{"id":56195,"date":"2020-02-07T00:00:00","date_gmt":"2020-02-06T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/zagolovok-x-client-data-kak-metod-identifikatsii-polzovatelej-chrome"},"modified":"2020-02-18T14:04:25","modified_gmt":"2020-02-18T11:04:25","slug":"zagolovok-x-client-data-kak-metod-identifikatsii-polzovatelej-chrome","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/zagolovok-x-client-data-kak-metod-identifikatsii-polzovatelej-chrome","title":{"rendered":"Headerul X-Client-Data ca metod\u0103 de identificare a utilizatorilor Chrome","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00cen discu\u021bie ini\u021biativei<\/a><\/noindex> Google privind unificarea con\u021binutului antetului HTTP User-Agent, dezvoltatorul browserului Kiwi a atras aten\u021bia<\/a><\/noindex> la antetul HTTP \u201eX-Client-Data\u201d din Chrome, care este poten\u021bial afecteaz\u0103<\/a><\/noindex> regimul general de protec\u021bie a datelor aplicabil \u00een Uniunea European\u0103 (GDPR<\/a><\/noindex>). \u00cen timpul discu\u021biei<\/a><\/noindex> a fost criticat\u0103 \u0219i ambiguitatea ac\u021biunilor companiei Google, care pe de o parte promoveaz\u0103<\/a><\/noindex> metode<\/a><\/noindex> blocarea identific\u0103rii ascunse \u0219i a urm\u0103rii ac\u021biunilor utilizatorilor, \u00eens\u0103 pe de alt\u0103 parte nu se gr\u0103be\u0219te s\u0103 elimine din Chrome suportul pentru antetul X-Client-Data, care poate fi utilizat pentru identificarea instan\u021belor browserului la accesarea serviciilor Google.<\/p>\n

Antetul X-Client-Data nu este o func\u021bionalitate ascuns\u0103 \u0219i comportamentul s\u0103u este descris<\/a><\/noindex> este documentat. Prin intermediul X-Client-Data, Google ob\u021bine date despre activitatea anumitor func\u021bionalit\u0103\u021bi experimentale \u00een Chrome legate de site-urile sale (de exemplu, Google poate activa \u00een Youtube anumite func\u021bionalit\u0103\u021bi de testare, dac\u0103 sunt acceptate de browser sau poate \u00eencerca s\u0103 coreleze problemele ap\u0103rute cu activarea func\u021bionalit\u0103\u021bilor experimentale). <\/p>\n

Titlu este expus<\/a><\/noindex> doar pentru cererile c\u0103tre site-urile Google, corespunz\u0103toare \u0219abloanelor \u201e*.doubleclick.net\u201d, \u201e*.googlesyndication.com\u201d, \u201ewww.googleadservices.com\u201d, \u201e*.google.<TLD<\/a><\/noindex>>\u201d \u0219i \u201e*.youtube.\u201d, \u0219i trimise prin HTTPS. \u00cen modul incognito, antetul nu este completat, dar \u00een cazul schimb\u0103rii profilului utilizatorului autentificat \u00een Google pentru un profil de oaspete sau \u00een cazul apel\u0103rii opera\u021biei de \u0219tergere a datelor, antetul nu este resetat \u0219i continue s\u0103 fie trimis cu aceea\u0219i valoare.<\/p>\n

\"Headerul<\/a><\/noindex><\/center><\/p>\n

S-a declarat c\u0103 antetul nu con\u021bine informa\u021bii de identificare personal\u0103, ci doar descrie starea instal\u0103rii Chrome \u0219i func\u021bionalit\u0103\u021bile experimentale active. Dac\u0103 \u00een set\u0103ri este dezactivat\u0103 trimiterea telemetriei de utilizare a browserului \u0219i generarea rapoartelor de cr\u0103p\u0103turi, la generarea valorii de baz\u0103 a antetului X-Client-Data se utilizeaz\u0103 doar 13 bi\u021bi de entropie (8000 de combina\u021bii diferite), ceea ce nu este suficient pentru identificare. <\/p>\n

Av\u00e2nd \u00een vedere c\u0103 \u00een antet sunt codificate \u0219i unele set\u0103ri \u0219i parametrii ai sistemului, \u00een cele din urm\u0103, con\u021binutul X-Client-Data este o surs\u0103 excelent\u0103 de date pentru identificarea indirect\u0103 a utilizatorului pentru o perioad\u0103 scurt\u0103 de timp (capabilit\u0103\u021bile experimentale sunt activate \u0219i dezactivate \u00een timp, ceea ce duce la schimb\u0103ri periodice ale valorii din X-Client-Data). <\/p>\n

Cu toate acestea, pe l\u00e2ng\u0103 entropia ini\u021bial\u0103 la formarea valorii X-Client-Data, se folose\u0219te \u0219i o secven\u021b\u0103 seed, returnat\u0103 de serverele Google, care depinde de \u021bar\u0103, adres\u0103 IP \u0219i alte criterii pe care Google le consider\u0103 importante (de exemplu, nimic nu \u00eempiedic\u0103 returnarea unei secven\u021be aleatoare mari, care va deveni un identificator precis).
\nDe asemenea, verificarea \u0219abloanelor de domenii Google la trimiterea X-Client-Data nu exclude situa\u021biile \u00een care un atacator poate \u00eenregistra un domeniu de tipul \u201eyoutube.xn--55qx5d\u201d \u0219i \u00eencepe s\u0103 colecteze identificatori.<\/p>\n

<\/a><\/noindex><\/p>\n

Sursa: opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u0440\u0438 \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u0438 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u044b Google \u043f\u043e \u0443\u043d\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 User-Agent, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Kiwi \u043e\u0431\u0440\u0430\u0442\u0438\u043b \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435 \u043d\u0430 \u043e\u0441\u0442\u0430\u044e\u0449\u0438\u0439\u0441\u044f \u0432 Chrome HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a «X-Client-Data», \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043d\u0430\u0440\u0443\u0448\u0430\u0435\u0442 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0439 \u0432 \u0415\u0432\u0440\u043e\u0441\u043e\u044e\u0437\u0435 \u043e\u0431\u0449\u0438\u0439 \u0440\u0435\u0433\u043b\u0430\u043c\u0435\u043d\u0442 \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 (GDPR). \u0412 \u0445\u043e\u0434\u0435 \u0434\u0438\u0441\u043a\u0443\u0441\u0441\u0438\u0438 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0430\u0441\u044c \u043a\u0440\u0438\u0442\u0438\u043a\u0435 \u0434\u0432\u043e\u0439\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Google, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441 \u043e\u0434\u043d\u043e\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u043f\u0440\u043e\u0434\u0432\u0438\u0433\u0430\u0435\u0442 \u043c\u0435\u0442\u043e\u0434\u044b \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":56196,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-56195","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Antetul X-Client-Data ca metod\u0103 de identificare a utilizatorilor Chrome | ProHoster","description":"Discut\u00e2nd despre ini\u021biativa Google de unificare a con\u021binutului antetului HTTP User-Agent, dezvoltatorul browserului Kiwi.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/zagolovok-x-client-data-kak-metod-identifikatsii-polzovatelej-chrome","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0417\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a X-Client-Data \u043a\u0430\u043a \u043c\u0435\u0442\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Chrome | ProHoster","og:description":"\u041f\u0440\u0438 \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u0438 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u044b Google \u043f\u043e \u0443\u043d\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 User-Agent, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 Kiwi.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/zagolovok-x-client-data-kak-metod-identifikatsii-polzovatelej-chrome","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-06T21:00:00+00:00","article:modified_time":"2020-02-18T11:04:25+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"56195","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:29:18","updated":"2022-10-10 00:15:42","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/56195","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=56195"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/56195\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/56196"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=56195"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=56195"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=56195"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}