{"id":85705,"date":"2020-06-18T13:43:02","date_gmt":"2020-06-18T11:43:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/utechka-poiskovyh-klyuchej-cherez-dns-v-firefox-i-chrome"},"modified":"2020-06-18T13:43:02","modified_gmt":"2020-06-18T11:43:02","slug":"utechka-poiskovyh-klyuchej-cherez-dns-v-firefox-i-chrome","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/utechka-poiskovyh-klyuchej-cherez-dns-v-firefox-i-chrome","title":{"rendered":"Scurgerea cuvintelor cheie prin DNS \u00een Firefox \u0219i Chrome","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00cen Firefox \u0219i Chrome a fost identificat\u0103<\/a><\/noindex> particularitate a proces\u0103rii interog\u0103rilor de c\u0103utare introduse \u00een bara de adrese, care duce<\/a><\/noindex> duce la scurgerea informa\u021biilor prin serverul DNS al furnizorului. Esen\u021ba problemei este c\u0103, dac\u0103 interogarea de c\u0103utare const\u0103 doar dintr-un singur cuv\u00e2nt, browserul \u00eencearc\u0103 mai \u00eent\u00e2i s\u0103 determine \u00een DNS existen\u021ba unui gazd\u0103 cu acest nume, presupun\u00e2nd c\u0103 utilizatorul \u00eencearc\u0103 s\u0103 acceseze un subdomeniu, \u0219i abia apoi redirec\u021bioneaz\u0103 interogarea c\u0103tre motorul de c\u0103utare. Astfel, proprietarul serverului DNS, specificat \u00een set\u0103rile utilizatorului, prime\u0219te informa\u021bii despre interog\u0103rile de c\u0103utare const\u00e2nd dintr-un singur cuv\u00e2nt, ceea ce este considerat o \u00eenc\u0103lcare a confiden\u021bialit\u0103\u021bii.<\/p>\n

Problema apare atunci c\u00e2nd se utilizeaz\u0103 at\u00e2t serverul DNS al furnizorului, c\u00e2t \u0219i serviciile \u201eDNS over HTTPS\u201d (DoH), \u00een cazul \u00een care este specificat un sufix DNS \u00een set\u0103rile (setat implicit la ob\u021binerea parametrilor prin DHCP). Principala problem\u0103 este c\u0103, chiar \u0219i cu DoH activat, cererile continu\u0103 s\u0103 fie trimise prin serverul DNS al furnizorului specificat \u00een sistem.
\nEste important de men\u021bionat c\u0103 \u00eencercarea de rezolvare se face doar atunci c\u00e2nd se trimit interog\u0103ri de c\u0103utare care constau dintr-un singur cuv\u00e2nt. Atunci c\u00e2nd se introduc mai multe cuvinte, solicitarea c\u0103tre DNS nu este efectuat\u0103. <\/p>\n

\"Scurgerea<\/a><\/noindex><\/center><\/p>\n

Problema a fost confirmat\u0103 \u00een Firefox \u0219i Chrome \u0219i, de asemenea, poate afecta \u0219i alte browsere. Dezvoltatorii Firefox au recunoscut existen\u021ba problemei \u0219i inten\u021bioneaz\u0103<\/a><\/noindex> vor oferi o solu\u021bie \u00een versiunea Firefox 79. \u00cen special, pentru a gestiona comportamentul \u00een procesarea interog\u0103rilor de c\u0103utare \u00een about:config a fost ad\u0103ugat\u0103<\/a><\/noindex> o setare<\/a><\/noindex> \u201ebrowser.urlbar.dnsResolveSingleWordsAfterSearch\u201d, c\u00e2nd este setat la valoarea \u201e0\u201d, rezolvarea este blocat\u0103, \u201e1\u201d (implicit) folose\u0219te heuristica pentru rezolvarea selectiv\u0103, iar \u201e2\u201d p\u0103streaz\u0103 comportamentul vechi. Heuristica const\u0103<\/a><\/noindex> \u00een verificarea activ\u0103rii DoH, av\u00e2nd doar \u00eenregistrarea pentru \u2018localhost\u2019 \u00een \/etc\/hosts \u0219i f\u0103r\u0103 un subdomeniu pentru gazda curent\u0103.<\/p>\n

Dezvoltatorii Chrome au promis<\/a><\/noindex> s\u0103 limiteze scurgerea prin DNS, dar privind descoperirea unei vulnerabilit\u0103\u021bi \u00een versiunile mai vechi ale firmware-ului dongle-urilor USB Logitech. Aceasta permite atacatorilor cu acces fizic la dispozitive s\u0103 ob\u021bin\u0103 cheile de criptare ale canalului radio \u0219i s\u0103 injecteze ap\u0103s\u0103rile de taste (CVE-2019-13054).<\/a><\/noindex> o problem\u0103 similar\u0103 r\u0103m\u00e2ne nerezolvat\u0103 din 2015. \u00cen Tor Browser, problema nu se manifest\u0103.<\/p>\n

<\/a><\/noindex><\/p>\n

Sursa: opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 Firefox \u0438 Chrome \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043d\u0430\u0431\u0440\u0430\u043d\u043d\u044b\u0445 \u0432 \u0430\u0434\u0440\u0435\u0441\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0435 \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u0447\u0435\u0440\u0435\u0437 DNS-\u0441\u0435\u0440\u0432\u0435\u0440 \u043f\u0440\u043e\u0432\u0430\u0439\u0434\u0435\u0440\u0430. \u0421\u0443\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0435\u0441\u043b\u0438 \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u0441\u043e\u0441\u0442\u043e\u0438\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u0438\u0437 \u043e\u0434\u043d\u043e\u0433\u043e \u0441\u043b\u043e\u0432\u0430, \u0431\u0440\u0430\u0443\u0437\u0435\u0440 \u0432\u043d\u0430\u0447\u0430\u043b\u0435 \u043f\u044b\u0442\u0430\u0435\u0442\u0441\u044f \u0432 DNS \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0445\u043e\u0441\u0442\u0430 \u0441 \u0442\u0430\u043a\u0438\u043c \u0438\u043c\u0435\u043d\u0435\u043c, \u043f\u043e\u043b\u0430\u0433\u0430\u044f, \u0447\u0442\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043f\u044b\u0442\u0430\u0435\u0442\u0441\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u044c \u043f\u043e\u0434\u0434\u043e\u043c\u0435\u043d, \u0438 \u0443\u0436\u0435 \u043f\u043e\u0442\u043e\u043c \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":85706,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-85705","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Scurgerea cuvintelor cheie prin DNS \u00een Firefox \u0219i Chrome | ProHoster","description":"\u00cen Firefox \u0219i Chrome a fost identificat\u0103 o particularitate a proces\u0103rii interog\u0103rilor de c\u0103utare introduse \u00een bara de adrese.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/utechka-poiskovyh-klyuchej-cherez-dns-v-firefox-i-chrome","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0442\u0435\u0447\u043a\u0430 \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 \u0447\u0435\u0440\u0435\u0437 DNS \u0432 Firefox \u0438 Chrome | ProHoster","og:description":"\u0412 Firefox \u0438 Chrome \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043d\u0430\u0431\u0440\u0430\u043d\u043d\u044b\u0445 \u0432 \u0430\u0434\u0440\u0435\u0441\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0435 \u043f\u043e\u0438\u0441\u043a\u043e\u0432\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/utechka-poiskovyh-klyuchej-cherez-dns-v-firefox-i-chrome","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-18T11:43:02+00:00","article:modified_time":"2020-06-18T11:43:02+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"85705","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:32:46","updated":"2022-10-01 23:47:48","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/85705","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=85705"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/85705\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/85706"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=85705"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=85705"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=85705"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}