{"id":85705,"date":"2020-06-18T13:43:02","date_gmt":"2020-06-18T11:43:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/utechka-poiskovyh-klyuchej-cherez-dns-v-firefox-i-chrome"},"modified":"2020-06-18T13:43:02","modified_gmt":"2020-06-18T11:43:02","slug":"utechka-poiskovyh-klyuchej-cherez-dns-v-firefox-i-chrome","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/utechka-poiskovyh-klyuchej-cherez-dns-v-firefox-i-chrome","title":{"rendered":"Fuite de cl\u00e9s de recherche via DNS dans Firefox et Chrome","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Dans Firefox et Chrome une vuln\u00e9rabilit\u00e9 a \u00e9t\u00e9 identifi\u00e9e<\/a><\/noindex> une caract\u00e9ristique du traitement des requ\u00eates de recherche saisies dans la barre d'adresse, qui entra\u00eene \u00e9galement<\/a><\/noindex> m\u00e8ne \u00e0 la fuite d'informations via le serveur DNS du fournisseur. Le probl\u00e8me r\u00e9side dans le fait que si la requ\u00eate de recherche ne contient qu'un seul mot, le navigateur tente d'abord de d\u00e9terminer via DNS l'existence d'un h\u00f4te portant ce nom, en supposant que l'utilisateur essaie d'ouvrir un sous-domaine, avant de rediriger la requ\u00eate vers le moteur de recherche. Ainsi, le propri\u00e9taire du serveur DNS sp\u00e9cifi\u00e9 dans les param\u00e8tres de l'utilisateur re\u00e7oit des informations sur les requ\u00eates de recherche comprises d'un seul mot, ce qui est consid\u00e9r\u00e9 comme une violation de la confidentialit\u00e9.<\/p>\n

Le probl\u00e8me se manifeste lors de l'utilisation \u00e0 la fois du serveur DNS du fournisseur et des services \u00ab DNS over HTTPS \u00bb (DoH), en cas de d\u00e9finition d'un suffixe DNS dans les param\u00e8tres (qui est d\u00e9fini par d\u00e9faut lors de l'obtention des param\u00e8tres via DHCP). Le principal probl\u00e8me \u00e9tant que m\u00eame avec DoH activ\u00e9, les requ\u00eates continuent d'\u00eatre envoy\u00e9es via le serveur DNS du fournisseur sp\u00e9cifi\u00e9 dans le syst\u00e8me.
\nIl est important de noter que la tentative de r\u00e9solution se produit uniquement lors de l'envoi de requ\u00eates de recherche comportant un seul mot. Lorsque plusieurs mots sont sp\u00e9cifi\u00e9s, il n'y a pas d'appel au DNS. <\/p>\n

\"Fuite<\/a><\/noindex><\/center><\/p>\n

Le probl\u00e8me a \u00e9t\u00e9 confirm\u00e9 dans Firefox et Chrome, et pourrait \u00e9galement toucher d'autres navigateurs. Les d\u00e9veloppeurs de Firefox ont admis l'existence du probl\u00e8me et d'\u00eatre inclus dans les d\u00e9pendances de construction obligatoires.<\/a><\/noindex> proposeront une solution dans la version 79 de Firefox. En particulier, pour g\u00e9rer le comportement du traitement des requ\u00eates de recherche dans about:config ajout\u00e9<\/a><\/noindex> configuration<\/a><\/noindex> \u00ab browser.urlbar.dnsResolveSingleWordsAfterSearch \u00bb, lorsque sa valeur est d\u00e9finie sur \u00ab 0 \u00bb, emp\u00eache la r\u00e9solution, \u00ab 1 \u00bb (par d\u00e9faut) utilise une heuristique pour une r\u00e9solution s\u00e9lective et \u00ab 2 \u00bb maintient l'ancien comportement. Heuristique vise<\/a><\/noindex> dans la v\u00e9rification de l'activation de DoH, de la pr\u00e9sence uniquement de l'enregistrement 'localhost' dans \/etc\/hosts et de l'absence de sous-domaine pour l'h\u00f4te actuel.<\/p>\n

Les d\u00e9veloppeurs de Chrome ont promis<\/a><\/noindex> limiter la fuite via DNS, mais message<\/a><\/noindex> le probl\u00e8me similaire reste non r\u00e9solu depuis 2015. Dans Tor Browser, le probl\u00e8me ne se manifeste pas.<\/p>\n

<\/a><\/noindex><\/p>\n

Source : opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 Firefox \u0438 Chrome \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043d\u0430\u0431\u0440\u0430\u043d\u043d\u044b\u0445 \u0432 \u0430\u0434\u0440\u0435\u0441\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0435 \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 DNS-\u0441\u0435\u0440\u0432\u0435\u0440 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430. \u0421\u0443\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0435\u0441\u043b\u0438 \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u0438\u0437 \u043e\u0434\u043d\u043e\u0433\u043e \u0441\u043b\u043e\u0432\u0430, \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u0432\u043d\u0430\u0447\u0430\u043b\u0435 \u043f\u044b\u0442\u0430\u0435\u0442\u0441\u044f \u0432 DNS \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0445\u043e\u0441\u0442\u0430 \u0441 \u0442\u0430\u043a\u0438\u043c \u0438\u043c\u0435\u043d\u0435\u043c, \u043f\u043e\u043b\u0430\u0433\u0430\u044f, \u0447\u0442\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043f\u044b\u0442\u0430\u0435\u0442\u0441\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u043f\u043e\u0434\u0434\u043e\u043c\u0435\u043d, \u0438 \u0443\u0436\u0435 \u043f\u043e\u0442\u043e\u043c \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":85706,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-85705","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Fuite des mots-cl\u00e9s de recherche via DNS dans Firefox et Chrome | ProHoster","description":"Une sp\u00e9cificit\u00e9 du traitement des requ\u00eates de recherche saisies dans la barre d'adresse a \u00e9t\u00e9 identifi\u00e9e dans Firefox et Chrome.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/utechka-poiskovyh-klyuchej-cherez-dns-v-firefox-i-chrome","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0442\u0435\u0447\u043a\u0430 \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 \u0447\u0435\u0440\u0435\u0437 DNS \u0432 Firefox \u0438 Chrome | ProHoster","og:description":"\u0412 Firefox \u0438 Chrome \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043d\u0430\u0431\u0440\u0430\u043d\u043d\u044b\u0445 \u0432 \u0430\u0434\u0440\u0435\u0441\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0435 \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/utechka-poiskovyh-klyuchej-cherez-dns-v-firefox-i-chrome","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-18T11:43:02+00:00","article:modified_time":"2020-06-18T11:43:02+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"85705","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:32:46","updated":"2022-10-01 23:47:48","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/85705","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=85705"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/85705\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media\/85706"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=85705"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=85705"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=85705"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}