{"id":84555,"date":"2020-06-09T01:41:56","date_gmt":"2020-06-08T23:41:56","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-ublock-origin-dobavlena-blokirovka-skriptov-dlya-skanirovaniya-setevyh-portov"},"modified":"2020-06-09T01:41:56","modified_gmt":"2020-06-08T23:41:56","slug":"v-ublock-origin-dobavlena-blokirovka-skriptov-dlya-skanirovaniya-setevyh-portov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/v-ublock-origin-dobavlena-blokirovka-skriptov-dlya-skanirovaniya-setevyh-portov","title":{"rendered":"uBlock Origin a ad\u0103ugat blocarea scripturilor pentru scanarea porturilor de re\u021bea","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00cen filtrul utilizat \u00een uBlock Origin Dup\u0103 trimiterea<\/a><\/noindex> au fost ad\u0103ugate reguli pentru blocarea scripturilor obi\u0219nuite de scanare a porturilor locale ale sistemului utilizatorului. Reamintim c\u0103 \u00een luna mai a fost descoperit<\/a><\/noindex> scanarea porturilor locale la accesarea site-ului eBay.com. S-a constatat c\u0103 aceast\u0103 practic\u0103 nu se limiteaz\u0103 la eBay, iar multe alte site-uri<\/a><\/noindex> (Citibank, TD Bank, Sky, GumTree, WePay etc.) aplic\u0103 scanarea porturilor sistemului local al utilizatorului la deschiderea paginilor lor, folosind cod pentru a detecta \u00eencerc\u0103rile de acces din computere compromise, furnizate de serviciul ThreatMetrix.<\/p>\n

\u00cen cazul eBay, erau verificate 14 porturi de re\u021bea asociate cu servere de acces la distan\u021b\u0103, cum ar fi VNC, TeamViewer, Anyplace Control, Aeroadmin, Ammy Admin \u0219i RDP. Probabil verificarea este efectuat\u0103 pentru a determina<\/a><\/noindex> pentru a identifica urme ale compromiterii sistemului prin malware pentru a preveni efectuarea de achizi\u021bii frauduloase cu ajutorul botnet-urilor. Scanarea poate fi folosit\u0103 \u0219i pentru a ob\u021bine date pentru identificarea indirect\u0103 a utilizatorului<\/a><\/noindex>.<\/p>\n

Pentru scanare se folose\u0219te o tehnic\u0103 bazat\u0103 pe \u00eencercarea de a stabili conexiuni cu diferite porturi de re\u021bea ale gazdei 127.0.0.1 (localhost) prin WebSocket<\/a><\/noindex>. Existen\u021ba unui port de re\u021bea deschis se determin\u0103 indirect pe baza diferen\u021belor \u00een modul de gestionare a erorilor la conectarea la porturi de re\u021bea active \u0219i neutilizate. WebSocket permite trimiterea doar de cereri HTTP, dar o astfel de cerere pentru un port de re\u021bea neactiv se finalizeaz\u0103 imediat cu o eroare, \u00een timp ce pentru un port activ apare o eroare dup\u0103 un anumit timp, necesar pentru \u00eencercarea de stabilire a conexiunii. \u00cen plus, \u00een cazul unui port neactiv, WebSocket returneaz\u0103 un cod de eroare la conectare (ERR_CONNECTION_REFUSED), iar \u00een cazul unui port activ \u2014 un cod de eroare la stabilirea conexiunii. <\/p>\n

\"uBlock<\/a><\/noindex><\/center><\/p>\n

\u00cen afar\u0103 de scanarea porturilor, WebSockets poate fi utilizat<\/a><\/noindex> fi utilizat pentru atacuri asupra sistemelor dezvoltatorilor web care ruleaz\u0103 pe sistemul local manipulatoare WebSocket pentru aplica\u021bii React. Un site extern poate verifica porturile de re\u021bea, determina prezen\u021ba unui astfel de manipulant \u0219i se poate conecta la el. Dac\u0103 dezvoltatorul face o eroare, atacatorul poate ob\u021bine con\u021binutul datelor de depanare, care pot include informa\u021bii confiden\u021biale fragmentate.<\/p>\n

\"uBlock<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Sursa: opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0439 \u0432 uBlock Origin \u0444\u0438\u043b\u044c\u0442\u0440 EasyPrivacy \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u044b \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0442\u0438\u043f\u043e\u0432\u044b\u0445 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u043e\u0440\u0442\u043e\u0432 \u043d\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u0447\u0442\u043e \u0432 \u043c\u0430\u0435 \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u043f\u043e\u0440\u0442\u043e\u0432 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0441\u0430\u0439\u0442\u0430 eBay.com. \u0412\u044b\u044f\u0441\u043d\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u043f\u043e\u0434\u043e\u0431\u043d\u0430\u044f \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0430 \u043d\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f eBay \u0438 \u043c\u043d\u043e\u0433\u0438\u0435 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0430\u0439\u0442\u044b (Citibank, TD Bank, Sky, GumTree, WePay \u0438 \u0442.\u043f.) \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u044e\u0442 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u043e\u0440\u0442\u043e\u0432 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":84556,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-84555","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Blocare a scripturilor pentru scanarea porturilor de re\u021bea ad\u0103ugat\u0103 \u00een uBlock Origin | ProHoster","description":"Regulile pentru blocarea scripturilor standard au fost ad\u0103ugate \u00een filtrul EasyPrivacy utilizat \u00een uBlock Origin.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/v-ublock-origin-dobavlena-blokirovka-skriptov-dlya-skanirovaniya-setevyh-portov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 uBlock Origin \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0430 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432 \u0434\u043b\u044f \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u043e\u0440\u0442\u043e\u0432 | ProHoster","og:description":"\u0412 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u044b\u0439 \u0432 uBlock Origin \u0444\u0438\u043b\u044c\u0442\u0440 EasyPrivacy \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u044b \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0434\u043b\u044f \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0442\u0438\u043f\u043e\u0432\u044b\u0445 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/v-ublock-origin-dobavlena-blokirovka-skriptov-dlya-skanirovaniya-setevyh-portov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-08T23:41:56+00:00","article:modified_time":"2020-06-08T23:41:56+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"84555","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:55:41","updated":"2022-09-28 02:39:05","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/84555","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=84555"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/84555\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/84556"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=84555"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=84555"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=84555"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}