{"id":92490,"date":"2020-08-27T19:42:37","date_gmt":"2020-08-27T17:42:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/30-iz-tysyachi-krupnejshih-sajtov-ispolzuyut-skripty-dlya-skrytoj-identifikaczii"},"modified":"2020-08-27T19:42:37","modified_gmt":"2020-08-27T17:42:37","slug":"30-iz-tysyachi-krupnejshih-sajtov-ispolzuyut-skripty-dlya-skrytoj-identifikaczii","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/30-iz-tysyachi-krupnejshih-sajtov-ispolzuyut-skripty-dlya-skrytoj-identifikaczii","title":{"rendered":"30% tuhandest suurimast veebisaidist kasutavad skripte varjatud tuvastamiseks","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Mozilla, Iowa \u00fclikooli ja Californias asuva \u00fclikooli uurijate r\u00fchm avalikustas<\/a><\/noindex> tulemused veebisaitide koodide kasutamise uuringust peidetud kasutajate identifitseerimiseks. Peidetud identifitseerimine t\u00e4hendab identifikaatorite genereerimist brauseri t\u00f6\u00f6ga seotud kaudsete andmete p\u00f5hjal, nagu ekraani lahutusv\u00f5ime<\/a><\/noindex>, toetatud MIME-t\u00fc\u00fcpide loetelu, spetsiifilised parameetrid p\u00e4isetes (HTTP\/2<\/a><\/noindex> ja HTTPS<\/a><\/noindex>), installitud pluginate ja fontide anal\u00fc\u00fcs<\/a><\/noindex>, teatud Web API-de k\u00e4ttesaadavuse anal\u00fc\u00fcs, mis on spetsiifilised graafikakaartidele omadused<\/a><\/noindex> WebGL ja Canvas<\/a><\/noindex>, manipuleerimised<\/a><\/noindex> CSS-i abil, vaikimisi v\u00e4\u00e4rtuste arvestamine<\/a><\/noindex>, skaaneerimine<\/a><\/noindex> v\u00f5rgu porte, anal\u00fc\u00fcsides omadusi t\u00f6\u00f6tamisel hiire<\/a><\/noindex> ja klaviatuuriga<\/a><\/noindex>.<\/p>\n

Uuring 100 000 k\u00f5ige populaarsema veebisaidi kohta Alexa edetabelis n\u00e4itas, et 9040 neist (10,18%) kasutavad peidetud k\u00fclastajate identifitseerimise koodi. Kui vaadata tuhat k\u00f5ige populaarsemat saiti, avastati selline kood 30,60% juhtudest (266 saiti), samas kui saitide hulgas, mis on edetabeli vahemikus tuhandest k\u00fcmne tuhande juurde, leiti see 24,45% juhtudest (2010 saiti). Peamiselt rakendatakse peidetud identifitseerimist skriptides, mida pakuvad v\u00e4lised teenused pettuste vastu<\/a><\/noindex> v\u00f5itlemiseks ja robotite filtreerimiseks, samuti reklaamiv\u00f5rkude ja kasutajate liikumise j\u00e4lgimise s\u00fcsteemide jaoks.
\n

\"30%<\/a><\/noindex><\/center><\/p>\n

Peidetud identifitseerimise teostava koodi tuvastamiseks on v\u00e4lja t\u00f6\u00f6tatud t\u00f6\u00f6riistad FP-Inspector<\/a><\/noindex>, mille kood on pakutud<\/a><\/noindex> on MIT litsentsi all. T\u00f6\u00f6riistade seas kasutatakse masin\u00f5ppe meetodeid koos JavaScripti koodi staatilise ja d\u00fcnaamilise anal\u00fc\u00fcsiga. V\u00e4idetakse, et masin\u00f5ppe rakendamine on oluliselt suurendanud peidetud identifitseerimise koodi tuvastamise t\u00e4psust ja leidnud 26% rohkem probleemseid skripte
\nv\u00f5rreldes k\u00e4sitsi etteantud heuristikaga. <\/p>\n

Paljud tuvastatud identifitseerimisskriptid puudusid tavalistest blokeerimisel lahendustest Disconnect<\/a><\/noindex>, Adsafe<\/a><\/noindex>, DuckDuckGo, Justuno<\/a><\/noindex> ja EasyPrivacy<\/a><\/noindex>.
\nP\u00e4rast saatmist teavitamine<\/a><\/noindex> EasyPrivacy blokeerimisnimekirja arendajatelt loodi<\/a><\/noindex> oli eraldi jaotis peidetud identifitseerimise skriptidele. Lisaks v\u00f5imaldas FP-Inspector tuvastada m\u00f5ned uued viise Web API kasutamiseks identifitseerimiseks, mida varem ei ole praktikas n\u00e4htud.<\/p>\n

N\u00e4iteks on tuvastatud, et teavet klaviatuuri paigutuse m\u00e4\u00e4ramiseks (getLayoutMap) kasutatakse, vahem\u00e4lu j\u00e4\u00e4kandmeid (API Performance abil anal\u00fc\u00fcsitakse andmete edastamise viivitusi, mis v\u00f5imaldab tuvastada, kas kasutaja on k\u00fclastanud konkreetset domeeni v\u00f5i mitte, samuti kas leht avati varem), brauseris kehtestatud \u00f5igusi (teave Notification, Geolocation ja Camera API juurdep\u00e4\u00e4su kohta), spetsialiseeritud p\u00e9riph\u00e4\u00e4reliste seadmete ja haruldaste sensorite (m\u00e4ngupuldid, virtuaalreaalsuse prillid, l\u00e4hedussensorid) olemasolu. Lisaks on fikseeritud arvestamine spetsialiseeritud API-de esinemise ja API-de k\u00e4itumise erinevuste tuvastamisel (AudioWorklet, setTimeout, mozRTCSessionDescription), samuti AudioContext API kasutamine helis\u00fcsteemi omaduste m\u00e4\u00e4ramiseks. <\/p>\n

Uuringu k\u00e4igus uuriti ka k\u00fcsimust veebisaitide tavalise funktsionaalsuse rikkumisest, kui rakendada varjatud identifitseerimise kaitsemeetodeid, mis p\u00f5hjustavad v\u00f5rgu p\u00e4ringute blokeerimise v\u00f5i API-le juurdep\u00e4\u00e4su piiranguid. N\u00e4idati, et API valikuline piiramine ainult skriptide jaoks, mis tuvastatakse FP-Inspector'i poolt, toob kaasa v\u00e4hem rikkumisi v\u00f5rreldes Brave ja Tor Browser kasutamisel rangemate \u00fcldiste API p\u00e4ringute piirangutega, mis v\u00f5ivad p\u00f5hjustada andmelekkimist.<\/p>\n

\r\n \"M\u00e4ngi\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 Mozilla, \u0410\u0439\u043e\u0432\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0438\u0442\u043e\u0433\u0438 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043d\u0430 \u0441\u0430\u0439\u0442\u0430\u0445 \u043a\u043e\u0434\u0430 \u0434\u043b\u044f \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u041f\u043e\u0434 \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u043d\u0438\u043c\u0430\u0435\u0442\u0441\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043a\u043e\u0441\u0432\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e \u0440\u0430\u0431\u043e\u0442\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u044d\u043a\u0440\u0430\u043d\u0430, \u0441\u043f\u0438\u0441\u043e\u043a \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 MIME-\u0442\u0438\u043f\u043e\u0432, \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u044b\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430\u0445 (HTTP\/2 \u0438 HTTPS), \u0430\u043d\u0430\u043b\u0438\u0437 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0438 \u0448\u0440\u0438\u0444\u0442\u043e\u0432, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 Web […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":92491,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-92490","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4730% tuhandest suurimast veebisaidist kasutab varjatud identifitseerimise skripte | ProHoster","description":"Mozilla, Iowa \u00fclikooli ja California \u00fclikooli teadlaste r\u00fchm avaldas uuringu tulemused.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/30-iz-tysyachi-krupnejshih-sajtov-ispolzuyut-skripty-dlya-skrytoj-identifikaczii","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4730% \u0438\u0437 \u0442\u044b\u0441\u044f\u0447\u0438 \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0438\u0445 \u0441\u0430\u0439\u0442\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0434\u043b\u044f \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 Mozilla, \u0410\u0439\u043e\u0432\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0438\u0442\u043e\u0433\u0438 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/30-iz-tysyachi-krupnejshih-sajtov-ispolzuyut-skripty-dlya-skrytoj-identifikaczii","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-27T17:42:37+00:00","article:modified_time":"2020-08-27T17:42:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"92490","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:07:40","updated":"2022-09-27 21:36:39","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/92490","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=92490"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/92490\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/92491"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=92490"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=92490"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=92490"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}