Cercet\u0103torii \u00een securitate de la Secure Annex au observat o cre\u0219tere a popularit\u0103\u021bii unei noi metode de monetizare a extensiilor de browser, prin care utilizatorii extensiilor formeaz\u0103 o re\u021bea distribuit\u0103, folosit\u0103 pentru scraping (indexarea con\u021binutului site-urilor). Sistemele utilizatorilor sunt folosite ca web-boti \u0219i proxy-uri pentru desc\u0103rcarea con\u021binutului site-urilor \u2014 extensia de browser instalat\u0103 prime\u0219te instruc\u021biuni de indexare a site-urilor de la un server extern, dup\u0103 care lanseaz\u0103 desc\u0103rcarea con\u021binutului solicitat \u00eentr-un iframe ascuns \u0219i transmite datele ob\u021binute unui serviciu extern. \u00cen catalogele Chrome, Firefox \u0219i Edge, utilizarea acestei scheme de monetizare a fost identificat\u0103 \u00een 245 de extensii, av\u00e2nd un total de 909 mii instal\u0103ri. <\/p>\n
Func\u021bionarea este organizat\u0103 prin includerea \u00een codul extensiilor de browser a bibliotecii JavaScript open source mellowtel.js, livrat\u0103 sub licen\u021ba LGPLv3. Biblioteca este dezvoltat\u0103 de proiectul Mellowtel, care promoveaz\u0103 o nou\u0103 platform\u0103 de monetizare, care, pe l\u00e2ng\u0103 extensiile de browser, poate fi utilizat\u0103 \u00een aplica\u021bii bazate pe cadrele Flutter \u0219i Electron. Ideea principal\u0103 a platformei este c\u0103 dezvoltatorii de extensii de browser \u0219i aplica\u021bii pot c\u00e2\u0219tiga bani nu prin afi\u0219area de reclame sau metode dubioase, cum ar fi v\u00e2nzarea de date care afecteaz\u0103 intimitatea utilizatorilor, ci prin \u00eendeplinirea sarcinilor de indexare a con\u021binutului web pentru a antrena sistemele AI. <\/p>\n
Nevoia companiilor AI de date pentru antrenarea modelelor a dus la apari\u021bia numero\u0219ilor bo\u021bi care indexeaz\u0103 site-uri f\u0103r\u0103 o limitare ra\u021bional\u0103 a intensit\u0103\u021bii trimiterii cererilor \u0219i ignor\u00e2nd regulile de indexare robots.txt. Aceste datele bo\u021bi creeaz\u0103 o sarcin\u0103 enorm\u0103 \u0219i parazitar\u0103 asupra servere<\/a>, afect\u00e2nd func\u021bionarea normal\u0103 a sistemelor \u0219i consum\u00e2nd timp pre\u021bios administratorilor, recent au \u00eenceput s\u0103 fie bloca\u021bi activ (de exemplu, re\u021beaua de livrare a con\u021binutului Cloudflare a implementat o op\u021biune pentru a bloca astfel de bo\u021bi \u00een mod implicit). <\/p>\n Companiile AI sunt dispuse s\u0103 pl\u0103teasc\u0103 pentru indexare, iar platforma Mellowtel a oferit o solu\u021bie pentru a satisface aceast\u0103 nevoie prin implicarea utilizatorilor obi\u0219nui\u021bi \u00een procesul de colectare a datelor de pe site-uri. Platforma transmite proprietarilor de extensii 55% din fondurile ob\u021binute \u00een urma colabor\u0103rii cu companiile AI. Proiectul este complet legitim \u0219i insist\u0103 asupra faptului c\u0103 participarea la scraping trebuie s\u0103 fie voluntar\u0103 \u0219i s\u0103 fie activat\u0103 doar dup\u0103 consim\u021b\u0103m\u00e2ntul explicit al utilizatorului. Se presupune c\u0103 utilizatorul, ca apreciere pentru dezvoltatorii extensiei, poate activa modul de scraping \u0219i le poate oferi un sprijin financiar indirect. <\/p>\n Problema este c\u0103 nu to\u021bi dezvoltatorii de extensii sunt dispu\u0219i s\u0103 colaboreze onest \u0219i transparent. Unele extensii \u00eencearc\u0103 s\u0103 activeze \u00een mod ascuns monetizarea Mellowtel f\u0103r\u0103 \u0219tirea utilizatorului, ocolind regulile serviciului, ceea ce duce la faptul c\u0103 utilizatorul devine participant al unei re\u021bele distribuite pentru desc\u0103rcarea datelor de pe site-uri f\u0103r\u0103 consim\u021b\u0103m\u00e2ntul s\u0103u explicit. Dintre cele 45 de extensii Chrome care utilizeaz\u0103 Mellowtel, 12 au fost deja blocate de Google pentru activitate d\u0103un\u0103toare. \u00cen catalogul Microsoft, din 129 de extensii, 8 au fost blocate, iar \u00een catalogul Mozilla, din 71 de extensii, 2 au fost blocate. Motivele dezactiv\u0103rii nu sunt detaliate, dar nu se exclude faptul c\u0103 utilizarea necorespunz\u0103toare a Mellowtel ar fi fost un motiv. <\/p>\n Dezvoltatorul Mellowtel a declarat c\u0103, pentru a rezolva problema activ\u0103rii ascunse a scraping-ului, serviciul va implementa o verificare obligatorie a tuturor extensiilor care folosesc Mellowtel, pentru a asigura dezactivarea scraping-ului implicit (activarea doar dup\u0103 consim\u021b\u0103m\u00e2ntul explicit al utilizatorului) \u0219i pentru a avea un buton vizibil pentru dezactivare. Cererile de efectuare a sarcinilor de c\u0103tre extensiile care nu au trecut verificaarea vor fi plasate \u00een carantin\u0103 \u0219i ignorate. <\/p>\n \u00cen timpul func\u021bion\u0103rii, extensiile care utilizeaz\u0103 biblioteca Mellowtel stabilesc o conexiune websocket cu un server extern, g\u0103zduit \u00een cloud-ul AWS, prin care transmit informa\u021bii despre disponibilitatea utilizatorului, \u021bara, l\u0103\u021bimea de band\u0103 a canalului de comunica\u021bie \u0219i activarea suportului pentru scraping de c\u0103tre utilizator. Periodic, prin conexiune sunt trimise cereri heartbeat, care verific\u0103 disponibilitatea clientului. Atunci c\u00e2nd apar sarcini de \u00eenc\u0103rcare a con\u021binutului, este inserat un iframe ascuns \u00een paginile vizualizate de utilizator, din care se realizeaz\u0103 scraping. <\/p>\n Pentru a \u00eenc\u0103rca pagini externe din iframe-ul inserat \u00een timpul vizualiz\u0103rii altor site-uri, biblioteca ocole\u0219te temporar protec\u021bia oferit\u0103 de browser \u00eempotriva \u00eenc\u0103rc\u0103rii con\u021binutului ter\u021b, elimin\u00e2nd header-ele HTTP Content-Security-Policy \u0219i X-Frame-Options \u0219i restituindu-le dup\u0103 ce pagina dorit\u0103 este \u00eenc\u0103rcat\u0103. Eliminarea se realizeaz\u0103 prin modificarea cererilor de re\u021bea cu ajutorul API-ului declarativeNetRequest (pentru a accesa acest API, extensiile solicit\u0103 o permisiune separat\u0103). Dezactivarea temporar\u0103 a header-elor Content-Security-Policy \u0219i X-Frame-Options afecteaz\u0103 negativ securitatea, deoarece elimin\u0103 ap\u0103rarea standard \u00eempotriva atacurilor de tip cross-site scripting (XSS). <\/p>\n Platforma Mellowtel este afiliat\u0103 companiei Olostep, care ofer\u0103 un API pentru scraping capabil s\u0103 ocoleasc\u0103 protec\u021bia \u00eempotriva boturilor \u0219i s\u0103 efectueze simultan p\u00e2n\u0103 la 100.000 de cereri pe minut. O astfel de activitate a serviciului, aplicat\u0103 \u00een contextul unui singur site, poate fi comparat\u0103 cu realizarea unui atac DDoS distribuit. Serviciul poate, de asemenea, s\u0103 utilizeze utilizatorii ca proxy pentru extragerea de con\u021binut din site-uri private, accesibile doar \u00een subre\u021belele din care utilizatorul ob\u021bine acces prin VPN<\/a>. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Secure Annex \u043e\u0431\u0440\u0430\u0442\u0438\u043b\u0438 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u0440\u043e\u0441\u0442 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u0438 \u043d\u043e\u0432\u043e\u0433\u043e \u043c\u0435\u0442\u043e\u0434\u0430 \u043c\u043e\u043d\u0435\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u044b\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439, \u043f\u0440\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0438\u0437 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439 \u0444\u043e\u0440\u043c\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u0430\u044f \u0441\u0435\u0442\u044c, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u0430\u044f \u0434\u043b\u044f \u0441\u043a\u0440\u0430\u043f\u0438\u043d\u0433\u0430 (\u0438\u043d\u0434\u0435\u043a\u0441\u0430\u0446\u0438\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u0441\u0430\u0439\u0442\u043e\u0432). \u0421\u0438\u0441\u0442\u0435\u043c\u044b \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 web-\u0431\u043e\u0442\u043e\u0432 \u0438 \u043f\u0440\u043e\u043a\u0441\u0438 \u0434\u043b\u044f \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u043d\u0438\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u0441\u0430\u0439\u0442\u043e\u0432 — \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u043e\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0441 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u043f\u043e \u0438\u043d\u0434\u0435\u043a\u0441\u0430\u0446\u0438\u0438 \u0441\u0430\u0439\u0442\u043e\u0432, \u043f\u043e\u0441\u043b\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-138909","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Extensiile de browser implic\u0103 construirea unei re\u021bele distribuite de scraping pentru bot-uri AI | ProHoster","description":"Cercet\u0103torii de securitate de la Secure Annex au observat o cre\u0219tere a popularit\u0103\u021bii unei noi metode de monetizare a extensiilor de browser, \u00een care utilizatorii extensiilor formeaz\u0103 o re\u021bea distribuit\u0103.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/brauzernye-dopolneniya-vovlekayut-v-postroenie-raspredelyonnoj-seti-skrapinga-dlya-ai-botov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0411\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u044b\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u043e\u0432\u043b\u0435\u043a\u0430\u044e\u0442 \u0432 \u043f\u043e\u0441\u0442\u0440\u043e\u0435\u043d\u0438\u0435 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0441\u043a\u0440\u0430\u043f\u0438\u043d\u0433\u0430 \u0434\u043b\u044f AI-\u0431\u043e\u0442\u043e\u0432 | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Secure Annex \u043e\u0431\u0440\u0430\u0442\u0438\u043b\u0438 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u0440\u043e\u0441\u0442 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0441\u0442\u0438 \u043d\u043e\u0432\u043e\u0433\u043e \u043c\u0435\u0442\u043e\u0434\u0430 \u043c\u043e\u043d\u0435\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u044b\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439, \u043f\u0440\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0438\u0437 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439 \u0444\u043e\u0440\u043c\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0451\u043d\u043d\u0430\u044f \u0441\u0435\u0442\u044c.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/brauzernye-dopolneniya-vovlekayut-v-postroenie-raspredelyonnoj-seti-skrapinga-dlya-ai-botov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-07-11T15:11:55+00:00","article:modified_time":"2025-07-11T15:11:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"138909","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:49:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 13:47:22","updated":"2026-02-09 17:49:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/138909","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=138909"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/138909\/revisions"}],"predecessor-version":[{"id":159225,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/138909\/revisions\/159225"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=138909"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=138909"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=138909"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"