\u016f na Snapchatu a Facebooku. V listopadu 2024 se za\u0159\u00edzen\u00ed objevilo na IP adrese v New Yorku. Cestovn\u00ed z\u00e1znamy ministerstva zahrani\u010d\u00ed ukazuj\u00ed, \u017ee Stokes byl v tyto dny v New Yorku, a jeho vlastn\u00ed fotografie ze Snapchatu ho ukazuj\u00ed v hotelech Four Seasons a Waldorf Astoria a tak\u00e9 na z\u00e1pase UFC ve m\u011bst\u011b 16. listopadu.<\/span><\/p>\n

Za\u0159\u00edzen\u00ed pozd\u011bji nav\u0161t\u00edvilo webov\u00e9 str\u00e1nky hotelu Empire v New Yorku a st\u00e1tn\u00ed z\u00e1stupci tvrd\u00ed, \u017ee koberec a n\u00e1bytek na jedn\u00e9 ze Stokesov\u00fdch selfie na Snapchatu odpov\u00eddaly apartm\u00e1 hotelu Empire. V \u00fanoru 2025 se za\u0159\u00edzen\u00ed nach\u00e1zelo v Thajsku. Stokes tam byl tak\u00e9 a p\u00f3zoval s lahv\u00ed na vodu s n\u00e1pisem \u201eWALDORF ASTORIA BANGKOK\u201c.<\/span><\/p>\n

Vl\u00e1da pot\u0159ebovala za\u0159\u00edzen\u00ed, kter\u00e9 by se oznamovalo, a\u0165 u\u017e se objev\u00ed kamkoli \u2013 a mlad\u00e9ho mu\u017ee, kter\u00fd by nemohl p\u0159estat fotografovat sv\u00e9 luxusn\u00ed cesty. GDID byl vl\u00e1knem, kter\u00e9 spojovalo \u00fa\u010det ngrok, maskovan\u00fd proxy, se skute\u010dnou osobou, kter\u00e1 neust\u00e1le zve\u0159ej\u0148ovala svou polohu na soci\u00e1ln\u00edch s\u00edt\u00edch.<\/span><\/p>\n

Co z\u00e1kon p\u0159edepisuje \u2013 a co ne<\/span><\/h2>\n

Pr\u00e1vn\u00ed r\u00e1mec, kter\u00fd za t\u00edm stoj\u00ed, ukazuje, jak mal\u00e9 t\u0159en\u00ed existuje mezi za\u0159\u00edzen\u00edm na va\u0161em stole a spisem v nezn\u00e1m\u00e9 kancel\u00e1\u0159i.<\/span><\/p>\n

Obvin\u011bn\u00ed proti Stokesovi jsou zalo\u017eena na z\u00e1kon\u011b o po\u010d\u00edta\u010dov\u00fdch podvodech a zneu\u017e\u00edv\u00e1n\u00ed (Computer Fraud and Abuse Act), nejd\u016fle\u017eit\u011bj\u0161\u00edm americk\u00e9m z\u00e1kon\u011b proti hackingu, kter\u00fd kriminalizuje neopr\u00e1vn\u011bn\u00fd p\u0159\u00edstup k po\u010d\u00edta\u010di, jako\u017e i zp\u016fsoben\u00ed \u0161kody nebo vyd\u00edr\u00e1n\u00ed po vniknut\u00ed. Tato \u010d\u00e1st je nesporn\u00e1.<\/span><\/p>\n

Nabour\u00e1n\u00ed klenotnictv\u00ed a po\u017eadov\u00e1n\u00ed 8 milion\u016f dolar\u016f je zlo\u010din v jak\u00e9koli form\u011b.<\/span><\/p>\n

Odhaluj\u00edc\u00ed je zp\u016fsob, jak\u00fdm vy\u0161et\u0159ovatel\u00e9 shrom\u00e1\u017edili d\u016fkazy. Microsoft ne\u010dekal na \u017e\u00e1dost. Podle ob\u017ealoby spole\u010dnost v \u0159\u00edjnu 2024 proaktivn\u011b odk\u00e1zala Stokese americk\u00fdm \u00fa\u0159ad\u016fm \u2013 v\u00edce ne\u017e rok p\u0159ed vznesen\u00edm obvin\u011bn\u00ed \u2013 a sv\u00e9ho intern\u00edho podez\u0159el\u00e9ho ozna\u010dila za \u201epravd\u011bpodobn\u00e9ho provozovatele Octo Tempest\u201c (vlastn\u00ed n\u00e1zev spole\u010dnosti pro Scattered Spider) a odhadla jeho \u201epravd\u011bpodobn\u00e9 skute\u010dn\u00e9 jm\u00e9no Peter Stokes\u201c. Microsoft dobrovoln\u011b poskytl jm\u00e9no, m\u011bsto a teorii o zlo\u010dinu je\u0161t\u011b p\u0159edt\u00edm, ne\u017e spole\u010dnosti kdokoli cokoli poskytl.<\/span><\/p>\n

Kdy\u017e pot\u00e9 vl\u00e1da podnikla pr\u00e1vn\u00ed kroky, n\u00e1stroje byly b\u011b\u017en\u00e9. St\u00e1tn\u00ed z\u00e1stupce z\u00edskal zp\u011btn\u00fd p\u0159\u00edkaz podle ustanoven\u00ed z\u00e1kona o uchov\u00e1van\u00e9 komunikaci, paragrafu 2703(d), zam\u011b\u0159en\u00fd na dv\u011b IP adresy v Tallinnu.<\/span><\/p>\n

Opa\u010dn\u00e9 po\u0159ad\u00ed ot\u00e1zek obrac\u00ed obvyklou ot\u00e1zku. M\u00edsto aby se dodavatele ptali, co zn\u00e1m\u00fd podez\u0159el\u00fd ud\u011blal, syst\u00e9m po\u017eaduje, aby dodavatel identifikoval v\u0161echny \u00fa\u010dty, kter\u00e9 se dotkly konkr\u00e9tn\u00ed adresy, a pot\u00e9 poskytl souvisej\u00edc\u00ed adresy. Microsoft vyhov\u011bl a poskytl dal\u0161\u00ed IP adresy spojen\u00e9 se Stokesem. Zbytek pokryly domovn\u00ed prohl\u00eddky.<\/span><\/p>\n

Doktr\u00edna, kter\u00e1 to umo\u017e\u0148uje, je star\u00e1 des\u00edtky let a soudy ji jen z\u0159\u00eddka zpochyb\u0148uj\u00ed. Podle\u00a0<\/span>doktr\u00edny<\/span><\/strong>\u00a0o t\u0159et\u00edch stran\u00e1ch informace, kter\u00e9 dobrovoln\u011b sd\u00edl\u00edte se spole\u010dnost\u00ed, obecn\u011b ztr\u00e1cej\u00ed ochranu podle \u010dtvrt\u00e9ho dodatku \u2013 na z\u00e1klad\u011b teorie, \u017ee nem\u00e1te \u017e\u00e1dn\u00e9 legitimn\u00ed o\u010dek\u00e1v\u00e1n\u00ed soukrom\u00ed v souvislosti s \u00fadaji, kter\u00e9 jste ji\u017e sd\u00edleli.<\/span><\/p>\n

Nejvy\u0161\u0161\u00ed soud tuto logiku poru\u0161il v roce 2018 v p\u0159\u00edpadu\u00a0<\/span>Carpenter v. Spojen\u00e9 st\u00e1ty<\/span><\/em>\u00a0, kdy\u017e rozhodl, \u017ee policie pot\u0159ebuje soudn\u00ed p\u0159\u00edkaz k p\u0159\u00edstupu k podrobn\u00fdm histori\u00edm polohy ulo\u017een\u00fdm mobiln\u00edmi oper\u00e1tory. Zda trval\u00fd identifik\u00e1tor za\u0159\u00edzen\u00ed a historie jeho IP adres spadaj\u00ed pod Carpenterovu ochranu, nebo se kvalifikuj\u00ed jako b\u011b\u017en\u00e9 obchodn\u00ed z\u00e1znamy, nebylo ov\u011b\u0159ov\u00e1no. Ob\u017ealovan\u00fd, jako je Stokes, tv\u00e1\u0159\u00ed v tv\u00e1\u0159 drtiv\u00fdm d\u016fkaz\u016fm, nen\u00ed ten, kdo to bude ov\u011b\u0159ovat. Z\u00e1kon zde nen\u00ed ust\u00e1len\u00fd. Je jednodu\u0161e nezpochybniteln\u00fd.<\/span><\/p>\n

Doktr\u00edna t\u0159et\u00ed strany se to\u010d\u00ed kolem jednoho slova:\u00a0<\/span>dobrovolnost<\/span><\/strong>\u00a0. Teorie p\u0159edpokl\u00e1d\u00e1, \u017ee jste se rozhodli sd\u00edlet data. Nevybrali jste si GDID. Nem\u016f\u017eete ho vid\u011bt, nem\u016f\u017eete ho smazat a nikdy jste nebyli po\u017e\u00e1d\u00e1ni o souhlas. Pr\u00e1vn\u00ed od\u016fvodn\u011bn\u00ed pro zach\u00e1zen\u00ed s t\u011bmito daty jako s neleg\u00e1ln\u00edmi daty spo\u010d\u00edv\u00e1 v souhlasu, kter\u00fd nikdy nebyl ud\u011blen.<\/span><\/p>\n

Obh\u00e1jci tohoto na\u0159\u00edzen\u00ed uv\u00e1d\u011bj\u00ed opr\u00e1vn\u011bn\u00fd argument a zaslou\u017e\u00ed si svou nejsiln\u011bj\u0161\u00ed formu. Modern\u00ed opera\u010dn\u00ed syst\u00e9my pot\u0159ebuj\u00ed diagnostick\u00e1 data k uzav\u0159en\u00ed bezpe\u010dnostn\u00edch mezer, oprav\u011b p\u00e1d\u016f a identifikaci p\u0159esn\u00e9ho malwaru, kter\u00fd Scattered Spider pou\u017e\u00edv\u00e1. Stabiln\u00ed identifik\u00e1tor za\u0159\u00edzen\u00ed pom\u00e1h\u00e1 spole\u010dnosti Microsoft rozli\u0161it jeden po\u010d\u00edta\u010d od druh\u00e9ho, kdy\u017e dod\u00e1v\u00e1 tyto aktualizace a vyhled\u00e1v\u00e1 tyto hrozby. Stejn\u00e1 telemetrie, kter\u00e1 odhalila Stokese, tak\u00e9 poh\u00e1n\u00ed obranu, kter\u00e1 chr\u00e1n\u00ed miliony lid\u00ed, kte\u0159\u00ed nikdy neud\u011blaj\u00ed nic \u0161patn\u00e9ho. A Microsoft v tom zdaleka nen\u00ed s\u00e1m. Apple, Google a ostatn\u00ed t\u00e9m\u011b\u0159 jist\u011b tak\u00e9 dok\u00e1\u017eou zjistit otisky prst\u016f za\u0159\u00edzen\u00ed, na kter\u00fdch b\u011b\u017e\u00ed jejich software.<\/span><\/p>\n

To v\u0161echno je pravda a je to druho\u0159ad\u00e9 ve srovn\u00e1n\u00ed s t\u00edm, co by v\u00e1s m\u011blo zaj\u00edmat.<\/span><\/p>\n

Microsoft dok\u00e1\u017ee identifikovat hackera. Dok\u00e1\u017ee tak\u00e9 identifikovat kohokoli jin\u00e9ho \u2013 ti\u0161e, standardn\u011b, bez upozorn\u011bn\u00ed a bez tla\u010d\u00edtka vypnut\u00ed \u2013 a sd\u00edlet tuto identitu s t\u0159et\u00edmi stranami. Funkce navr\u017een\u00e1 k odhalen\u00ed nejhor\u0161\u00edch u\u017eivatel\u016f existuje identicky i na po\u010d\u00edta\u010d\u00edch t\u011bch nejlep\u0161\u00edch. Ne\u017e ozna\u010d\u00ed va\u0161i instalaci a za\u010dne protokolovat, nekontroluje va\u0161e \u00famysly. Zdravotn\u00ed sestra, odborov\u00fd organiz\u00e1tor, novin\u00e1\u0159 setk\u00e1vaj\u00edc\u00ed se s oznamovatelem, teenager zkoumaj\u00edc\u00ed stigmatizovanou ot\u00e1zku \u2013 v\u0161ichni nesou stejn\u00e9 neviditeln\u00e9 \u010d\u00edslo, generuj\u00ed stejnou sledovatelnou historii, nach\u00e1zej\u00ed se na stejn\u00fdch serverech a jsou k dispozici za stejn\u00fdch rutinn\u00edch podm\u00ednek.<\/span><\/p>\n

Tento design je z\u00e1m\u011brn\u00fd. Jde o trval\u00fd identifik\u00e1tor, v\u00e1zan\u00fd na v\u00e1\u0161 hardware, kter\u00fd zaznamen\u00e1v\u00e1 va\u0161i aktivitu, uchov\u00e1v\u00e1 se i po vymaz\u00e1n\u00ed po\u010d\u00edta\u010de a je jednou zm\u00edn\u011bn v dokumentu, kter\u00fd je naps\u00e1n tak, aby byl ignorov\u00e1n. Trvalost, neviditelnost a uchov\u00e1v\u00e1n\u00ed jsou vlastnosti \u2013 a ka\u017ed\u00e1 z nich umo\u017enila d\u016fkazy proti Stokesovi.<\/span><\/p>\n

Kluzk\u00fd svah zde nen\u00ed hypotetick\u00e1 r\u00e9torika, proto\u017ee stejn\u00e1 architektura ji\u017e slou\u017e\u00ed norm\u00e1ln\u00edm org\u00e1n\u016fm \u010dinn\u00fdm v trestn\u00edm \u0159\u00edzen\u00ed prost\u0159ednictv\u00edm obr\u00e1cen\u00fdch p\u0159\u00edkaz\u016f, kter\u00e9 shroma\u017e\u010fuj\u00ed v\u0161echny osoby v bl\u00edzkosti ur\u010dit\u00e9 adresy. P\u0159eneste to z IP bloku v Tallinnu na protest, kliniku, me\u0161itu nebo redakci a za\u0159\u00edzen\u00ed, kter\u00e9 v\u00e1s v\u0161ude doprov\u00e1z\u00ed, se stane sv\u011bdkem, kter\u00fd ur\u010d\u00ed va\u0161i polohu.<\/span><\/p>\n

Anonymita je p\u0159edpokladem pro to, aby zdroj mohl hovo\u0159it s novin\u00e1\u0159em, aby se disident mohl organizovat, aby si \u010dlov\u011bk mohl p\u0159e\u010d\u00edst o diagn\u00f3ze, p\u0159esv\u011bd\u010den\u00ed nebo politice, ani\u017e by si vytvo\u0159il trval\u00fd z\u00e1znam n\u011bkde, ke kter\u00e9mu nem\u00e1 p\u0159\u00edstup. Stejn\u00fd n\u00e1stroj, kter\u00fd identifikuje hackera, identifikuje i protestuj\u00edc\u00edho.<\/span><\/p>\n

Nic z toho Stokese ned\u011bl\u00e1 sympatick\u00fdm. D\u011bl\u00e1 ho to pou\u010dn\u00fdm. Jeho p\u0159\u00edpad je t\u00edm vz\u00e1cn\u00fdm okam\u017eikem, kdy je stroj pops\u00e1n u ve\u0159ejn\u00e9ho soudu \u2013 konkr\u00e9tn\u011b s uveden\u00edm s\u00e9riov\u00fdch \u010d\u00edsel a \u010dasov\u00fdch raz\u00edtek \u2013 ne\u017e znovu zmiz\u00ed v rutin\u011b proaktivn\u00edch doporu\u010den\u00ed a zape\u010det\u011bn\u00fdch p\u0159\u00edkaz\u016f. Uk\u00e1zal n\u00e1m tento n\u00e1stroj t\u00edm, \u017ee byl dostate\u010dn\u011b neopatrn\u00fd, aby byl s n\u00edm p\u0159isti\u017een.<\/span><\/p>\n

Co vlastn\u011b m\u016f\u017eete d\u011blat<\/span><\/h2>\n

Up\u0159\u00edmn\u00fd z\u00e1v\u011br je nep\u0159\u00edjemn\u00fd. VPN \u2013 n\u00e1stroj, kter\u00e9mu v\u011bt\u0161ina lid\u00ed d\u016fv\u011b\u0159uje v oblasti soukrom\u00ed \u2013 s t\u00edm nic neud\u011blala. Chr\u00e1nila s\u00ed\u0165ovou cestu a zajistila plnou identifikovatelnost za\u0159\u00edzen\u00ed. Ka\u017ed\u00fd, kdo se spol\u00e9h\u00e1 v\u00fdhradn\u011b na VPN pro zaji\u0161t\u011bn\u00ed anonymity ve Windows, chr\u00e1n\u00ed \u0161patn\u00fd konec p\u0159ipojen\u00ed.<\/span><\/p>\n

Skute\u010dn\u00e1 \u0159e\u0161en\u00ed jsou struktur\u00e1ln\u00ed a p\u0159esn\u011b to byste m\u011bli po\u017eadovat. Microsoft by mohl zdokumentovat GDID v jednoduch\u00e9m jazyce, informovat u\u017eivatele o jeho existenci a poskytnout jim zp\u016fsob, jak si ho zobrazit a deaktivovat. Regula\u010dn\u00ed org\u00e1ny \u2013 zejm\u00e9na v Evrop\u011b, kde Stokes \u017eil a kde je ochrana osobn\u00edch \u00fadaj\u016f nejsiln\u011bj\u0161\u00ed \u2013 by mohly zpochybnit, jak je trval\u00fd, nekonsenzu\u00e1ln\u00ed identifik\u00e1tor za\u0159\u00edzen\u00ed slu\u010diteln\u00fd s pravidly, kter\u00e1 vy\u017eaduj\u00ed informovan\u00fd souhlas pr\u00e1v\u011b pro tento typ sledov\u00e1n\u00ed. Soudy by kone\u010dn\u011b mohly prozkoumat, zda si historie IP adres za\u0159\u00edzen\u00ed zaslou\u017e\u00ed ochranu v podob\u011b zatyka\u010de, kterou Carpenter roz\u0161\u00ed\u0159il na data o poloze telefonu. Nic z toho se ned\u011bje bez tlaku a tlak nevznik\u00e1 bez toho, aby lid\u00e9 v\u011bd\u011bli, \u017ee identifik\u00e1tor existuje.<\/span><\/p>\n

Jedin\u00fd zp\u016fsob, jak se zcela vyhnout identifik\u00e1toru za\u0159\u00edzen\u00ed propriet\u00e1rn\u00edho opera\u010dn\u00edho syst\u00e9mu, je p\u0159estat propriet\u00e1rn\u00ed opera\u010dn\u00ed syst\u00e9m pou\u017e\u00edvat. Syst\u00e9my s otev\u0159en\u00fdm zdrojov\u00fdm k\u00f3dem, jako je Linux, jeho\u017e k\u00f3d si m\u016f\u017ee prohl\u00e9dnout kdokoli, neodes\u00edlaj\u00ed skryt\u00e9 \u010d\u00edslo, kter\u00e9 by se hl\u00e1silo jedin\u00e9 spole\u010dnosti. To je pro v\u011bt\u0161inu lid\u00ed velk\u00fd krok a p\u0159edst\u00edrat, \u017ee tomu tak nen\u00ed, by bylo ne\u010destn\u00e9.<\/span><\/p>\n

Peter Stokes bude m\u00edt u soudu sv\u016fj den a d\u016fkazy proti n\u011bmu vypadaj\u00ed p\u016fsobiv\u011b. \u010c\u00edslo, kter\u00e9 ho srazilo, p\u0159ed soudem neobstoj\u00ed. Bude i nad\u00e1le b\u011b\u017eet na miliard\u011b po\u010d\u00edta\u010d\u016f, jejich\u017e majitel\u00e9 s jeho pou\u017e\u00edv\u00e1n\u00edm nikdy nesouhlasili \u2013 generovat stejnou historii a \u010dekat na stejnou rutinn\u00ed objedn\u00e1vku. Myslel si, \u017ee ho VPN u\u010din\u00ed neviditeln\u00fdm. M\u00fdlil se \u2013 a m\u00fdl\u00ed se i ka\u017ed\u00fd, kdo si mysl\u00ed tot\u00e9\u017e. V\u011bc, kter\u00e1 ho vid\u011bla, je v\u0161echny sleduje \u2013 a t\u00e9m\u011b\u0159 nikdo nezn\u00e1 jej\u00ed jm\u00e9no.<\/span><\/p>\n<\/div>\n<\/div>\n

\n
\n

Zdroj<\/span><\/a><\/span><\/h3>\n

 <\/p>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

N\u00e1stroj, kter\u00fd odhalil skute\u010dn\u00e9ho hackera, je identicky p\u0159\u00edtomen v po\u010d\u00edta\u010di ka\u017ed\u00e9ho nevinn\u00e9ho u\u017eivatele. Devaten\u00e1ctilet\u00fd mlad\u00edk…<\/p>\n","protected":false},"author":2,"featured_media":111477,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[7],"tags":[1042,2862,2120,3815],"_links":{"self":[{"href":"https:\/\/www.infokuryr.cz\/n\/wp-json\/wp\/v2\/posts\/111476"}],"collection":[{"href":"https:\/\/www.infokuryr.cz\/n\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.infokuryr.cz\/n\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.infokuryr.cz\/n\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.infokuryr.cz\/n\/wp-json\/wp\/v2\/comments?post=111476"}],"version-history":[{"count":0,"href":"https:\/\/www.infokuryr.cz\/n\/wp-json\/wp\/v2\/posts\/111476\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.infokuryr.cz\/n\/wp-json\/wp\/v2\/media\/111477"}],"wp:attachment":[{"href":"https:\/\/www.infokuryr.cz\/n\/wp-json\/wp\/v2\/media?parent=111476"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.infokuryr.cz\/n\/wp-json\/wp\/v2\/categories?post=111476"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.infokuryr.cz\/n\/wp-json\/wp\/v2\/tags?post=111476"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}