{"id":100172,"date":"2021-05-15T22:22:39","date_gmt":"2021-05-15T20:22:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/identifikacziya-cherez-analiz-vneshnih-obrabotchikov-protokolov-v-brauzere"},"modified":"2021-05-15T22:22:39","modified_gmt":"2021-05-15T20:22:39","slug":"identifikacziya-cherez-analiz-vneshnih-obrabotchikov-protokolov-v-brauzere","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/identifikacziya-cherez-analiz-vneshnih-obrabotchikov-protokolov-v-brauzere","title":{"rendered":"Identificarea prin analiza handler-elor externe ale protocolului \u00een browser","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Dezvoltatorii bibliotecii fingerprintjs, care permite generarea de identificatori de browser \u00een mod pasiv pe baza unor semne indirecte, cum ar fi rezolu\u021bia ecranului, caracteristicile WebGL, listele pluginurilor \u0219i fonturilor instalate, au prezentat o nou\u0103 metod\u0103 de identificare, bazat\u0103 pe evaluarea aplica\u021biilor standard instalate la utilizator \u0219i func\u021bioneaz\u0103 prin verificarea suportului \u00een browser pentru procese suplimentare de protocol. Codul scriptului cu implementarea metodei a fost publicat sub licen\u021ba MIT. <\/p>\n

Verificarea se realizeaz\u0103 pe baza analizei leg\u0103rii proceselor la 32 de aplica\u021bii populare. De exemplu, determin\u00e2nd existen\u021ba \u00een browser a proceselor pentru schemele URL telegram:\/\/, slack:\/\/ \u0219i skype:\/\/, se poate concluziona despre prezen\u021ba aplica\u021biilor telegram, slack \u0219i skype \u00een sistem, utiliz\u00e2nd aceste informa\u021bii ca semn \u00een generarea identificatorului sistemului. Deoarece lista proceselor este identic\u0103 pentru toate browserele din sistem, identificatorul nu se schimb\u0103 atunci c\u00e2nd se schimb\u0103 browserul \u0219i poate fi folosit \u00een Chrome, Firefox, Safari, Brave, Yandex Browser, Edge \u0219i chiar \u00een Tor Browser. <\/p>\n

Metoda permite generarea de identificatori de 32 de bi\u021bi, adic\u0103, separat, nu ofer\u0103 o mare precizie, dar are sens ca un atribut suplimentar \u00een combina\u021bie cu alte parametri. Un dezavantaj semnificativ al metodei este vizibilitatea \u00eencerc\u0103rii de identificare pentru utilizator \u2014 la generarea identificatorului pe pagina demo propus\u0103, \u00een col\u021bul din dreapta jos apare o fereastr\u0103 mic\u0103, dar vizibil\u0103, \u00een care handlerii sunt selecta\u021bi o perioad\u0103 \u00eendelungat\u0103. Acest dezavantaj nu se manifest\u0103 \u00een Tor Browser, unde identificatorul poate fi calculat f\u0103r\u0103 a fi observat. <\/p>\n

Pentru a determina existen\u021ba aplica\u021biei, scriptul \u00eencearc\u0103 s\u0103 deschid\u0103 \u00eentr-o fereastr\u0103 pop-up un link asociat unui proces extern, dup\u0103 care browserul afi\u0219eaz\u0103 un dialog cu propunerea de a deschide con\u021binutul \u00een aplica\u021bia asociat\u0103, dac\u0103 aplica\u021bia verificat\u0103 este prezent\u0103, sau afi\u0219eaz\u0103 o pagin\u0103 de eroare, dac\u0103 aplica\u021bia nu este \u00een sistem. Prin iterarea secven\u021bial\u0103 a proceselor externe standard \u0219i analiza erorilor de returnare, se poate concluziona despre existen\u021ba programelor verificate \u00een sistem. <\/p>\n

\u00cen Chrome 90 pentru Linux, metoda nu a func\u021bionat \u0219i browserul a afi\u0219at un dialog standard de confirmare a opera\u021biunii la toate \u00eencerc\u0103rile de a verifica handler-ul (\u00een Chrome pentru Windows \u0219i macOS, metoda func\u021bioneaz\u0103). \u00cen Firefox 88 pentru Linux, at\u00e2t \u00een modul normal, c\u00e2t \u0219i \u00een modul incognito, scriptul a identificat prezen\u021ba aplica\u021biilor suplimentare instalate din list\u0103, iar acurate\u021bea identific\u0103rii a fost evaluat\u0103 la 99.87% (35 de corela\u021bii similare din 26 de mii de teste efectuate). \u00cen Tor Browser, lansat pe aceea\u0219i sistem, a fost generat un identificator care coincide cu testul din Firefox. <\/p>\n

Interesant este c\u0103 protec\u021bia suplimentar\u0103 din Tor Browser a avut o \u00eentors\u0103tur\u0103 nefericit\u0103 \u0219i s-a transformat \u00eentr-o oportunitate de a efectua identificarea f\u0103r\u0103 ca utilizatorul s\u0103 observe. Din cauza dezactiv\u0103rii dialogurilor de confirmare pentru utilizarea handler-elor externe \u00een Tor Browser, cererile de verificare s-au putut deschide \u00een iframe, nu \u00een fereastr\u0103 popup (pentru a separa prezen\u021ba \u0219i absen\u021ba handler-elor, se folose\u0219te faptul c\u0103 regulile same-origin blocheaz\u0103 accesul la paginile cu erori \u0219i permit accesul la paginile about:blank). Din cauza protec\u021biei \u00eempotriva flood-ului, verificarea \u00een Tor Browser dureaz\u0103 semnificativ mai mult timp (10 secunde pentru aplica\u021bie).
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 fingerprintjs, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0432 \u043f\u0430\u0441\u0441\u0438\u0432\u043d\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043a\u043e\u0441\u0432\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u044d\u043a\u0440\u0430\u043d\u0430, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0435\u0439 WebGL, \u0441\u043f\u0438\u0441\u043a\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432 \u0438 \u0448\u0440\u0438\u0444\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u043e\u0446\u0435\u043d\u043a\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0442\u0438\u043f\u043e\u0432\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432. \u041a\u043e\u0434 \u0441\u043a\u0440\u0438\u043f\u0442\u0430 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043c\u0435\u0442\u043e\u0434\u0430 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100172","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Identificare prin analiza handler-elor externe ale protocoalelor \u00een browser | ProHoster","description":"Dezvoltatorii bibliotecii fingerprintjs, care permite generarea identificatorilor de browser \u00een modul pasiv pe baza unor semne indirecte, cum ar fi rezolu\u021bia ecranului, caracteristicile WebGL, listele de pluginuri instalate.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/identifikacziya-cherez-analiz-vneshnih-obrabotchikov-protokolov-v-brauzere","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u0447\u0435\u0440\u0435\u0437 \u0430\u043d\u0430\u043b\u0438\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 fingerprintjs, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u0432 \u043f\u0430\u0441\u0441\u0438\u0432\u043d\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043a\u043e\u0441\u0432\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u044d\u043a\u0440\u0430\u043d\u0430, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0435\u0439 WebGL, \u0441\u043f\u0438\u0441\u043a\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u043b\u0430\u0433\u0438\u043d\u043e\u0432.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/identifikacziya-cherez-analiz-vneshnih-obrabotchikov-protokolov-v-brauzere","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-05-15T20:22:39+00:00","article:modified_time":"2021-05-15T20:22:39+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100172","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-05-16 17:12:40","updated":"2022-10-06 16:17:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/100172","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=100172"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/100172\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=100172"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=100172"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=100172"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}