{"id":35296,"date":"2019-10-31T22:03:29","date_gmt":"2019-10-31T19:03:29","guid":{"rendered":"https:\/\/prohoster.info\/blog\/predstavlena-novaya-tehnika-skrytoj-identifikatsii-sistemy-i-brauzera\/"},"modified":"2019-10-31T22:03:29","modified_gmt":"2019-10-31T19:03:29","slug":"predstavlena-novaya-tehnika-skrytoj-identifikatsii-sistemy-i-brauzera","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/predstavlena-novaya-tehnika-skrytoj-identifikatsii-sistemy-i-brauzera","title":{"rendered":"A fost prezentat\u0103 o nou\u0103 tehnic\u0103 de identificare ocult\u0103 a sistemului \u0219i browserului","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Un grup de cercet\u0103tori de la Universitatea Tehnic\u0103 Graz (Austria), cunoscut anterior pentru dezvoltarea de metode de atac MDS<\/a><\/noindex>, NetSpectre<\/a><\/noindex> \u0219i Throwhammer<\/a><\/noindex>, a dezv\u0103luit<\/a><\/noindex> informa\u021bii despre o nou\u0103 tehnic\u0103 de analiz\u0103 prin canale laterale, care permite determinarea versiunii exacte a browser-ului, sistemului de operare utilizat, arhitectura CPU \u0219i utilizarea extensiilor pentru a combate identificarea ascuns\u0103. <\/p>\n

Pentru a determina parametrii men\u021biona\u021bi, este suficient s\u0103 se execute \u00een browser codul JavaScript preg\u0103tit de cercet\u0103tori. \u00cen practic\u0103, metoda poate fi utilizat\u0103 nu doar ca o surs\u0103 suplimentar\u0103 pentru identificarea indirect\u0103 a utilizatorului, ci \u0219i pentru a determina parametrii mediului sistemului pentru aplicarea \u021bintit\u0103 a exploit-urilor, av\u00e2nd \u00een vedere OS, arhitectura \u0219i browser-ul. Metoda este eficient\u0103, inclusiv atunci c\u00e2nd se utilizeaz\u0103 browsere cu implement\u0103ri ale mecanismelor de blocare a identific\u0103rii ascunse, cum ar fi Tor Browser. Codul surs\u0103 prototip al metodei sunt publicate<\/a><\/noindex> sub licen\u021ba MIT.<\/p>\n

Determinarea se face pe baza extragerii tiparelor de stare caracteristice diferitelor browsere \u00een JavaScript \u0219i caracteristicilor timpului de execu\u021bie a opera\u021biunilor, care depind de particularit\u0103\u021bile func\u021bion\u0103rii JIT, CPU \u0219i mecanismelor de alocare a memoriei. Determinarea propriet\u0103\u021bilor se face prin generarea unei liste a tuturor obiectelor disponibile din JavaScript. A\u0219a cum s-a dovedit, num\u0103rul de obiecte coreleaz\u0103 direct cu motorul browser-ului \u0219i versiunea sa. <\/p>\n

function getProperties(o) {
\n var result = [];
\n while (o !== null) {
\n result = result.concat(Reflect.ownKeys(o));
\n o = Object.getPrototypeOf(o);
\n }
\n return result;
\n }<\/p>\n

De exemplu, pentru Firefox, documenta\u021bia afirm\u0103 c\u0103 exist\u0103 suport pentru 2247 de propriet\u0103\u021bi, \u00een timp ce num\u0103rul real de propriet\u0103\u021bi definite, lu\u00e2nd \u00een considerare cele nedocumentate, se ridic\u0103 la 15709 (\u00een Tor Browser \u2014 15639), pentru Chrome sunt men\u021bionate 2698 de propriet\u0103\u021bi, iar num\u0103rul real oferit este 13570 (\u00een Chrome pentru Android \u2014 13119). Num\u0103rul \u0219i valorile propriet\u0103\u021bilor variaz\u0103 de la o versiune la alta a browserului \u0219i \u00een func\u021bie de sistemele de operare utilizate. <\/p>\n

Valorile \u0219i prezen\u021ba anumi\u021bilor propriet\u0103\u021bi pot fi folosite pentru a determina tipul de sistem de operare. De exemplu, \u00een Kubuntu, proprietatea window.innerWidth este setat\u0103 la 1000, iar \u00een Windows 10 \u2014 la 1001. \u00cen Windows, exist\u0103 proprietatea window.navigator.activeVRDisplays, dar \u00een Linux aceasta nu exist\u0103. Pentru Android, sunt disponibile o mul\u021bime de apeluri specifice, dar nu exist\u0103 window.SharedWorker. De asemenea, pentru identificarea sistemului de operare, se recomand\u0103 analiza parametrilor WebGL, a c\u0103ror stare depinde de drivere. \u00cen plus, apelul WEBGL_debug_renderer_infoextension permite ob\u021binerea informa\u021biilor despre engine-ul de redare OpenGL, care este diferit pentru fiecare sistem de operare. <\/p>\n

Pentru determinarea CPU-ului, se aplic\u0103 o evaluare a diferen\u021belor de timp \u00een execu\u021bia diferitelor blocuri de cod tipice, a c\u0103ror procesare depinde de arhitectura setului de instruc\u021biuni, lu\u00e2nd \u00een considerare comportamentul JIT (determinat de c\u00e2te registre CPU vor fi utilizate \u0219i \u00een ce situa\u021bii JIT va genera cod eficient cu optimiz\u0103ri \u0219i implicarea instruc\u021biunilor extinse, \u0219i c\u00e2nd nu). De asemenea, pentru determinarea tipului de sistem de distribu\u021bie a memoriei \u0219i a sistemului de operare, se m\u0103soar\u0103 diferen\u021ba de timp pentru alocarea memoriei pentru diferite structuri, din care putem deduce dimensiunea blocurilor de memorie. <\/p>\n

Parametrii defini\u021bi \u00een timpul execu\u021biei scriptului sunt compara\u021bi cu valorile de referin\u021b\u0103, specifice pentru medii testate anterior. \u00cen cadrul verific\u0103rii, tehnica dezvoltat\u0103 a permis identificarea precis\u0103 a 40 de medii de testare diferite, determin\u00e2nd versiunile browserelor utilizate, produc\u0103torul CPU-ului, sistemul de operare aplicat \u0219i dac\u0103 rularea se face pe hardware real sau \u00eentr-o ma\u0219in\u0103 virtual\u0103.<\/p>\n

Se remarc\u0103 \u00een mod special posibilitatea de a determina extensiile browserului \u0219i chiar set\u0103rile individuale ale acestora, inclusiv extensiile destinate bloc\u0103rii metodelor de identificare ascuns\u0103 sau activitatea \u00een modul de navigare privat. \u00cen contextul metodei propuse, aceste extensii devin o surs\u0103 suplimentar\u0103 de date pentru identificare. Extensiile sunt determinate prin evaluarea distorsiunilor parametrilor mediului original, cauzate de acestea.<\/p>\n

Printre alte metode de identificare, se poate men\u021biona luarea \u00een considerare a unor date indirecte, cum ar fi rezolu\u021bia ecranului<\/a><\/noindex>, lista tipurilor MIME acceptate, parametrii specifici din antet (HTTP\/2<\/a><\/noindex> \u0219i HTTPS<\/a><\/noindex>), analiza plugin-urilor \u0219i fonturilor instalate , disponibilitatea anumitor API-uri Web, specifice pl\u0103cilor video<\/a><\/noindex>caracteristici grafica realizat\u0103 prin WebGL \u0219i<\/a><\/noindex> Canvas manipul\u0103ri<\/a><\/noindex>, cu CSS,<\/a><\/noindex> cu CSS, analiza caracteristicilor de lucru cu mouse-ul<\/a><\/noindex> \u0219i tastatura<\/a><\/noindex>.<\/p>\n

<\/a><\/noindex><\/p>\n

Sursa: opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0413\u0440\u0430\u0446\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0410\u0432\u0441\u0442\u0440\u0438\u044f), \u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0430\u0442\u0430\u043a MDS, NetSpectre \u0438 Throwhammer, \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043d\u043e\u0432\u043e\u0439 \u0442\u0435\u0445\u043d\u0438\u043a\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0442\u043e\u0447\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0443 CPU \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u0431\u043e\u0440\u044c\u0431\u044b \u0441\u043e \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439. \u0414\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 JavaScript \u043a\u043e\u0434\u0430. […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-35296","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47A fost prezentat\u0103 o nou\u0103 tehnic\u0103 de identificare ascuns\u0103 a sistemului \u0219i browserului | ProHoster","description":"Un grup de cercet\u0103tori de la Universitatea Tehnic\u0103 Graz (Austria), cunoscut anterior pentru dezvoltarea de metode de atac","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/predstavlena-novaya-tehnika-skrytoj-identifikatsii-sistemy-i-brauzera","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0413\u0440\u0430\u0446\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0410\u0432\u0441\u0442\u0440\u0438\u044f), \u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0430\u0442\u0430\u043a","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/predstavlena-novaya-tehnika-skrytoj-identifikatsii-sistemy-i-brauzera","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:03:29+00:00","article:modified_time":"2019-10-31T19:03:29+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35296","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 22:42:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:06:24","updated":"2026-01-21 22:42:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/35296","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=35296"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/35296\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=35296"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=35296"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=35296"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}