{"id":56195,"date":"2020-02-07T00:00:00","date_gmt":"2020-02-06T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/zagolovok-x-client-data-kak-metod-identifikatsii-polzovatelej-chrome"},"modified":"2020-02-18T14:04:25","modified_gmt":"2020-02-18T11:04:25","slug":"zagolovok-x-client-data-kak-metod-identifikatsii-polzovatelej-chrome","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/zagolovok-x-client-data-kak-metod-identifikatsii-polzovatelej-chrome","title":{"rendered":"X-Client-Data pealkiri kui Chrome'i kasutajate tuvastamise meetod","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Arutledes turvalisuse, privaatsuse ja laiendite efektiivsuse suurendamiseks (peamine eesm\u00e4rk on lihtsustada turvaliste ja efektiivsete laiendite loomist ning raskendada ohtlike ja aeglaste laiendite loomist).<\/a><\/noindex> Google'i HTTP User-Agent pealkirja sisu \u00fchtlustamise arutelul, m\u00e4rkis brauseri Kiwi arendaja t\u00e4helepanu<\/a><\/noindex> Chrome'i HTTP-pealkirjas 'X-Client-Data' potentsiaalselt rikub<\/a><\/noindex> algselt kehtivate Euroopa Liidu andmekaitse m\u00e4\u00e4ruste (GDPR<\/a><\/noindex>). Arutelul ka Chris Lattner, LLVM asutaja ja peaarhitekt, kuid ta soovitas mitte kiirustada, vaid oodata ja vaadata, kuidas l\u00f5peb<\/a><\/noindex> kriitika osaliseks sai ka Google'i tegevuse kaksikmoraal, kusjuures \u00fchest k\u00fcljest edendab<\/a><\/noindex> meetodid<\/a><\/noindex> kasutajate varjatud tuvastamise ja j\u00e4lgimise blokeerimist, kuid teisest k\u00fcljest ei kiirusta eemaldama Chrome'ist X-Client-Data pealkirja, mida saab kasutada brauseri instantside tuvastamiseks Google'i teenustele p\u00e4\u00e4semisel.<\/p>\n

X-Client-Data pealkiri ei ole varjatud funktsionaalsus ja selle k\u00e4itumine kirjeldatud<\/a><\/noindex> dokumentatsioonis. X-Client-Data kaudu kogub Google teavet Chrome'i erinevate katsetamisv\u00f5imaluste aktiivsusest, seondudes oma lehek\u00fclgedega (n\u00e4iteks v\u00f5ib Google katse k\u00e4igus aktiveerida YouTube'is teatud katsefunktsioone, kui need on brauseris toetatud, v\u00f5i proovida seostada esinevaid probleeme katsefunktsioonide aktiveerimisega). <\/p>\n

Pealkiri mille v\u00e4\u00e4rtus<\/a><\/noindex> ainult Google'i veebilehtedele, mis vastavad maskidele '*.doubleclick.net', '*.googlesyndication.com', 'www.googleadservices.com', '*.google.<TLD<\/a><\/noindex>>' ja '*.youtube.', ning saadetakse l\u00e4bi HTTPS-i. Inkognito-re\u017eiimis pealkirja ei t\u00e4ideta, kuid juhul kui Google'i kasutaja autentimisel vahetatakse profiili k\u00fclalisprofiili v\u00f5i puhastamise operatsiooni korral, ei l\u00e4htestata pealkirja ja see saadetakse endise v\u00e4\u00e4rtusega.<\/p>\n

\"X-Client-Data<\/a><\/noindex><\/center><\/p>\n

On v\u00e4idetud, et pealkiri ei sisalda isiku tuvastamiseks vajalikku teavet, vaid kirjeldab Chrome'i installimise seisukorda ja aktiivseid katsetamisv\u00f5imalusi. Kui brauseri kasutamise telemeetria edastamine ja t\u00f5rgete aruannete genereerimine on seadetes keelatud, kasutatakse X-Client-Data pealkirja algv\u00e4\u00e4rtuse genereerimisel vaid 13 bitti entropiat (8000 erinevat kombinatsiooni), mis ei ole piisav identifitseerimiseks. <\/p>\n

Arvestades, et pealkirjas kodeeritakse ka teatud s\u00fcsteemi seadeid ja parameetreid, sobib X-Client-Data sisu l\u00f5puks h\u00e4sti t\u00e4iendavaks andmeallikaks kasutaja kaudseks tuvastamiseks l\u00fchikese aja jooksul (katse-eksituse v\u00f5imalused l\u00fclitatakse ajas sisse ja v\u00e4lja, mis toob kaasa X-Client-Data v\u00e4\u00e4rtuse perioodilise muutmise). <\/p>\n

Siiski, peale algse entropia X-Client-Data v\u00e4\u00e4rtuse genereerimisel kasutatakse samuti seed-j\u00e4rjestust, mille tagastavad Google'i serverid ja mis s\u00f5ltub riigist, IP-aadressist ja muudest kriteeriumidest, mida Google peab oluliseks (n\u00e4iteks ei ole midagi takistamas suurt juhuslikku j\u00e4rjestust tagastada, mis muutub t\u00e4pseks tuvastajaks).
\nLisaks ei v\u00e4lista Google'i domeenide maskide p\u00f5hjal X-Client-Data saatmisel olukordi, kus kurjategija v\u00f5ib registreerida domeeni kujul 'youtube.xn--55qx5d' ja hakata koguma identifikaatoreid.<\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u0438 \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u0438 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u044b Google \u043f\u043e \u0443\u043d\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 User-Agent, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Kiwi \u043e\u0431\u0440\u0430\u0442\u0438\u043b \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043e\u0441\u0442\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0432 Chrome HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a «X-Client-Data», \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043d\u0430\u0440\u0443\u0448\u0430\u0435\u0442 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0439 \u0432 \u0415\u0432\u0440\u043e\u0441\u043e\u044e\u0437\u0435 \u043e\u0431\u0449\u0438\u0439 \u0440\u0435\u0433\u043b\u0430\u043c\u0435\u043d\u0442 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 (GDPR). \u0412 \u0445\u043e\u0434\u0435 \u0434\u0438\u0441\u043a\u0443\u0441\u0441\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0430\u0441\u044c \u043a\u0440\u0438\u0442\u0438\u043a\u0435 \u0434\u0432\u043e\u0439\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441 \u043e\u0434\u043d\u043e\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u043f\u0440\u043e\u0434\u0432\u0438\u0433\u0430\u0435\u0442 \u043c\u0435\u0442\u043e\u0434\u044b \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":56196,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-56195","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47X-Client-Data pealkiri kui Chrome'i kasutajate tuvastamise meetod | ProHoster","description":"Arutades Google'i algatust \u00fchtlustada HTTP-peakirja User-Agent sisu, arendaja brauserist Kiwi.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/zagolovok-x-client-data-kak-metod-identifikatsii-polzovatelej-chrome","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0417\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a X-Client-Data \u043a\u0430\u043a \u043c\u0435\u0442\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Chrome | ProHoster","og:description":"\u041f\u0440\u0438 \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u0438 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u044b Google \u043f\u043e \u0443\u043d\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 User-Agent, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Kiwi.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/zagolovok-x-client-data-kak-metod-identifikatsii-polzovatelej-chrome","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-06T21:00:00+00:00","article:modified_time":"2020-02-18T11:04:25+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"56195","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:29:18","updated":"2022-10-10 00:15:42","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/56195","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=56195"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/56195\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/56196"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=56195"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=56195"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=56195"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}