{"id":92490,"date":"2020-08-27T19:42:37","date_gmt":"2020-08-27T17:42:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/30-iz-tysyachi-krupnejshih-sajtov-ispolzuyut-skripty-dlya-skrytoj-identifikaczii"},"modified":"2020-08-27T19:42:37","modified_gmt":"2020-08-27T17:42:37","slug":"30-iz-tysyachi-krupnejshih-sajtov-ispolzuyut-skripty-dlya-skrytoj-identifikaczii","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/30-iz-tysyachi-krupnejshih-sajtov-ispolzuyut-skripty-dlya-skrytoj-identifikaczii","title":{"rendered":"30% dos mil maiores sites usam scripts para identifica\u00e7\u00e3o oculta","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Um grupo de pesquisadores da Mozilla, da Universidade de Iowa e da Universidade da Calif\u00f3rnia publicou<\/a><\/noindex> conduziu um estudo sobre a aplica\u00e7\u00e3o de c\u00f3digo em sites para identifica\u00e7\u00e3o oculta de usu\u00e1rios. A identifica\u00e7\u00e3o oculta refere-se \u00e0 gera\u00e7\u00e3o de identificadores com base em dados indiretos sobre o funcionamento do navegador, como resolu\u00e7\u00e3o da tela<\/a><\/noindex>, lista de tipos MIME suportados, par\u00e2metros espec\u00edficos nos cabe\u00e7alhos (HTTP\/2<\/a><\/noindex> e HTTPS<\/a><\/noindex>), an\u00e1lise de plugins e fontes instalados , disponibilidade de determinadas APIs da web, espec\u00edficas para placas de v\u00eddeo<\/a><\/noindex>renderiza\u00e7\u00f5es usando WebGL e Caracter\u00edsticas<\/a><\/noindex> Canvas com CSS,<\/a><\/noindex>, manipula\u00e7\u00f5es<\/a><\/noindex> considerando os valores padr\u00e3o escaneamento<\/a><\/noindex>, de portas de rede, an\u00e1lise das caracter\u00edsticas de intera\u00e7\u00e3o com<\/a><\/noindex> o mouse teclado<\/a><\/noindex> e O estudo de 100 mil sites mais populares de acordo com o ranking Alexa mostrou que em 9040 deles (10,18%) \u00e9 aplicado c\u00f3digo para identifica\u00e7\u00e3o oculta de visitantes. Considerando os mil sites mais populares, esse tipo de c\u00f3digo foi identificado em 30,60% dos casos (266 sites), enquanto entre os sites classificados entre mil e dez mil, foi encontrado em 24,45% dos casos (2010 sites). A identifica\u00e7\u00e3o oculta \u00e9 geralmente aplicada em scripts fornecidos por servi\u00e7os externos para<\/a><\/noindex>.<\/p>\n

combater fraudes e filtrar bots, bem como em redes de an\u00fancios e sistemas de rastreamento de movimenta\u00e7\u00e3o de usu\u00e1rios.<\/a><\/noindex> Para identificar o c\u00f3digo respons\u00e1vel pela identifica\u00e7\u00e3o oculta, uma ferramenta chamada
\n

\"30%<\/a><\/noindex><\/center><\/p>\n

FP-Inspector , cujo c\u00f3digo<\/a><\/noindex>\u00e9 licenciado sob MIT. A ferramenta utiliza m\u00e9todos de aprendizado de m\u00e1quina em combina\u00e7\u00e3o com an\u00e1lise est\u00e1tica e din\u00e2mica de c\u00f3digo JavaScript. A aplica\u00e7\u00e3o de aprendizado de m\u00e1quina supostamente aumentou significativamente a precis\u00e3o na identifica\u00e7\u00e3o de c\u00f3digos para identifica\u00e7\u00e3o oculta e identificou 26% mais scripts problem\u00e1ticos foi oferecido<\/a><\/noindex> se comparado \u00e0 heur\u00edstica definida manualmente.
\nMuitos dos scripts de identifica\u00e7\u00e3o identificados estavam ausentes nas listas de bloqueio convencionais <\/p>\n

Disconnect Adsafe<\/a><\/noindex>, , DuckDuckGo,<\/a><\/noindex>Justuno EasyPrivacy<\/a><\/noindex> e Ap\u00f3s o envio<\/a><\/noindex>.
\nda notifica\u00e7\u00e3o pelos desenvolvedores da lista de bloqueio EasyPrivacy, foi<\/a><\/noindex> criada uma se\u00e7\u00e3o separada para scripts de identifica\u00e7\u00e3o oculta. Al\u00e9m disso, o FP-Inspector permitiu identificar algumas novas formas de usar APIs da web para identifica\u00e7\u00e3o, que antes n\u00e3o tinham sido observadas na pr\u00e1tica.<\/a><\/noindex> uma se\u00e7\u00e3o dedicada a scripts de identifica\u00e7\u00e3o oculta. Al\u00e9m disso, o FP-Inspector permitiu identificar algumas novas maneiras de usar a Web API para identifica\u00e7\u00e3o, que anteriormente n\u00e3o haviam sido encontradas na pr\u00e1tica.<\/p>\n

Por exemplo, foi descoberto o uso de informa\u00e7\u00f5es para identificar o layout do teclado (getLayoutMap), dados residuais em cache (com a ajuda da API Performance que analisa as lat\u00eancias na entrega de dados, permitindo determinar se o usu\u00e1rio acessou um determinado dom\u00ednio ou n\u00e3o, e se a p\u00e1gina foi aberta anteriormente), permiss\u00f5es configuradas no navegador (informa\u00e7\u00f5es de acesso ao Notification, Geolocation e Camera API), exist\u00eancia de dispositivos perif\u00e9ricos especializados e sensores raros (controladores de jogos, \u00f3culos de realidade virtual, sensores de proximidade). Al\u00e9m disso, foi registrado o uso na identifica\u00e7\u00e3o da presen\u00e7a de APIs especializadas para determinados navegadores e diferen\u00e7as de comportamento da API (AudioWorklet, setTimeout, mozRTCSessionDescription), assim como a utiliza\u00e7\u00e3o da API AudioContext para determinar as caracter\u00edsticas do sistema de som. <\/p>\n

No decorrer da pesquisa, tamb\u00e9m foi analisada a quest\u00e3o da viola\u00e7\u00e3o da funcionalidade padr\u00e3o dos sites ao aplicar m\u00e9todos de prote\u00e7\u00e3o contra identifica\u00e7\u00e3o oculta, que levam ao bloqueio de solicita\u00e7\u00f5es de rede ou restri\u00e7\u00e3o de acesso \u00e0 API. Foi mostrado que a limita\u00e7\u00e3o seletiva da API apenas para scripts identificados pelo FP-Inspector resulta em menos interrup\u00e7\u00f5es no funcionamento do que o uso de restri\u00e7\u00f5es gerais mais r\u00edgidas de chamadas de API no Brave e no Tor Browser, que podem levar a vazamentos de dados.<\/p>\n

\r\n \"Por\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Fonte: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 Mozilla, \u0410\u0439\u043e\u0432\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0438\u0442\u043e\u0433\u0438 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043d\u0430 \u0441\u0430\u0439\u0442\u0430\u0445 \u043a\u043e\u0434\u0430 \u0434\u043b\u044f \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u041f\u043e\u0434 \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u043d\u0438\u043c\u0430\u0435\u0442\u0441\u044f \u0433\u0435\u043d\u0435\u0440\u0430\u0446\u0438\u044f \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043a\u043e\u0441\u0432\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043e \u0440\u0430\u0431\u043e\u0442\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u044d\u043a\u0440\u0430\u043d\u0430, \u0441\u043f\u0438\u0441\u043e\u043a \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0445 MIME-\u0442\u0438\u043f\u043e\u0432, \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u043d\u044b\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430\u0445 (HTTP\/2 \u0438 HTTPS), \u0430\u043d\u0430\u043b\u0438\u0437 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0438 \u0448\u0440\u0438\u0444\u0442\u043e\u0432, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u044b\u0445 Web […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":92491,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-92490","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4730% dos mil maiores sites utilizam scripts para identifica\u00e7\u00e3o oculta | ProHoster","description":"Um grupo de pesquisadores da Mozilla, da Universidade de Iowa e da Universidade da Calif\u00f3rnia publicou os resultados do estudo.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/30-iz-tysyachi-krupnejshih-sajtov-ispolzuyut-skripty-dlya-skrytoj-identifikaczii","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4730% \u0438\u0437 \u0442\u044b\u0441\u044f\u0447\u0438 \u043a\u0440\u0443\u043f\u043d\u0435\u0439\u0448\u0438\u0445 \u0441\u0430\u0439\u0442\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0441\u043a\u0440\u0438\u043f\u0442\u044b \u0434\u043b\u044f \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 Mozilla, \u0410\u0439\u043e\u0432\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0438\u0442\u043e\u0433\u0438 \u0438\u0437\u0443\u0447\u0435\u043d\u0438\u044f.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/30-iz-tysyachi-krupnejshih-sajtov-ispolzuyut-skripty-dlya-skrytoj-identifikaczii","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-27T17:42:37+00:00","article:modified_time":"2020-08-27T17:42:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"92490","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:07:40","updated":"2022-09-27 21:36:39","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/92490","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=92490"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/92490\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media\/92491"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=92490"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=92490"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=92490"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}