{"id":84555,"date":"2020-06-09T01:41:56","date_gmt":"2020-06-08T23:41:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-ublock-origin-dobavlena-blokirovka-skriptov-dlya-skanirovaniya-setevyh-portov"},"modified":"2020-06-09T01:41:56","modified_gmt":"2020-06-08T23:41:56","slug":"v-ublock-origin-dobavlena-blokirovka-skriptov-dlya-skanirovaniya-setevyh-portov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/news\/v-ublock-origin-dobavlena-blokirovka-skriptov-dlya-skanirovaniya-setevyh-portov","title":{"rendered":"W uBlock Origin dodano blokowanie skrypt\u00f3w do skanowania port\u00f3w sieciowych","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

W stosowanym w uBlock Origin filtrze EasyPrivacy<\/a><\/noindex> dodano zasady blokowania typowych skrypt\u00f3w skanowania port\u00f3w sieciowych na lokalnym systemie u\u017cytkownika. Przypomnijmy, \u017ce w maju zidentyfikowano<\/a><\/noindex> skanowanie lokalnych port\u00f3w podczas otwierania strony eBay.com. Okaza\u0142o si\u0119, \u017ce taka praktyka nie ogranicza si\u0119 do eBay i wiele innych stron<\/a><\/noindex> (Citibank, TD Bank, Sky, GumTree, WePay itp.) stosuje skanowanie port\u00f3w lokalnego systemu u\u017cytkownika przy otwieraniu swoich stron, wykorzystuj\u0105c kod do wykrywania pr\u00f3b po\u0142\u0105cze\u0144 z zainfekowanych komputer\u00f3w, dostarczany przez serwis ThreatMetrix.<\/p>\n

W przypadku eBay sprawdzano 14 port\u00f3w sieciowych zwi\u0105zanych z serwerami zdalnego dost\u0119pu, takimi jak VNC, TeamViewer, Anyplace Control, Aeroadmin, Ammy Admin i RDP. Najprawdopodobniej sprawdzenie ma na celu okre\u015blenie<\/a><\/noindex> obecno\u015bci \u015blad\u00f3w zainfekowania systemu z\u0142o\u015bliwym oprogramowaniem w celu zapobie\u017cenia oszuka\u0144czym zakupom z wykorzystaniem botnet\u00f3w. Skanowanie mo\u017ce by\u0107 tak\u017ce stosowane do uzyskania danych do po\u015bredniej identyfikacji u\u017cytkownika.<\/a><\/noindex>.<\/p>\n

Podczas skanowania stosuje si\u0119 technik\u0119 polegaj\u0105c\u0105 na pr\u00f3bie nawi\u0105zywania po\u0142\u0105cze\u0144 z r\u00f3\u017cnymi portami sieciowymi hosta 127.0.0.1 (localhost) za po\u015brednictwem WebSocket.<\/a><\/noindex>. Fakt istnienia otwartego portu sieciowego jest okre\u015blany po\u015brednio na podstawie r\u00f3\u017cnicy w obs\u0142udze b\u0142\u0119d\u00f3w po\u0142\u0105czenia z aktywnymi i nieu\u017cywanymi portami sieciowymi. WebSocket pozwala na wysy\u0142anie tylko \u017c\u0105da\u0144 HTTP, ale tego rodzaju \u017c\u0105danie dla nieaktywnego portu sieciowego ko\u0144czy si\u0119 b\u0142\u0119dem od razu, natomiast dla aktywnego portu zajmuje to jedynie chwil\u0119, zwi\u0105zan\u0105 z pr\u00f3b\u0105 nawi\u0105zania po\u0142\u0105czenia. Ponadto, w przypadku nieaktywnego portu WebSocket zwraca kod b\u0142\u0119du po\u0142\u0105czenia (ERR_CONNECTION_REFUSED), a w przypadku aktywnego \u2014 kod b\u0142\u0119du negocjacji po\u0142\u0105czenia. <\/p>\n

\"W<\/a><\/noindex><\/center><\/p>\n

Opr\u00f3cz skanowania port\u00f3w WebSocket mo\u017ce by\u0107 stosowane<\/a><\/noindex> do atak\u00f3w na systemy web deweloper\u00f3w, uruchamiaj\u0105cych w lokalnym systemie obs\u0142ugiwacze WebSocket dla aplikacji React. Zewn\u0119trzna strona mo\u017ce przebada\u0107 porty sieciowe, okre\u015bli\u0107 obecno\u015b\u0107 takiego obs\u0142ugiwacza i po\u0142\u0105czy\u0107 si\u0119 z nim. Je\u015bli deweloper pope\u0142ni b\u0142\u0105d, atakuj\u0105cy mo\u017ce uzyska\u0107 dost\u0119p do zawarto\u015bci danych diagnostycznych, kt\u00f3re mog\u0105 zawiera\u0107 fragmenty poufnych informacji.<\/p>\n

\"W<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

\u0179r\u00f3d\u0142o: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0439 \u0432 uBlock Origin \u0444\u0438\u043b\u044c\u0442\u0440 EasyPrivacy \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u044b \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0442\u0438\u043f\u043e\u0432\u044b\u0445 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u043e\u0440\u0442\u043e\u0432 \u043d\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u0447\u0442\u043e \u0432 \u043c\u0430\u0435 \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0440\u0442\u043e\u0432 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0441\u0430\u0439\u0442\u0430 eBay.com. \u0412\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u043f\u043e\u0434\u043e\u0431\u043d\u0430\u044f \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430 \u043d\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f eBay \u0438 \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0430\u0439\u0442\u044b (Citibank, TD Bank, Sky, GumTree, WePay \u0438 \u0442.\u043f.) \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0440\u0442\u043e\u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":84556,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-84555","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47W uBlock Origin dodano blokowanie skrypt\u00f3w do skanowania port\u00f3w sieciowych | ProHoster","description":"Do u\u017cywanego w uBlock Origin filtra EasyPrivacy dodano zasady blokuj\u0105ce typowe skrypty.","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/news\/v-ublock-origin-dobavlena-blokirovka-skriptov-dlya-skanirovaniya-setevyh-portov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 uBlock Origin \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0430 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 \u0434\u043b\u044f \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u043e\u0440\u0442\u043e\u0432 | ProHoster","og:description":"\u0412 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0439 \u0432 uBlock Origin \u0444\u0438\u043b\u044c\u0442\u0440 EasyPrivacy \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u044b \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0442\u0438\u043f\u043e\u0432\u044b\u0445 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432.","og:url":"https:\/\/prohoster.info\/pl\/blog\/news\/v-ublock-origin-dobavlena-blokirovka-skriptov-dlya-skanirovaniya-setevyh-portov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-08T23:41:56+00:00","article:modified_time":"2020-06-08T23:41:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"84555","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:55:41","updated":"2022-09-28 02:39:05","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/84555","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=84555"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/84555\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media\/84556"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=84555"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=84555"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=84555"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}