uBlock Origin ya kara toshe rubutun don duba tashar jiragen ruwa

Tacewar da aka yi amfani da shi a cikin uBlock Origin Sauƙaƙe ƙarin ƙa'idodi don toshe rubutun binciken tashar tashar jiragen ruwa na cibiyar sadarwa akan tsarin gida na mai amfani. Bari mu tunatar da ku cewa a watan Mayu Ya bayyana duba tashoshin jiragen ruwa na gida lokacin buɗe eBay.com. Ya juya cewa wannan aikin ba'a iyakance ga eBay da yawa ba sauran shafuka (Citibank, TD Bank, Sky, GumTree, WePay, da dai sauransu) suna amfani da sikanin tashar jiragen ruwa na tsarin gida na mai amfani lokacin buɗe shafukansu, ta amfani da lambar don gano ƙoƙarin samun dama daga kwamfutocin da aka yi kutse da sabis na ThreatMetrix ke bayarwa.

Dangane da eBay, an duba tashoshin sadarwa guda 14 masu alaƙa da sabar shiga nesa kamar VNC, TeamViewer, Anyplace Control, Aeroadmin, Ammy Admin da RDP. Wataƙila ana ci gaba da dubawa domin kayyade kasancewar alamun lalacewar tsarin ta malware don hana sayayya na yaudara ta amfani da botnets. Hakanan ana iya amfani da bincike don samun bayanai don kaikaice mai amfani ganewa.

Dabarar da ake amfani da ita don dubawa ta dogara ne akan ƙoƙarin kafa haɗin kai zuwa tashoshin sadarwa daban-daban na rundunar 127.0.0.1 (localhost) ta hanyar. Yanar Gizo. An ƙayyade kasancewar tashar tashar hanyar sadarwa ta buɗe a kaikaice bisa bambance-bambancen sarrafa kuskure don haɗin kai zuwa tashoshin sadarwa masu aiki da marasa amfani. WebSocket yana ba ku damar aika buƙatun HTTP kawai, amma irin wannan buƙatar tashar hanyar sadarwa mara aiki ta kasa nan da nan, kuma don tashar tashar aiki kawai bayan an ɗauki ɗan lokaci kaɗan don yin shawarwari kan haɗin. Bugu da ƙari, a yanayin tashar tashar jiragen ruwa mara aiki, WebSocket yana ba da lambar kuskuren haɗi (ERR_CONNECTION_REFUSED), kuma a yanayin tashar tashar jiragen ruwa mai aiki, lambar kuskuren tattaunawar haɗin kai.

Baya ga sikanin tashar jiragen ruwa, WebSockets kuma na iya nema don hare-hare kan tsarin masu haɓaka gidan yanar gizon da ke gudanar da masu sarrafa WebSocket don aikace-aikacen React akan tsarin gida. Gidan yanar gizo na waje na iya bincika ta hanyar tashoshin sadarwa, tantance kasancewar irin wannan mai sarrafa, da haɗawa da shi. Idan mai haɓakawa ya yi kuskure, mai hari zai iya samun abubuwan da ke cikin bayanan da aka cire, wanda ƙila ya haɗa da mahimman bayanai.

source: budenet.ru