Skip to content

Kaupapahere Haumarutanga

Whakahōutia: Poutū-te-rangi 2026

Ehara te haumarutanga i te mea i mahara i muri i a FFFFinance -- he here hoahoa matua. Ka whakamārama tēnei whārangi i te āhua o te tiaki a te taupānga i ō raraunga pūtea, te āhua o tā mātou whakahaere i ngā pūrongo haawareware, me ngā mea e tūmanako ana koe mai i a mātou ina hē tētahi mea.


Whākī Haepapa

Mēnā ka kitea e koe tētahi haawareware haumarutanga i a FFFFinance, tēnā pūrongotia ā-tūmataiti i mua i te whākī tūmatanui. Ka tino aro mātou ki ngā pūrongo katoa, ā, ka whakautu tere.

Te āhua o te pūrongo:

  • Īmēra: help@ffffinance.org me te rārangi kaupapa [SECURITY]
  • GitHub (kāore he whaiaro): Whakatūria he Tohutohu Haumarutanga ki te putunga
  • Ka pōhiritia ngā pūrongo PGP-whakamunatia -- whakapā mai i te tuatahi mō tā mātou kī tūmatanui

He aha hei whakauruuru:

  • Whakamārama o te haawareware me te pānga pea
  • Ngā mahi hei whakahua anō (whakaaturanga mēnā ka taea)
  • Ngā putanga kua pāngia
  • Ngā whakawāteatanga e tūtohu ana

He aha hei tūmanako mai i a mātou:

Mahi
I roto i te 48 hāoraWhakaae ki tō pūrongo
I roto i te 7 rāAromatawai tuatahi me te taumata tūponotanga
I roto i te 30 rāWhakatika kua tukuna, whakawhitiwhiti rānei
I muri i te tuku whakatikaWhakanui i te CHANGELOG (mēnā e hiahia ana koe)

Ka tonoa koe kia hoatu he matapihi tika ki a mātou hei whakatika i te take i mua i te whākī tūmatanui. Kāore mātou e whai mahi ā-ture ki ngā kairangahau haumarutanga whai-pono.


Hoahoanga Haumarutanga

Ā-Kāinga i te Tautuhinga

Kua hoahoatia a FFFFinance kia kāore rawa he raraunga pūtea e wehe i tō pūrere ki te kore koe e whakakā i te tukutahi kapua. Ka rere ā-rohe katoa te taupānga:

  • Ka noho te pātengi raraunga SQLite ki tō mihini i ~/.local/share/FFFFinance/finance.db (Linux) te ara pūnaha ōrite rānei
  • Ka whakahaere te tua-o-muri o te taupānga i ngā urunga pātengi raraunga katoa -- ka taea anake e te atanga kaiwhakamahi te pānui me te tuhi raraunga mā tētahi piriti ā-roto haumaru
  • Kua whakakore te urunga whatunga mai i te atanga kaiwhakamahi i te tautuhinga

Kaupapahere Ihirangi Haumaru

Ka whakature te taupānga i tētahi Kaupapahere Ihirangi Haumaru (CSP) e whakahaere ana i ngā rauemi ka taea te uta. I te mahi tūturu ko te tikanga:

  • Kāore he tuhinga o waho ka taea te wero ki roto i te taupānga
  • Kāore he tuhinga ā-rārangi e whakaaetia ana -- me heke mai ngā waehere katoa i te taupānga ake
  • Ngā tono whatunga ka herea ki ngā ratonga anake e hiahiatia ana e FFFFinance (Akahu me Cloudflare)

Whakapakari Haumarutanga Taupānga Papamahi

Ka whai te taupānga papamahi i ngā tikanga pai haumarutanga o te ahumahi:

TiakiTe tikanga
Wehe horopakiKa rere te atanga kaiwhakamahi me te pūkaha ā-roto o te taupānga i ngā taiao motuhake
PouakaKa rere te atanga kaiwhakamahi i roto i tētahi pouaka pūnaha whakahaere me ngā whakaaetanga iti
Kāore he urunga pūnaha tikaKāore e taea e te atanga kaiwhakamahi te uru ki ngā kōnae, whakahau pūnaha, taupānga atu rānei
Kaupapahere orokohanga-ōriteKo ngā tono ki ngā rohe kua whakaaetia anake (pēnā i a Akahu) ka whakaaetia
HTTPS anakeMe whai whakamunatanga haumaru ngā hononga o waho katoa
Kāore he āhuatanga whakamātauKa whakamahia anake ngā hangarau pūmau, kua whakamātauria pai

Ka taea anake e te atanga kaiwhakamahi te mahi tahi ki ō raraunga mā tētahi huinga here o ngā mahi kua whakaaetia -- kāore he kaha ki te uru ki ngā kōnae, rauemi pūnaha rānei noa.


Whakamunatanga Raraunga

Rohe Pūtea Ā-Rohe

Ka puritia te pātengi raraunga SQLite ki tō pūnaha kōnae ā-rohe me ngā whakaaetanga kōnae paerewa OS. Ka tūtohu mātou:

  • Whakakā i te whakamunatanga kōpae-katoa ki tō mihini (BitLocker i Windows, FileVault i macOS, LUKS i Linux)
  • Whakamahi i tētahi kupuhipa takiuru kaha mō tō pūkete kaiwhakamahi

Ka tāpiritia e tētahi putanga ā muri he whakamunatanga taumata-pātengi raraunga hei tūmomo tiaki anō.

Tukutahi Kapua (Kōwhiringa)

Ina whakakā te tukutahi kapua (taumata Pro me Kapua), ka whakamunatia ngā raraunga i te whitiwhiti me te okioki:

  • I te whitiwhiti: Ka whakamahi ngā whakawhitiwhiti katoa me te tūmau kapua i te whakamunatanga TLS 1.3
  • I te okioki: Ka whakamunatia ngā raraunga kapua me te AES-256 (te paerewa ōrite e whakamahia ana e ngā pēke)
  • Whakamotuhēhē: Ka whakamotuhēhēhia ngā tono API ki tētahi kī API ā-kaiwhakamahi, kāore he mea huna tohatoha
  • Whānuitanga: Ko ngā ripanga ka kōwhiri koe hei tukutahi anake ka tukuna -- kāore rawa ngā tōkena Akahu mata e tukutahia ki te kapua

Ko te tukutahi kapua he kōwhiringa-uru, ā, ka taea te whakakore i ngā wā katoa mai i ngā Tautuhinga. Ko te whakakore i te tukutahi kāore e muku aunoatia i ō raraunga kapua -- whakamahia Tautuhinga → Kapua → Mukua ngā raraunga kapua mō tērā.


Haumarutanga Hononga Akahu

Ka hono a FFFFinance ki ō pūkete pēke Aotearoa mā Akahu, he kaiwhakaemi pēke tuwhera kua raihanatia i raro i te ture Aotearoa.

  • Kāore he taipitopito pēke e puritia: Ka whakamana koe i a Akahu mā tētahi whārangi takiuru haumaru i tō tirotiro. Kāore rawa a FFFFinance e kite i tō ingoa kaiwhakamahi, kupuhipa rānei pēke.
  • Tōkena urunga: Ka tuku a Akahu i tētahi tōkena urunga haumaru, ka puritia ki tō pātengi raraunga ā-rohe. Kāore rawa e tukuna ki hea kē hāunga ki api.akahu.io.
  • Whānuitanga tōkena: He pānui-anake ngā tōkena i te tautuhinga. Kāore he urunga tuhi, utu rānei e tonoa ana.
  • TLS: Ka mahia ngā tono katoa ki api.akahu.io i runga HTTPS/TLS 1.3. Kei te mahere te pininga tiwhikete (he tirotiro anō e whakaū ana i te tiwhikete tuakiri o te tūmau) mō tētahi putanga ā muri.
  • Whakakore: Ka taea e koe te whakakore i te urunga o FFFFinance i ngā wā katoa mā ngā tautuhinga pūkete Akahu, motuhake i te taupānga.

Whakahaere Raraunga AI

Whakatau Ā-Rohe (Tautuhinga)

Ka taea e te kaiawhina AI "Freddy" te rere katoa ki tō pūrere. Ka tukatukahia ā-rohe ō raraunga pūtea:

  • Kāore he tono, raraunga pūtea rānei e tukuna ki tētahi tūmau
  • Ka tikiake kotahi ngā tauira AI, ka puritia ki tō mihini
  • Ka whakamahia tō GPU mō te tukatuka tere ina wātea, ki te kore ka whakamahia te CPU

Hinga AI Kapua (Kōwhiringa-Uru)

Mēnā ka whakakā koe i te taumata AI kapua i ngā Tautuhinga, ka tukuna pea ngā pātai uaua ki ngā API Anthropic, OpenAI rānei:

  • Me uru-tika koe -- kāore tēnei e whakakā i te tautuhinga
  • Ina whakakā, ka tukuna te tuhinga pātai (ehara i ō raraunga whakawhitinga mata) ki te kaiwhakarato kua kōwhiria
  • Ka hāngai te kaupapahere tūmataiti o ia kaiwhakarato ki ngā raraunga ka whiwhi rātou
  • Ka whakamahi te taumata kapua i tō ake kī API, ka puritia ā-rohe -- kāore a MegaSuperSoft e takawaenga, e rārangi rānei i ēnei tono

Ka taea e koe te kite i te āhua o te tukatuka o ia pātai mā te tirotiro i te tohu i runga i te whakautu a Freddy.


Whakahōu Rorohiko

  • Ko ngā wāhanga rorohiko katoa kua herea-putanga, ā, ka matawai aunoatia mō ngā take haumarutanga mōhiotia i ia hanganga
  • He taupānga motuhake -- kāore e tikiake waehere anō i te wā mahi
  • Ka whakahōutia te anga i raro i ia wā kia whai i ngā paaki haumarutanga hou rawa
  • Ka aukatihia aunoatia ngā hanganga mēnā ka kitea he haawareware tūponotanga nui

Ngā Herenga Mōhiotia

  • macOS: Kua waitohutia te taupānga mō te whanaketanga anake i tēnei wā, kāore me tētahi tiwhikete Apple Developer ID katoa. Ka puta pea he whakamātautau Gatekeeper i te whakarewa tuatahi -- he haumaru te kape. Kei te mahere he tiwhikete katoa.
  • Windows: Kāore anō te taupānga kia waitohutia. Ka puta pea he whakamātautau Windows SmartScreen i te whakahaere tuatahi -- he haumaru te kape.
  • Whakamunatanga pātengi raraunga: Kāore anō kia whakatinanahia. Ka tūtohu mātou kia whakakā i te whakamunatanga kōpae-katoa ki tō pūrere (tirohia i runga) hei tiaki i tēnei wā.

Whakapā

Take haumarutanga: help@ffffinance.org Whānui: ffffinance.org GitHub: github.com/megasupersoft/FFFFinance