{"id":35296,"date":"2019-10-31T22:03:29","date_gmt":"2019-10-31T19:03:29","guid":{"rendered":"https:\/\/prohoster.info\/blog\/predstavlena-novaya-tehnika-skrytoj-identifikatsii-sistemy-i-brauzera\/"},"modified":"2019-10-31T22:03:29","modified_gmt":"2019-10-31T19:03:29","slug":"predstavlena-novaya-tehnika-skrytoj-identifikatsii-sistemy-i-brauzera","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/predstavlena-novaya-tehnika-skrytoj-identifikatsii-sistemy-i-brauzera","title":{"rendered":"Den nye metode til skjult identifikation af system og browser er blevet pr\u00e6senteret","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

En gruppe forskere fra Graz Universitetet for Teknologi (\u00d8strig), kendt for deres udvikling af angrebsmetoder MDS<\/a><\/noindex>, NetSpectre<\/a><\/noindex> og Throwhammer<\/a><\/noindex>, afsl\u00f8ret<\/a><\/noindex> om den nye teknik til analyse via sidekanaler, der muligg\u00f8r at bestemme den pr\u00e6cise version af browseren, det anvendte operativsystem, CPU-arkitekturen og brugen af udvidelser til at bek\u00e6mpe skjult identifikation. <\/p>\n

For at bestemme de angivne parametre er det nok at k\u00f8re en forberedt JavaScript-kode i browseren. I praksis kan metoden anvendes ikke kun som en yderligere kilde til indirekte identifikation af brugeren, men ogs\u00e5 til at bestemme parametrene for systemmilj\u00f8et til m\u00e5lrettet anvendelse af exploits under hensyntagen til OS, arkitektur og browser. Metoden er effektiv ogs\u00e5 ved brug af browsere, der implementerer mekanismer til blokering af skjult identifikation, s\u00e5som Tor Browser. Kildekoden til prototypeimplementeringen af metoden er offentliggjort<\/a><\/noindex> under MIT-licensen.<\/p>\n

Bestemmelsen sker ved at udtr\u00e6kke karakteristiske n\u00f8glem\u00f8nstre i JavaScript og egenskaberne for udf\u00f8relsestid, som afh\u00e6nger af egenskaberne ved JIT, CPU og hukommelsesallokeringsmekanismerne. Bestemmelse af egenskaber sker ved at generere en liste over alle objekter, der er tilg\u00e6ngelige fra JavaScript. Det viste sig, at antallet af objekter direkte korrelerer med browser-motoren og dens version. <\/p>\n

function getProperties(o) {
\n var result = [];
\n while (o !== null) {
\n result = result.concat(Reflect.ownKeys(o));
\n o = Object.getPrototypeOf(o);
\n }
\n return result;
\n }<\/p>\n

For example, for Firefox, the documentation states support for 2247 properties, while the actual number of defined properties, considering undocumented ones, amounts to 15709 (in Tor Browser \u2014 15639). For Chrome, 2698 properties are reported, but the actual number offered is 13570 (in Chrome for Android \u2014 13119). The number and values of properties change from version to version of the browser and when using different operating systems. <\/p>\n

The values and availability of certain properties can be used to determine the type of OS. For example, in Kubuntu, the property window.innerWidth is set to 1000, while in Windows 10 it is set to 1001. In Windows, the property window.navigator.activeVRDisplays is available, whereas it is not in Linux. Android provides many specific calls, but there is no window.SharedWorker. For OS identification, analyzing WebGL parameters is also suggested, as their state depends on the drivers. Furthermore, the call to WEBGL_debug_renderer_info extension allows retrieving information about the rendering engine of OpenGL, which differs for each operating system. <\/p>\n

For at bestemme CPU'en anvendes en vurdering af forskellene i tidsforbruget til udf\u00f8relse af forskellige typiske kodeskblokke, hvis behandling afh\u00e6nger af arkitekturen af kommando-s\u00e6ttet, under hensyntagen til JIT-opf\u00f8rsel (det vurderes, hvor mange CPU-registre der vil blive brugt, og hvorn\u00e5r JIT vil generere effektiv kode med optimeringer og involvering af udvidede instruktioner, og hvorn\u00e5r det ikke g\u00f8r). For at bestemme typen af hukommelsestildelingssystem og operativsystemet m\u00e5les tidsforskellene i hukommelsestildeling for forskellige strukturer, som kan give indikationer om st\u00f8rrelsen af hukommelsesblokke. <\/p>\n

Parametre, der er defineret under k\u00f8rsel af scriptet, sammenlignes med referencev\u00e6rdier, der er karakteristiske for forh\u00e5ndstestede milj\u00f8er. Under kontrollen gjorde den udviklede teknik det muligt pr\u00e6cist at identificere 40 forskellige testmilj\u00f8er, bestemme versionerne af de anvendte browsere, CPU-producenten, det anvendte operativsystem og om den k\u00f8rte p\u00e5 fysisk hardware eller i en virtuel maskine.<\/p>\n

Det bem\u00e6rkes ogs\u00e5, at det er muligt at bestemme browserudvidelser og endda specifikke indstillinger for udvidelserne, inklusive udvidelser, der er beregnet til at blokere metoder til skjult identifikation eller aktivitet i privat browsing-tilstand. I lyset af den foresl\u00e5ede metode bliver s\u00e5danne udvidelser en yderligere kilde til data til identifikation. Udvidelserne bestemmes ved at vurdere forvr\u00e6ngningerne af parametrene i det oprindelige milj\u00f8 for\u00e5rsaget af udvidelserne.<\/p>\n

Blandt andre identifikationsmetoder kan indirekte data s\u00e5som sk\u00e6rmopl\u00f8sning<\/a><\/noindex>, listen over underst\u00f8ttede MIME-typer, specifikke parametre i headers (HTTP\/2<\/a><\/noindex> og HTTPS<\/a><\/noindex>), analysen af installerede plugins og skrifttyper<\/a><\/noindex>, tilg\u00e6ngelighed af bestemte Web API'er, der er specifikke for grafikkort funktioner<\/a><\/noindex> rendering med WebGL og Canvas<\/a><\/noindex>, manipulationer<\/a><\/noindex> med CSS, analyse af s\u00e6rlige forhold ved arbejde med musen<\/a><\/noindex> og tastaturet<\/a><\/noindex>.<\/p>\n

<\/a><\/noindex><\/p>\n

Kilde: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0413\u0440\u0430\u0446\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0410\u0432\u0441\u0442\u0440\u0438\u044f), \u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0430\u0442\u0430\u043a MDS, NetSpectre \u0438 Throwhammer, \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043d\u043e\u0432\u043e\u0439 \u0442\u0435\u0445\u043d\u0438\u043a\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0442\u043e\u0447\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0443 CPU \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u0431\u043e\u0440\u044c\u0431\u044b \u0441\u043e \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439. \u0414\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 JavaScript \u043a\u043e\u0434\u0430. […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-35296","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ny teknik til skjult identifikation af system og browser pr\u00e6senteret | ProHoster","description":"En gruppe forskere fra Graz Universitetet for Teknologi (\u00d8strig), kendt for deres udvikling af angrebsmetoder","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/predstavlena-novaya-tehnika-skrytoj-identifikatsii-sistemy-i-brauzera","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0413\u0440\u0430\u0446\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0410\u0432\u0441\u0442\u0440\u0438\u044f), \u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0430\u0442\u0430\u043a","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/predstavlena-novaya-tehnika-skrytoj-identifikatsii-sistemy-i-brauzera","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:03:29+00:00","article:modified_time":"2019-10-31T19:03:29+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35296","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 22:42:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:06:24","updated":"2026-01-21 22:42:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/35296","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=35296"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/35296\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=35296"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=35296"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=35296"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}