{"id":105127,"date":"2022-09-18T09:36:45","date_gmt":"2022-09-18T07:36:46","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-chrome-vyyavlena-utechka-parolej-iz-polej-s-predprosmotrom-skrytogo-vvoda"},"modified":"2022-09-18T09:36:45","modified_gmt":"2022-09-18T07:36:46","slug":"v-chrome-vyyavlena-utechka-parolej-iz-polej-s-predprosmotrom-skrytogo-vvoda","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/v-chrome-vyyavlena-utechka-parolej-iz-polej-s-predprosmotrom-skrytogo-vvoda","title":{"rendered":"\u00cen Chrome a fost descoperit\u0103 o scurgere de parole din c\u00e2mpurile cu previzualizarea introducerii ascunse.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00cen browserul Chrome a fost identificat\u0103 o problem\u0103 legat\u0103 de trimiterea datelor confiden\u021biale c\u0103tre serverele Google atunci c\u00e2nd este activat modul avansat de verificare a ortografiei, care implic\u0103 efectuarea verific\u0103rii folosind un serviciu extern. Problema apare \u0219i \u00een browserul Edge atunci c\u00e2nd este utilizat extensia Microsoft Editor. <\/p>\n

S-a descoperit c\u0103 textul pentru verificare este transmis, de asemenea, din formulare de introducere care con\u021bin date confiden\u021biale, inclusiv din c\u00e2mpurile care con\u021bin nume de utilizatori, adrese, emailuri, date de pa\u0219aport \u0219i chiar parole, \u00een cazul \u00een care c\u00e2mpurile pentru introducerea parolelor nu sunt restric\u021bionate de eticheta standard «<input type=password>». De exemplu, aceast\u0103 problem\u0103 duce la trimiterea c\u0103tre serverul<\/a> www.googleapis.com a parolelor \u00een cazul \u00een care op\u021biunea de a ar\u0103ta parola introdus\u0103 este activat\u0103, fiind implementat\u0103 \u00een serviciile Google Cloud (Secret Manager), AWS (Secrets Manager), Facebook, Office 365, Alibaba Cloud \u0219i LastPass. Dintre cele 30 de site-uri cunoscute testate, inclusiv re\u021bele sociale, b\u0103nci, platforme \u00een cloud \u0219i magazine online, 29 s-au dovedit a fi vulnerabile la scurgeri. <\/p>\n

\u00cen AWS \u0219i LastPass, problema a fost deja rezolvat\u0103 rapid prin ad\u0103ugarea parametrului «spellcheck=false» \u00een eticheta «input». Pentru a bloca trimiterea datelor din partea utilizatorului, trebuie dezactivat\u0103 \u00een set\u0103ri verificarea avansat\u0103 (sec\u021biunea «Languages\/Spell check\/Enhanced spell check» sau «Limbi\/Preg\u0103tire a scrierii\/Verificare avansat\u0103», care este dezactivat\u0103 implicit).

\"\u00cen<\/center> 1\t
\"\u00cen<\/center>
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Google \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0435\u0436\u0438\u043c\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u0430\u0432\u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f, \u043f\u043e\u0434\u0440\u0430\u0437\u0443\u043c\u0435\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u0430. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Edge \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f Microsoft Editor. \u041e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0442\u0435\u043a\u0441\u0442 \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0451\u0442\u0441\u044f \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438\u0437 \u0444\u043e\u0440\u043c \u0432\u0432\u043e\u0434\u0430, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0438\u0437 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":105128,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105127","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u00cen Chrome a fost identificat\u0103 o scurgere de parole din c\u00e2mpurile cu previzualizare a introducerii ascunse | ProHoster","description":"\u00cen browserul Chrome a fost identificat\u0103 o problem\u0103 legat\u0103 de trimiterea datelor confiden\u021biale c\u0103tre serverele Google atunci c\u00e2nd este activat modul avansat de verificare a ortografiei, care implic\u0103 efectuarea verific\u0103rii folosind un serviciu extern.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/v-chrome-vyyavlena-utechka-parolej-iz-polej-s-predprosmotrom-skrytogo-vvoda","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Chrome \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438\u0437 \u043f\u043e\u043b\u0435\u0439 \u0441 \u043f\u0440\u0435\u0434\u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u043e\u043c \u0441\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u0432\u0432\u043e\u0434\u0430 | ProHoster","og:description":"\u0412 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 Chrome \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441 \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u043e\u0439 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Google \u043f\u0440\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u043d\u043e\u0433\u043e \u0440\u0435\u0436\u0438\u043c\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0440\u0430\u0432\u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f, \u043f\u043e\u0434\u0440\u0430\u0437\u0443\u043c\u0435\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/v-chrome-vyyavlena-utechka-parolej-iz-polej-s-predprosmotrom-skrytogo-vvoda","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-09-18T07:36:46+00:00","article:modified_time":"2022-09-18T07:36:46+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/105127","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=105127"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/105127\/revisions"}],"predecessor-version":[{"id":173008,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/105127\/revisions\/173008"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/105128"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=105127"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=105127"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=105127"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}