{"id":35296,"date":"2019-10-31T22:03:29","date_gmt":"2019-10-31T19:03:29","guid":{"rendered":"https:\/\/prohoster.info\/blog\/predstavlena-novaya-tehnika-skrytoj-identifikatsii-sistemy-i-brauzera\/"},"modified":"2019-10-31T22:03:29","modified_gmt":"2019-10-31T19:03:29","slug":"predstavlena-novaya-tehnika-skrytoj-identifikatsii-sistemy-i-brauzera","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/predstavlena-novaya-tehnika-skrytoj-identifikatsii-sistemy-i-brauzera","title":{"rendered":"Byla p\u0159edstavena nov\u00e1 technika skryt\u00e9 identifikace syst\u00e9mu a prohl\u00ed\u017ee\u010de","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Skupina v\u00fdzkumn\u00edk\u016f z Technick\u00e9 univerzity Graz (Rakousko), d\u0159\u00edve zn\u00e1m\u00e1 v\u00fdvojem metod \u00fatok\u016f MDS<\/a><\/noindex>, NetSpectre<\/a><\/noindex> a Throwhammer<\/a><\/noindex>, odhalila<\/a><\/noindex> informace o nov\u00e9 technice anal\u00fdzy prost\u0159ednictv\u00edm bo\u010dn\u00edch kan\u00e1l\u016f, kter\u00e1 umo\u017e\u0148uje ur\u010dit p\u0159esnou verzi prohl\u00ed\u017ee\u010de, pou\u017eit\u00fd opera\u010dn\u00ed syst\u00e9m, architekturu CPU a pou\u017eit\u00ed dopl\u0148k\u016f pro boj se skrytou identifikac\u00ed. <\/p>\n

Pro ur\u010den\u00ed uveden\u00fdch parametr\u016f sta\u010d\u00ed prov\u00e9st v prohl\u00ed\u017ee\u010di p\u0159ipraven\u00fd JavaScript k\u00f3d od v\u00fdzkumn\u00edk\u016f. V praxi m\u016f\u017ee b\u00fdt metoda vyu\u017e\u00edv\u00e1na nejen jako dodate\u010dn\u00fd zdroj pro nep\u0159\u00edmou identifikaci u\u017eivatele, ale tak\u00e9 pro ur\u010den\u00ed parametr\u016f syst\u00e9mov\u00e9ho prost\u0159ed\u00ed pro c\u00edlen\u00e9 pou\u017eit\u00ed exploit\u016f s ohledem na OS, architekturu a prohl\u00ed\u017ee\u010d. Metoda je efektivn\u00ed i p\u0159i pou\u017eit\u00ed prohl\u00ed\u017ee\u010d\u016f s implementac\u00ed mechanism\u016f blokov\u00e1n\u00ed skryt\u00e9 identifikace, jako je Tor Browser. Zdrojov\u00e9 k\u00f3dy prototypu k\u00f3du s implementac\u00ed metody byly zve\u0159ejn\u011bny<\/a><\/noindex> je licencov\u00e1n pod MIT licenc\u00ed.<\/p>\n

Ur\u010den\u00ed se prov\u00e1d\u00ed na z\u00e1klad\u011b vy\u010dlen\u011bn\u00ed vzor\u016f stavu vlastnost\u00ed charakteristick\u00fdch pro r\u016fzn\u00e9 prohl\u00ed\u017ee\u010de v JavaScriptu a charakteristik doby prov\u00e1d\u011bn\u00ed operac\u00ed, kter\u00e9 z\u00e1vis\u00ed na specifik\u00e1ch fungov\u00e1n\u00ed JIT, CPU a mechanism\u016f alokace pam\u011bti. Ur\u010den\u00ed vlastnost\u00ed se prov\u00e1d\u00ed generov\u00e1n\u00edm seznamu v\u0161ech objekt\u016f dostupn\u00fdch z JavaScriptu. Jak se uk\u00e1zalo, po\u010det objekt\u016f p\u0159\u00edmo koreluje s prohl\u00ed\u017ee\u010dov\u00fdm enginem a jeho verz\u00ed. <\/p>\n

function getProperties(o) {
\n var result = [];
\n while (o !== null) {
\n result = result.concat(Reflect.ownKeys(o));
\n o = Object.getPrototypeOf(o);
\n }
\n return result;
\n }<\/p>\n

Nap\u0159\u00edklad pro Firefox dokumentace uv\u00e1d\u00ed podporu 2247 vlastnost\u00ed, zat\u00edmco skute\u010dn\u00fd po\u010det definovan\u00fdch vlastnost\u00ed, v\u010detn\u011b nedokumentovan\u00fdch, \u010din\u00ed 15709 (v Tor Browseru \u2014 15639). Pro Chrome je deklarov\u00e1no 2698 vlastnost\u00ed, ale ve skute\u010dnosti jich je 13570 (v Chrome pro Android \u2014 13119). Po\u010det a hodnoty vlastnost\u00ed se m\u011bn\u00ed s ka\u017edou verz\u00ed prohl\u00ed\u017ee\u010de a p\u0159i pou\u017eit\u00ed r\u016fzn\u00fdch opera\u010dn\u00edch syst\u00e9m\u016f. <\/p>\n

Hodnoty a p\u0159\u00edtomnost ur\u010dit\u00fdch vlastnost\u00ed lze vyu\u017e\u00edt k ur\u010den\u00ed typu opera\u010dn\u00edho syst\u00e9mu. Nap\u0159\u00edklad v Kubuntu je vlastnost window.innerWidth nastavena na hodnotu 1000, zat\u00edmco ve Windows 10 na 1001. Ve Windows je dostupn\u00e1 vlastnost window.navigator.activeVRDisplays, zat\u00edmco v Linuxu chyb\u00ed. Pro Android je k dispozici \u0159ada specifick\u00fdch funkc\u00ed, ale chyb\u00ed window.SharedWorker. Pro identifikaci opera\u010dn\u00edho syst\u00e9mu se rovn\u011b\u017e doporu\u010duje analyzovat parametry WebGL, jejich\u017e stav z\u00e1vis\u00ed na ovlada\u010d\u00edch. Krom\u011b toho vol\u00e1n\u00ed WEBGL_debug_renderer_infoextension umo\u017e\u0148uje z\u00edskat informace o renderovac\u00edm j\u00e1dru OpenGL, kter\u00e9 je pro ka\u017ed\u00fd opera\u010dn\u00ed syst\u00e9m jin\u00e9. <\/p>\n

Pro ur\u010den\u00ed CPU se aplikuje hodnocen\u00ed rozd\u00edl\u016f v \u010dase b\u011bhu r\u016fzn\u00fdch typov\u00fdch blok\u016f k\u00f3du, jeho\u017e zpracov\u00e1n\u00ed z\u00e1vis\u00ed na architektu\u0159e instruk\u010dn\u00ed sady s ohledem na chov\u00e1n\u00ed JIT (ur\u010duje se, kolik registr\u016f CPU bude zapojeno a v jak\u00fdch p\u0159\u00edpadech JIT vygeneruje efektivn\u00ed k\u00f3d s optimalizacemi a zapojen\u00edm roz\u0161\u00ed\u0159en\u00fdch instrukc\u00ed, a kdy nikoli). Pro ur\u010den\u00ed typu syst\u00e9mu distribuce pam\u011bti a opera\u010dn\u00edho syst\u00e9mu se rovn\u011b\u017e m\u011b\u0159\u00ed rozd\u00edly v \u010dase alokace pam\u011bti pro r\u016fzn\u00e9 struktury, podle kter\u00fdch lze usuzovat na velikost blok\u016f pam\u011bti. <\/p>\n

Parametry stanoven\u00e9 b\u011bhem prov\u00e1d\u011bn\u00ed skriptu se porovn\u00e1vaj\u00ed s referen\u010dn\u00edmi hodnotami charakteristick\u00fdmi pro p\u0159edem otestovan\u00e9 prost\u0159ed\u00ed. B\u011bhem kontroly vyvinut\u00e1 technika umo\u017enila p\u0159esn\u011b ur\u010dit 40 r\u016fzn\u00fdch testovac\u00edch prost\u0159ed\u00ed, ur\u010dit verze pou\u017e\u00edvan\u00fdch prohl\u00ed\u017ee\u010d\u016f, v\u00fdrobce CPU, pou\u017eit\u00fd opera\u010dn\u00ed syst\u00e9m a skute\u010dnost spu\u0161t\u011bn\u00ed na re\u00e1ln\u00e9m hardwaru nebo ve virtu\u00e1ln\u00edm stroji.<\/p>\n

Samostatn\u011b je zd\u016frazn\u011bna mo\u017enost ur\u010den\u00ed prohl\u00ed\u017ee\u010dov\u00fdch dopl\u0148k\u016f a dokonce i jednotliv\u00fdch nastaven\u00ed dopl\u0148k\u016f, v\u010detn\u011b dopl\u0148k\u016f ur\u010den\u00fdch k blokov\u00e1n\u00ed metod skryt\u00e9 identifikace nebo aktivit v soukrom\u00e9m re\u017eimu prohl\u00ed\u017een\u00ed. V kontextu navr\u017een\u00e9 metody se podobn\u00e9 dopl\u0148ky st\u00e1vaj\u00ed dal\u0161\u00edm zdrojem dat pro identifikaci. Dopl\u0148ky jsou ur\u010dov\u00e1ny prost\u0159ednictv\u00edm hodnocen\u00ed deformac\u00ed parametr\u016f p\u016fvodn\u00edho prost\u0159ed\u00ed, kter\u00e9 dopl\u0148ky zp\u016fsobuj\u00ed.<\/p>\n

Mezi dal\u0161\u00edmi metodami identifikace lze zm\u00ednit zohledn\u011bn\u00ed takov\u00fdch nep\u0159\u00edm\u00fdch dat, jako je rozli\u0161en\u00ed obrazovky<\/a><\/noindex>, seznam podporovan\u00fdch MIME typ\u016f, specifick\u00e9 parametry v hlavi\u010dk\u00e1ch (HTTP\/2<\/a><\/noindex> a HTTPS<\/a><\/noindex>), anal\u00fdza nainstalovan\u00fdch plugin\u016f a p\u00edsem<\/a><\/noindex>, dostupnost ur\u010dit\u00e9ho Web API specifick\u00e9ho pro grafick\u00e9 karty vlastnosti<\/a><\/noindex> vykreslov\u00e1n\u00ed pomoc\u00ed WebGL a Canvas<\/a><\/noindex>, manipulace<\/a><\/noindex> s CSS, anal\u00fdza charakteristik pr\u00e1ce s my\u0161\u00ed<\/a><\/noindex> a kl\u00e1vesnic\u00ed<\/a><\/noindex>.<\/p>\n

<\/a><\/noindex><\/p>\n

Zdroj: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0413\u0440\u0430\u0446\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0410\u0432\u0441\u0442\u0440\u0438\u044f), \u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0430\u0442\u0430\u043a MDS, NetSpectre \u0438 Throwhammer, \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043d\u043e\u0432\u043e\u0439 \u0442\u0435\u0445\u043d\u0438\u043a\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0442\u043e\u0447\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0443 CPU \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u0431\u043e\u0440\u044c\u0431\u044b \u0441\u043e \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439. \u0414\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 JavaScript \u043a\u043e\u0434\u0430. […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-35296","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Byla p\u0159edstavena nov\u00e1 technika skryt\u00e9 identifikace syst\u00e9mu a prohl\u00ed\u017ee\u010de | ProHoster","description":"Skupina v\u00fdzkumn\u00edk\u016f z Technick\u00e9 univerzity Graz (Rakousko), d\u0159\u00edve zn\u00e1m\u00e1 v\u00fdvojem metod \u00fatok\u016f","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/predstavlena-novaya-tehnika-skrytoj-identifikatsii-sistemy-i-brauzera","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0413\u0440\u0430\u0446\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0410\u0432\u0441\u0442\u0440\u0438\u044f), \u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0430\u0442\u0430\u043a","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/predstavlena-novaya-tehnika-skrytoj-identifikatsii-sistemy-i-brauzera","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:03:29+00:00","article:modified_time":"2019-10-31T19:03:29+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35296","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 22:42:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:06:24","updated":"2026-01-21 22:42:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/35296","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=35296"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/35296\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=35296"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=35296"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=35296"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}