Isikrini Sefoni Esiphahlazekile Ngohlelo Lwakho Kuphela Lokufakazela ubuqiniso lwe-2FA Ngaphakathi: I-USB-C HDMI Isibuko Namakhodi Ayisipele¶

Iwisa i-smartphone yakho futhi ubukele iphaneli ye-OLED iba mnyama ngokuphelele, yopha ngokunsomi, noma ingasabeli lapho uyithinta - noma ukusetha kabusha ngokwefekthri ngephutha futhi uhweba ngocingo lwakho oludala esitolo senkampani yenethiwekhi - lapho leyo divayisi iphethe iphasiwedi engasekelwanga kuphela Yesikhathi esisodwa Esekelwe Isikhathi ()TOTP, RFC 6238) Uhlelo Lokufakazela ubuqiniso (Google Authenticator, Microsoft Authenticator, Duo Mobile, 2FAS, Aegis, noma Authy) ukuvikela i-imeyili yakho, ibhange, i-crypto exchange, i-AWS/GitHub root console, noma ukungena ngemvume okukodwa kwebhizinisi (SSO) idala ukuvala ngaphandle kwedijithali okusheshayo. Okubi nakakhulu, uma uzama ukungena ngemvume ku-akhawunti yakho ye-Google noma ye-Apple ocingweni olusha ukuze ubuyisele isipele samafu, isikrini sokungena sidinga amadijithi angu-6. 2FA Ikhodi ekhiqizwe ngaphakathi kwefoni ephukile ongeke uyibone noma uyithephe. Uma ifoni yakho ike yacwiliswa emanzini noma yaba nephutha lembobo yokushaja, funda iziqondiso esihambisana nazo ku. ukubuyiswa kwefoni ephukile noma eyonakaliswe ngamanzi futhi ifoni yenqaba ukushaja: i-liquid itholwe i-override kanye ne-wireless Qi yokuqalisa izimo eziphuthumayo. Uma i-vault yakho yephasiwedi eyinhloko noma ukhiye Wokuvikela Idivayisi Ye-Apple nawo ukhiyelwe ngaphakathi, bona ukuvalwa komphathi wephasiwedi, ukulahleka kwephasiwedi okuyinhloko, nokutholwa kwe-vault futhi I-iPhone Stolen Device Protection key lockout. Uma ukukhiywa ngaphandle kuvimbela ingqalasizinda yokunakekelwa kwempilo ebalulekile, ukuthunyelwa kwezimo eziphuthumayo, noma kuhilela usongo lokuqola i-SIM-swap olusebenzayo, shayela inombolo yakho yasendaweni yezimo eziphuthumayo (911 e-United States naseCanada, 112 kwi-European Union, 999 e-United Kingdom) noma uhlole umkhombandlela wethu wamazwe ngamazwe we izinombolo eziphuthumayo.

Yenza lokhu manje¶

1. UNGAqalisi kabusha, ukucisha, noma uvumele ibhethri lishone ocingweni oluphukile uma ivuliwe okwamanje (After First Unlock / AFU state): Njengamanje, ngenkathi ifoni yakho isasebenza kusukela ngaphambi kokuthi uyilahle, ukugcinwa kwayo komsebenzisi okubethelwe (File-Based Encryption ku-Android / Data Protection Class C ku-iOS) ivuliwe ku-RAM, ivumela ukuvula izigxivizo zeminwe/I-ID yobuso, amagundane e-Bluetooth, scrcpy (ADB), kanye I-USB-C kuya ku-HDMI isibonisi sangaphandle ngaphandle kokudinga ukuxazulula i-First-Boot (Before First Unlock / BFU) Ibhulokhi yokuvikela ye-USB-Isisetshenziswa. Xhuma ifoni emandleni (noma uyibeke ku-a Qi / MagSafe ishaja engenantambo ngokushesha) ukuze ibhethri lingashayi 0% bese uqalisa kabusha ku BFU ukuvalwa thaqa kwezwe.
2. Sebenzisa i-20-dollar USB-C Multiport Hub (kanye ne HDMI imbobo + a USB-A imbobo yegundane lekhompyutha + a USB-C PD power port) ukuze ubone futhi uchofoze isikrini sefoni yakho kunoma iyiphi i-TV noma imonitha: Lapho isikrini se-OLED siphuka, i-matrix yesibonisi sengilazi kanye ne-capacitive touch digitizer iyaphuka, kodwa i-motherboard yefoni, i-CPU, ne-GPU kusasebenza ngamaphesenti angu-100. Ukuxhuma indinganiso USB-C Hub embobeni yokushaja yefoni ixhuma eyangaphandle HDMI qapha ukuze wenze isibuko isikrini futhi iveze ikhesa yegundane ledeskithophu yangempela esikrinini elawulwa yinoma yiliphi igundane le-USB elinentambo - elikuvumela ukuthi uthayiphe iphinikhodi yakho yokuvala isikrini ngegundane (noma ikhibhodi ye-USB enentambo), vula Google Authenticator / Microsoft Authenticator, chofoza okuthi Dlulisa ama-Akhawunti -> Khipha ama-Akhawunti, bese uskena i QR ikhodi ngefoni yakho entsha kumasekhondi angama-60.
3. Uma ifoni yakho iyimodeli endala ye-Android ngaphandle kwehadiwe USB-C DisplayPort Alt-Mode okukhipha ividiyo (okufana ne-Pixel 1 kuya ku-Pixel 7, i-Samsung Galaxy A-series, noma ibhajethi yamadivayisi we-Motorola/Xiaomi), sebenzisa DisplayLink i-adaptha yemifanekiso ye-USB esebenzayo NOMA khuluma emuva/ukuzulazula kwekhibhodi ye-USB: Ukwenziwa okujwayelekile USB-C to HDMI hubs kuphela okukhipha ividiyo kumafoni anawo USB-C isilawuli sisekela Imodi Ehlukile Ye-DisplayPort (DP Alt Mode) (uchungechunge lwe-iPhone 15/16/17, i-Samsung Galaxy S8 nge-S25, i-Pixel 8 ne-Pixel 9, i-OnePlus 7 Pro+). Sichaza ngezansi indlela yokusingatha okungeyonaDP Alt Mode amafoni asebenzisa ikhibhodi ye-USB enentambo, ADB (scrcpy), noma isikrini sesikhashana se-OLED esingena esikhundleni samadola angu-25 silengiswa kukhebuli yeribhoni.
4. Ngaphambi kokwethuka uma usuvele uhwebe noma ulahlekelwe ucingo oludala, hlola ukuthi ingabe usunayo yini Iseshini Yesiphequluli Sedeskithophu esebenzayo esangenile kukhompuyutha yakho ephathekayo noma i-PC yomsebenzi: Uma i-Chrome, i-Edge, iSafari, noma isiphequluli seFirefox se-laptop yakho sisangene ngemvume ku-Akhawunti yakho ye-Google (myaccount.google.com/security), I-akhawunti ye-Microsoft (mysignins.microsoft.com/security-info), GitHub, noma AWS, UNGAWAsusi amakhukhi noma uphume. Ungakwazi ukukhiqiza Amakhodi Ekhophi Kakhulu ayi-8 asetshenziswa kanye kanye anezinombolo ezingu-8 noma ubhalise Isiqinisekisi esisha / Ukhiye Wokungena ngokuqondile kuleyo seshini yedeskithophu esevele iqinisekisiwe.
5. Yazi umehluko obalulekile phakathi kwe-Cloud-Synced TOTP imbewu vs. Hardware-Bound (Keystore / Keychain) amathokheni angathengeki:
6. I-Google Authenticator (v6.0+): Uma unike amandla isithonjana sokuvumelanisa amafu ekhoneni eliphezulu kwesokudla, TOTP imbewu ivunyelaniswa ngokuqondile ku-Akhawunti yakho ye-Google futhi ivela ngokuzenzakalelayo lapho ungena ngemvume ku-Google kunoma iyiphi i-iPhone entsha noma idivayisi ye-Android.
7. I-Microsoft Authenticator (I-Critical Trap): Ukwenza ikhophi yasenqolobaneni yamafu ku-iOS kusekela imethadatha kokuthi iCloud, kodwa kudinga ukuthi uqinisekise futhi nge Akhawunti ye-Microsoft yomuntu siqu (MSA) ukungena ngemvume kokuthola; okubi kakhulu, inkampani I-ID yokungena (Azure AD) amathokheni okucindezela angenaphasiwedi aboshwe ngehadiwe ku-Secure Enclave/Keystore yefoni endala futhi kufanele abhaliswe kabusha nge-IT yenkampani yakho (Temporary Access Pass / TAP).
8. Ungalokothi unikeze ifoni yakho endala ukuze uthole ukuhwebelana kwenkampani yenethiwekhi kwikhawunta yesitolo uze uyivule ngokoqobo ngayinye 2FA uhlelo lokusebenza efonini yakho ENTSHA futhi laqinisekisa ukuthi amakhodi anezinhlamvu ezingu-6 akhiqizwa irowu ngayinye: I-iCloud Restore noma I-Android Cable Transfer ikopisha izithonjana zohlelo lokusebenza efonini yakho entsha, okuholela izigidi zabasebenzisi ukuthi bacabange 2FA kudlulisiwe - ukuvula kuphela Duo Mobile, RSA SecurID, Steam Guard, noma okungavunyelanisiwe Google Authenticator amahora amabili ngemuva kokusula ifoni yabo endala futhi bathole isikrini sokwamukela esingenalutho.

Isihlahla sesinqumo: ukuhlenga imbewu yakho yesiqinisekisi se-2FA ocingweni oluphukile noma olulahlekile¶

Landela lesi sihlahla ngqo sezingxenyekazi zekhompuyutha kanye ne-akhawunti yokuthola kabusha ngokususelwe ekutheni usenayo yini ifoni ephukile nokuthi iyiyiphi imodeli:

flowchart TD
    Start["Ikhiyelwe Ngaphandle Kohlelo Lokufakazela Ubuqiniso lwe-2FA (Google, Microsoft, Duo, Authy, 2FAS, Aegis)"] --> HavePhone{"Ingabe Usenayo Ngokwenyama Ucingo Oludala?"}

    HavePhone -->|"YEBO: Isikrini Simnyama, Esinsomi, noma I-Touch Digitizer Sifile"| PowerState{"Gcina Ifoni Ishajiwe (Qi Wireless noma Cable). Ingabe Ifoni Isekela I-USB-C DP Alt-Mode Video (iPhone 15+, Galaxy S8+, Pixel 8+)?"}

    PowerState -->|"YEBO: Isekela i-USB-C HDMI"| HubMethod["Xhuma Ihabhu le-USB-C + I-HDMI Monitor + Igundane/Ikhibhodi Ye-USB Enezintambo -> Vula nge-FaceID/Fingerprint noma I-PIN Yekhibhodi Eyimpumputhe -> Chofoza okuthi 'Khipha i-QR' Kuhlelo Lokusebenza Lokufakazela ubuqiniso"]

    PowerState -->|"CHA: I-iPhone 14 noma Endadlana (Umbani)"| LightningMethod["Xhuma I-adaptha ye-AV Esemthethweni ye-Apple Lightning Digital (HDMI) + I-adaptha yekhamera ye-USB eneMouse (AssistiveTouch) NOMA Xhuma Ku-Mac/PC Eyethembekile Ngaphambili ukuze uthole Ikhophi Yasemuva Ye-iTunes/Finder Ebethelwe"]

    PowerState -->|"CHA: I-Android Ngaphandle kwe-DP Alt-Mode (Pixel 1-7, Galaxy A-Series)"| NoAltMode["Inketho A: Xhuma Ikhibhodi Ye-USB Enezintambo ukuze Uvule I-PIN Blind + Sebenzisa i-scrcpy (Uma Ukulungisa iphutha kwe-USB Kuvuliwe). Inketho B: Xhuma Iribhoni Yesikrini Eshintshwayo engu-$25 imizuzu engu-10 ukuze uskene Khipha i-QR"]

    HavePhone -->|"CHA: Ifoni Endala Yathengiswa Ngayo, Yalahleka, Yebiwa, noma Ukusethwa Kabusha kwasefekthri"| CloudCheck{"Iluphi uhlelo lokusebenza lokufakazela ubuqiniso Olubambe Amakhodi Akho?"}

    CloudCheck -->|"I-Google Authenticator (Ukuvumelanisa Kwamafu Kunikwe Amandla)"| GoogleCloud["Ngena Ku-Akhawunti Yakho Ye-Google Kunoma Iyiphi Idivayisi (Sebenzisa I-Laptop Active Session, i-SMS Fallback, noma I-8-Digit Backup Code) -> Zonke Imbewu ye-TOTP Zivumelanisa Phansi Ngokuzenzakalelayo"]
    CloudCheck -->|"Microsoft Authenticator / Duo / Corporate Okta"| CorpIT["Ama-Akhawunti Omuntu Siqu: Buyisela Kusuka ku-iCloud + MSA Backup. I-ID Yokungena Emsebenzini/Esikoleni / Duo / Okta: Shayela I-IT Helpdesk ukuze uthole i-Temporary Access Pass (TAP) ukuze Ubophe kabusha Idivayisi Entsha"]
    CloudCheck -->|"I-Vault Yasendaweni Kuphela (I-Google Auth Engavumelanisiwe, i-Aegis Engasekelwanga/2FAS)"| ManualReset["Hlola Izikhathi Ezisebenzayo Ze-Laptop KOKUQALA ukuze Ukhiqize Amakhodi Esipele -> Ngaphandle kwalokho Thumela I-akhawunti Yomuntu Ngayo 2FA Setha Kabusha / Ukuqinisekiswa Kobunikazi be-KYC ngesevisi ngayinye"]

Isigaba 1: The USB-C HDMI + Wired Mouse I-Extraction Technique (Isikrini Esiphukile, Ibhodi Lomama Elisebenzayo)¶

Uma uwisa i-smartphone yesimanje futhi isikrini siba mnyama bhuqe noma sibaneke imigqa eluhlaza ye-neon, amaphesenti angu-99 esikhathi kuphela iphaneli yengilazi ebuthakathaka ye-AMOLED ne-capacitive touch layer** eziphukayo. Ngaphakathi kwe-chassis, ifoni isaqalisiwe, ixhumeke ku-Wi-Fi, futhi ikhiqiza izinombolo zakho eziyisi-6. TOTP amakhodi njalo ngemizuzwana engama-30.

1. Hlola ukuthi ifoni yakho iyayikhipha yini ividiyo USB-C (DisplayPort Alt Mode) noma Lightning¶

Ngaphambi kokuthi ugijimele esitolo sezinto zikagesi, hlola leli thebula lokusebenzisana ukuze ukhethe i-adaptha ngqo esebenza emzamweni wokuqala:

2. Isinyathelo ngesinyathelo sokuhamba: Ukukhipha yakho 2FA Amakhodi e-QR nge USB-C Hub¶

1. Xhuma ihadiwe yakho:
2. Xhuma i-HDMI ikhebula kusuka ku-TV yakho noma imonitha yekhompyutha iye ku USB-C Hub.
3. Xhuma igundane le-USB elinentambo kanye nekhibhodi ye-USB enentambo ku USB-A amachweba ku USB-C Hub.
4. Xhuma USB-C ishaja yamandla yefoni yakho ku PD Power imbobo kuhabhu (ukuze ihabhu ingachithi ibhethri lefoni yakho).
5. Xhuma ihabhu USB-C ikhebula efonini yakho ephukile.
6. Vula ifoni noma imonitha yangaphandle ihlala ingenalutho ngenkathi ikhiyiwe:
7. Amafoni amaningi e-Android nama-iPhone ayagodla ngamabomu HDMI okukhipha ividiyo kuze kudlule ukuvala isikrini.
8. Indlela yokuvula A (i-Biometrics): Qalisa I-Face ID (buka ngqo i-bezel ephezulu) noma beka umunwe wakho obhalisiwe ku- Touch ID / Under-Display Fingerprint sensor.
9. Indlela yokuvula B (Ukuvula Ikhibhodi ye-USB eyimpumputhe): Kukhibhodi ye-USB enentambo exhunywe kuhabhu:
   • Cindezela Spacebar noma Enter kanye ukuze uvuse isikrini sokukhiya bese uvula ibhokisi lokufaka i-PIN/Iphasiwedi.
   • Thayipha inombolo ye-PIN noma iphasiwedi ye-alphanumeric ngokucophelela kukhibhodi ye-USB.
   • Cindezela Enter.
   • (Linda imizuzwana emi-3: isikrini sakho sasekhaya kufanele sikhanyise ngokushesha HDMI qapha.)
10. Thumela eyakho TOTP imbewu ngokushesha (Ngohlelo olubalulekile):
11. Sebenzisa igundane le-USB elinentambo ukuze uchofoze isithonjana Sohlelo Lokufakazela ubuqiniso esikrinini sakho esifakwe isibuko.
12. Ku Google Authenticator: Chofoza imenyu yemigqa emithathu (☰) phezulu kwesokunxele -> chofoza Dlulisa ama-akhawunti -> chofoza okuthi Khipha ama-akhawunti -> qinisekisa nge-PIN -> khetha ama-akhawunti angafika kwangu-10 ngesikhathi -> chofoza Okulandelayo. Umdondoshiya otpauth-migration:// Ikhodi ye-QR izovela kusikrini sakho se-TV.
    • (Linda: Kuthiwani uma isikrini se-TV siba mnyama ngesikhathi kuvela ikhodi ye-QR? Leyo yi-Android FLAG_SECURE ukuvikelwa kwesithombe-skrini/sokurekhoda isikrini okuvimbela ikhodi ye-QR ekunikezeni nge-HDMI. Ungathuki - landela FLAG_SECURE Dlula ebhokisini lokubiza elingezansi.)
13. Ku 2FAS noma Aegis Authenticator: Chofoza Izilungiselelo -> Khipha / Gcina Ikhophi -> Khipha kufayela (I-Plaintext JSON noma Isipele Esibethelwe) bese ulondoloza .2fas noma .json ifayela ngqo kokuthi Google Drayivu noma USB flash drive exhunywe kweyakho USB-C ihabhu. (FLAG_SECURE akuvimbeli ukuthunyelwa kwefayela.)
14. Ku Microsoft Authenticator: Chofoza Izilungiselelo (isithonjana segiya) -> Isipele Sefu (yiguqule futhi uqinisekise ukuthi iyiphi i-akhawunti yokutakula esohlwini), NOMA chofoza umugqa we-akhawunti ngayinye ngayinye ukuze ubuke ikhodi yayo ebukhoma enezinhlamvu ezingu-6 kusikrini se-TV ngenkathi ungena kuleyo webhusayithi kukhompuyutha ephathekayo yakho ukuze ubhalise idivayisi entsha ye-2FA.

3. Abaqinisekisiwe $25 I-Hardware Fallback: Ukulenga Isikrini Sokumiselela Esingenalutho Kukhebula Le-Ribbon¶

Kuthiwani uma ifoni yakho iyi-Pixel 6a, i-Pixel 7, i-Samsung Galaxy A54, noma i-iPhone ene USB Restricted Mode iyasebenza* lapho HDMI ukuphuma akusekelwe futhi USB Debugging (ADB) ayikaze ivulwe? - Ungakhokhi $280 ukuze kufakwe isikrini sezimonyo esigcwele uma uthuthukisa ifoni yakho noma kunjalo: 1. Oda eshibhile $20 ku $35 ilungu langaphandle LCD/OLED umhlangano wokubonisa oshintshwayo wemodeli yakho yocingo e-Amazon (ukulethwa kosuku olufanayo/ubusuku obubodwa) noma ushayele uye esitolo esizimele sokukhanda izingcingo (uBreakiFix, isitolo sendawo esithengisa izinto ezincane). 2. Tshela uchwepheshe wokulungisa: "Angidingi isikrini esisha esinamathiselwe kufreyimu. Ngidinga nje ukuthi uveze isikrini esiphukile, uxhume isikrini sokuhlola kusixhumi sokubonisa sebhodi lomama imizuzu engu-10 ebhentshini lokusebenza ukuze ngifake i-PIN yami futhi ngiskene ikhodi yami ye-QR yokuthekelisa ye-Google/Microsoft." 3. Cishe zonke izitolo ezilungisa amafoni zasendaweni zigcina "izikrini zokuhlola" ekhabetheni elikhethekile ukuze kutakulwe idatha kanye nezindleko $30 ku $50 okwemizuzu engu-15 yebhentshi le-Temp-screen hookup ngenkathi ubambe ifoni yakho entsha nesithombe/ uskena njalo 2FA ikhodi yokuthekelisa.

Isigaba sesi-2: I-App-by-App Cryptographic Architecture (Ziphi ezakho TOTP imbewu egcinwe ngempela?)¶

Ukuqonda ukuthi uhlelo lokusebenza ngalunye lwe-Authenticator enkulu lugcina kuphi 160-bit (Base32) okhiye abayimfihlo okwabelwana ngabo (seed) inquma ukuthi amakhodi akho angatholwa yini kusukela efwini noma kukhophi yasenqolobaneni yekhompuyutha ngemva kokuba ifoni isifile ngokuphelele noma ingasekho:

Isigaba sesi-3: Kuthiwani uma ifoni yakho endala isivele ingasekho (ihwetshwe ngayo, yebiwe, noma isethwe kabusha njengasekuqaleni) futhi ungenayo ikhophi yasenqolobaneni yamafu?¶

Uma eyakho TOTP imbewu yayigcinwe endaweni kuphela futhi nefoni endala ayisekho unomphela, ungabakhokheli abakhwabanisi be-inthanethi abathi "bangakwazi ukugebenga i-2FA yakho." Ngoba RFC 6238 TOTP amakhodi akhiqizwa ngokwezibalo (HMAC-SHA1(Secret_Key, Unix_Time / 30)), akekho ongabikezela ikhodi enamadijithi angu-6 ngaphandle kokhiye oyimfihlo ongu-160-bit. Kunalokho, sebenzisa lezi ziteshi ezi-4 ezisemthethweni zokudlula ngokulandelana kwazo:

1. Hlola yonke ikhompuyutha, ithebhulethi, nesiphequluli okungezakho Seseshini Esesivele Iqinisekisiwe¶

Ngaphambi kokuzama ukungena ngemvume ngomyalo wephasiwedi owucelayo 2FA: - Vula ikhompuyutha ephathekayo, i-PC yedeskithophu, i-iPad, noma ikhompuyutha yakho yasemsebenzini lapho ohlole khona i-imeyili yakho, i-GitHub, i-AWS, noma ibhange ngeviki eledlule. - Amakhukhi esikhathi (SID, SSID, ESTSAUTH, user_session) ihlala isebenza njalo izinsuku ezingama-30 kuye kwezingama-90 noma ngabe ifoni yakho inqamukile. - Ngenkathi ungaphakathi kuleyo seshini esebenzayo: 1. Iya kokuthi Izilungiselelo Zokuvikeleka Kwe-akhawunti. 2. Hlola ukuthi isayithi liyakuvumela yini Ukubuka noma Ukhiqize Amakhodi Ekhophi Ayisipele Wokusetshenziswa Kuwodwa ayi-10 (izinkundla eziningi zicela kuphela iphasiwedi ye-akhawunti yakho - hhayi 2FA ikhodi - ukubuka amakhodi ayisipele akhona ngaphakathi kweseshini eseyethenjwa kakade). 3. Engeza Ukhiye Wokuvikela Wezingxenyekazi Zekhompyutha (YubiKey) / Ukhiye Wokudlula (I-Windows Hello / I-ID Yokuthinta ku-Mac) noma engeza Inombolo Yefoni Eyisipele uma ikhasi lokuvikeleka lifuna kuphela ukuqinisekiswa kabusha kwephasiwedi.

2. Sesha ikhompuyutha yakho namadrayivu efu ukuze ukhohlwe 8-Digit Backup Code amafayela¶

Lapho uvula amandla ekuqaleni 2FA ku-Google, GitHub, Discord, Dropbox, Valve/Steam, noma i-Proton, isikrini sikuphoqe ukuthi ulande noma ukopishe ifayela lombhalo elithi amadijithi angu-8 noma amakhodi angu-10 okuthola ukusetshenziswa okukodwa. Yenza ukusesha komhlaba wonke kukhompuyutha yakho ephathekayo, ifolda yokulanda, i-Google Drayivu, iCloud Drive, namanothi omphathi wephasiwedi kulawa magama wefayela azenzakalelayo:

3. Qalisa i-Platform-Specific esemthethweni 2FA Setha kabusha / Ukugeleza Kokuqinisekisa Ubuwena¶

Uma ungenayo isikhathi esisebenzayo futhi ungekho amakhodi ayisipele, chofoza "Zama enye indlela" noma "Ulahlekelwe idivayisi yakho yokuqinisekisa?" 2FA ngokushesha: - I-Akhawunti ye-Google (g.co/recover): Njalo gijima g.co/recover kusuka kunethiwekhi yakho yasekhaya ye-Wi-Fi kanye nekhompuyutha ephathekayo/isiphequluli osisebenzise izinyanga (Injini yobungozi ye-Google ikwenzela wena IP ikheli, izigxivizo zeminwe zesiphequluli, nomlando wekhukhi). Uma une-imeyili yokutakula noma inombolo yocingo yokutakula elungisiwe, i-Google ingase ibeke izinsuku ezi-3 kuya kwezi-5 zokubamba okuzenzakalelayo kokuvikeleka ngaphambi kokuthumela i-imeyili isixhumanisi sokusetha kabusha. 2FA (lokhu kubambezeleka kuvumela umnikazi osemthethweni ukuthi akhansele isicelo sobugebengu be-inthanethi, ngakho ungathumeli izicelo zokuthola kabusha eziphindaphindiwe, okusetha kabusha isibali sikhathi.). - I-akhawunti ye-AWS Root (Lost MFA Device): Esikrinini sokungena ngemvume se-AWS Root MFA, chofoza "Xazulula inkinga i-MFA" -> "Ngena ngemvume usebenzisa ezinye izici zokuqinisekisa". I-AWS ithumela i-imeyili yokuqinisekisa ezenzakalelayo ekhelini le-imeyili eliyizimpande futhi ibeka ikholi yezwi/i-SMS ezenzakalelayo kwinombolo yocingo eyinhloko ebhalisiwe ye-akhawunti, okukuvumela ukuthi ukhubaze idivayisi ye-MFA ephukile emizuzwini engu-3 ngaphandle kokulinda Usekelo lwe-AWS. - ** Ukushintshaniswa kwe-Cryptocurrency (Coinbase, Kraken, Binance, Gemini)**: Konke ukushintshisana okulawulwayo kunepayipi elizinikezele elithi "I-2FA Elahlekile / Setha Kabusha Isiqinisekisi" esizenzakalelayo sepayipi le-KYC. Uzocelwa ukuthi ulayishe ilayisense yakho yokushayela kahulumeni / iphasiphothi futhi urekhode ividiyo ozishuthe yona ye-biometric ebukhoma eyimizuzwana eyi-10 ephendula ikhanda lakho (ehambisana nesithombe ozishuthe sona se-KYC sangempela efayelini lapho uvula i-akhawunti), okulandelwa yisibopho i-24-to-48-hora yokuhoxiswa yokuvala i-cooldown ngenkathi Isiqinisekisi sakho esisha siboshiwe. - Ibhizinisi / Inyuvesi Entra ID (Microsoft 365), Okta, noma Duo: Ungalinge uchithe amahora uzama ukubuyisela umthengi i-akhawunti yomsebenzi noma yasenyuvesi. I-IT Helpdesk Administrator yenhlangano yakho inenkinobho yokuchofoza kanye ku Microsoft Entra Admin Center (Users -> Authentication methods -> Require re-register multifactor authentication / Add Temporary Access Pass) noma Okta Admin Console (Reset Multifactor) ekhiqiza ikhodi yokudlula enesikhathi esinqunyelwe emizuzwaneni engu-30 ngemva kokuqinisekisa i-ID yakho yesisebenzi kukholi yevidiyo.

Isigaba sesi-4: Ukuqopha okuluhlaza otpauth-migration:// Ukulayishwa kwekhodi ye-QR (I-Advanced Forensic Extraction)¶

Ake sithi ukwazile ukuthatha isithombe se-smartphone esilufifi* sekhodi yakho ye-QR yesiqinisekisi se-Google "Ama-akhawunti Wokuthekelisa"** phakathi neseshini ye-HDMI, noma ufuna ukungenisa ukuthekelisa kwakho kwe-Google Authenticator kokuthi 1Password, Bitwarden, KeePassXC, noma Aegis esikhundleni sokuzivalela ku-Google Authenticator. - Okujwayelekile TOTP Amakhodi e-QR asebenzisa umbhalo ongenalutho we-URI (otpauth://totp/GitHub:alice?secret=JBSWY3DPEHPK3PXP&issuer=GitHub). - Nokho, inqwaba ye-Google Authenticator "Dlulisa ama-Akhawunti" Ikhodi ye-QR isebenzisa ubunikazi Izivimbela zeProtocol (Protobuf) i-base64-encoded payload kanambambili iqala ngayo otpauth-migration://offline?data=.... - Ungawukhipha kanjani okuluhlaza Base32 TOTP okhiye abayimfihlo besithombe sokuthutha se-QR ye-Google Authenticator ngokungaxhunyiwe ku-inthanethi: 1. Skena noma ufunde umucu wombhalo wekhodi ye-QR (otpauth-migration://offline?data=...) usebenzisa isifundi se-QR sendawo esingaxhunyiwe ku-inthanethi (zbarimg qr_photo.jpg). 2. Qalisa umbhalo wePython ongaxhunyiwe ku-inthanethi womthombo ovulekile extract_otp_secrets (noma ngenisa ifayela le otpauth-migration:// xhuma ngqo ku-Aegis Authenticator, 2FAS, noma KeePassXC, konke okuyikhona okuhlaziya ifomethi ye-Google's Protobuf migration) ukuze iphrinte yonke eluhlaza Base32 imfihlo (secret=JBSWY3DPEHPK3PXP), ongakwazi ukukugcina ngokuphephile ngaphakathi kwesiphathi sakho sephasiwedi esibethelwe bese uphrinta ephepheni lezimo eziphuthumayo ukuze uthole isisefo sakho esingashi.

Izinombolo zezimo eziphuthumayo zesifunda kanye nezinqubomgomo ze-ejensi¶

Ngenkathi isikrini sefoni esiphukile ngokuvamile siyisimo esiphuthumayo somthengi, ukulahlekelwa 2FA ukufinyelela ngesikhathi sokuthatha i-akhawunti esebenzayo, ukuhlasela kwe-SIM-swap, noma ukuvala umnyango wokuphatha ingqalasizinda ebalulekile kungase kudinge ukubika kwesikhungo ngokushesha:

• I-United States ne-Canada:
• Izimo Eziphuthumayo-Ukuphepha / Isibhedlela noma Ukuphela Kwengqalasizinda: Dayela 911 uma a 2FA ukuvala umlomo kunomthelela ezinhlelweni zezokwelapha eziphuthumayo noma izilawuli zokuphepha ngokomzimba.
• I-Mobile Carrier Port-Out / SIM-Swap Freeze: Uma ukuvala ngaphandle kwesiqinisekisi sakho kuhambisana nokulahlekelwa isignali yeselula kungazelelwe (SOS Only), izigebengu kungenzeka zenza ukuhlasela kwe-SIM-swap. Shayela ngokushesha umnyango wokukhwabanisa wenkampani yenethiwekhi ukusuka kwenye ifoni (AT&T 1-800-331-0500, Verizon 1-800-922-0204, T-Mobile 1-800-937-8997) ukumisa ulayini, futhi ubike ukuyekethisa kwe-akhawunti yezezimali ku FBI Internet Crime Complaint Center (ic3.gov) kanye ne-*CISA (1-844-Say-CISA)**.
• I-IRS Identity Protection PIN (IP PIN) & ID.me / Login.gov 2FA Setha kabusha (United States): Uma ifoni yakho ephukile ibambe 2FA uhlelo lokusebenza lwe-Login.gov (isetshenziselwa Ukuvikeleka Komphakathi, i-VA, Umhambi Othenjwayo / Ukungena Kwembulunga yonke, kanye nezinzuzo zenhlangano) noma ID.me (esetshenziselwa i-IRS kanye nokungasebenzi kwesifunda), Login.gov ikuvumela ukuthi uqinisekise ubuwena ngedokhumenti ezenzakalelayo/ukuqinisekisa kabusha isithombe ozishuthe sona noma ulinde ukusethwa kabusha okungakhanselwa kwamahora angama-24 uma singekho isexwayiso sokukhwabanisa kwezezimali esisebenzayo.
• United Kingdom:
• Amasevisi Wezimo Eziphuthumayo: Dayela 999 (noma 101 / Ukukhwabanisa Kwesenzo 0300 123 2040 ngokuthathwa kwe-akhawunti enikwe amandla ku-inthanethi).
• I-HMRC Government Gateway & NHS Login 2FA Setha Kabusha: Uma ifoni yakho ephukile ibambe Uhlelo Lokufakazela ubuqiniso lweUK Government Gateway yakho (HMRC ukuzihlola / ingosi yentela), chofoza "Izinkinga ngekhodi?" -> "Angikwazi ukufinyelela indlela yokuqinisekisa" esikrinini sokungena ngemvume ukuze ngiphinde ngiqinisekise usebenzisa inombolo yakho Yomshwalense Kazwelonke, iphasiphothi yase-UK, imininingwane ye-P60/ye-payslip, noma imibuzo yokuphepha yenkampani yezikweletu ngaphandle kokulinda amakhodi eposi.
• I-European Union:
• Amasevisi Wezimo Eziphuthumayo: Dayela 112 kuwo wonke amazwe angamalungu e-EU.
• I-eIDAS National Digital Identity Apps (AusweisApp eJalimane, FranceConnect+, DigiD eNetherlands, MitID e-Denmark, SPID/CIE e-Italy): Lapho uthuthela ocingweni olusha ngemva kwekhefu lesikrini, kuzwelonke eIDAS izinhlelo zokusebenza zidinga ukuphinda zibophezele usebenzisa i-NFC National Identity Card yakho (Personalausweis / Carta d'Identità Elettronica ebanjwe ngemuva kwefoni entsha)* noma incwadi kamasipala yokwenza kusebenze.
• I-Australia ne-New Zealand:
• Amasevisi Wezimo Eziphuthumayo: Dayela 000 e-Australia noma 111 eNew Zealand.
• myGov / myID (phambilini myGovID) I-Lockout (Australia) & RealMe (I-New Zealand): Uma isikrini sefoni yakho sihlakazeka nge-Australian myGov Ikhodi Generator noma myID uhlelo lokusebenza ngaphakathi, ungadali entsha sha myGov i-akhawunti ngaphandle uma kudingeka: shayela i-myGov Ideski losizo (132 307, Inketho 1) (noma qinisekisa kabusha umazisi wakho ngaphakathi myID ocingweni olusha usebenzisa i-Australian Passport kanye nekhadi le-Medicare), bese uthintana IDCARE (1800 595 160) uma kusolwa ukuthi ungubani.
• I-India ne-Asia-Pacific:
• Amasevisi Wezimo Eziphuthumayo: Dayela 112 eNdiya (noma 1930 ye-National Cyber ​​Crime Helpline).
• I-Aadhaar / DigiLocker & UPI 2FA Binding: Lapho uhambisa ibhange/UPI kanye nezinhlelo zokusebenza zokufakazela ubuqiniso kufoni entsha e-India, khumbula lokho UPI (NPCI) idinga i-encrypted ephumayo I-SMS yokuqinisekisa i-SIM ethunyelwe ivela ku-SIM/eSIM ephathekayo ngaphakathi kwehendisethi entsha, futhi ibeka umkhawulo wokupholisa oyisibopho wamahora angama-24 (Rs 5,000 ukudluliswa okukhulu phakathi kwamahora angu-24 okuqala) ngemva kokubopha kabusha idivayisi.

Imibuzo evame ukubuzwa¶

Izoxhuma a USB-C to HDMI i-adaptha kufoni yami ephukile esikrinini isebenza ngokuzenzakalelayo ngaphandle kokuthi ngichofoze noma yini ocingweni kuqala?¶

Kumafoni asekela ihadiwe Imodi Ehlukile Ye-DisplayPort ye-USB-C (njenge-Samsung Galaxy S8 kuya ku-S25, uchungechunge lwe-iPhone 15/16/17, i-OnePlus 7 Pro nezintsha, kanye nochungechunge lwe-Google Pixel 8/9), ixhuma Ihabhu le-USB-C Multiport ixhunywe ku- I-HDMI I-monitor isebenza ngokusethwa kwesoftware kwangaphambilini - inqobo nje uma uvula ifoni udlule isikrini sokukhiya. Ngoba awukwazi ukubona noma ukuthepha ingilazi ephukile ukuze ufake iphinikhodi yakho, xhuma okujwayelekile ikhibhodi ye-USB enentambo negundane le-USB elinentambo kube okufanayo Ihabhu le-USB-C: cindezela Ibha yesikhala kukhibhodi, thayipha i-PIN yakho yenombolo noma iphasiwedi, bese ucindezela Ngena. (Ku-Pixel 8 ne-Pixel 9, ngemva kokuvula, cindezela Ithebhu bese Ngena kukhibhodi ye-USB ukuze wamukele i-Android 14/15 "Isibuko Esibukweni?" I-dialog blind.) Ngokushesha, isikrini sefoni yakho siyavela ku-TV ngekhesa yegundane elibukhoma.

Kungani imonitha yami ye-TV ibe mnyama ngokuphelele okwesibili ngivula Isiqinisekisi Se-Google ngekhebula le-HDMI?¶

Lokho i-Android eyakhelwe ngaphakathi FLAG_SECURE ifulegi lezokuphepha liyasebenza. Izinhlelo zokusebenza zezezimali nezokufakazela ubuqiniso zivame ukutshela i-Android ukuthi ivimbe izithombe-skrini, ukurekhodwa kwesikrini, nangaphandle I-HDMI okukhipha ividiyo ezikrinini ezibonisa amakhodi anamadijithi angu-6 azwelayo noma akhiphe amakhodi e-QR. Ukudlula FLAG_SECURE emizuzwaneni engu-30 ngenkathi igundane lakho nekhibhodi kuxhunyiwe: (1) Esikhundleni sokuzama ukubuka amakhodi ku-TV, sebenzisa isithonjana sephrofayela ephezulu kwesokudla ku-Google Authenticator ukuze VULA Ukuvumelanisa Kwe-Akhawunti Ye-Google ukuze amakhodi avumelanise ngqo ocingweni lwakho olusha nge-Wi-Fi; NOMA (2) Vula i-Android I-TalkBack isifundi sesikrini (bamba bobabili okhiye bevolumu imizuzwana emi-3) ukuze isipikha sefoni ifunda amakhodi akho anezinhlamvu ezingu-6 ngokuzwakalayo njengoba uhambisa okhiye bakho bekhibhodi phansi ohlwini.

Ngibuyisele i-iPhone yami entsha Kusipele sami se-iCloud, futhi isithonjana se-Microsoft Authenticator / Google Authenticator / Duo sisesikrinini sami esisha - kungani amakhodi ami engekho noma engicela ukuthi ngiskene ikhodi ye-QR futhi?¶

Izipele ezijwayelekile ze-iOS iCloud kanye nokudluliselwa kwekhebula yedivayisi ye-Android kuya kudivayisi ngaphandle kwamabomu okufakiwe okumakwe esitolo se-cryptographic okuvikeleke kakhulu. ThisDeviceOnly. Ngoba I-Google Authenticator, vele ungene ngemvume ku-akhawunti ye-Google esohlwini olungaphezulu kwesokudla sohlelo lokusebenza (ucabanga ukuthi Ukuvumelanisa Kwefu bekusebenza). Ngoba I-Microsoft Authenticator, kufanele uthephe "Qala Ukubuyisela" ezansi kwesikrini sokuqala sokwamukela ocingweni olusha (ngaphambi kokungena kunoma iyiphi i-akhawunti.) ukuze udilize isipele sakho samafu - futhi noma kunjalo, I-Entra ID (i-Azure AD) Izaziso ze-Push ezingenamagama futhi I-Duo Push ziboshwe ngokombhalo ku-hardware yefoni endala Secure Enclave futhi zidinga imizuzu emi-2 esheshayo I-Temporary Access Pass (TAP) noma isixhumanisi sokwenza kusebenze futhi kusuka kudeskithophu yosizo yenkampani yakho ye-IT.

Kuthiwani uma nginefoni ye-Google Pixel 6a, i-Pixel 7, noma i-Samsung Galaxy A-series ENGASEKHO USB-C to HDMI okukhipha ividiyo?¶

Uma ifoni yakho ingenayo i-hardware Imodi ye-DisplayPort Alt futhi awuzange ukugunyaze ngaphambilini Ukulungisa iphutha le-ADB USB kukhompyutha yakho, isixazululo sakho esisheshayo, esingamaphesenti angu-100 esiqinisekisiwe a i-plug-in yesikrini sebhentshi yesikhashana. Thenga eshibhile $20 kuya ku-$30 isikrini esishintshayo semodeli yefoni yakho e-Amazon (noma ungene kunoma yisiphi isitolo esizimele sokukhanda ifoni): uchwepheshe akadingi ngisho nokufaka noma ukunamathisela isikrini ohlakeni lwakho oluphukile - umane akhiphe isixhumi seribhoni sesikrini sokuhlola ebhodini lomama lefoni yakho imizuzu eyi-10 kwikhawunta ngenkathi uvula i-PIN yakho bese uskena ifoni yakho. I-Google Authenticator -> Dlulisa ama-Akhawunti Ikhodi ye-QR kufoni yakho entsha.

Ingabe inkampani yami yenethiwekhi (AT&T, Verizon, T-Mobile, Vodafone) ingakwazi ukuthola amakhodi ami e-Google noma e-Microsoft Authenticator uma ihambisa inombolo yami yocingo (i-SIM / eSIM) efonini yami entsha?¶

Cha. Ukuhambisa inombolo yakho yocingo nge-eSIM noma ikhadi le-SIM eliphathekayo liye efonini entsha kubuyisela kuphela Umlayezo wombhalo we-SMS kanye nekholi yezwi 2FA - kuyenzeka hhayi ukudlulisa I-TOTP Izimfihlo Zohlelo Lokufakazela ubuqiniso (okuyizimbewu zezibalo ezigcinwe ngaphakathi kohlelo lokusebenza, ezizimele ngokuphelele kusiphathi sakho seselula). Nokho, ukuthola inombolo yakho yocingo isebenza kufoni entsha kuyinto kusewusizo olukhulu, ngoba izinsiza eziningi (okuhlanganisa i-Google, i-Microsoft, i-PayPal, namabhange) zikuvumela ukuthi uchofoze "Zama enye indlela -> Thumela ikhodi yombhalo ye-SMS enombolweni yami yocingo" njengembuyiselo lapho uhlelo lwakho lokusebenza Lokufakazela ubuqiniso lungatholakali.

Ngingene ngephutha ku-Microsoft Authenticator ocingweni lwami olusha NGAPHAMBI kokuchofoza okuthi "Qala Ukubuyisela" - ingabe ngisanda kubhala ngaphezulu isipele sami samafu?¶

Uma uvula ngokushesha Izilungiselelo -> Isipele Sefu ocingweni olusha olungenalutho bese uguqula u-VULA ukwenza isipele, kuzokwazisa ngaphambi kokubhala phezu kwesipele esikhona - UNGAQINISEKISI ukubhala ngaphezulu. Kunalokho, ngokushesha susa futhi ufake kabusha i-app ye-Microsoft Authenticator ocingweni lwakho olusha, luvule lusha, bese ubheka ngaphansi kwesikrini sokuqala sokungena ngemvume sombhalo oluhlaza okwesibhakabhaka othi "Buyisela kusuka kusipele" / "Qala ukutakula". Ngena ngemvume nge-Akhawunti yakho ye-Microsoft yomuntu siqu (I-MSA) kanye ne-akhawunti ye-iCloud lapho kuqala ukuze udilize okulondoloziwe I-TOTP imbewu ehlanzekile.

Iziqondiso ezihlobene¶

• Ifoni ephukile noma eyonakaliswe amanzi: ukuhlenga idatha ngokushesha
• Ifoni yenqaba ukushaja ("Uketshezi Lutholakele Kusixhumi") ngesikhathi esiphuthumayo: i-Qi boot engenantambo
• Ukuvalwa kwesiphathi sephasiwedi, ukulahleka kwephasiwedi okuyinhloko, nokutholwa kwe-vault
• I-iPhone Stolen Device Protection key lockout kanye ne-Legacy Contact ukutakula
• Ukuhluleka kokudlulisa i-eSIM, ukulahleka kwesevisi yeselula phesheya, kanye nokumiswa kwembobo yenkampani yenethiwekhi
• Izinombolo zesimo esiphuthumayo ngezwe

Imithombo neziqondiso ezisemthethweni¶

• I-Internet Engineering Task Force (IETF): RFC 6238 - TOTP: I-algorithm yephasiwedi yesikhathi esisodwa esekelwe ngesikhathi kanye RFC 4226 - HOTP: I-HMAC-Isekelwe ku-One Password Algorithm.
• Isikhungo Sikazwelonke Samazinga Nobuchwepheshe (NIST) (United States): Ukushicilelwa Okukhethekile 800-63B: Izinkombandlela Zobunikazi Bedijithali - Ukuqinisekisa Nokuphathwa Komjikelezo Wempilo (Iziqinisekiso Ze-Cryptographic Ezinezici Eziningi Nokuqinisekiswa Kokutholwa Kwe-akhawunti).
• Inhlangano Yamazinga Kagesi Wevidiyo (VESA) kanye neForamu yabaSebenzi be-USB (USB-IF): USB Type-C Ukucaciswa kwekhebula nesixhumi - DisplayPort Alternate Mode (DP Alt Mode) kanye USB On-The-Go (OTG) Igundane elifihliwe/Ukubalwa kwekhibhodi.
• I-Apple Platform Security (support.apple.com/guide/security) kanye ne-Android Open Source Project (source.android.com/docs/security): Amakilasi okuvikela idatha (Before First Unlock vs After First Unlock), Keychain ThisDeviceOnly Izimfanelo, USB Restricted Mode, futhi WindowManager.LayoutParams.FLAG_SECURE Bonisa Imikhawulo Yokuphumayo.
• I-Microsoft Entra (learn.microsoft.com/en-us/entra/identity/authentication) kanye Nombhalo Wokuphepha Kwe-Akhawunti Ye-Google: Isipele SobuQinisekisa We-Microsoft & Buyisela Isakhiwo, I-Temporary Access Pass (TAP) Ukuhlinzeka, kanye Nesiqinisekisi se-Google otpauth-migration Dlulisa Amaphrothokholi.