{"id":35296,"date":"2019-10-31T22:03:29","date_gmt":"2019-10-31T19:03:29","guid":{"rendered":"https:\/\/prohoster.info\/blog\/predstavlena-novaya-tehnika-skrytoj-identifikatsii-sistemy-i-brauzera\/"},"modified":"2019-10-31T22:03:29","modified_gmt":"2019-10-31T19:03:29","slug":"predstavlena-novaya-tehnika-skrytoj-identifikatsii-sistemy-i-brauzera","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/predstavlena-novaya-tehnika-skrytoj-identifikatsii-sistemy-i-brauzera","title":{"rendered":"Esitatud on uus s\u00fcsteemi ja brauseri peidetud tuvastamise tehnika.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Graz Tehnika \u00dclikooli teadlaste r\u00fchm (Austraalia), kes on varem tuntud r\u00fcndemetoodikate v\u00e4ljat\u00f6\u00f6tamise poolest MDS<\/a><\/noindex>, NetSpectre<\/a><\/noindex> ja Throwhammer<\/a><\/noindex>, avalikustas<\/a><\/noindex> teave uue anal\u00fc\u00fcsimeetodi kohta, mis kasutab k\u00fclgkanaleid, et m\u00e4\u00e4rata brauseri t\u00e4pne versioon, ops\u00fcsteem, CPU arhitektuur ja lisade kasutamine, et v\u00e4ltida varjatud identifitseerimise. <\/p>\n

K\u00e4esolevate parameetrite tuvastamiseks piisab, kui k\u00e4ivitada brauseris teadlaste koostatud JavaScripti kood. Praktikas v\u00f5ib meetodit kasutada mitte ainult t\u00e4iendava allikana kasutaja kaudseks tuvastamiseks, vaid ka sihitatud eksploiteerimise jaoks s\u00fcsteemi keskkonna parameetrite m\u00e4\u00e4ramiseks, v\u00f5ttes arvesse ops\u00fcsteemi, arhitektuuri ja brauserit. Meetod on t\u00f5hus, sealhulgas brauserites, millel on rakendatud varjatud identifitseerimise blokeerimise mehhanisme, nagu Tor Browser. Koodivihikute l\u00e4htefailid meetodi rakendamiseks avaldatud<\/a><\/noindex> on MIT litsentsi all.<\/p>\n

M\u00e4\u00e4ramine p\u00f5hineb JavaScriptis olevate omaduste oleku mustrite tuvastamisel, mis on iseloomulikud erinevatele brauseritele, ning operatsioonide k\u00e4itamise ajaga seotud omaduste m\u00e4\u00e4ramisel, mis s\u00f5ltuvad JIT t\u00f6\u00f6p\u00f5him\u00f5tetest, CPU-st ja m\u00e4luhalduse mehhanismidest. Omaduste m\u00e4\u00e4ramine toimub, genereerides nimekirja k\u00f5igist JavaScriptist kergesti ligip\u00e4\u00e4setavatest objektidest. Selgus, et objektide arv korreleerub otse brauserimootori ja selle versiooniga. <\/p>\n

function getProperties(o) {
\n var result = [];
\n while (o !== null) {
\n result = result.concat(Reflect.ownKeys(o));
\n o = Object.getPrototypeOf(o);
\n }
\n return result;
\n }<\/p>\n

N\u00e4iteks Firefoxi dokumentatsioonis on v\u00e4lja toodud 2247 omaduse toetust, kuid tegelik m\u00e4\u00e4ratud omaduste arv, arvestades dokumenteerimata omadusi, on 15709 (Tor Brauseris \u2014 15639). Chrome'i puhul on v\u00e4lja kuulutatud 2698 omadust, samas kui tegelikult pakutakse 13570 (Chrome'i Androidi versioonis \u2014 13119). Omaduste arv ja v\u00e4\u00e4rtused muutuvad koos iga brauseri versiooniga ja erinevate operatsioonis\u00fcsteemide kasutamisega. <\/p>\n

Omaduste v\u00e4\u00e4rtusi ja olemasolu saab kasutada operatsioonis\u00fcsteemi t\u00fc\u00fcbi m\u00e4\u00e4ramiseks. N\u00e4iteks Kubuntus seotakse omadus window.innerWidth v\u00e4\u00e4rtusega 1000, Windows 10 puhul aga 1001. Windowsis on saadaval omadus window.navigator.activeVRDisplays, Linuxis aga mitte. Androidi platvormil on saadaval palju spetsiifilisi \u00fcleskutseid, kuid puudub window.SharedWorker. Operatsioonis\u00fcsteemi identifitseerimiseks soovitatakse samuti kasutada WebGL parameetrite anal\u00fc\u00fcsi, mille olek s\u00f5ltub draiveritest. Lisaks v\u00f5imaldab kutsumine WEBGL_debug_renderer_infoextension saada teavet OpenGL renderdamise mootori kohta, mis on igas operatsioonis\u00fcsteemis erinev. <\/p>\n

CPU m\u00e4\u00e4ramine h\u00f5lmab erinevuste hindamist erinevate t\u00fc\u00fcpiliste koodiblokkide t\u00e4itmise ajas, mille t\u00f6\u00f6tlemine s\u00f5ltub k\u00e4sklussarja arhitektuurist, arvestades JIT-i k\u00e4itumist (m\u00e4\u00e4ratakse, kui palju CPU registreid aktiveeritakse ja millistel juhtudel JIT genereerib t\u00f5husat koodi optimeerimiste ja laiendatud k\u00e4skude kasutamisega ning millal mitte). M\u00e4lu ja operatsioonis\u00fcsteemi t\u00fc\u00fcbi m\u00e4\u00e4ramiseks m\u00f5\u00f5detakse samuti erinevust m\u00e4lu eraldamise ajas erinevate struktuuride jaoks, mille p\u00f5hjal saab j\u00e4reldada m\u00e4lublokid suurust. <\/p>\n

Skriptimise k\u00e4igus m\u00e4\u00e4ratud parameetrid v\u00f5rreldakse standardsete v\u00e4\u00e4rtustega, mis on iseloomulikud eelnevalt testitud keskkondadele. Kontrollimise k\u00e4igus v\u00f5imaldas v\u00e4lja t\u00f6\u00f6tatud tehnika t\u00e4pselt kindlaks teha 40 erinevat testimisringkonda, m\u00e4\u00e4rates kindlaks kasutatavate brauserite versioonid, CPU tootja, kasutatav operatsioonis\u00fcsteem ning selle, kas see t\u00f6\u00f6tab reaalses riistvaras v\u00f5i virtuaalses masinas.<\/p>\n

Erakordselt tasub m\u00e4rkida, et on v\u00f5imalik tuvastada brauseri lisandeid ja isegi teatud lisade seadeid, sealhulgas lisandeid, mis on m\u00f5eldud peidetud tuvastamismeetodite v\u00f5i privaatse sirvimise re\u017eiimi blokeerimiseks. Pakutud meetodi kontekstis muutuvad sellised lisandid veel \u00fcheks tuvastamiseandmete allikaks. Lisandeid tuvastatakse esmase keskkonna parameetrite moonutuste hindamise kaudu, mida lisandid toovad kaasa.<\/p>\n

Teistest tuvastamismetoodikatest v\u00f5ib m\u00e4rkida kaudsete andmete arvessev\u00f5tmist, nagu ekraani lahutusv\u00f5ime<\/a><\/noindex>, toetatud MIME-t\u00fc\u00fcpide loetelu, spetsiifilised parameetrid p\u00e4istes (HTTP\/2<\/a><\/noindex> ja HTTPS<\/a><\/noindex>), installitud pluginade ja fontide<\/a><\/noindex>, teatud Web API-de k\u00e4ttesaadavus, mis on spetsiifilised graafikakaartidele omadused<\/a><\/noindex> WebGL kaudu joonistamine ja Canvas<\/a><\/noindex>, manipuleerimine<\/a><\/noindex> CSS-iga, erip\u00e4rade anal\u00fc\u00fcs hiire<\/a><\/noindex> ja ja klaviatuuri<\/a><\/noindex>.<\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0413\u0440\u0430\u0446\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0410\u0432\u0441\u0442\u0440\u0438\u044f), \u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0430\u0442\u0430\u043a MDS, NetSpectre \u0438 Throwhammer, \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043d\u043e\u0432\u043e\u0439 \u0442\u0435\u0445\u043d\u0438\u043a\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0442\u043e\u0447\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0443 CPU \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u0431\u043e\u0440\u044c\u0431\u044b \u0441\u043e \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439. \u0414\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 JavaScript \u043a\u043e\u0434\u0430. […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-35296","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Uus s\u00fcsteemi ja brauseri varjunime identifitseerimise tehnoloogia on n\u00fc\u00fcd saadaval | ProHoster","description":"Graz'i Tehnika\u00fclikooli teadlaste r\u00fchm (Austria), kes on varem tuntud MDS, NetSpectre ja Throwhammer r\u00fcnnakute meetodite v\u00e4ljat\u00f6\u00f6tamise poolest, on paljastanud uue anal\u00fc\u00fcsi tehnika kolmandate osapoolte kanalite kaudu, mis v\u00f5imaldab m\u00e4\u00e4rata t\u00e4pset brauseri versiooni, kasutatavat operatsioonis\u00fcsteemi, CPU arhitektuuri ja lisandite kasutamise peidetud tuvastamise vastu. Nende parameetrite m\u00e4\u00e4ramiseks piisab teadlaste ettevalmistatud JavaScripti koodi k\u00e4itamisest brauseris.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/predstavlena-novaya-tehnika-skrytoj-identifikatsii-sistemy-i-brauzera","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0413\u0440\u0430\u0446\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0410\u0432\u0441\u0442\u0440\u0438\u044f), \u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0430\u0442\u0430\u043a MDS, NetSpectre \u0438 Throwhammer, \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043d\u043e\u0432\u043e\u0439 \u0442\u0435\u0445\u043d\u0438\u043a\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0442\u043e\u0447\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0443 CPU \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u0431\u043e\u0440\u044c\u0431\u044b \u0441\u043e \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439. \u0414\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 JavaScript \u043a\u043e\u0434\u0430.","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/predstavlena-novaya-tehnika-skrytoj-identifikatsii-sistemy-i-brauzera","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:03:29+00:00","article:modified_time":"2019-10-31T19:03:29+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35296","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 22:42:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:06:24","updated":"2026-01-21 22:42:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/35296","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=35296"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/35296\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=35296"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=35296"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=35296"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}