{"id":92490,"date":"2020-08-27T19:42:37","date_gmt":"2020-08-27T17:42:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/30-iz-tysyachi-krupnejshih-sajtov-ispolzuyut-skripty-dlya-skrytoj-identifikaczii"},"modified":"2020-08-27T19:42:37","modified_gmt":"2020-08-27T17:42:37","slug":"30-iz-tysyachi-krupnejshih-sajtov-ispolzuyut-skripty-dlya-skrytoj-identifikaczii","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/30-iz-tysyachi-krupnejshih-sajtov-ispolzuyut-skripty-dlya-skrytoj-identifikaczii","title":{"rendered":"30% af de tusinde st\u00f8rste websteder bruger scripts til skjult identifikation","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

En gruppe forskere fra Mozilla, University of Iowa og University of California offentliggjorde<\/a><\/noindex> har unders\u00f8gt brugen af kode p\u00e5 hjemmesider til skjult identifikation af brugere. Med skjult identifikation menes generering af identificatorer baseret p\u00e5 indirekte oplysninger om browserens drift, s\u00e5som sk\u00e6rmopl\u00f8sning<\/a><\/noindex>, listen over underst\u00f8ttede MIME-typer, specifikke parametre i headers (HTTP\/2<\/a><\/noindex> og HTTPS<\/a><\/noindex>), analysen af installerede plugins og skrifttyper<\/a><\/noindex>, tilg\u00e6ngelighed af bestemte Web API'er, der er specifikke for grafikkort funktioner<\/a><\/noindex> rendering med WebGL og Canvas<\/a><\/noindex>, manipulationer<\/a><\/noindex> CSS, standardv\u00e6rdier<\/a><\/noindex>, scanning<\/a><\/noindex> af netv\u00e6rksporte, analyse af browserens arbejdsmetoder med musen<\/a><\/noindex> og tastaturet<\/a><\/noindex>.<\/p>\n

Unders\u00f8gelsen af 100.000 af de mest popul\u00e6re hjemmesider if\u00f8lge Alexa-viste, at p\u00e5 9040 af dem (10,18%) anvendes kode til skjult identifikation af bes\u00f8gende. Hvis man ser p\u00e5 de 1000 mest popul\u00e6re hjemmesider, blev s\u00e5dan kode fundet i 30,60% af tilf\u00e6ldene (266 hjemmesider), mens mellem de hjemmesider, der rangerer fra 1000 til 10.000, blev den fundet i 24,45% af tilf\u00e6ldene (2010 hjemmesider). Skjult identifikation bruges prim\u00e6rt i scripts leveret af eksterne tjenester til bek\u00e6mpelse af svindel<\/a><\/noindex> og filtrering af bots, samt reklamenetv\u00e6rk og systemer til sporing af brugernes bev\u00e6gelser.
\n

\"30%<\/a><\/noindex><\/center><\/p>\n

For at opdage koden, der udf\u00f8rer skjult identifikation, blev der udviklet et v\u00e6rkt\u00f8j FP-Inspector<\/a><\/noindex>, koden er er blevet foresl\u00e5et<\/a><\/noindex> licenseret under MIT. V\u00e6rkt\u00f8jet anvender metoder inden for maskinl\u00e6ring i kombination med statisk og dynamisk analyse af JavaScript-kode. Det h\u00e6vdes, at anvendelsen af maskinl\u00e6ring har \u00f8get n\u00f8jagtigheden af identifikationen af koden til skjult identifikation betydeligt og har fundet 26% flere problematiske scripts
\nsammenlignet med den manuelle heuristik. <\/p>\n

Mange af de identificerede identifikationsscripts var ikke til stede p\u00e5 standardbloklisterne Disconnect<\/a><\/noindex>, Adsafe<\/a><\/noindex>, DuckDuckGo, Justuno<\/a><\/noindex> og EasyPrivacy<\/a><\/noindex>.
\nEfter at have sendt notifikationer<\/a><\/noindex> udviklerne af bloklisten EasyPrivacy blev der oprettet<\/a><\/noindex> et separat afsnit til scripts til skjult identifikation. Desuden har FP-Inspector gjort det muligt at identificere nogle nye m\u00e5der at anvende Web API til identifikation, som tidligere ikke var set i praksis.<\/p>\n

For eksempel blev der identificeret brug af oplysninger til identifikation via tastaturlayout (getLayoutMap), resterende data i cachen (ved hj\u00e6lp af Performance API analyseres forsinkelsen i dataoverf\u00f8rslen, hvilket g\u00f8r det muligt at bestemme, om brugeren har tilg\u00e5et et bestemt dom\u00e6ne eller ej, samt om siden tidligere er blevet \u00e5bnet), bef\u00f8jelser, der er givet i browseren (information om adgang til Notification, Geolocation og Camera API), samt tilstedev\u00e6relsen af specialiserede periferiudstyr og sj\u00e6ldne sensorer (gamepads, virtual reality-headset, n\u00e6rhedssensorer). Derudover er der registreret hensyntagen til identifikationen af tilstedev\u00e6relsen af API, der er specialiseret til bestemte browsere, og forskelle i API-adf\u00e6rd (AudioWorklet, setTimeout, mozRTCSessionDescription), samt brugen af AudioContext API til at bestemme lydsystemets egenskaber. <\/p>\n

I l\u00f8bet af unders\u00f8gelsen blev der ogs\u00e5 unders\u00f8gt, hvordan den normale funktionalitet af webstederne bliver p\u00e5virket ved anvendelse af metoder til beskyttelse mod skjult identifikation, der f\u00f8rer til blokering af netv\u00e6rksanmodninger eller begr\u00e6nsning af adgangen til API. Det blev vist, at selektiv begr\u00e6nsning af API kun til scripts, der blev opdaget af FP-Inspector, f\u00f8rer til f\u00e6rre forstyrrelser i driften sammenlignet med brugen af de strengere generelle begr\u00e6nsninger for API-kald i Brave og Tor Browser, som potentielt kan f\u00f8re til datal\u00e6k.<\/p>\n

\r\n \"Afspil\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Kilde: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 Mozilla, \u0410\u0439\u043e\u0432\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0438\u0442\u043e\u0433\u0438 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043d\u0430 \u0441\u0430\u0439\u0442\u0430\u0445 \u043a\u043e\u0434\u0430 \u0434\u043b\u044f \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u041f\u043e\u0434 \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u043d\u0438\u043c\u0430\u0435\u0442\u0441\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043a\u043e\u0441\u0432\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e \u0440\u0430\u0431\u043e\u0442\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u044d\u043a\u0440\u0430\u043d\u0430, \u0441\u043f\u0438\u0441\u043e\u043a \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 MIME-\u0442\u0438\u043f\u043e\u0432, \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u044b\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430\u0445 (HTTP\/2 \u0438 HTTPS), \u0430\u043d\u0430\u043b\u0438\u0437 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0438 \u0448\u0440\u0438\u0444\u0442\u043e\u0432, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 Web […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":92491,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-92490","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4730% af de tusinde st\u00f8rste websteder bruger scripts til skjult identifikation | ProHoster","description":"En gruppe forskere fra Mozilla, University of Iowa og University of California har offentliggjort resultaterne af deres forskning.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/30-iz-tysyachi-krupnejshih-sajtov-ispolzuyut-skripty-dlya-skrytoj-identifikaczii","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4730% \u0438\u0437 \u0442\u044b\u0441\u044f\u0447\u0438 \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0438\u0445 \u0441\u0430\u0439\u0442\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0434\u043b\u044f \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 Mozilla, \u0410\u0439\u043e\u0432\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0438\u0442\u043e\u0433\u0438 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/30-iz-tysyachi-krupnejshih-sajtov-ispolzuyut-skripty-dlya-skrytoj-identifikaczii","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-27T17:42:37+00:00","article:modified_time":"2020-08-27T17:42:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"92490","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:07:40","updated":"2022-09-27 21:36:39","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/92490","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=92490"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/92490\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/92491"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=92490"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=92490"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=92490"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}