{"id":92490,"date":"2020-08-27T19:42:37","date_gmt":"2020-08-27T17:42:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/30-iz-tysyachi-krupnejshih-sajtov-ispolzuyut-skripty-dlya-skrytoj-identifikaczii"},"modified":"2020-08-27T19:42:37","modified_gmt":"2020-08-27T17:42:37","slug":"30-iz-tysyachi-krupnejshih-sajtov-ispolzuyut-skripty-dlya-skrytoj-identifikaczii","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/30-iz-tysyachi-krupnejshih-sajtov-ispolzuyut-skripty-dlya-skrytoj-identifikaczii","title":{"rendered":"30 % z tis\u00edce nejv\u011bt\u0161\u00edch web\u016f pou\u017e\u00edv\u00e1 skripty pro skrytou identifikaci","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Skupina v\u00fdzkumn\u00edk\u016f z Mozilly, Iowsk\u00e9 univerzity a Kalifornsk\u00e9 univerzity publikovala<\/a><\/noindex> z\u00e1v\u011bry studie o pou\u017eit\u00ed k\u00f3du na webech pro skrytou identifikaci u\u017eivatel\u016f. Skrytou identifikac\u00ed se rozum\u00ed generov\u00e1n\u00ed identifik\u00e1tor\u016f na z\u00e1klad\u011b nep\u0159\u00edm\u00fdch \u00fadaj\u016f o chov\u00e1n\u00ed prohl\u00ed\u017ee\u010de, jako jsou rozli\u0161en\u00ed obrazovky<\/a><\/noindex>, seznam podporovan\u00fdch MIME typ\u016f, specifick\u00e9 parametry v hlavi\u010dk\u00e1ch (HTTP\/2<\/a><\/noindex> a HTTPS<\/a><\/noindex>), anal\u00fdza nainstalovan\u00fdch plugin\u016f a p\u00edsem<\/a><\/noindex>, dostupnost ur\u010dit\u00e9ho Web API specifick\u00e9ho pro grafick\u00e9 karty vlastnosti<\/a><\/noindex> vykreslov\u00e1n\u00ed pomoc\u00ed WebGL a Canvas<\/a><\/noindex>, manipulace<\/a><\/noindex> s CSS, zohledn\u011bn\u00ed v\u00fdchoz\u00edch hodnot<\/a><\/noindex>, skanov\u00e1n\u00ed<\/a><\/noindex> s\u00ed\u0165ov\u00fdch port\u016f, anal\u00fdza zvl\u00e1\u0161tnost\u00ed pr\u00e1ce s my\u0161\u00ed<\/a><\/noindex> a kl\u00e1vesnic\u00ed<\/a><\/noindex>.<\/p>\n

Studie 100 tis\u00edc nejpopul\u00e1rn\u011bj\u0161\u00edch web\u016f podle \u017eeb\u0159\u00ed\u010dku Alexa uk\u00e1zala, \u017ee na 9040 z nich (10,18%) se pou\u017e\u00edv\u00e1 k\u00f3d pro skrytou identifikaci n\u00e1v\u0161t\u011bvn\u00edk\u016f. P\u0159itom, pokud zohledn\u00edme tis\u00edc nejpopul\u00e1rn\u011bj\u0161\u00edch web\u016f, byl podobn\u00fd k\u00f3d zji\u0161t\u011bn ve 30,60% p\u0159\u00edpad\u016f (266 web\u016f), a mezi weby, kter\u00e9 se umis\u0165uj\u00ed v \u017eeb\u0159\u00ed\u010dku na pozic\u00edch od tis\u00edc\u00ed do des\u00e1t\u00e9ho tis\u00edce, ve 24,45% p\u0159\u00edpad\u016f (2010 web\u016f). V\u011bt\u0161inou se skryt\u00e1 identifikace pou\u017e\u00edv\u00e1 v skriptech poskytovan\u00fdch extern\u00edmi slu\u017ebami pro boj s podvody<\/a><\/noindex> a filtrov\u00e1n\u00ed bot\u016f, jako\u017e i reklamn\u00edmi s\u00edt\u011bmi a syst\u00e9my sledov\u00e1n\u00ed pohybu u\u017eivatel\u016f.
\n

\"30<\/a><\/noindex><\/center><\/p>\n

Pro identifikaci k\u00f3du, kter\u00fd prov\u00e1d\u00ed skrytou identifikaci, byl vyvinut n\u00e1stroj FP-Inspector<\/a><\/noindex>, jeho\u017e k\u00f3d byla navr\u017eena<\/a><\/noindex> je licencov\u00e1n pod MIT. V n\u00e1stroji se pou\u017e\u00edvaj\u00ed metody strojov\u00e9ho u\u010den\u00ed v kombinaci se statickou a dynamickou anal\u00fdzou JavaScriptov\u00e9ho k\u00f3du. Tvrd\u00ed se, \u017ee pou\u017eit\u00ed strojov\u00e9ho u\u010den\u00ed umo\u017enilo v\u00fdrazn\u011b zv\u00fd\u0161it p\u0159esnost detekce k\u00f3du pro skrytou identifikaci a odhalit o 26% v\u00edce problematick\u00fdch skriptu
\nve srovn\u00e1n\u00ed s ru\u010dn\u011b zadanou heuristikou. <\/p>\n

Mnoho ze zji\u0161t\u011bn\u00fdch skript\u016f identifikace chyb\u011blo v standardn\u00edch blokovac\u00edch seznamech Disconnect<\/a><\/noindex>, Adsafe<\/a><\/noindex>, DuckDuckGo, Justuno<\/a><\/noindex> a EasyPrivacy<\/a><\/noindex>.
\nPo zasl\u00e1n\u00ed ozn\u00e1men\u00ed<\/a><\/noindex> v\u00fdvoj\u00e1\u0159i seznamu blokov\u00e1n\u00ed EasyPrivacy byl vytvo\u0159en<\/a><\/noindex> vyhrazen\u00fd odd\u00edl pro skripty skryt\u00e9 identifikace. Krom\u011b toho FP-Inspector umo\u017enil odhalit n\u011bkter\u00e9 nov\u00e9 zp\u016fsoby pou\u017eit\u00ed Web API pro identifikaci, kter\u00e9 d\u0159\u00edve nebyly v praxi zaznamen\u00e1ny.<\/p>\n

Nap\u0159\u00edklad bylo zji\u0161t\u011bno pou\u017eit\u00ed pro identifikaci informac\u00ed o rozlo\u017een\u00ed kl\u00e1vesnice (getLayoutMap), zbytkov\u00fdch dat v cache (pomoc\u00ed API Performance se analyzuj\u00ed zpo\u017ed\u011bn\u00ed p\u0159i p\u0159enosu dat, co\u017e umo\u017e\u0148uje ur\u010dit, zda si u\u017eivatel zavolal konkr\u00e9tn\u00ed dom\u00e9nu, nebo zda byla d\u0159\u00edve str\u00e1nka otev\u0159ena), ud\u011blen\u00fdch v prohl\u00ed\u017ee\u010di opr\u00e1vn\u011bn\u00ed (informace o p\u0159\u00edstupu k Notification, Geolocation a Camera API), p\u0159\u00edtomnosti specializovan\u00fdch perifern\u00edch za\u0159\u00edzen\u00ed a vz\u00e1cn\u00fdch senzor\u016f (hern\u00ed ovlada\u010de, helmice virtu\u00e1ln\u00ed reality, senzory p\u0159ibl\u00ed\u017een\u00ed). D\u00e1le byly zaznamen\u00e1ny okolnosti identifikace p\u0159\u00edtomnosti specializovan\u00fdch API pro ur\u010dit\u00e9 prohl\u00ed\u017ee\u010de a rozd\u00edly v chov\u00e1n\u00ed API (AudioWorklet, setTimeout, mozRTCSessionDescription), jako\u017e i pou\u017eit\u00ed API AudioContext pro ur\u010den\u00ed vlastnost\u00ed zvukov\u00e9ho syst\u00e9mu. <\/p>\n

V pr\u016fb\u011bhu v\u00fdzkumu byla rovn\u011b\u017e zkoum\u00e1na ot\u00e1zka poru\u0161ov\u00e1n\u00ed standardn\u00ed funk\u010dnosti webov\u00fdch str\u00e1nek v p\u0159\u00edpad\u011b pou\u017eit\u00ed metod ochrany proti skryt\u00e9 identifikaci, vedouc\u00edch k blokov\u00e1n\u00ed s\u00ed\u0165ov\u00fdch po\u017eadavk\u016f nebo omezen\u00ed p\u0159\u00edstupu k API. Bylo prok\u00e1z\u00e1no, \u017ee selektivn\u00ed omezen\u00ed API pouze pro skripty nalezen\u00e9 FP-Inspectorem vede k men\u0161\u00edm poru\u0161en\u00edm v chodu ne\u017e p\u0159i pou\u017eit\u00ed v Brave a Tor Browser p\u0159\u00edsn\u011bj\u0161\u00edch obecn\u00fdch omezen\u00ed vol\u00e1n\u00ed API, potenci\u00e1ln\u011b vedouc\u00edch k \u00faniku dat.<\/p>\n

\r\n \"P\u0159ehr\u00e1t\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Zdroj: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 Mozilla, \u0410\u0439\u043e\u0432\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0438\u0442\u043e\u0433\u0438 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043d\u0430 \u0441\u0430\u0439\u0442\u0430\u0445 \u043a\u043e\u0434\u0430 \u0434\u043b\u044f \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u041f\u043e\u0434 \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u043d\u0438\u043c\u0430\u0435\u0442\u0441\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043a\u043e\u0441\u0432\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e \u0440\u0430\u0431\u043e\u0442\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u044d\u043a\u0440\u0430\u043d\u0430, \u0441\u043f\u0438\u0441\u043e\u043a \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 MIME-\u0442\u0438\u043f\u043e\u0432, \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u044b\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430\u0445 (HTTP\/2 \u0438 HTTPS), \u0430\u043d\u0430\u043b\u0438\u0437 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0438 \u0448\u0440\u0438\u0444\u0442\u043e\u0432, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 Web […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":92491,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-92490","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4730% z tis\u00edce nejv\u011bt\u0161\u00edch web\u016f pou\u017e\u00edv\u00e1 skripty pro skrytou identifikaci | ProHoster","description":"Skupina v\u00fdzkumn\u00edk\u016f z Mozilla, Iowsk\u00e9 univerzity a Kalifornsk\u00e9 univerzity zve\u0159ejnila v\u00fdsledky studie.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/30-iz-tysyachi-krupnejshih-sajtov-ispolzuyut-skripty-dlya-skrytoj-identifikaczii","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4730% \u0438\u0437 \u0442\u044b\u0441\u044f\u0447\u0438 \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0438\u0445 \u0441\u0430\u0439\u0442\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0434\u043b\u044f \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 Mozilla, \u0410\u0439\u043e\u0432\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0438\u0442\u043e\u0433\u0438 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/30-iz-tysyachi-krupnejshih-sajtov-ispolzuyut-skripty-dlya-skrytoj-identifikaczii","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-27T17:42:37+00:00","article:modified_time":"2020-08-27T17:42:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"92490","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:07:40","updated":"2022-09-27 21:36:39","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/92490","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=92490"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/92490\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/92491"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=92490"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=92490"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=92490"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}