{"id":56195,"date":"2020-02-07T00:00:00","date_gmt":"2020-02-06T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/zagolovok-x-client-data-kak-metod-identifikatsii-polzovatelej-chrome"},"modified":"2020-02-18T14:04:25","modified_gmt":"2020-02-18T11:04:25","slug":"zagolovok-x-client-data-kak-metod-identifikatsii-polzovatelej-chrome","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/news\/zagolovok-x-client-data-kak-metod-identifikatsii-polzovatelej-chrome","title":{"rendered":"X-Client-Data zaglavlje kao metoda identifikacije korisnika Chrome-a","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Tijekom rasprave inicijative<\/a><\/noindex> Google o unifikaciji sadr\u017eaja HTTP zaglavlja User-Agent, razvojni in\u017eenjer preglednika Kiwi obratio pa\u017enju<\/a><\/noindex> na preostali HTTP zaglavlje u Chromeu \"X-Client-Data\", koje potencijalno kr\u0161i<\/a><\/noindex> va\u017ee\u0107i u Europskoj uniji op\u0107i uredba o za\u0161titi podataka (GDPR<\/a><\/noindex>). Tijekom diskusije<\/a><\/noindex> tako\u0111er je bila podlo\u017ena kritikama dvosmislenost djelovanja tvrtke Google, koja s jedne strane promovira<\/a><\/noindex> metode<\/a><\/noindex> blokiranje skrivenog identificiranja i pra\u0107enja aktivnosti korisnika, ali s druge strane ne \u017euri ukloniti iz Chrome podr\u0161ku za zaglavlje X-Client-Data, koje se mo\u017ee koristiti za identifikaciju instanci preglednika prilikom pristupa Googleovim uslugama.<\/p>\n

Zaglavlje X-Client-Data nije skrivena funkcionalnost i njegovo pona\u0161anje je opisano<\/a><\/noindex> u dokumentaciji. Kroz X-Client-Data, Google prikuplja podatke o aktivnosti odre\u0111enih eksperimentalnih mogu\u0107nosti u Chromeu vezano uz svoje web stranice (na primjer, tijekom eksperimenta Google mo\u017ee aktivirati odre\u0111ene testne mogu\u0107nosti na YouTubeu ako ih preglednik podr\u017eava ili poku\u0161ati povezati nastale probleme s aktiviranjem eksperimentalnih funkcija). <\/p>\n

Zaglavlje se postavlja<\/a><\/noindex> samo za zahtjeve prema Googleovim stranicama koji odgovaraju obrascima \"*.doubleclick.net\", \"*.googlesyndication.com\", \"www.googleadservices.com\", \"*.google.<TLD<\/a><\/noindex>>\", i \"*.youtube.\", te se \u0161alju putem HTTPS-a. U na\u010dinu inkognito zaglavlje se ne ispunjava, ali u slu\u010daju promjene autentificiranog korisni\u010dkog profila na gostuju\u0107i profil ili prilikom pozivanja operacije \u010di\u0161\u0107enja podataka, zaglavlje se ne resetira i nastavlja se slati s prethodnom vrijedno\u0161\u0107u.<\/p>\n

\"X-Client-Data<\/a><\/noindex><\/center><\/p>\n

Izjavljeno je da zaglavlje ne sadr\u017ei osobno identificiraju\u0107e informacije, ve\u0107 samo opisuje stanje instalacije Chromea i aktivne eksperimentalne mogu\u0107nosti. Ako su u postavkama isklju\u010dene telemetrije o kori\u0161tenju preglednika i generiranje izvje\u0161taja o kvarovima, prilikom generiranja osnovne vrijednosti zaglavlja X-Client-Data koristi se samo 13 bita entropije (8000 razli\u010ditih kombinacija), \u0161to nije dovoljno za identifikaciju. <\/p>\n

S obzirom na to da se u zaglavlju tako\u0111er kodiraju neka pode\u0161avanja i parametri sustava, sadr\u017eaj X-Client-Data mo\u017ee poslu\u017eiti kao dodatni izvor podataka za neizravnu identifikaciju korisnika u kratkom vremenskom razdoblju (eksperimentalne mogu\u0107nosti s vremenom se uklju\u010duju i isklju\u010duju, \u0161to dovodi do povremene promjene vrijednosti u X-Client-Data). <\/p>\n

Ipak, osim po\u010detne entropije pri formiranju vrijednosti X-Client-Data, tako\u0111er se koristi seed-sekvencija koju vra\u0107aju Google poslu\u017eitelji i koja ovisi o zemlji, IP adresi i drugim kriterijima za koje Google smatra da su va\u017eni (na primjer, ni\u0161ta ne sprje\u010dava vra\u0107anje velike slu\u010dajne sekvence koja \u0107e postati to\u010dan identifikator).
\nOsim toga, provjera prema obrascima domena Google prilikom slanja X-Client-Data ne isklju\u010duje situacije u kojima zlonamjernik mo\u017ee registrirati domenu poput \"youtube.xn--55qx5d\" i po\u010deti prikupljati identifikatore.<\/p>\n

<\/a><\/noindex><\/p>\n

Izvor: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u0438 \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u0438 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u044b Google \u043f\u043e \u0443\u043d\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 User-Agent, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Kiwi \u043e\u0431\u0440\u0430\u0442\u0438\u043b \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043e\u0441\u0442\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0432 Chrome HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a «X-Client-Data», \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043d\u0430\u0440\u0443\u0448\u0430\u0435\u0442 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0439 \u0432 \u0415\u0432\u0440\u043e\u0441\u043e\u044e\u0437\u0435 \u043e\u0431\u0449\u0438\u0439 \u0440\u0435\u0433\u043b\u0430\u043c\u0435\u043d\u0442 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 (GDPR). \u0412 \u0445\u043e\u0434\u0435 \u0434\u0438\u0441\u043a\u0443\u0441\u0441\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0430\u0441\u044c \u043a\u0440\u0438\u0442\u0438\u043a\u0435 \u0434\u0432\u043e\u0439\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441 \u043e\u0434\u043d\u043e\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u043f\u0440\u043e\u0434\u0432\u0438\u0433\u0430\u0435\u0442 \u043c\u0435\u0442\u043e\u0434\u044b \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":56196,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-56195","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zaglavlje X-Client-Data kao metoda identifikacije korisnika Chrome | ProHoster","description":"Kada je rije\u010d o inicijativi Googlea za unifikaciju sadr\u017eaja HTTP zaglavlja User-Agent, programer preglednika Kiwi.","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/news\/zagolovok-x-client-data-kak-metod-identifikatsii-polzovatelej-chrome","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0417\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a X-Client-Data \u043a\u0430\u043a \u043c\u0435\u0442\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Chrome | ProHoster","og:description":"\u041f\u0440\u0438 \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u0438 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u044b Google \u043f\u043e \u0443\u043d\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 User-Agent, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Kiwi.","og:url":"https:\/\/prohoster.info\/hr\/blog\/news\/zagolovok-x-client-data-kak-metod-identifikatsii-polzovatelej-chrome","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-06T21:00:00+00:00","article:modified_time":"2020-02-18T11:04:25+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"56195","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:29:18","updated":"2022-10-10 00:15:42","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/56195","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=56195"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/56195\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media\/56196"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=56195"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=56195"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=56195"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}