{"id":84555,"date":"2020-06-09T01:41:56","date_gmt":"2020-06-08T23:41:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-ublock-origin-dobavlena-blokirovka-skriptov-dlya-skanirovaniya-setevyh-portov"},"modified":"2020-06-09T01:41:56","modified_gmt":"2020-06-08T23:41:56","slug":"v-ublock-origin-dobavlena-blokirovka-skriptov-dlya-skanirovaniya-setevyh-portov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/v-ublock-origin-dobavlena-blokirovka-skriptov-dlya-skanirovaniya-setevyh-portov","title":{"rendered":"V uBlock Origin byla p\u0159id\u00e1na blokace skript\u016f pro skenov\u00e1n\u00ed s\u00ed\u0165ov\u00fdch port\u016f.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Ve filtru pou\u017e\u00edvan\u00e9m v uBlock Origin EasyPrivacy<\/a><\/noindex> byla p\u0159id\u00e1na pravidla pro blokov\u00e1n\u00ed typick\u00fdch skript\u016f pro skenov\u00e1n\u00ed s\u00ed\u0165ov\u00fdch port\u016f na m\u00edstn\u00edm syst\u00e9mu u\u017eivatele. P\u0159ipom\u00edn\u00e1me, \u017ee v kv\u011btnu bylo zji\u0161t\u011bno<\/a><\/noindex> skenov\u00e1n\u00ed lok\u00e1ln\u00edch port\u016f p\u0159i otev\u0159en\u00ed str\u00e1nky eBay.com. Uk\u00e1zalo se, \u017ee tato praxe se neomezuje pouze na eBay a mnoh\u00e9 dal\u0161\u00ed str\u00e1nky<\/a><\/noindex> (Citibank, TD Bank, Sky, GumTree, WePay atd.) prov\u00e1d\u011bj\u00ed skenov\u00e1n\u00ed port\u016f lok\u00e1ln\u00edho syst\u00e9mu u\u017eivatele p\u0159i otev\u0159en\u00ed sv\u00fdch str\u00e1nek pomoc\u00ed k\u00f3du pro identifikaci pokus\u016f o p\u0159\u00edstup z napaden\u00fdch po\u010d\u00edta\u010d\u016f, poskytovan\u00e9ho slu\u017ebou ThreatMetrix.<\/p>\n

V p\u0159\u00edpad\u011b eBay bylo prov\u00e1d\u011bno ov\u011b\u0159ov\u00e1n\u00ed 14 s\u00ed\u0165ov\u00fdch port\u016f spojen\u00fdch se servery vzd\u00e1len\u00e9ho p\u0159\u00edstupu, jako jsou VNC, TeamViewer, Anyplace Control, Aeroadmin, Ammy Admin a RDP. Pravd\u011bpodobn\u011b se ov\u011b\u0159ov\u00e1n\u00ed prov\u00e1d\u00ed za \u00fa\u010delem ur\u010den\u00ed<\/a><\/noindex> p\u0159\u00edtomnosti stop kontaminace syst\u00e9mu \u0161kodliv\u00fdm softwarem za \u00fa\u010delem p\u0159edch\u00e1zen\u00ed podvodn\u00fdm n\u00e1kup\u016fm pomoc\u00ed botnet\u016f. Skenov\u00e1n\u00ed m\u016f\u017ee b\u00fdt tak\u00e9 pou\u017eito k z\u00edsk\u00e1n\u00ed \u00fadaj\u016f pro nep\u0159\u00edmou identifikaci u\u017eivatele<\/a><\/noindex>.<\/p>\n

Pro skenov\u00e1n\u00ed se pou\u017e\u00edv\u00e1 technika zalo\u017een\u00e1 na pokusu o nav\u00e1z\u00e1n\u00ed spojen\u00ed s r\u016fzn\u00fdmi s\u00ed\u0165ov\u00fdmi porty hostitele 127.0.0.1 (localhost) prost\u0159ednictv\u00edm WebSocket<\/a><\/noindex>Skute\u010dnost, \u017ee je otev\u0159en\u00fd s\u00ed\u0165ov\u00fd port, se ur\u010duje nep\u0159\u00edmo na z\u00e1klad\u011b rozd\u00edlu v zpracov\u00e1n\u00ed chyb p\u0159ipojen\u00ed k aktivn\u00edm a nevyu\u017e\u00edvan\u00fdm s\u00ed\u0165ov\u00fdm port\u016fm. WebSocket umo\u017e\u0148uje pos\u00edlat pouze HTTP po\u017eadavky, ale takov\u00fd po\u017eadavek pro neaktivn\u00ed s\u00ed\u0165ov\u00fd port kon\u010d\u00ed chybou okam\u017eit\u011b, zat\u00edmco pro aktivn\u00ed port a\u017e po n\u011bjak\u00e9 dob\u011b, kter\u00e1 je v\u011bnov\u00e1na pokusu o nav\u00e1z\u00e1n\u00ed spojen\u00ed. Krom\u011b toho p\u0159i neaktivn\u00edm portu WebSocket vrac\u00ed k\u00f3d chyby p\u0159ipojen\u00ed (ERR_CONNECTION_REFUSED), zat\u00edmco p\u0159i aktivn\u00edm portu \u2014 k\u00f3d chyby pro nav\u00e1z\u00e1n\u00ed spojen\u00ed. <\/p>\n

\"V<\/a><\/noindex><\/center><\/p>\n

Krom\u011b skenov\u00e1n\u00ed port\u016f m\u016f\u017ee WebSocket tak\u00e9 b\u00fdt aplikov\u00e1ny<\/a><\/noindex> b\u00fdt pou\u017eit pro \u00fatoky na syst\u00e9my webov\u00fdch v\u00fdvoj\u00e1\u0159\u016f, kte\u0159\u00ed spou\u0161t\u011bj\u00ed na m\u00edstn\u00edm syst\u00e9mu WebSocket handler pro aplikace React. Vn\u011bj\u0161\u00ed web m\u016f\u017ee proch\u00e1zet s\u00ed\u0165ov\u00e9 porty, definovat p\u0159\u00edtomnost takov\u00e9ho handleru a p\u0159ipojit se k n\u011bmu. Pokud v\u00fdvoj\u00e1\u0159 ud\u011bl\u00e1 chybu, \u00fato\u010dn\u00edk m\u016f\u017ee z\u00edskat obsah lad\u00edc\u00edch dat, kter\u00e1 mohou obsahovat kusy citliv\u00fdch informac\u00ed.<\/p>\n

\"V<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Zdroj: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0439 \u0432 uBlock Origin \u0444\u0438\u043b\u044c\u0442\u0440 EasyPrivacy \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u044b \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0442\u0438\u043f\u043e\u0432\u044b\u0445 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u043e\u0440\u0442\u043e\u0432 \u043d\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u0447\u0442\u043e \u0432 \u043c\u0430\u0435 \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0440\u0442\u043e\u0432 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0441\u0430\u0439\u0442\u0430 eBay.com. \u0412\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u043f\u043e\u0434\u043e\u0431\u043d\u0430\u044f \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430 \u043d\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f eBay \u0438 \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0430\u0439\u0442\u044b (Citibank, TD Bank, Sky, GumTree, WePay \u0438 \u0442.\u043f.) \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0440\u0442\u043e\u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":84556,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-84555","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47U uBlock Origin byla p\u0159id\u00e1na blokace skript\u016f pro skenov\u00e1n\u00ed s\u00ed\u0165ov\u00fdch port\u016f | ProHoster","description":"Do filtru EasyPrivacy pou\u017e\u00edvan\u00e9ho v uBlock Origin byla p\u0159id\u00e1na pravidla pro blokov\u00e1n\u00ed typick\u00fdch skript\u016f.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/v-ublock-origin-dobavlena-blokirovka-skriptov-dlya-skanirovaniya-setevyh-portov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 uBlock Origin \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0430 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 \u0434\u043b\u044f \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u043e\u0440\u0442\u043e\u0432 | ProHoster","og:description":"\u0412 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0439 \u0432 uBlock Origin \u0444\u0438\u043b\u044c\u0442\u0440 EasyPrivacy \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u044b \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0442\u0438\u043f\u043e\u0432\u044b\u0445 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/v-ublock-origin-dobavlena-blokirovka-skriptov-dlya-skanirovaniya-setevyh-portov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-08T23:41:56+00:00","article:modified_time":"2020-06-08T23:41:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"84555","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:55:41","updated":"2022-09-28 02:39:05","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/84555","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=84555"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/84555\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/84556"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=84555"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=84555"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=84555"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}