{"id":101387,"date":"2021-09-23T22:22:45","date_gmt":"2021-09-23T20:22:45","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/kritika-vklyucheniya-api-idle-detection-v-chrome-94-eksperimenty-s-rust-v-chrome"},"modified":"2021-09-23T22:22:45","modified_gmt":"2021-09-23T20:22:45","slug":"kritika-vklyucheniya-api-idle-detection-v-chrome-94-eksperimenty-s-rust-v-chrome","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/kritika-vklyucheniya-api-idle-detection-v-chrome-94-eksperimenty-s-rust-v-chrome","title":{"rendered":"Critica includerii API-ului Idle Detection \u00een Chrome 94. Experimente cu Rust \u00een Chrome.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Activarea implicit\u0103 a API-ului Idle Detection \u00een Chrome 94 a st\u00e2rnit o serie de critici, cu referiri la obiec\u021biile din partea dezvoltatorilor Firefox \u0219i WebKit\/Safari. <\/p>\n

API-ul Idle Detection permite site-urilor s\u0103 determine momentul \u00een care utilizatorul este inactiv, adic\u0103 nu interac\u021bioneaz\u0103 cu tastatura\/multimedia sau \u00ee\u0219i desf\u0103\u0219oar\u0103 activitatea pe un alt ecran. De asemenea, API-ul ofer\u0103 informa\u021bii despre dac\u0103 un screensaver este activat \u00een sistem. Informa\u021biile despre inactivitate sunt transmise printr-o notificare, dup\u0103 atingerea unui prag de inactivitate, valoarea minim\u0103 fiind stabilit\u0103 la 1 minut. <\/p>\n

Este important de men\u021bionat c\u0103 utilizarea API-ului Idle Detection necesit\u0103 acordul explicit al utilizatorului, adic\u0103, dac\u0103 aplica\u021bia va \u00eencerca pentru prima dat\u0103 s\u0103 detecteze inactivitatea, utilizatorului \u00eei va fi prezentat un dialog cu propunerea de a oferi permisiunea sau de a bloca opera\u021biunea. Pentru a dezactiva complet API-ul Idle Detection, \u00een sec\u021biunea de set\u0103ri \u201eConfiden\u021bialitate \u0219i securitate\u201d exist\u0103 o op\u021biune special\u0103 (chrome:\/\/settings\/content\/idleDetection). <\/p>\n

Aplica\u021biile men\u021bionate includ cele de chat, re\u021bele sociale \u0219i comunicare, care pot schimba statutul utilizatorului \u00een func\u021bie de prezen\u021ba lui la calculator sau pot am\u00e2na notific\u0103rile despre noi mesaje p\u00e2n\u0103 la revenirea utilizatorului. API-ul poate fi, de asemenea, folosit \u00een aplica\u021biile kiosk pentru a reveni la ecranul ini\u021bial dup\u0103 o perioad\u0103 de inactivitate sau pentru a dezactiva opera\u021biunile interactive consumatoare de resurse, cum ar fi redarea diagramelor complexe care se actualizeaz\u0103 constant, atunci c\u00e2nd utilizatorul nu se afl\u0103 la calculator. <\/p>\n

Pozi\u021bia opozi\u021biei la activarea API-ului Idle Detection se bazeaz\u0103 pe faptul c\u0103 informa\u021biile despre prezen\u021ba utilizatorului \u00een fa\u021ba computerului pot fi considerate confiden\u021biale. Dincolo de aplica\u021biile utile, acest API poate fi folosit \u0219i \u00een scopuri mai pu\u021bin benefice, cum ar fi \u00eencerc\u0103rile de exploatare a vulnerabilit\u0103\u021bilor \u00een absen\u021ba utilizatorului sau pentru a ascunde activit\u0103\u021bi mali\u021bioase evidente, cum ar fi mineritul. Prin intermediul API-ului \u00een discu\u021bie, pot fi, de asemenea, colectate date despre modelele de comportament ale utilizatorului \u0219i ritmul s\u0103u zilnic de lucru. De exemplu, se poate stabili c\u00e2nd utilizatorul pleac\u0103 de obicei la pr\u00e2nz sau p\u0103r\u0103se\u0219te locul de munc\u0103. \u00cen condi\u021biile de solicitare obligatorie a confirm\u0103rii acord\u0103rii autoriza\u021biilor, aceste temeri sunt considerate de Google ca fiind neesen\u021biale. <\/p>\n

De asemenea, merit\u0103 men\u021bionat\u0103 nota dezvolatorilor Chrome referitoare la promovarea unor noi tehnici de asigurare a unui mediu de lucru sigur \u00een ceea ce prive\u0219te memoria. Conform celor de la Google, 70% dintre problemele de securitate din Chrome sunt cauzate de erori \u00een gestionarea memoriei, cum ar fi accesarea unui buffer dup\u0103 eliberarea memoriei asociate (use-after-free). Se definesc trei strategii principale pentru combaterea acestor erori: \u00eent\u0103rirea verific\u0103rilor la etapa de compilare, blocarea erorilor la timpul de execu\u021bie \u0219i utilizarea unui limbaj care s\u0103 asigure o gestionare sigur\u0103 a memoriei. <\/p>\n

Se raporteaz\u0103 c\u0103 au \u00eenceput experimentele pentru ad\u0103ugarea \u00een baza de cod Chromium a capacit\u0103\u021bii de a dezvolta componente \u00een limbajul Rust. Codul \u00een Rust nu face \u00eenc\u0103 parte din versiunile livrate utilizatorilor \u0219i este \u00een principal destinat test\u0103rii posibilit\u0103\u021bii de a dezvolta p\u0103r\u021bi separate ale browserului \u00een Rust \u0219i integrarea acestora cu celelalte p\u0103r\u021bi scrise \u00een C++. \u00cen paralel, pentru codul \u00een C++, continu\u0103 dezvoltarea unui proiect de aplicare a tipului MiraclePtr \u00een locul pointerilor raw pentru a bloca posibilitatea exploat\u0103rii vulnerabilit\u0103\u021bilor cauzate de accesarea pachetelor de memorie deja eliberate, iar noi metode de detectare a erorilor la etapa de compilare sunt, de asemenea, propuse. <\/p>\n

\u00cen plus, compania Google \u00eencepe un experiment pentru a testa posibilele perturb\u0103ri ale func\u021bion\u0103rii site-urilor dup\u0103 ce browserul ajunge la o versiune format\u0103 din trei cifre \u00een loc de dou\u0103. \u00cen special, \u00een versiunile de test Chrome 96 a fost introdus\u0103 op\u021biunea chrome:\/\/flags#force-major-version-to-100, prin care \u00een antetul User-Agent \u00eencepe s\u0103 fie emis\u0103 versiunea 100 (Chrome\/100.0.4650.4). \u00cen august, un experiment similar a fost efectuat \u00een Firefox, care a identificat probleme \u00een procesarea versiunilor cu trei cifre pe anumite site-uri.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e API Idle Detection \u0432 Chrome 94 \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0432\u043e\u043b\u043d\u0435 \u043a\u0440\u0438\u0442\u0438\u043a\u0438 \u0441\u043e \u0441\u0441\u044b\u043b\u043a\u0430\u043c\u0438 \u043d\u0430 \u0432\u043e\u0437\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043e\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 Firefox \u0438 WebKit\/Safari. API Idle Detection \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u0430\u0439\u0442\u0430\u043c \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0432\u0440\u0435\u043c\u044f, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043d\u0435\u0430\u043a\u0442\u0438\u0432\u0435\u043d, \u0442.\u0435. \u043d\u0435 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u0441 \u043a\u043b\u0430\u0432\u0438\u0430\u0442\u0443\u0440\u043e\u0439\/\u043c\u044b\u0448\u044c\u044e \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u0440\u0430\u0431\u043e\u0442\u0443 \u043d\u0430 \u0434\u0440\u0443\u0433\u043e\u043c \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0435. API \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0437\u043d\u0430\u0442\u044c \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0445\u0440\u0430\u043d\u0438\u0442\u0435\u043b\u044c \u044d\u043a\u0440\u0430\u043d\u0430 \u0438\u043b\u0438 \u043d\u0435\u0442. \u0418\u043d\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101387","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Critica privind includerea API-ului Idle Detection \u00een Chrome 94. Experimente cu Rust \u00een Chrome | ProHoster","description":"Activarea implicit\u0103 a API-ului Idle Detection \u00een Chrome 94 a st\u00e2rnit o serie de critici, cu referiri la obiec\u021biile din partea dezvoltatorilor Firefox \u0219i WebKit\/Safari.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/kritika-vklyucheniya-api-idle-detection-v-chrome-94-eksperimenty-s-rust-v-chrome","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0440\u0438\u0442\u0438\u043a\u0430 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f API Idle Detection \u0432 Chrome 94. \u042d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u044b \u0441 Rust \u0432 Chrome | ProHoster","og:description":"\u0412\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e API Idle Detection \u0432 Chrome 94 \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0432\u043e\u043b\u043d\u0435 \u043a\u0440\u0438\u0442\u0438\u043a\u0438 \u0441\u043e \u0441\u0441\u044b\u043b\u043a\u0430\u043c\u0438 \u043d\u0430 \u0432\u043e\u0437\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043e\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 Firefox \u0438 WebKit\/Safari.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/kritika-vklyucheniya-api-idle-detection-v-chrome-94-eksperimenty-s-rust-v-chrome","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-09-23T20:22:45+00:00","article:modified_time":"2021-09-23T20:22:45+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101387","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-09-23 20:27:43","updated":"2022-10-02 23:15:17","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/101387","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=101387"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/101387\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=101387"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=101387"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=101387"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}