{"id":35296,"date":"2019-10-31T22:03:29","date_gmt":"2019-10-31T19:03:29","guid":{"rendered":"https:\/\/prohoster.info\/blog\/predstavlena-novaya-tehnika-skrytoj-identifikatsii-sistemy-i-brauzera\/"},"modified":"2019-10-31T22:03:29","modified_gmt":"2019-10-31T19:03:29","slug":"predstavlena-novaya-tehnika-skrytoj-identifikatsii-sistemy-i-brauzera","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/predstavlena-novaya-tehnika-skrytoj-identifikatsii-sistemy-i-brauzera","title":{"rendered":"Yeni bir gizli kimlik tespit y\u00f6ntemi ve taray\u0131c\u0131 teknolojisi tan\u0131t\u0131ld\u0131.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Graz Technical University (Austria) teadlaste grupp, kes on varem tuntud r\u00fcnnakute meetodite arendamise poolest MDS<\/a><\/noindex>, NetSpectre<\/a><\/noindex> ja Throwhammer<\/a><\/noindex>, avalikuks<\/a><\/noindex> teave uue anal\u00fc\u00fcsimeetodi kohta k\u00fclgkanalitest, mis v\u00f5imaldab m\u00e4\u00e4rata nimetatud brauseri t\u00e4pse versiooni, kasutatava operatsioonis\u00fcsteemi, CPU arhitektuuri ja lisanduste kasutamise varjatud identifitseerimise vastu. <\/p>\n

Nende parameetrite m\u00e4\u00e4ramiseks piisab, kui k\u00e4ivitada brauseris teadlaste ettevalmistatud JavaScripti kood. Praktiliselt v\u00f5ib meetodit kasutada mitte ainult lisana kasutaja kaudseks identifitseerimiseks, vaid ka s\u00fcsteemi keskkonna parameetrite m\u00e4\u00e4ramiseks, et rakendada eksploitide sihip\u00e4rast rakendamist arvesse v\u00f5ttes OS, arhitektuuri ja brauserit. Meetod on t\u00f5hus ka brauserite puhul, mis rakendavad varjatud identifitseerimise blokeerimise mehhanisme, n\u00e4iteks Tor Browser. Protot\u00fc\u00fcbi koodi l\u00e4htefailid meetodi rakendamiseks avaldatud<\/a><\/noindex> MIT litsentsi alusel.<\/p>\n

M\u00e4\u00e4ramine toimub brauseritele iseloomulike JavaScripti omaduste oleku mustrite ja JIT, CPU ning m\u00e4lu eraldamise mehhanismide t\u00f6\u00f6 erip\u00e4rade ajastusest s\u00f5ltuvate operatsioonide t\u00e4itmise omaduste kindlakstehtud p\u00f5hjal. Omaduste m\u00e4\u00e4ramine toimub JavaScriptist juurdep\u00e4\u00e4setavate objektide loendi genereerimise kaudu. Selgus, et objektide arv korreleerub otseselt brauseri mootori ja selle versiooniga. <\/p>\n

function getProperties(o) {
\n var result = [];
\n while (o !== null) {
\n result = result.concat(Reflect.ownKeys(o));
\n o = Object.getPrototypeOf(o);
\n }
\n return result;
\n }<\/p>\n

\u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0434\u043b\u044f Firefox \u0432 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u0446\u0438\u0438 \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 2247 \u0441\u0432\u043e\u0439\u0441\u0442\u0432, \u0432 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0435 \u0447\u0438\u0441\u043b\u043e \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 \u0441\u0432\u043e\u0439\u0441\u0442\u0432 \u0441 \u0443\u0447\u0451\u0442\u043e\u043c \u043d\u0435\u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 15709 (\u0432 Tor Browser — 15639), \u0434\u043b\u044f Chrome \u0437\u0430\u044f\u0432\u043b\u0435\u043d\u043e 2698 \u0441\u0432\u043e\u0439\u0441\u0442\u0432, \u0430 \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f 13570 (\u0432 Chrome \u0434\u043b\u044f Android — 13119). \u0427\u0438\u0441\u043b\u043e \u0438 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0439\u0441\u0442\u0432 \u043c\u0435\u043d\u044f\u044e\u0442\u0441\u044f \u043e\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 \u043a \u0432\u0435\u0440\u0441\u0438\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0438 \u043f\u0440\u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c. <\/p>\n

\u0417\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0442\u0435\u0445 \u0438\u043b\u0438 \u0438\u043d\u044b\u0445 \u0441\u0432\u043e\u0439\u0441\u0442\u0432 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0442\u0438\u043f\u0430 \u041e\u0421. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0432 Kubuntu \u0441\u0432\u043e\u0439\u0441\u0442\u0432\u043e window.innerWidth \u0432\u044b\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 1000, \u0430 \u0432 Windows 10 — \u0432 1001. \u0412 Windows \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e \u0441\u0432\u043e\u0439\u0441\u0442\u0432\u043e window.navigator.activeVRDisplays, \u0430 \u0432 Linux \u0435\u0433\u043e \u043d\u0435\u0442. \u0414\u043b\u044f Android \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u044b\u0445 \u0432\u044b\u0437\u043e\u0432\u043e\u0432, \u043d\u043e \u043d\u0435\u0442 window.SharedWorker. \u0414\u043b\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0430\u043d\u0430\u043b\u0438\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 WebGL, \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0437\u0430\u0432\u0438\u0441\u0438\u0442 \u043e\u0442 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432. \u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0432\u044b\u0437\u043e\u0432 WEBGL_debug_renderer_infoextension \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u0434\u0432\u0438\u0436\u043a\u0435 \u043e\u0442\u0440\u0438\u0441\u043e\u0432\u043a\u0438 OpenGL, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u043b\u044f \u043a\u0430\u0436\u0434\u043e\u0439 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0440\u0430\u0437\u043d\u044b\u0439. <\/p>\n

CPU tuvastamiseks kasutatakse erinevate t\u00fc\u00fcpiliste koodiblokkide t\u00e4itmise aja erinevuste hindamist, mille k\u00e4ik s\u00f5ltub k\u00e4su komplekti arhitektuurist, arvestades JIT-i k\u00e4itumist (mida m\u00e4\u00e4ratletakse kui palju CPU registreid kaasatakse ja millal JIT genereerib efektiivset koodi optimeerimise ja laiendatud k\u00e4skude kaasamisega ning millal mitte). M\u00e4luhalduse ja ops\u00fcsteemi t\u00fc\u00fcbi m\u00e4\u00e4ramiseks m\u00f5\u00f5detakse ka erinevusi m\u00e4lude jagamise aja osas erinevates struktuurides, millest saab j\u00e4reldada m\u00e4lu plokkide suurust. <\/p>\n

K\u00e4itusaja jooksul m\u00e4\u00e4ratletud parameetrid v\u00f5etakse v\u00f5rreldes eelnevalt testitud keskkondade omavaheliste v\u00e4\u00e4rtustega. Kontrollimise k\u00e4igus suutis v\u00e4lja t\u00f6\u00f6tatud tehnika t\u00e4pselt tuvastada 40 erinevat testkeskkonda, m\u00e4\u00e4rates kindlaks kasutatavate brauserite versioonid, CPU tootja, kasutatav ops\u00fcsteem ning haiguse, kas see k\u00e4ib reaalse riistvara v\u00f5i virtuaalmasina kaudu.<\/p>\n

Eraldi m\u00e4rgitakse veebisirvijate lisandite ja isegi \u00fcksikute lisandite seadete m\u00e4\u00e4ramine, sealhulgas lisandite, mis on m\u00f5eldud varjatud tuvastamise meetodite v\u00f5i privaatse vaate re\u017eiimi blokeerimise jaoks. Pakutud meetodi kontekstis muutuvad sellised lisandid veel \u00fcheks andmeallikaks tuvastamiseks. Lisandid m\u00e4\u00e4ratakse via keskkonna algparameetrite moonutuste hindamise.<\/p>\n

Teistest tuvastamismeetoditest v\u00f5ib m\u00e4rkida kaudsete andmete arvesse v\u00f5tmise, nagu ekraani lahutusv\u00f5ime<\/a><\/noindex>, toetatud MIME-t\u00fc\u00fcpide loetelu, spetsiifilised parameetrid p\u00e4isetes (HTTP\/2<\/a><\/noindex> ja HTTPS<\/a><\/noindex>), installitud pluginate ja fontide anal\u00fc\u00fcs<\/a><\/noindex>, teatud Web API-de k\u00e4ttesaadavuse anal\u00fc\u00fcs, mis on spetsiifilised graafikakaartidele omadused<\/a><\/noindex> WebGL ja Canvas<\/a><\/noindex>, manipuleerimised<\/a><\/noindex> CSS-iga, t\u00f6\u00f6tlemise omaduste anal\u00fc\u00fcsiga hiire<\/a><\/noindex> ja klaviatuuriga<\/a><\/noindex>.<\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0413\u0440\u0430\u0446\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0410\u0432\u0441\u0442\u0440\u0438\u044f), \u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0430\u0442\u0430\u043a MDS, NetSpectre \u0438 Throwhammer, \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043d\u043e\u0432\u043e\u0439 \u0442\u0435\u0445\u043d\u0438\u043a\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0442\u043e\u0447\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0443 CPU \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u0431\u043e\u0440\u044c\u0431\u044b \u0441\u043e \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439. \u0414\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 JavaScript \u043a\u043e\u0434\u0430. […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-35296","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Esitatud uus tehnika s\u00fcsteemi ja brauseri varjatud tuvastamiseks | ProHoster","description":"Graz Technical University (Austria) teadlaste grupp, kes on varem tuntud r\u00fcnnakute meetodite arendamise poolest","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/predstavlena-novaya-tehnika-skrytoj-identifikatsii-sistemy-i-brauzera","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0413\u0440\u0430\u0446\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0410\u0432\u0441\u0442\u0440\u0438\u044f), \u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0430\u0442\u0430\u043a","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/predstavlena-novaya-tehnika-skrytoj-identifikatsii-sistemy-i-brauzera","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:03:29+00:00","article:modified_time":"2019-10-31T19:03:29+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35296","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 22:42:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:06:24","updated":"2026-01-21 22:42:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/35296","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=35296"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/35296\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=35296"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=35296"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=35296"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}