Ua hoʻohui ʻo uBlock Origin i ka pale ʻana i ka palapala no ka nānā ʻana i nā awa pūnaewele

ʻO ka kānana i hoʻohana ʻia ma uBlock Origin Maʻalahi ua hoʻohui ʻia nā lula no ka pale ʻana i nā palapala hōʻoia ma ka ʻōnaehana kūloko o ka mea hoʻohana. E hoʻomanaʻo mākou iā ʻoe ma Mei Ua hōʻike ke nānā nei i nā awa kūloko i ka wā e wehe ai i ka eBay.com. Uaʻikeʻiaʻaʻole i kaupalenaʻia kēia hana i eBay a me nā mea he nui nā pūnaewele ʻē aʻe (Citibank, TD Bank, Sky, GumTree, WePay, etc.) e hoʻohana i ka nānā ʻana i ke awa o ka ʻōnaehana kūloko o ka mea hoʻohana i ka wā e wehe ai i kā lākou ʻaoʻao, me ka hoʻohana ʻana i ke code e ʻike i nā hoʻāʻo ʻana mai nā kamepiula hacked i hāʻawi ʻia e ka lawelawe ThreatMetrix.

Ma ka hihia o eBay, ua nānā ʻia nā awa pūnaewele 14 e pili ana i nā kikowaena kikowaena mamao e like me VNC, TeamViewer, Anyplace Control, Aeroadmin, Ammy Admin a me RDP. Ke nānā nei paha no ka hooholo ana ka loaʻa ʻana o nā hōʻailona o ka pōʻino o ka ʻōnaehana e ka malware i mea e pale ai i nā kūʻai hoʻopunipuni me ka hoʻohana ʻana i nā botnets. Hiki ke ho'ohana 'ia ka 'imi 'ana no ka loa'a 'ana o ka 'ikepili no ka 'ole ʻike mea hoʻohana.

Hoʻokumu ʻia kahi ʻenehana i hoʻohana ʻia no ka nānā ʻana ma ka hoʻāʻo ʻana e hoʻokumu i nā pilina i nā awa pūnaewele like ʻole o ka host 127.0.0.1 (localhost) ma o Pūnaewele Pūnaewele. Hoʻoholo ʻole ʻia ka loaʻa ʻana o kahi awa pūnaewele wehe ʻia ma muli o ka ʻokoʻa o ka lawelawe hewa ʻana no nā pili i nā awa pūnaewele ikaika a hoʻohana ʻole ʻia. ʻAe ʻo WebSocket iā ʻoe e hoʻouna i nā noi HTTP wale nō, akā ua hāʻule koke kēlā noi no kahi awa pūnaewele ʻole, a no ke awa ikaika wale nō ma hope o ka manawa e hoʻāʻo ai e kūkākūkā i ka pilina. Eia kekahi, i ka hihia o kahi awa hana ʻole, hoʻopuka ʻo WebSocket i kahi code hewa pili (ERR_CONNECTION_REFUSED), a ma ke ʻano o kahi awa hana, kahi code kuhi hewa pili.

Ma kahi o ka nānā ʻana i ke awa, hiki i nā WebSockets pili no ka hoʻouka ʻana i nā ʻōnaehana o nā mea hoʻomohala pūnaewele e holo ana i nā mea lawelawe WebSocket no nā noi React ma ka ʻōnaehana kūloko. Hiki i kahi pūnaewele waho ke ʻimi ma nā awa pūnaewele, e hoʻoholo i ka hele ʻana o ia mea lawelawe, a hoʻopili iā ia. Inā hana hewa ka mea hoʻomohala, hiki i ka mea hoʻouka ke loaʻa nā ʻike o ka ʻikepili debug, hiki ke hoʻokomo i ka ʻike koʻikoʻi.

Source: opennet.ru