{"id":85705,"date":"2020-06-18T13:43:02","date_gmt":"2020-06-18T11:43:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/utechka-poiskovyh-klyuchej-cherez-dns-v-firefox-i-chrome"},"modified":"2020-06-18T13:43:02","modified_gmt":"2020-06-18T11:43:02","slug":"utechka-poiskovyh-klyuchej-cherez-dns-v-firefox-i-chrome","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/news\/utechka-poiskovyh-klyuchej-cherez-dns-v-firefox-i-chrome","title":{"rendered":"Vulnerabilit\u00e0 dei termini di ricerca tramite DNS in Firefox e Chrome","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

In Firefox e Chrome \u00e8 stata rilevata<\/a><\/noindex> \u00e8 una caratteristica del modo in cui vengono elaborati i termini di ricerca digitati nella barra degli indirizzi, che provoca<\/a><\/noindex> porta alla fuga di informazioni tramite il server DNS del provider. Il problema si presenta quando un termine di ricerca \u00e8 composto solo da una singola parola; in questo caso, il browser cerca prima di identificare tramite DNS un host con quel nome, pensando che l'utente stia tentando di aprire un sottodominio, per poi reindirizzare la richiesta al motore di ricerca. Di conseguenza, il titolare del server DNS specificato nelle impostazioni dell'utente riceve informazioni sulle ricerche composte da una sola parola, il che \u00e8 considerato una violazione della privacy.<\/p>\n

Il problema si verifica sia utilizzando i server DNS del provider che i servizi \"DNS over HTTPS\" (DoH), nel caso in cui venga impostato un suffisso DNS nelle impostazioni (impostato per default durante la ricezione delle impostazioni tramite DHCP). La principale difficolt\u00e0 \u00e8 che, anche con DoH attivato, le richieste continuano a essere inviate attraverso il server DNS del provider specificato nel sistema.
\n\u00c8 importante notare che il tentativo di risoluzione avviene solo per le query di ricerca composte da una sola parola. Se vengono fornite pi\u00f9 parole, non viene eseguita alcuna richiesta DNS. <\/p>\n

\"Vulnerabilit\u00e0<\/a><\/noindex><\/center><\/p>\n

Il problema \u00e8 stato confermato in Firefox e Chrome, e potrebbe interessare anche altri browser. Gli sviluppatori di Firefox hanno riconosciuto l'esistenza del problema e intendono<\/a><\/noindex> fornire una soluzione nell'uscita di Firefox 79. In particolare, per gestire il comportamento nella gestione delle query di ricerca in about:config aggiunta<\/a><\/noindex> impostazione<\/a><\/noindex> \"browser.urlbar.dnsResolveSingleWordsAfterSearch\", impostando il quale a \"0\" viene bloccata la risoluzione, \"1\" (di default) utilizza un'euristica per la risoluzione selettiva e \"2\" mantiene il comportamento precedente. L'euristica \u00e8<\/a><\/noindex> nel controllo dell'attivazione di DoH, presenza solo di una voce per 'localhost' in \/etc\/hosts e assenza di sottodomini per l'host corrente.<\/p>\n

Gli sviluppatori di Chrome hanno promesso<\/a><\/noindex> di limitare le perdite tramite DNS, ma messaggio<\/a><\/noindex> un problema simile rimane irrisolto dal 2015. In Tor Browser il problema non si presenta.<\/p>\n

<\/a><\/noindex><\/p>\n

Fonte: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 Firefox \u0438 Chrome \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043d\u0430\u0431\u0440\u0430\u043d\u043d\u044b\u0445 \u0432 \u0430\u0434\u0440\u0435\u0441\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0435 \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 DNS-\u0441\u0435\u0440\u0432\u0435\u0440 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430. \u0421\u0443\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0435\u0441\u043b\u0438 \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u0438\u0437 \u043e\u0434\u043d\u043e\u0433\u043e \u0441\u043b\u043e\u0432\u0430, \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u0432\u043d\u0430\u0447\u0430\u043b\u0435 \u043f\u044b\u0442\u0430\u0435\u0442\u0441\u044f \u0432 DNS \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0445\u043e\u0441\u0442\u0430 \u0441 \u0442\u0430\u043a\u0438\u043c \u0438\u043c\u0435\u043d\u0435\u043c, \u043f\u043e\u043b\u0430\u0433\u0430\u044f, \u0447\u0442\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043f\u044b\u0442\u0430\u0435\u0442\u0441\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u043f\u043e\u0434\u0434\u043e\u043c\u0435\u043d, \u0438 \u0443\u0436\u0435 \u043f\u043e\u0442\u043e\u043c \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":85706,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-85705","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Perdita di parole chiave di ricerca tramite DNS in Firefox e Chrome | ProHoster","description":"\u0412 Firefox \u0438 Chrome \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043d\u0430\u0431\u0440\u0430\u043d\u043d\u044b\u0445 \u0432 \u0430\u0434\u0440\u0435\u0441\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0435 \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/news\/utechka-poiskovyh-klyuchej-cherez-dns-v-firefox-i-chrome","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0442\u0435\u0447\u043a\u0430 \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 \u0447\u0435\u0440\u0435\u0437 DNS \u0432 Firefox \u0438 Chrome | ProHoster","og:description":"\u0412 Firefox \u0438 Chrome \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043d\u0430\u0431\u0440\u0430\u043d\u043d\u044b\u0445 \u0432 \u0430\u0434\u0440\u0435\u0441\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0435 \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.","og:url":"https:\/\/prohoster.info\/it\/blog\/news\/utechka-poiskovyh-klyuchej-cherez-dns-v-firefox-i-chrome","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-18T11:43:02+00:00","article:modified_time":"2020-06-18T11:43:02+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"85705","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:32:46","updated":"2022-10-01 23:47:48","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/85705","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=85705"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/85705\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media\/85706"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=85705"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=85705"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=85705"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}