Istra\u017eiva\u010di sigurnosti iz tvrtke Secure Annex primijetili su porast popularnosti nove metode monetizacije dodataka za preglednike, u kojoj se korisnici dodataka pretvaraju u distribuiranu mre\u017eu koja se koristi za scraping (indeksiranje sadr\u017eaja web stranica). Sustavi korisnika koriste se kao web-botovi i proxy za preuzimanje sadr\u017eaja web stranica \u2014 instalirani dodatak za preglednik prima s vanjskog poslu\u017eitelja upute za indeksiranje web stranica, nakon \u010dega u odvojenom skrivenom iframeu pokre\u0107e preuzimanje zatra\u017eenog sadr\u017eaja i proslje\u0111uje dobivene podatke vanjskoj usluzi. U katalogu Chrome, Firefox i Edge primjena ovog sustava monetizacije otkrivena je u 245 dodataka, koji ukupno broje 909 tisu\u0107a instalacija. <\/p>\n
Rad se organizira putem uklju\u010divanja u kod pregledni\u010dkih ekstenzija otvorene JavaScript biblioteke mellowtel.js, koja se isporu\u010duje pod LGPLv3 licencom. Biblioteku razvija projekt Mellowtel, koji promovira novu platformu za monetizaciju koja se, osim za pregledni\u010dke ekstenzije, mo\u017ee koristiti i u aplikacijama temeljenim na Flutter i Electron frameworku. Osnovna ideja platforme je da programeri pregledni\u010dkih ekstenzija i aplikacija mogu zara\u0111ivati novac ne putem prikazivanja oglasa ili sumnjivih metoda, poput prodaje podataka koji naru\u0161avaju privatnost korisnika, nego putem obavljanja zadataka za indeksiranje web sadr\u017eaja za obuku AI sustava. <\/p>\n
Potra\u017enja AI tvrtki za podacima za obuku modela dovela je do pojave brojnih botova koji indeksiraju web stranice bez razumnog ograni\u010denja intenziteta slanja zahtjeva i ignoriraju pravila indeksiranja robots.txt. Kako ti botovi stvaraju ogromno parazitsko optere\u0107enje na servere<\/a>, ometaju normalno funkcioniranje sustava i oduzimaju vrijeme administratorima, u posljednje vrijeme se aktivno blokiraju (na primjer, mre\u017ea za isporuku sadr\u017eaja Cloudflare implementirala je opciju za automatsko blokiranje takvih botova). <\/p>\n AI tvrtke su spremne pla\u0107ati za indeksiranje, a platforma Mellowtel nudi mogu\u0107nost zadovoljenja ove potrebe uklju\u010divanjem obi\u010dnih korisnika u proces prikupljanja podataka s web stranica. Platforma ispla\u0107uje vlasnicima dodataka 55% sredstava zara\u017eenih od suradnje s AI tvrtkama. Projekt je potpuno legitiman i insistira da sudjelovanje u struganju podataka mora biti dobrovoljno i aktivirati se samo nakon izri\u010ditog pristanka korisnika. Korisnik mo\u017ee, kao znak zahvalnosti programerima dodatka, uklju\u010diti na\u010din struganja i pru\u017eiti im neizravnu financijsku podr\u0161ku. <\/p>\n Problem je \u0161to nisu svi programeri dodataka spremni raditi po\u0161teno i otvoreno. U nekim dodacima poku\u0161ava se prikriveno uklju\u010diti monetizacija Mellowtel bez znanja korisnika, \u0161to dovodi do situacije u kojoj korisnik bez izri\u010ditog pristanka postaje sudionik distribuirane mre\u017ee za preuzimanje podataka s web stranica. Od 45 dodataka za Chrome koji koriste Mellowtel, 12 ih je ve\u0107 blokirao Google zbog zlonamjerne aktivnosti. U katalogu Microsofta od 129 dodataka, 8 ih je blokirano, dok su u katalogu Mozille od 71 dodatka, 2 zablokirana. Razlozi za uklanjanje nisu detaljno obja\u0161njeni, no ne isklju\u010duje se mogu\u0107nost da je razlog neispravno kori\u0161tenje Mellowtel. <\/p>\n Developer Mellowtel je izjavio da kako bi rije\u0161io problem s mogu\u0107im skrivenim uklju\u010divanjem struganja podataka, servis prelazi na obveznu provjeru svih dodataka koji koriste Mellowtel, kako bi osigurao da se struganje podataka po defaultu isklju\u010duje (aktivacija samo nakon izri\u010ditog pristanka korisnika) i postojanje vidljivog gumba za isklju\u010divanje. Zahtjevi za dobivanje zadataka od dodataka koji nisu pro\u0161li provjeru bit \u0107e stavljeni u karantenu i ignorirani. <\/p>\n Tijekom rada dodatka, koji koristi Mellowtel biblioteku, uspostavlja se websocket veza s vanjskim poslu\u017eiteljem smje\u0161tenim u AWS oblaku, preko kojeg se prenose informacije o dostupnosti korisnika, zemlji, propusnosti komunikacijskog kanala i aktivaciji podr\u0161ke za prikupljanje podataka od strane korisnika. Povremeno se putem veze \u0161alju heartbeat zahtjevi za provjeru dostupnosti klijenta. Kada se pojave zadaci za preuzimanje sadr\u017eaja, u stranice koje korisnik pregledava umetne se skriveni iframe iz kojeg se vr\u0161i prikupljanje podataka. <\/p>\n Za preuzimanje vanjskih stranica iz iframe-a, koji se ume\u0107e prilikom pregledavanja drugih web stranica, biblioteka privremeno zaobilazi za\u0161titu od u\u010ditavanja vanjskog sadr\u017eaja koja se pru\u017ea u pregledniku, uklanjaju\u0107i HTTP zaglavlja Content-Security-Policy i X-Frame-Options, a vra\u0107aju\u0107i ih nakon \u0161to je potrebna stranica u\u010ditana. Uklanjanje se provodi putem modifikacije mre\u017enih zahtjeva uz pomo\u0107 API-ja declarativeNetRequest (za pristup ovom API-ju, dodatak tra\u017ei posebnu dozvolu). Privremeno isklju\u010divanje zaglavlja Content-Security-Policy i X-Frame-Options negativno utje\u010de na sigurnost, jer na trenutak uklanja uobi\u010dajenu za\u0161titu od napada koriste\u0107i me\u0111uspletno skriptiranje (XSS). <\/p>\n Mellowtel platforma je povezana s kompanijom Olostep, koja nudi API za prikupljanje podataka sposoban za zaobila\u017eenje za\u0161tite od botova i istovremeno izvr\u0161avanje do 100 tisu\u0107a zahtjeva u minuti. Sli\u010dnu aktivnost usluge, primijenjenu u kontekstu jedne web stranice, mo\u017ee se usporediti s provo\u0111enjem distribuiranog DoS napada. Usluga tako\u0111er potencijalno mo\u017ee koristiti korisnike kao proxy za izvla\u010denje sadr\u017eaja iz privatnih web stranica koje su dostupne samo u podmre\u017eama, do kojih korisnik ima pristup putem. VPN<\/a>. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Secure Annex \u043e\u0431\u0440\u0430\u0442\u0438\u043b\u0438 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u0440\u043e\u0441\u0442 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u0438 \u043d\u043e\u0432\u043e\u0433\u043e \u043c\u0435\u0442\u043e\u0434\u0430 \u043c\u043e\u043d\u0435\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u044b\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439, \u043f\u0440\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0438\u0437 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439 \u0444\u043e\u0440\u043c\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u0430\u044f \u0441\u0435\u0442\u044c, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u0430\u044f \u0434\u043b\u044f \u0441\u043a\u0440\u0430\u043f\u0438\u043d\u0433\u0430 (\u0438\u043d\u0434\u0435\u043a\u0441\u0430\u0446\u0438\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u0441\u0430\u0439\u0442\u043e\u0432). \u0421\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 web-\u0431\u043e\u0442\u043e\u0432 \u0438 \u043f\u0440\u043e\u043a\u0441\u0438 \u0434\u043b\u044f \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u043d\u0438\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u0441\u0430\u0439\u0442\u043e\u0432 — \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u043e\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0441 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u043f\u043e \u0438\u043d\u0434\u0435\u043a\u0441\u0430\u0446\u0438\u0438 \u0441\u0430\u0439\u0442\u043e\u0432, \u043f\u043e\u0441\u043b\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-138909","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Browser dodaci uklju\u010duju korisnike u izgradnju distribuirane mre\u017ee prikupljanja podataka za AI botove | ProHoster","description":"Istra\u017eiva\u010di sigurnosti iz kompanije Secure Annex primijetili su porast popularnosti nove metode monetizacije browser dodataka, pri \u010demu se od korisnika dodataka formira distribuirana mre\u017ea.","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/news\/brauzernye-dopolneniya-vovlekayut-v-postroenie-raspredelyonnoj-seti-skrapinga-dlya-ai-botov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0411\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u044b\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u043e\u0432\u043b\u0435\u043a\u0430\u044e\u0442 \u0432 \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u0438\u0435 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0441\u043a\u0440\u0430\u043f\u0438\u043d\u0433\u0430 \u0434\u043b\u044f AI-\u0431\u043e\u0442\u043e\u0432 | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Secure Annex \u043e\u0431\u0440\u0430\u0442\u0438\u043b\u0438 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u0440\u043e\u0441\u0442 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u0438 \u043d\u043e\u0432\u043e\u0433\u043e \u043c\u0435\u0442\u043e\u0434\u0430 \u043c\u043e\u043d\u0435\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u044b\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439, \u043f\u0440\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0438\u0437 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439 \u0444\u043e\u0440\u043c\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u0430\u044f \u0441\u0435\u0442\u044c.","og:url":"https:\/\/prohoster.info\/hr\/blog\/news\/brauzernye-dopolneniya-vovlekayut-v-postroenie-raspredelyonnoj-seti-skrapinga-dlya-ai-botov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-07-11T15:11:55+00:00","article:modified_time":"2025-07-11T15:11:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"138909","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:49:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 13:47:22","updated":"2026-02-09 17:49:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/138909","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=138909"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/138909\/revisions"}],"predecessor-version":[{"id":159225,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/138909\/revisions\/159225"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=138909"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=138909"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=138909"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Izvor: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"