Tshaj tawm cov txheej txheem tshiab rau kev zais qhov system thiab kev txheeb xyuas qhov browser

Ib pawg ntawm cov kws tshawb fawb los ntawm Technical University of Graz (Austria), yav dhau los paub txog kev tsim kev tawm tsam MDS, NetSspectre и Throwhammer, uncovered Cov ntaub ntawv hais txog cov txheej txheem tshiab thib peb channel tsom xam uas tso cai rau koj los txiav txim siab qhov tseeb version ntawm qhov browser, kev ua haujlwm siv tau, CPU architecture thiab kev siv cov add-ons los tawm tsam cov cim zais.

Txhawm rau txiav txim siab cov kev txwv no, nws txaus los khiav JavaScript code npaj los ntawm cov kws tshawb fawb hauv browser. Hauv kev xyaum, txoj kev tuaj yeem siv tsis tau tsuas yog ua ib qho chaw ntxiv rau kev qhia tsis ncaj ntawm tus neeg siv, tab sis kuj txiav txim siab qhov tsis muaj qhov system ib puag ncig rau kev siv lub hom phiaj ntawm kev siv, suav nrog OS, architecture thiab browser. Cov txheej txheem kuj tseem siv tau thaum siv browsers uas siv cov cim zais zais thaiv cov txheej txheem, xws li Tor Browser. Qhov chaw code prototype nrog txoj kev siv luam tawm nyob rau hauv MIT daim ntawv tso cai.

Qhov kev txiav txim siab yog tsim los ntawm kev txheeb xyuas cov cuab yeej hauv xeev cov qauv hauv JavaScript uas yog cov yam ntxwv ntawm cov browser sib txawv thiab cov yam ntxwv ntawm lub sijhawm ua haujlwm ntawm kev ua haujlwm, nyob ntawm tus yam ntxwv ntawm JIT, CPU thiab lub cim xeeb faib cov txheej txheem. Kev txhais cov khoom yog ua los ntawm kev tsim cov npe ntawm txhua yam khoom siv tau los ntawm JavaScript. Raws li nws muab tawm, tus naj npawb ntawm cov khoom ncaj qha cuam tshuam nrog lub browser cav thiab nws cov version.

muaj nuj nqi getProperties(o) {
var result = [];
thaum (o !== null) {
result = result.concat(Reflect.ownKeys(o));
o = Object.getPrototypeOf(o);
}
rov qab los;
}

Piv txwv li, rau Firefox cov ntaub ntawv hais txog kev txhawb nqa rau 2247 cov khoom, thaum tus naj npawb ntawm cov cuab yeej tau hais tseg, suav nrog cov tsis muaj ntaub ntawv, yog 15709 (hauv Tor Browser - 15639), rau Chrome 2698 cov khoom tau tshaj tawm, tab sis qhov tseeb 13570 tau muab (hauv Chrome rau Android - 13119). Tus naj npawb thiab qhov tseem ceeb ntawm cov khoom sib txawv ntawm qhov browser version mus rau browser version thiab hla cov kev khiav hauj lwm sib txawv.

Cov txiaj ntsig thiab muaj qee yam khoom siv tuaj yeem siv los txiav txim siab hom OS. Piv txwv li, hauv Kubuntu cov cuab yeej window.innerWidth tau teeb tsa rau 1000, thiab hauv Windows 10 nws tau teeb tsa rau 1001. Cov cuab yeej window.navigator.activeVRDisplays muaj nyob rau ntawm Windows, tab sis nws tsis muaj nyob hauv Linux. Rau Android, muaj ntau qhov tshwj xeeb hu, tab sis qhov rai.SharedWorker tsis yog. Txhawm rau txheeb xyuas qhov kev khiav haujlwm, nws kuj tau thov kom siv kev tsom xam ntawm WebGL tsis, lub xeev uas nyob ntawm cov tsav tsheb. Tsis tas li ntawd, hu rau WEBGL_debug_renderer_infoextension tso cai rau koj kom tau txais cov ntaub ntawv hais txog OpenGL rendering engine, uas txawv rau txhua qhov kev khiav haujlwm.

Txhawm rau txiav txim siab CPU, kev ntsuam xyuas ntawm qhov sib txawv ntawm lub sijhawm ua tiav ntawm ntau yam kev cai thaiv yog siv, kev ua haujlwm ntawm cov txheej txheem ntawm kev qhia, suav nrog JIT tus cwj pwm (nws tau txiav txim siab yuav siv pes tsawg CPU sau npe. thiab nyob rau hauv cov ntaub ntawv twg JIT yuav tsim kom muaj txiaj ntsig code nrog optimizations thiab siv cov lus qhia txuas ntxiv, thiab thaum tsis yog). Txhawm rau txiav txim siab hom kev faib lub cim xeeb thiab kev ua haujlwm, qhov sib txawv ntawm lub cim xeeb faib lub sijhawm rau ntau yam qauv kuj raug ntsuas, uas tuaj yeem siv los txiav txim qhov loj ntawm cov cim xeeb.

Cov tsis tau txiav txim siab thaum lub sij hawm sau ntawv raug muab piv nrog cov nqi siv rau cov kev sim yav dhau los. Thaum lub sijhawm xeem, cov txheej txheem tsim tau ua kom paub tseeb txog 40 qhov sib txawv ntawm qhov chaw sim, txheeb xyuas cov qauv ntawm cov browsers siv, cov chaw tsim khoom CPU, cov txheej txheem siv, thiab qhov tseeb tias nws tau khiav ntawm cov khoom siv tiag tiag lossis hauv lub tshuab virtual. .

Cais, nws tau sau tseg tias nws muaj peev xwm los txhais cov browser add-ons thiab txawm tias tus neeg ntxiv-on chaw, suav nrog add-ons tsim los thaiv cov txheej txheem zais zais lossis kev ua haujlwm ntiag tug. Nyob rau hauv cov ntsiab lus ntawm txoj kev npaj, xws li ntxiv yog lwm qhov chaw ntawm cov ntaub ntawv rau kev txheeb xyuas. Ntxiv yog txiav txim los ntawm kev ntsuam xyuas qhov distortions ntawm qhov tsis muaj qhov qub ib puag ncig qhia los ntawm qhov ntxiv.

Lwm txoj hauv kev txheeb xyuas suav nrog suav rau hauv cov ntaub ntawv tsis ncaj qha xws li npo daws teeb meem, daim ntawv teev cov hom kev txhawb nqa MIME, cov kev txwv tshwj xeeb hauv headers (HTTP / 2 и HTTPS), tsom xam ntawm ntsia plugins thiab fonts, muaj qee qhov Web APIs, tshwj xeeb rau daim npav video nta rendering siv WebGL thiab Canvas, manipulation nrog CSS, tsom xam cov yam ntxwv ntawm kev ua haujlwm nrog mus и ntaus ntawv.

Tau qhov twg los: opennet.ru