{"id":94705,"date":"2020-09-20T07:42:30","date_gmt":"2020-09-20T05:42:30","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/organizacziya-effektivnyh-atak-po-vremeni-s-pomoshhyu-http-2-i-wpa3"},"modified":"2020-09-20T07:42:30","modified_gmt":"2020-09-20T05:42:30","slug":"organizacziya-effektivnyh-atak-po-vremeni-s-pomoshhyu-http-2-i-wpa3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/organizacziya-effektivnyh-atak-po-vremeni-s-pomoshhyu-http-2-i-wpa3","title":{"rendered":"Organizace efektivn\u00edch \u010dasov\u00fdch \u00fatok\u016f pomoc\u00ed HTTP\/2 a WPA3","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nov\u00e1 metoda hackov\u00e1n\u00ed p\u0159ekon\u00e1v\u00e1 probl\u00e9m \"jitteru s\u00edt\u011b\", kter\u00fd m\u016f\u017ee ovlivnit \u00fasp\u011b\u0161nost \u00fatok\u016f pomoc\u00ed bo\u010dn\u00edch kan\u00e1l\u016f.<\/p>\n

\"Organizace
\n
\nNov\u00e1 metoda vyvinut\u00e1 v\u00fdzkumn\u00edky z K\u0159es\u0165ansk\u00e9 univerzity Leuven (Belgie) a New York University v Ab\u00fa Dhab\u00ed uk\u00e1zala, \u017ee \u00fato\u010dn\u00edci mohou vyu\u017e\u00edvat vlastnosti s\u00ed\u0165ov\u00fdch protokol\u016f k organizaci \u00fanik\u016f citliv\u00fdch informac\u00ed.<\/p>\n

Tato metoda nazvan\u00e1 Timeless Timing Attacks<\/a><\/noindex>, demonstrativn\u011b p\u0159edstaven\u00e1 letos na konferenci Usenix, vyu\u017e\u00edv\u00e1 charakteristiky zpracov\u00e1n\u00ed soub\u011b\u017en\u011b prov\u00e1d\u011bn\u00fdch po\u017eadavk\u016f pomoc\u00ed s\u00ed\u0165ov\u00fdch protokol\u016f k odstran\u011bn\u00ed jednoho z probl\u00e9m\u016f vzd\u00e1len\u00fdch \u00fatok\u016f na z\u00e1klad\u011b \u010dasu p\u0159es bo\u010dn\u00ed kan\u00e1ly.
\n<\/a><\/noindex><\/p>\n

Probl\u00e9my vzd\u00e1len\u00fdch \u00fatok\u016f na z\u00e1klad\u011b \u010dasu<\/h3>\n

\nP\u0159i realizaci \u00fatok\u016f na z\u00e1klad\u011b \u010dasu \u00fato\u010dn\u00edci m\u011b\u0159\u00ed rozd\u00edly v \u010dase vykon\u00e1v\u00e1n\u00ed r\u016fzn\u00fdch p\u0159\u00edkaz\u016f, sna\u017e\u00edce se obej\u00edt \u0161ifrovac\u00ed zabezpe\u010den\u00ed a z\u00edskat informace o citliv\u00fdch \u00fadaj\u00edch, nap\u0159\u00edklad o \u0161ifrovac\u00edch kl\u00ed\u010d\u00edch, soukrom\u00e9 korespondenci a chov\u00e1n\u00ed u\u017eivatel\u016f p\u0159i webov\u00e9m proch\u00e1zen\u00ed.<\/p>\n

Ale pro \u00fasp\u011b\u0161n\u00e9 proveden\u00ed \u00fatok\u016f na z\u00e1klad\u011b \u010dasu pot\u0159ebuje \u00fato\u010dn\u00edk p\u0159esn\u00e9 znalosti o \u010dase, kter\u00fd aplikace podl\u00e9haj\u00edc\u00ed \u00fatoku pot\u0159ebuje k zpracov\u00e1n\u00ed po\u017eadavku.<\/p>\n

To se st\u00e1v\u00e1 probl\u00e9mem p\u0159i \u00fatoc\u00edch na takov\u00e9 vzd\u00e1len\u00e9 syst\u00e9my, jako jsou webov\u00e9 servery, proto\u017ee zpo\u017ed\u011bn\u00ed v s\u00edti (jitter) zp\u016fsobuje rozpt\u00fdlen\u00ed doby odezvy, co\u017e zt\u011b\u017euje v\u00fdpo\u010det doby zpracov\u00e1n\u00ed.<\/p>\n

P\u0159i vzd\u00e1len\u00fdch \u00fatoc\u00edch na z\u00e1klad\u011b \u010dasu \u00fato\u010dn\u00edci obvykle pos\u00edlaj\u00ed ka\u017ed\u00fd p\u0159\u00edkaz n\u011bkolikr\u00e1t a prov\u00e1d\u011bj\u00ed statistickou anal\u00fdzu doby odezvy, aby sn\u00ed\u017eili vliv jitteru s\u00edt\u011b. Ale tento zp\u016fsob je u\u017eite\u010dn\u00fd jen do ur\u010dit\u00e9 m\u00edry.<\/p>\n

\"\u010c\u00edm men\u0161\u00ed je rozd\u00edl v \u010dase, t\u00edm v\u00edce po\u017eadavk\u016f je zapot\u0159eb\u00ed a v ur\u010dit\u00e9m okam\u017eiku se v\u00fdpo\u010det st\u00e1v\u00e1 nemo\u017en\u00fdm,\" \u0159\u00edk\u00e1 n\u00e1m v\u00fdzkumn\u00edk syst\u00e9m\u016f ochrany dat a hlavn\u00ed autor \u010dl\u00e1nku o nov\u00e9m typu \u00fatok\u016f Tom Van Guetem.<\/p>\n

\"V\u011b\u010dn\u011b bez\u010dasov\u00fd\" \u00fatok na z\u00e1klad\u011b \u010dasu<\/h3>\n

\nMetoda vyvinut\u00e1 Guetem a jeho kolegy prov\u00e1d\u00ed vzd\u00e1len\u00e9 \u00fatoky na z\u00e1klad\u011b \u010dasu tak, \u017ee eliminuje vliv jitteru s\u00edt\u011b.<\/p>\n

Z\u00e1sada, na kter\u00e9 je zalo\u017een v\u011b\u010dn\u011b bez\u010dasov\u00fd \u00fatok na z\u00e1klad\u011b \u010dasu, je jednoduch\u00e1: je t\u0159eba zajistit, aby po\u017eadavky dorazily na server ve zcela stejn\u00fd \u010das, a nikoli aby byly odes\u00edl\u00e1ny po sob\u011b.<\/p>\n

Sou\u010dasnost zaji\u0161\u0165uje, \u017ee v\u0161echny po\u017eadavky jsou v s\u00ed\u0165ov\u00fdch podm\u00ednk\u00e1ch ve stejn\u00e9 situaci, a \u017ee na jejich zpracov\u00e1n\u00ed neovlivn\u00ed cesta mezi \u00fato\u010dn\u00edkem a serverem. Po\u0159ad\u00ed p\u0159ij\u00edm\u00e1n\u00ed odpov\u011bd\u00ed poskytne \u00fato\u010dn\u00edkovi v\u0161echny informace pot\u0159ebn\u00e9 k porovn\u00e1n\u00ed doby prov\u00e1d\u011bn\u00ed.<\/p>\n

\u201eHlavn\u00ed v\u00fdhodou \u010dasov\u00fdch \u00fatok\u016f bez ohledu na \u010das je, \u017ee jsou mnohem p\u0159esn\u011bj\u0161\u00ed, tak\u017ee vy\u017eaduj\u00ed m\u00e9n\u011b po\u017eadavk\u016f. To umo\u017e\u0148uje \u00fato\u010dn\u00edkovi rozpoznat rozd\u00edly v dob\u011b prov\u00e1d\u011bn\u00ed a\u017e do 100 ns,\u201c \u0159\u00edk\u00e1 Van G\u00f6them.<\/p>\n

Minim\u00e1ln\u00ed \u010dasov\u00fd rozd\u00edl, kter\u00fd v\u00fdzkumn\u00edci pozorovali p\u0159i tradi\u010dn\u00edm \u010dasov\u00e9m \u00fatoku p\u0159es internet, \u010dinil 10 \u03bcs, co\u017e je 100kr\u00e1t v\u00edce ne\u017e p\u0159i \u00fatoku soub\u011b\u017en\u00fdmi po\u017eadavky.<\/p>\n

Jak je zaji\u0161t\u011bna sou\u010dasnost<\/h3>\n

\n\u201eSou\u010dasnost zaji\u0161\u0165ujeme t\u00edm, \u017ee oba po\u017eadavky vlo\u017e\u00edme do jednoho s\u00ed\u0165ov\u00e9ho paketu,\u201c vysv\u011btluje Van G\u00f6them. \u201eV praxi realizace z\u00e1vis\u00ed hlavn\u011b na s\u00ed\u0165ov\u00e9m protokolu.\u201c<\/p>\n

Pro odes\u00edl\u00e1n\u00ed soub\u011b\u017en\u00fdch po\u017eadavk\u016f vyu\u017e\u00edvaj\u00ed v\u00fdzkumn\u00edci mo\u017enosti r\u016fzn\u00fdch s\u00ed\u0165ov\u00fdch protokol\u016f.<\/p>\n

Nap\u0159\u00edklad HTTP\/2, kter\u00fd se rychle st\u00e1v\u00e1 de facto standardem pro webov\u00e9 servery, podporuje \u201emultiplexov\u00e1n\u00ed po\u017eadavk\u016f\u201c \u2014 funkci, kter\u00e1 umo\u017e\u0148uje klientovi odeslat v\u00edce po\u017eadavk\u016f paraleln\u011b po jednom TCP spojen\u00ed.<\/p>\n

\u201eV p\u0159\u00edpad\u011b HTTP\/2 mus\u00edme jednodu\u0161e zajistit, aby oba po\u017eadavky byly vlo\u017eeny do jednoho paketu (nap\u0159\u00edklad t\u00edm, \u017ee oba zap\u00ed\u0161eme do z\u00e1suvky sou\u010dasn\u011b).\u201c Tato metoda m\u00e1 sv\u00e9 nuance. Nap\u0159\u00edklad v drtiv\u00e9 v\u011bt\u0161in\u011b content delivery networks typu Cloudflare, kter\u00e9 poskytuj\u00ed obsah pro v\u011bt\u0161inu webu, se spojen\u00ed mezi hrani\u010dn\u00edmi servery a webem prov\u00e1d\u00ed pomoc\u00ed protokolu HTTP\/1.1, kter\u00fd nepodporuje multiplexov\u00e1n\u00ed po\u017eadavk\u016f.<\/p>\n

I kdy\u017e to sni\u017euje \u00fa\u010dinnost \u010dasov\u00e9ho \u00fatoku, st\u00e1le z\u016fst\u00e1vaj\u00ed p\u0159esn\u011bj\u0161\u00ed ne\u017e klasick\u00e9 vzd\u00e1len\u00e9 \u010dasov\u00e9 \u00fatoky, proto\u017ee eliminuj\u00ed jitter mezi \u00fato\u010dn\u00edkem a hrani\u010dn\u00edm CDN serverem.<\/p>\n

V p\u0159\u00edpad\u011b protokol\u016f, kter\u00e9 nepodporuj\u00ed multiplexov\u00e1n\u00ed po\u017eadavk\u016f, mohou \u00fato\u010dn\u00edci vyu\u017e\u00edt mezilehl\u00fd s\u00ed\u0165ov\u00fd protokol, kter\u00fd inkapsuluje po\u017eadavky.<\/p>\n

V\u00fdzkumn\u00edci uk\u00e1zali, jak do\u010dasn\u00fd \u010dasov\u00fd \u00fatok funguje v s\u00edti Tor. V tomto p\u0159\u00edpad\u011b \u00fato\u010dn\u00edk encapsuluje v\u00edce po\u017eadavk\u016f do bu\u0148ky Tor \u2014 \u0161ifrovan\u00e9ho bal\u00ed\u010dku, kter\u00fd je p\u0159en\u00e1\u0161en mezi uzly s\u00edt\u011b Tor v jednotn\u00fdch TCP paketech.<\/p>\n

\u201eProto\u017ee \u0159et\u011bzec Tor pro onion slu\u017eby proch\u00e1z\u00ed celou cestu k serveru, m\u016f\u017eeme zaru\u010dit, \u017ee po\u017eadavky doraz\u00ed sou\u010dasn\u011b,\u201c \u0159\u00edk\u00e1 Van Goetem.<\/p>\n

Dohledateln\u00e9 \u00fatoky v praxi<\/h3>\n

\nVe sv\u00e9 studii se v\u00fdzkumn\u00edci zab\u00fdvali do\u010dasn\u00fdmi \u00fatoky ve t\u0159ech r\u016fzn\u00fdch sc\u00e9n\u00e1\u0159\u00edch.<\/p>\n

P\u0159i p\u0159\u00edm\u00fdch \u010dasov\u00fdch \u00fatoc\u00edch<\/b> \u00fato\u010dn\u00edk se p\u0159\u00edmo p\u0159ipojuje k serveru a pokou\u0161\u00ed se o \u00fanik citliv\u00fdch informac\u00ed spojen\u00fdch s aplikac\u00ed.<\/p>\n

\u201eProto\u017ee p\u0159i vytv\u00e1\u0159en\u00ed v\u011bt\u0161iny webov\u00fdch aplikac\u00ed se nezohled\u0148uje, \u017ee \u010dasov\u00e9 \u00fatoky mohou b\u00fdt velmi praktick\u00e9 a p\u0159esn\u00e9, domn\u00edv\u00e1me se, \u017ee mnoho webov\u00fdch str\u00e1nek je v\u016f\u010di takov\u00fdm \u00fatok\u016fm zraniteln\u00fdch,\u201c \u0159\u00edk\u00e1 Van Goetem.<\/p>\n

P\u0159i meziwebov\u00fdch \u010dasov\u00fdch \u00fatoc\u00edch<\/b> \u00fato\u010dn\u00edk prov\u00e1d\u00ed po\u017eadavky na jin\u00e9 webov\u00e9 str\u00e1nky z prohl\u00ed\u017ee\u010de ob\u011bti a d\u011bl\u00e1 p\u0159edpoklady o obsahu citliv\u00fdch informac\u00ed t\u00edm, \u017ee sleduje sekvenci odpov\u011bd\u00ed.<\/p>\n

\u00dato\u010dn\u00edci pou\u017eili tento syst\u00e9m k vyu\u017eit\u00ed zranitelnosti programu HackerOne a z\u00edskali takov\u00e9 informace, jako jsou kl\u00ed\u010dov\u00e1 slova pou\u017eit\u00e1 v d\u016fv\u011brn\u00fdch zpr\u00e1v\u00e1ch o neopraven\u00fdch zranitelnostech.<\/p>\n

\u201eHledal jsem p\u0159\u00edpady, kdy byl \u010dasov\u00fd \u00fatok d\u0159\u00edve zdokumentov\u00e1n, ale nebyl pova\u017eov\u00e1n za efektivn\u00ed. O zranitelnosti HackerOne bylo ji\u017e hl\u00e1\u0161eno alespo\u0148 t\u0159ikr\u00e1t (identifik\u00e1tory zranitelnosti: 350432<\/a><\/noindex>, 348168<\/a><\/noindex> a 4701<\/a><\/noindex>), ale nebyla opravena, proto\u017ee se p\u0159edpokl\u00e1dalo, \u017ee tento \u00fatok nelze vyu\u017e\u00edt. Pak jsem vytvo\u0159il jednoduch\u00fd intern\u00ed v\u00fdzkumn\u00fd projekt s do\u010dasn\u00fdmi \u00fatoky.<\/p>\n

Tehdy z\u016fst\u00e1val velmi neoptim\u00e1ln\u00ed, proto\u017ee jsme pokra\u010dovali ve zkoum\u00e1n\u00ed podrobnost\u00ed o \u00fatoku, nicm\u00e9n\u011b se uk\u00e1zal b\u00fdt docela p\u0159esn\u00fd (na m\u00e9m dom\u00e1c\u00edm WiFi p\u0159ipojen\u00ed jsem dos\u00e1hl velmi p\u0159esn\u00fdch v\u00fdsledk\u016f).\u201c<\/p>\n

V\u00fdzkumn\u00edci tak\u00e9 zkusili prov\u00e9st dohledateln\u00e9 \u00fatoky na WiFi protokol WPA3<\/b>.<\/p>\n

Jeden z autor\u016f \u010dl\u00e1nku Mati Vanhof ji\u017e d\u0159\u00edve odhalil potenci\u00e1ln\u00ed \u00fanik \u010dasu v protokolu WPA3 handshake.<\/a><\/noindex>Ale \u010das byl bu\u010f p\u0159\u00edli\u0161 kr\u00e1tk\u00fd na pou\u017eit\u00ed na vysoce v\u00fdkonn\u00fdch za\u0159\u00edzen\u00edch, nebo jej nebylo mo\u017en\u00e9 pou\u017e\u00edt proti server\u016fm.<\/p>\n

\u201ePomoc\u00ed nov\u00e9ho typu \u010dasov\u011b nez\u00e1visl\u00fdch \u00fatok\u016f jsme uk\u00e1zali, \u017ee je mo\u017en\u00e9 vyu\u017e\u00edt ov\u011b\u0159ovac\u00ed handshake (EAP-pwd) proti server\u016fm, i kdy\u017e na nich b\u011b\u017e\u00ed v\u00fdkonn\u00e9 za\u0159\u00edzen\u00ed,\u201d vysv\u011btluje Van G\u00f6them.<\/p>\n

Ide\u00e1ln\u00ed okam\u017eik<\/h3>\n

\nVe sv\u00e9m \u010dl\u00e1nku v\u011bdci uvedli doporu\u010den\u00ed pro ochranu server\u016f p\u0159ed \u010dasov\u011b nez\u00e1visl\u00fdmi \u00fatoky, nap\u0159\u00edklad omezen\u00edm prov\u00e1d\u011bn\u00ed v konstantn\u00edm \u010dase a p\u0159id\u00e1n\u00edm n\u00e1hodn\u00e9ho zpo\u017ed\u011bn\u00ed. K realizaci praktick\u00fdch ochrann\u00fdch prost\u0159edk\u016f proti p\u0159\u00edm\u00fdm \u00fatok\u016fm v \u010dase, kter\u00e9 by m\u011bly minim\u00e1ln\u00ed dopad na provoz s\u00edt\u011b, jsou zapot\u0159eb\u00ed dal\u0161\u00ed v\u00fdzkumy.<\/p>\n

\u201eDomn\u00edv\u00e1me se, \u017ee tato oblast v\u00fdzkumu je na velmi ran\u00e9 f\u00e1zi a vy\u017eaduje mnohem hlub\u0161\u00ed zkoum\u00e1n\u00ed,\u201d \u0159\u00edk\u00e1 Van G\u00f6them.<\/p>\n

V budouc\u00edch v\u00fdzkumech by bylo mo\u017en\u00e9 prozkoumat dal\u0161\u00ed metody, kter\u00e9 by mohli \u00fato\u010dn\u00edci pou\u017e\u00edt k prov\u00e1d\u011bn\u00ed soub\u011b\u017en\u00fdch \u010dasov\u00fdch \u00fatok\u016f, jin\u00e9 protokoly a mezivrstvy s\u00edt\u011b, na kter\u00e9 mohou b\u00fdt \u00fatoky sm\u011brov\u00e1ny, a tak\u00e9 vyhodnotit zranitelnost popul\u00e1rn\u00edch webov\u00fdch str\u00e1nek, kter\u00e9 umo\u017e\u0148uj\u00ed prov\u00e1d\u011bt takov\u00e9 v\u00fdzkumy podle podm\u00ednek programu nalezen\u00ed chyb.<\/p>\n

N\u00e1zev \u201e\u010dasov\u011b nez\u00e1visl\u00fd\u201c byl zvolen, \u201eproto\u017ee p\u0159i t\u011bchto \u00fatoc\u00edch jsme nepou\u017eili \u017e\u00e1dn\u00e9 (absolutn\u00ed) informace o \u010dase,\u201c vysv\u011btluje Van G\u00f6them.<\/p>\n

\u201eKrom\u011b toho lze je pova\u017eovat za \u201e\u010dasov\u011b nez\u00e1visl\u00e9\u201c tak\u00e9 proto, \u017ee (vzd\u00e1len\u00e9) \u010dasov\u00e9 \u00fatoky se pou\u017e\u00edvaj\u00ed ji\u017e dlouho, a podle na\u0161ich v\u00fdzkum\u016f se situace pouze zhor\u0161\u00ed.\u201d<\/p>\n

\r\n \"P\u0159ehr\u00e1t\r\n
<\/div>\r\n <\/div><\/center>
\nCel\u00fd text zpr\u00e1vy s Usenix je k dispozici zde<\/a><\/noindex>.<\/p>\n

<\/p>\n

Na z\u00e1klad\u011b reklamy<\/h4>\n

\nV\u00fdkonn\u00e9 VDS<\/a><\/noindex> s ochranou proti DDoS \u00fatok\u016fm a nejnov\u011bj\u0161\u00edm hardwarem. To v\u0161e pat\u0159\u00ed k na\u0161im epick\u00fdm server\u016fm<\/b>. Maxim\u00e1ln\u00ed konfigurace \u2014 128 jader CPU, 512 GB RAM, 4000 GB NVMe.<\/p>\n

\"Organizace<\/a><\/noindex>
\n
Zdroj: habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u043e\u0432\u0430\u044f \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0430 \u0432\u0437\u043b\u043e\u043c\u0430 \u043f\u0440\u0435\u043e\u0434\u043e\u043b\u0435\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u00ab\u0434\u0436\u0438\u0442\u0442\u0435\u0440\u0430 \u0441\u0435\u0442\u0438\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c \u041d\u043e\u0432\u0430\u044f \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0430, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u0430\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u041b\u0435\u0432\u0435\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0411\u0435\u043b\u044c\u0433\u0438\u044f) \u0438 \u041d\u044c\u044e-\u0419\u043e\u0440\u043a\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0410\u0431\u0443-\u0414\u0430\u0431\u0438, \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0430, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0442\u0435\u0447\u0435\u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u0442\u0430 \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0430 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Timeless Timing Attacks, \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u043d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Usenix, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":94706,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-94705","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Organizace efektivn\u00edch \u010dasov\u00fdch \u00fatok\u016f pomoc\u00ed HTTP\/2 a WPA3 | ProHoster","description":"Nov\u00e1 metoda hackov\u00e1n\u00ed p\u0159ekon\u00e1v\u00e1 probl\u00e9m \"jitteru s\u00edt\u011b\", kter\u00fd m\u016f\u017ee ovlivnit \u00fasp\u011b\u0161nost \u00fatok\u016f pomoc\u00ed bo\u010dn\u00edch kan\u00e1l\u016f.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/organizacziya-effektivnyh-atak-po-vremeni-s-pomoshhyu-http-2-i-wpa3","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u043f\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e HTTP\/2 \u0438 WPA3 | ProHoster","og:description":"\u041d\u043e\u0432\u0430\u044f \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0430 \u0432\u0437\u043b\u043e\u043c\u0430 \u043f\u0440\u0435\u043e\u0434\u043e\u043b\u0435\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u00ab\u0434\u0436\u0438\u0442\u0442\u0435\u0440\u0430 \u0441\u0435\u0442\u0438\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/organizacziya-effektivnyh-atak-po-vremeni-s-pomoshhyu-http-2-i-wpa3","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-20T05:42:30+00:00","article:modified_time":"2020-09-20T05:42:30+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"94705","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:19:22","updated":"2022-09-27 17:10:32","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/94705","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=94705"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/94705\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/94706"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=94705"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=94705"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=94705"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}