{"id":84555,"date":"2020-06-09T01:41:56","date_gmt":"2020-06-08T23:41:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-ublock-origin-dobavlena-blokirovka-skriptov-dlya-skanirovaniya-setevyh-portov"},"modified":"2020-06-09T01:41:56","modified_gmt":"2020-06-08T23:41:56","slug":"v-ublock-origin-dobavlena-blokirovka-skriptov-dlya-skanirovaniya-setevyh-portov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/v-ublock-origin-dobavlena-blokirovka-skriptov-dlya-skanirovaniya-setevyh-portov","title":{"rendered":"uBlock Origin har tilf\u00f8jet blokering af scripts til scanning af netv\u00e6rksporte.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

I den anvendte uBlock Origin-filter EasyPrivacy<\/a><\/noindex> er der tilf\u00f8jet regler til blokering af typiske scripts til scanning af netv\u00e6rksporte p\u00e5 brugerens lokale system. Husk, at i maj blev det opdaget<\/a><\/noindex> scanning af lokale porte, n\u00e5r man \u00e5bner eBay.com. Det viste sig, at denne praksis ikke er begr\u00e6nset til eBay, og mange andre websteder<\/a><\/noindex> (Citibank, TD Bank, Sky, GumTree, WePay osv.) anvender scanning af brugerens lokale systemporte ved \u00e5bning af deres sider ved hj\u00e6lp af kode til at opdage fors\u00f8g p\u00e5 adgang fra inficerede computere, leveret af tjenesten ThreatMetrix.<\/p>\n

I tilf\u00e6ldet med eBay blev der kontrolleret 14 netv\u00e6rksporte, der er forbundet med fjernadgangsservere som VNC, TeamViewer, Anyplace Control, Aeroadmin, Ammy Admin og RDP. Sandsynligvis udf\u00f8res kontrollen til at bestemme<\/a><\/noindex> for at finde spor efter systemets infektion med malware med det form\u00e5l at forhindre, at der foretages svigagtige k\u00f8b ved hj\u00e6lp af botnet. Scanning kan ogs\u00e5 bruges til at indsamle data til indirekte identifikation af brugeren.<\/a><\/noindex>.<\/p>\n

Til scanning anvendes en teknik, der er baseret p\u00e5 at fors\u00f8ge at oprette forbindelser til forskellige netv\u00e6rksporte p\u00e5 v\u00e6rten 127.0.0.1 (localhost) gennem WebSocket<\/a><\/noindex>Eksistensen af en \u00e5ben netv\u00e6rksport bestemmes indirekte baseret p\u00e5 forskellen i h\u00e5ndteringen af fejl ved forbindelse til aktive og inaktive netv\u00e6rksporte. WebSocket tillader kun at sende HTTP-anmodninger, men en s\u00e5dan anmodning til en inaktiv netv\u00e6rksport fejler straks, mens den til en aktiv port kun fejler efter nogen tid, der bruges p\u00e5 at fors\u00f8ge at etablere forbindelsen. Desuden giver WebSocket ved en inaktiv port en fejl kode for forbindelsen (ERR_CONNECTION_REFUSED), mens den ved en aktiv port viser en fejl kode for forbindelsesforhandlingen. <\/p>\n

\"uBlock<\/a><\/noindex><\/center><\/p>\n

Udover portscanning kan WebSockets ogs\u00e5 til at udf\u00f8re MITM, men blokeres ved brug af Firefox' certifikatlager);<\/a><\/noindex> bruges til angreb p\u00e5 webudvikleres systemer, der k\u00f8rer WebSocket-h\u00e5ndterere for React-applikationer p\u00e5 deres lokale system. Et eksternt websted kan scanne netv\u00e6rksportene, bestemme om en s\u00e5dan h\u00e5ndterer findes, og oprette forbindelse til den. Hvis udvikleren laver en fejl, kan angriberen f\u00e5 adgang til indholdet af debug-data, som kan inkludere spor af fortrolige oplysninger.<\/p>\n

\"uBlock<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Kilde: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0439 \u0432 uBlock Origin \u0444\u0438\u043b\u044c\u0442\u0440 EasyPrivacy \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u044b \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0442\u0438\u043f\u043e\u0432\u044b\u0445 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u043e\u0440\u0442\u043e\u0432 \u043d\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u0447\u0442\u043e \u0432 \u043c\u0430\u0435 \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0440\u0442\u043e\u0432 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0441\u0430\u0439\u0442\u0430 eBay.com. \u0412\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u043f\u043e\u0434\u043e\u0431\u043d\u0430\u044f \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430 \u043d\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f eBay \u0438 \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0430\u0439\u0442\u044b (Citibank, TD Bank, Sky, GumTree, WePay \u0438 \u0442.\u043f.) \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0440\u0442\u043e\u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":84556,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-84555","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ublock Origin har f\u00e5et tilf\u00f8jet blokering af scripts til scanning af netv\u00e6rksporte | ProHoster","description":"I det anvendte uBlock Origin-filter EasyPrivacy er der tilf\u00f8jet regler til blokering af typiske scripts.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/v-ublock-origin-dobavlena-blokirovka-skriptov-dlya-skanirovaniya-setevyh-portov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 uBlock Origin \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0430 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 \u0434\u043b\u044f \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u043e\u0440\u0442\u043e\u0432 | ProHoster","og:description":"\u0412 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0439 \u0432 uBlock Origin \u0444\u0438\u043b\u044c\u0442\u0440 EasyPrivacy \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u044b \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0442\u0438\u043f\u043e\u0432\u044b\u0445 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/v-ublock-origin-dobavlena-blokirovka-skriptov-dlya-skanirovaniya-setevyh-portov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-08T23:41:56+00:00","article:modified_time":"2020-06-08T23:41:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"84555","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:55:41","updated":"2022-09-28 02:39:05","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/84555","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=84555"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/84555\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/84556"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=84555"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=84555"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=84555"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}