{"id":92490,"date":"2020-08-27T19:42:37","date_gmt":"2020-08-27T17:42:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/30-iz-tysyachi-krupnejshih-sajtov-ispolzuyut-skripty-dlya-skrytoj-identifikaczii"},"modified":"2020-08-27T19:42:37","modified_gmt":"2020-08-27T17:42:37","slug":"30-iz-tysyachi-krupnejshih-sajtov-ispolzuyut-skripty-dlya-skrytoj-identifikaczii","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/30-iz-tysyachi-krupnejshih-sajtov-ispolzuyut-skripty-dlya-skrytoj-identifikaczii","title":{"rendered":"30% tuhandest suurimast veebisaidist kasutavad skripte varjatud identifitseerimiseks.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Mozilla, Iowa \u00fclikooli ja California \u00fclikooli teadlaste grupp avalikustasin<\/a><\/noindex> avalikustas uurimuse tulemused veebisaitide koodi kasutamise kohta, mille eesm\u00e4rk on varjatud kasutajate tuvastamine. Varjatud tuvastamine t\u00e4hendab identifikaatorite genereerimist, kasutades kaudseid teavet brauseri t\u00f6\u00f6 kohta, nagu ekraani lahutusv\u00f5ime<\/a><\/noindex>, toetatud MIME-t\u00fc\u00fcpide loetelu, spetsiifilised parameetrid p\u00e4istes (HTTP\/2<\/a><\/noindex> ja HTTPS<\/a><\/noindex>), installitud pluginade ja fontide<\/a><\/noindex>, teatud Web API-de k\u00e4ttesaadavus, mis on spetsiifilised graafikakaartidele omadused<\/a><\/noindex> WebGL kaudu joonistamine ja Canvas<\/a><\/noindex>, manipuleerimine<\/a><\/noindex> CSS-i vaikimisi v\u00e4\u00e4rtuste arvessev\u00f5tt<\/a><\/noindex>, skaneerimine<\/a><\/noindex> v\u00f5rguporte, brauserite olemuse anal\u00fc\u00fcs hiire<\/a><\/noindex> ja ja klaviatuuri<\/a><\/noindex>.<\/p>\n

Alexa edetabelis k\u00f5ige populaarsemate 100 000 veebisaidi uurimine n\u00e4itas, et 9040 neist (10,18%) kasutavad koodi varjatud k\u00fclastajate tuvastamiseks. Samuti, kui anal\u00fc\u00fcsida tuhat k\u00f5ige populaarsemat saiti, leiti, et sarnast koodi kasutati 30,60% juhtudest (266 saiti), ning saitide seas, mis edetabelis asuvad kohas 1000 kuni 10000, leiti 24,45% juhtudest (2010 saiti). Peamiselt kasutatakse varjatud tuvastamist v\u00e4liste teenuste skriptides, mis on suunatud pettuste t\u00f5kestamisele<\/a><\/noindex> ja robotite filtreerimisele, samuti reklaamiv\u00f5rkudes ja kasutajak\u00e4itumise j\u00e4lgimise s\u00fcsteemides.
\n

\"30%<\/a><\/noindex><\/center><\/p>\n

Varjatud tuvastamiseks kasutatava koodi tuvastamiseks on v\u00e4lja t\u00f6\u00f6tatud t\u00f6\u00f6riist FP-Inspector<\/a><\/noindex>, mille kood on pakutud<\/a><\/noindex> MIT litsentsi all. T\u00f6\u00f6riist kasutab masin\u00f5ppe meetodeid koos JavaScripti koodi staatilise ja d\u00fcnaamilise anal\u00fc\u00fcsiga. R\u00e4\u00e4gitakse, et masin\u00f5ppe rakendamine on oluliselt parandanud varjatud tuvastamise koodi avastamise t\u00e4psust ning on leidnud 26% rohkem probleemseid skripte
\nkui k\u00e4sitsi m\u00e4\u00e4ratud heuriistika. <\/p>\n

Paljud tuvastatud tuvastusskriptid puudusid t\u00fc\u00fcpilistest blokeerimisloenditest Disconnect<\/a><\/noindex>, Adsafe<\/a><\/noindex>, DuckDuckGo, Justuno<\/a><\/noindex> ja EasyPrivacy<\/a><\/noindex>.
\nP\u00e4rast teateid<\/a><\/noindex> EasyPrivacy blokeerimisloendi arendajatele saadetud loendi ja ja ja ja ja ja.<\/a><\/noindex> loodi eraldi sektsioon varjatud tuvastuse skriptide jaoks. Lisaks v\u00f5imaldas FP-Inspector tuvastada m\u00f5ned uued Web API kasutamise meetodid tuvastamiseks, mida varem ei olnud praktikas kohatud.<\/p>\n

N\u00e4iteks tuvastati, et kasutati tuvastamiseks teavet klaviatuuri paigutuse kohta (getLayoutMap), vahem\u00e4llu j\u00e4\u00e4nud andmeid (Performance API kaudu anal\u00fc\u00fcsitakse andmete edastamise viivitusi, et tuvastada, kas kasutaja on p\u00f6\u00f6rdunud kindla domeeni poole v\u00f5i mitte, samuti kas lehte on varem avatud), brauseris m\u00e4\u00e4ratud \u00f5igusi (teave juurdep\u00e4\u00e4su kohta Notification, Geolocation ja Camera API-le), spetsialiseeritud perifeerseadmete ja haruldaste sensorite olemasolu (m\u00e4ngupuldid, virtuaalreaalsuse prillid, l\u00e4hedustundlikud sensorid). Samuti leiti, et tuvastatakse, kas teatud brauseritele spetsiaalsed API-d ja API-d (AudioWorklet, setTimeout, mozRTCSessionDescription) k\u00e4ituvad erinevalt, samuti kasutatakse AudioContext API-d heli s\u00fcsteemi omaduste m\u00e4\u00e4ramiseks. <\/p>\n

Uuringu k\u00e4igus uuriti ka k\u00fcsimust, kas veebisaitide tavaline funktsionaalsus on h\u00e4iritud varjatud tuvastamise vastu kaitsevahendite rakendamise korral, mis toovad kaasa v\u00f5rgu p\u00e4ringute blokeerimise v\u00f5i API-le juurdep\u00e4\u00e4su piirangud. N\u00e4idati, et API valikuline piiramine ainult FP-Inspectoriga tuvastatud skriptide jaoks p\u00f5hjustab v\u00e4hem h\u00e4ireid, kui Brave ja Tor Brauseri rangemad \u00fcldised API-k\u00f5nede piirangud, mis v\u00f5ivad p\u00f5hjustada andmete lekkimist.<\/p>\n

\r\n \"Vaata\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 Mozilla, \u0410\u0439\u043e\u0432\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0438\u0442\u043e\u0433\u0438 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043d\u0430 \u0441\u0430\u0439\u0442\u0430\u0445 \u043a\u043e\u0434\u0430 \u0434\u043b\u044f \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u041f\u043e\u0434 \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u043d\u0438\u043c\u0430\u0435\u0442\u0441\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043a\u043e\u0441\u0432\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e \u0440\u0430\u0431\u043e\u0442\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u044d\u043a\u0440\u0430\u043d\u0430, \u0441\u043f\u0438\u0441\u043e\u043a \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 MIME-\u0442\u0438\u043f\u043e\u0432, \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u044b\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430\u0445 (HTTP\/2 \u0438 HTTPS), \u0430\u043d\u0430\u043b\u0438\u0437 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0438 \u0448\u0440\u0438\u0444\u0442\u043e\u0432, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 Web […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":92491,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-92490","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4730% tuhandest suurimast veebisaidist kasutab varjatud tuvastamise skripte | ProHoster","description":"Mozilla, Iowa \u00fclikooli ja California \u00fclikooli teadlaste r\u00fchm avaldas uuringu tulemused.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/30-iz-tysyachi-krupnejshih-sajtov-ispolzuyut-skripty-dlya-skrytoj-identifikaczii","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4730% \u0438\u0437 \u0442\u044b\u0441\u044f\u0447\u0438 \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0438\u0445 \u0441\u0430\u0439\u0442\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0434\u043b\u044f \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 Mozilla, \u0410\u0439\u043e\u0432\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0438\u0442\u043e\u0433\u0438 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/30-iz-tysyachi-krupnejshih-sajtov-ispolzuyut-skripty-dlya-skrytoj-identifikaczii","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-27T17:42:37+00:00","article:modified_time":"2020-08-27T17:42:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"92490","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:07:40","updated":"2022-09-27 21:36:39","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/92490","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=92490"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/92490\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/92491"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=92490"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=92490"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=92490"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}