{"id":35296,"date":"2019-10-31T22:03:29","date_gmt":"2019-10-31T19:03:29","guid":{"rendered":"https:\/\/prohoster.info\/blog\/predstavlena-novaya-tehnika-skrytoj-identifikatsii-sistemy-i-brauzera\/"},"modified":"2019-10-31T22:03:29","modified_gmt":"2019-10-31T19:03:29","slug":"predstavlena-novaya-tehnika-skrytoj-identifikatsii-sistemy-i-brauzera","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/predstavlena-novaya-tehnika-skrytoj-identifikatsii-sistemy-i-brauzera","title":{"rendered":"Yeni bir gizli kimlik tespit y\u00f6ntemi ve taray\u0131c\u0131 teknolojisi tan\u0131t\u0131ld\u0131.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Graz Technical University (Austria) teadlaste grupp, kes on varem tuntud r\u00fcnnakute meetodite arendamise poolest MDS<\/a><\/noindex>, NetSpectre<\/a><\/noindex> ja Throwhammer<\/a><\/noindex>, avalikuks<\/a><\/noindex> teave uue anal\u00fc\u00fcsimeetodi kohta k\u00fclgkanalitest, mis v\u00f5imaldab m\u00e4\u00e4rata nimetatud brauseri t\u00e4pse versiooni, kasutatava operatsioonis\u00fcsteemi, CPU arhitektuuri ja lisanduste kasutamise varjatud identifitseerimise vastu. <\/p>\n

Nende parameetrite m\u00e4\u00e4ramiseks piisab, kui k\u00e4ivitada brauseris teadlaste ettevalmistatud JavaScripti kood. Praktiliselt v\u00f5ib meetodit kasutada mitte ainult lisana kasutaja kaudseks identifitseerimiseks, vaid ka s\u00fcsteemi keskkonna parameetrite m\u00e4\u00e4ramiseks, et rakendada eksploitide sihip\u00e4rast rakendamist arvesse v\u00f5ttes OS, arhitektuuri ja brauserit. Meetod on t\u00f5hus ka brauserite puhul, mis rakendavad varjatud identifitseerimise blokeerimise mehhanisme, n\u00e4iteks Tor Browser. Protot\u00fc\u00fcbi koodi l\u00e4htefailid meetodi rakendamiseks avaldatud<\/a><\/noindex> MIT litsentsi alusel.<\/p>\n

M\u00e4\u00e4ramine toimub brauseritele iseloomulike JavaScripti omaduste oleku mustrite ja JIT, CPU ning m\u00e4lu eraldamise mehhanismide t\u00f6\u00f6 erip\u00e4rade ajastusest s\u00f5ltuvate operatsioonide t\u00e4itmise omaduste kindlakstehtud p\u00f5hjal. Omaduste m\u00e4\u00e4ramine toimub JavaScriptist juurdep\u00e4\u00e4setavate objektide loendi genereerimise kaudu. Selgus, et objektide arv korreleerub otseselt brauseri mootori ja selle versiooniga. <\/p>\n

function getProperties(o) {
\n var result = [];
\n while (o !== null) {
\n result = result.concat(Reflect.ownKeys(o));
\n o = Object.getPrototypeOf(o);
\n }
\n return result;
\n }<\/p>\n

N\u00e4iteks on Firefoxi dokumentatsioonis v\u00e4idetud, et toetatakse 2247 omadust, samas kui tegelik m\u00e4\u00e4ratletud omaduste arv, arvestades dokumenteerimata omadusi, on 15709 (Tor Brauseris \u2014 15639). Chrome'i puhul on v\u00e4idetud 2698 omadust, kuid tegelikult pakutakse 13570 (Chrome Androidis \u2014 13119). Omaduste arv ja v\u00e4\u00e4rtused muutuvad brauseri versioonide ja erinevate operatsioonis\u00fcsteemide kasutamisel. <\/p>\n

Erinevate omaduste v\u00e4\u00e4rtuste ja olemasolu saab kasutada operatsioonis\u00fcsteemi t\u00fc\u00fcbi m\u00e4\u00e4ramiseks. N\u00e4iteks Kubuntus seotakse omadus window.innerWidth v\u00e4\u00e4rtusega 1000, Windows 10-s aga v\u00e4\u00e4rtusega 1001. Windowsis on saadaval omadus window.navigator.activeVRDisplays, Linuxis aga ei ole. Androidile on palju spetsiifilisi v\u00e4ljundeid, kuid puudub window.SharedWorker. Operatsioonis\u00fcsteemi identifitseerimiseks on soovitatav anal\u00fc\u00fcsida ka WebGL parameetreid, mille seisund s\u00f5ltub draiveritest. Lisaks v\u00f5imaldab kutsumine WEBGL_debug_renderer_infoextension saada teavet OpenGL renderdamismootori kohta, mis on igale operatsioonis\u00fcsteemile erinev. <\/p>\n

CPU tuvastamiseks kasutatakse erinevate t\u00fc\u00fcpiliste koodiblokkide t\u00e4itmise aja erinevuste hindamist, mille k\u00e4ik s\u00f5ltub k\u00e4su komplekti arhitektuurist, arvestades JIT-i k\u00e4itumist (mida m\u00e4\u00e4ratletakse kui palju CPU registreid kaasatakse ja millal JIT genereerib efektiivset koodi optimeerimise ja laiendatud k\u00e4skude kaasamisega ning millal mitte). M\u00e4luhalduse ja ops\u00fcsteemi t\u00fc\u00fcbi m\u00e4\u00e4ramiseks m\u00f5\u00f5detakse ka erinevusi m\u00e4lude jagamise aja osas erinevates struktuurides, millest saab j\u00e4reldada m\u00e4lu plokkide suurust. <\/p>\n

K\u00e4itusaja jooksul m\u00e4\u00e4ratletud parameetrid v\u00f5etakse v\u00f5rreldes eelnevalt testitud keskkondade omavaheliste v\u00e4\u00e4rtustega. Kontrollimise k\u00e4igus suutis v\u00e4lja t\u00f6\u00f6tatud tehnika t\u00e4pselt tuvastada 40 erinevat testkeskkonda, m\u00e4\u00e4rates kindlaks kasutatavate brauserite versioonid, CPU tootja, kasutatav ops\u00fcsteem ning haiguse, kas see k\u00e4ib reaalse riistvara v\u00f5i virtuaalmasina kaudu.<\/p>\n

Eraldi m\u00e4rgitakse veebisirvijate lisandite ja isegi \u00fcksikute lisandite seadete m\u00e4\u00e4ramine, sealhulgas lisandite, mis on m\u00f5eldud varjatud tuvastamise meetodite v\u00f5i privaatse vaate re\u017eiimi blokeerimise jaoks. Pakutud meetodi kontekstis muutuvad sellised lisandid veel \u00fcheks andmeallikaks tuvastamiseks. Lisandid m\u00e4\u00e4ratakse via keskkonna algparameetrite moonutuste hindamise.<\/p>\n

Teistest tuvastamismeetoditest v\u00f5ib m\u00e4rkida kaudsete andmete arvesse v\u00f5tmise, nagu ekraani lahutusv\u00f5ime<\/a><\/noindex>, toetatud MIME-t\u00fc\u00fcpide loetelu, spetsiifilised parameetrid p\u00e4isetes (HTTP\/2<\/a><\/noindex> ja HTTPS<\/a><\/noindex>), installitud pluginate ja fontide anal\u00fc\u00fcs<\/a><\/noindex>, teatud Web API-de k\u00e4ttesaadavuse anal\u00fc\u00fcs, mis on spetsiifilised graafikakaartidele omadused<\/a><\/noindex> WebGL ja Canvas<\/a><\/noindex>, manipuleerimised<\/a><\/noindex> CSS-iga, t\u00f6\u00f6tlemise omaduste anal\u00fc\u00fcsiga hiire<\/a><\/noindex> ja klaviatuuriga<\/a><\/noindex>.<\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0413\u0440\u0430\u0446\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0410\u0432\u0441\u0442\u0440\u0438\u044f), \u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0430\u0442\u0430\u043a MDS, NetSpectre \u0438 Throwhammer, \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043d\u043e\u0432\u043e\u0439 \u0442\u0435\u0445\u043d\u0438\u043a\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0442\u043e\u0447\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0443 CPU \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u0431\u043e\u0440\u044c\u0431\u044b \u0441\u043e \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439. \u0414\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 JavaScript \u043a\u043e\u0434\u0430. […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-35296","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Esitatud uus tehnika s\u00fcsteemi ja brauseri varjatud tuvastamiseks | ProHoster","description":"Graz Technical University (Austria) teadlaste grupp, kes on varem tuntud r\u00fcnnakute meetodite arendamise poolest","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/predstavlena-novaya-tehnika-skrytoj-identifikatsii-sistemy-i-brauzera","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0413\u0440\u0430\u0446\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0410\u0432\u0441\u0442\u0440\u0438\u044f), \u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0430\u0442\u0430\u043a","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/predstavlena-novaya-tehnika-skrytoj-identifikatsii-sistemy-i-brauzera","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:03:29+00:00","article:modified_time":"2019-10-31T19:03:29+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35296","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 22:42:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:06:24","updated":"2026-01-21 22:42:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/35296","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=35296"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/35296\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=35296"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=35296"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=35296"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}