{"id":94705,"date":"2020-09-20T07:42:30","date_gmt":"2020-09-20T05:42:30","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/organizacziya-effektivnyh-atak-po-vremeni-s-pomoshhyu-http-2-i-wpa3"},"modified":"2020-09-20T07:42:30","modified_gmt":"2020-09-20T05:42:30","slug":"organizacziya-effektivnyh-atak-po-vremeni-s-pomoshhyu-http-2-i-wpa3","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/organizacziya-effektivnyh-atak-po-vremeni-s-pomoshhyu-http-2-i-wpa3","title":{"rendered":"Organiz\u00e1cia efekt\u00edvnych \u010dasov\u00fdch \u00fatokov pomocou HTTP\/2 a WPA3","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Nov\u00e1 met\u00f3da hackovania prekon\u00e1va probl\u00e9m \u201esie\u0165ov\u00e9ho jitteru\u201c, ktor\u00fd m\u00f4\u017ee ovplyvni\u0165 \u00faspe\u0161nos\u0165 \u00fatokov cez bo\u010dn\u00e9 kan\u00e1ly.<\/p>\n<p><img decoding=\"async\" alt=\"Organiz\u00e1cia efekt\u00edvnych \u010dasov\u00fdch \u00fatokov pomocou HTTP\/2 a WPA3\" src=\"\/wp-content\/uploads\/2020\/09\/c79026eedd1d4411c1c0f49b41acabc9.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nNov\u00e1 met\u00f3da, vyvinut\u00e1 vedcami z Leuven University (Belgicko) a New York University v Ab\u00fa Dhab\u00ed, preuk\u00e1zala, \u017ee \u00fato\u010dn\u00edci m\u00f4\u017eu vyu\u017ei\u0165 vlastnosti sie\u0165ov\u00fdch protokolov na organizovanie \u00fanikov d\u00f4vern\u00fdch inform\u00e1ci\u00ed.<\/p>\n<p>T\u00e1to met\u00f3da nazvan\u00e1 <noindex><a rel=\"nofollow\" href=\"https:\/\/www.usenix.org\/conference\/usenixsecurity20\/presentation\/van-goethem\">Timeless Timing Attacks<\/a><\/noindex>, predveden\u00e1 tento rok na konferencii Usenix, vyu\u017e\u00edva vlastnosti spracovania s\u00fa\u010dasne vykonan\u00fdch po\u017eiadaviek sie\u0165ov\u00fdmi protokolmi na odstr\u00e1nenie jedn\u00e9ho z probl\u00e9mov vzdialen\u00fdch \u00fatokov na \u010dasov\u00fdch z\u00e1kladov cez bo\u010dn\u00e9 kan\u00e1ly.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>Probl\u00e9my vzdialen\u00fdch \u00fatokov na \u010dasov\u00e9 z\u00e1klady.<\/h3>\n<p>\nPri realiz\u00e1cii \u010dasov\u00fdch \u00fatokov \u00fato\u010dn\u00edci meraj\u00fa rozdiely v dobe vykon\u00e1vania r\u00f4znych pr\u00edkazov, sna\u017eiac sa ob\u00eds\u0165 ochranu zabezpe\u010den\u00fa \u0161ifrovan\u00edm a z\u00edska\u0165 \u00fadaje o d\u00f4vern\u00fdch inform\u00e1ci\u00e1ch, napr\u00edklad o \u0161ifrovac\u00edch k\u013e\u00fa\u010doch, s\u00fakromnej komunik\u00e1cii a spr\u00e1van\u00ed pou\u017e\u00edvate\u013eov pri webovom prehliadan\u00ed.<\/p>\n<p>Ale pre \u00faspe\u0161n\u00fa realiz\u00e1ciu \u010dasov\u00fdch \u00fatokov potrebuje \u00fato\u010dn\u00edk presn\u00e9 znalosti doby, ktor\u00fa potrebn\u00e9 \u00fato\u010denej aplik\u00e1cii na spracovanie po\u017eiadavky.<\/p>\n<p>To sa st\u00e1va probl\u00e9mom pri \u00fatokoch na vzdialen\u00e9 syst\u00e9my, ako s\u00fa webov\u00e9 servery, preto\u017ee oneskorenie v sieti (jitter) sp\u00f4sobuje variabilitu doby odpovede, \u010do s\u0165a\u017euje v\u00fdpo\u010det doby spracovania.<\/p>\n<p>Pri vzdialen\u00fdch \u00fatokoch na \u010dasov\u00e9 z\u00e1klady zvy\u010dajne \u00fato\u010dn\u00edci posielaj\u00fa ka\u017ed\u00fd pr\u00edkaz nieko\u013ekokr\u00e1t a vykon\u00e1vaj\u00fa \u0161tatistick\u00fa anal\u00fdzu doby odpovede, aby zn\u00ed\u017eili vplyv sie\u0165ov\u00e9ho jitteru. Tento pr\u00edstup je v\u0161ak u\u017eito\u010dn\u00fd len do ur\u010ditej miery.<\/p>\n<p>\u201e\u010c\u00edm men\u0161\u00ed rozdiel v \u010dase, t\u00fdm viac po\u017eiadaviek je potrebn\u00fdch, a v ur\u010ditom okamihu sa v\u00fdpo\u010det st\u00e1va nemo\u017en\u00fdm,\u201c hovor\u00ed n\u00e1m v\u00fdskumn\u00edk syst\u00e9mov ochrany d\u00e1t a hlavn\u00fd autor \u010dl\u00e1nku o novom type \u00fatokov Tom Van Goetem.<\/p>\n<h3>\u201eBez\u010dasov\u00fd\u201c \u010dasov\u00fd \u00fatok.<\/h3>\n<p>\nMet\u00f3da vyvinut\u00e1 Goetem a jeho kolegami vykon\u00e1va vzdialen\u00e9 \u00fatoky na \u010dasov\u00e9 z\u00e1klady tak\u00fdm sp\u00f4sobom, \u017ee minimalizuje vplyv sie\u0165ov\u00e9ho jitteru.<\/p>\n<p>Princ\u00edp, ktor\u00fd le\u017e\u00ed v z\u00e1klade bez\u010dasov\u00e9ho \u010dasov\u00e9ho \u00fatoku, je jednoduch\u00fd: treba zabezpe\u010di\u0165, aby po\u017eiadavky prich\u00e1dzali na server v \u00faplne rovnakom \u010dase, a nie aby sa zasielali po sebe.<\/p>\n<p>S\u00fabe\u017enos\u0165 zaru\u010duje, \u017ee v\u0161etky po\u017eiadavky s\u00fa na rovnak\u00fdch podmienkach siete a \u017ee ich spracovanie nebude ovplyvnen\u00e9 cestou medzi \u00fato\u010dn\u00edkom a serverom. Poradie prij\u00edmania odpoved\u00ed poskytne \u00fato\u010dn\u00edkovi v\u0161etky inform\u00e1cie potrebn\u00e9 na porovnanie doby vykonania.<\/p>\n<p>\u201eHlavn\u00e1 v\u00fdhoda \u010dasov\u00fdch \u00fatokov bez oh\u013eadu na \u010das spo\u010d\u00edva v tom, \u017ee s\u00fa ove\u013ea presnej\u0161ie, tak\u017ee je potrebn\u00e9 menej po\u017eiadaviek. To umo\u017e\u0148uje \u00fato\u010dn\u00edkovi rozpozna\u0165 rozdiely v dobe vykonania a\u017e do 100 ns,\u201c hovor\u00ed Van Goetem.<\/p>\n<p>Minim\u00e1lny \u010dasov\u00fd rozdiel, ktor\u00fd pozorovali v\u00fdskumn\u00edci po\u010das tradi\u010dn\u00e9ho \u010dasov\u00e9ho \u00fatoku cez internet, bol 10 \u03bcs, \u010do je 100-kr\u00e1t viac ako pri \u00fatoku s\u00fabe\u017en\u00fdmi po\u017eiadavkami.<\/p>\n<h3>Ako sa zabezpe\u010duje s\u00fabe\u017enos\u0165<\/h3>\n<p>\n\u201eS\u00fabe\u017enos\u0165 zabezpe\u010dujeme t\u00fdm, \u017ee oba po\u017eiadavky umiestnime do jedn\u00e9ho sie\u0165ov\u00e9ho paketu,\u201c vysvet\u013euje Van Goetem. \u201eV praxi z\u00e1vis\u00ed implement\u00e1cia hlavne od sie\u0165ov\u00e9ho protokolu.\u201c<\/p>\n<p>Na odosielanie s\u00fabe\u017en\u00fdch po\u017eiadaviek v\u00fdskumn\u00edci vyu\u017e\u00edvaj\u00fa mo\u017enosti r\u00f4znych sie\u0165ov\u00fdch protokolov.<\/p>\n<p>Napr\u00edklad HTTP\/2, ktor\u00fd sa r\u00fdchlo st\u00e1va de facto \u0161tandardom pre webov\u00e9 servery, podporuje \u201emultiplexovanie po\u017eiadaviek\u201c \u2013 funkciu, ktor\u00e1 umo\u017e\u0148uje klientovi posiela\u0165 viacer\u00e9 po\u017eiadavky s\u00fa\u010dasne cez jedno TCP spojenie.<\/p>\n<p>\u201eV pr\u00edpade HTTP\/2 sta\u010d\u00ed zabezpe\u010di\u0165, aby oba po\u017eiadavky boli umiestnen\u00e9 do jedn\u00e9ho paketu (napr\u00edklad oboje zap\u00edsa\u0165 do soketu s\u00fa\u010dasne).\u201c T\u00e1to met\u00f3da v\u0161ak m\u00e1 svoje \u0161pecifik\u00e1. Napr\u00edklad vo v\u00e4\u010d\u0161ine siet\u00ed na distrib\u00faciu obsahu typu Cloudflare, ktor\u00fd poskytuje obsah ve\u013ekej \u010dasti webu, sa spojenie medzi okrajov\u00fdmi servermi a webovou str\u00e1nkou vykon\u00e1va cez protokol HTTP\/1.1, ktor\u00fd nepodporuje multiplexovanie po\u017eiadaviek.<\/p>\n<p>Aj ke\u010f to zni\u017euje \u00fa\u010dinnos\u0165 \u010dasov\u00e9ho \u00fatoku, st\u00e1le zost\u00e1vaj\u00fa presnej\u0161ie ako klasick\u00e9 vzdialen\u00e9 \u010dasov\u00e9 \u00fatoky, preto\u017ee eliminuj\u00fa jitter medzi \u00fato\u010dn\u00edkom a okrajov\u00fdm CDN serverom.<\/p>\n<p>V pr\u00edpade protokolov, ktor\u00e9 nepodporuj\u00fa multiplexovanie po\u017eiadaviek, m\u00f4\u017eu \u00fato\u010dn\u00edci vyu\u017ei\u0165 intermedi\u00e1rny sie\u0165ov\u00fd protokol, ktor\u00fd encapsuluje po\u017eiadavky.<\/p>\n<p>V\u00fdskumn\u00edci uk\u00e1zali, ako funguje \u010dasov\u00e1 \u00fatokov\u00e1 technika na Tor sieti. V tomto pr\u00edpade \u00fato\u010dn\u00edk zapuzdruje viacero po\u017eiadaviek vo vn\u00fatri Tor bunky \u2014 \u0161ifrovan\u00e9ho bal\u00edka, ktor\u00fd sa pren\u00e1\u0161a medzi uzlami Tor siete v jednom TCP pakete.<\/p>\n<p>\u201eKe\u010f\u017ee Tor re\u0165azec pre onion slu\u017eby prech\u00e1dza celou cestou a\u017e k serveru, m\u00f4\u017eeme zaru\u010di\u0165, \u017ee po\u017eiadavky dorazia s\u00fa\u010dasne,\u201c hovor\u00ed Van Goetem.<\/p>\n<h3>\u010casov\u00e9 \u00fatoky v praxi<\/h3>\n<p>\nVo svojej \u0161t\u00fadii v\u00fdskumn\u00edci sk\u00famali \u010dasov\u00e9 \u00fatoky v troch r\u00f4znych scen\u00e1roch.<\/p>\n<p>Pri <b>priame \u010dasov\u00e9 \u00fatoky<\/b> \u00fato\u010dn\u00edk sa priamo prip\u00e1ja k serveru a sna\u017e\u00ed sa usporiada\u0165 \u00fanik citliv\u00fdch inform\u00e1ci\u00ed s\u00favisiacich s aplik\u00e1ciou.<\/p>\n<p>\u201eKe\u010f\u017ee pri v\u00e4\u010d\u0161ine webov\u00fdch aplik\u00e1ci\u00ed sa nezoh\u013ead\u0148uje, \u017ee \u010dasov\u00e9 \u00fatoky m\u00f4\u017eu by\u0165 ve\u013emi praktick\u00e9 a presn\u00e9, domnievame sa, \u017ee mnoh\u00e9 webov\u00e9 str\u00e1nky s\u00fa vo\u010di tak\u00fdmto \u00fatokom zranite\u013en\u00e9,\u201c hovor\u00ed Van Goeten.<\/p>\n<p>Pri <b>medzisite \u010dasov\u00e9 \u00fatoky<\/b> \u00fato\u010dn\u00edk vykon\u00e1va po\u017eiadavky na in\u00e9 webov\u00e9 str\u00e1nky prostredn\u00edctvom prehliada\u010da obete a rob\u00ed predpoklady o obsahu citliv\u00fdch inform\u00e1ci\u00ed sledovan\u00edm sekvencie odpoved\u00ed.<\/p>\n<p>\u00dato\u010dn\u00edci pou\u017eili tento sch\u00e9mu na zneu\u017eitie zranite\u013enosti v programe na vypl\u00e1canie odmien za chyby HackerOne a z\u00edskali inform\u00e1cie ako k\u013e\u00fa\u010dov\u00e9 slov\u00e1 pou\u017eit\u00e9 v d\u00f4vern\u00fdch hl\u00e1seniach o neopraven\u00fdch zranite\u013enostiach.<\/p>\n<p>\u201eH\u013eadal som pr\u00edpady, kde bola \u010dasov\u00e1 \u00fatokov\u00e1 technika predt\u00fdm zaznamenan\u00e1, ale nebola pova\u017eovan\u00e1 za efekt\u00edvnu. Na chybu HackerOne u\u017e bolo hl\u00e1sen\u00e9 minim\u00e1lne trikr\u00e1t (identifika\u010dn\u00e9 \u010d\u00edsla ch\u00fdb: <noindex><a rel=\"nofollow\" href=\"https:\/\/hackerone.com\/reports\/350432\">350432<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/hackerone.com\/reports\/348168\">348168<\/a><\/noindex> a <noindex><a rel=\"nofollow\" href=\"https:\/\/hackerone.com\/reports\/4701\">4701<\/a><\/noindex>), ale nebola opraven\u00e1, preto\u017ee sa pova\u017eovalo, \u017ee tento \u00fatok nie je mo\u017en\u00e9 vyu\u017ei\u0165. Potom som vytvoril jednoduch\u00fd intern\u00fd v\u00fdskumn\u00fd projekt s \u010dasov\u00fdmi \u00fatokmi.<\/p>\n<p>V tom \u010dase to st\u00e1le nebolo ve\u013emi optimalizovan\u00e9, preto\u017ee sme sa na\u010falej zaoberali detailami \u00fatoku, no aj tak sa uk\u00e1zalo ako celkom presn\u00e9 (na mojej dom\u00e1cej WiFi sieti sa mi podarilo dosiahnu\u0165 ve\u013emi presn\u00e9 v\u00fdsledky).<\/p>\n<p>V\u00fdskumn\u00edci sa tie\u017e pok\u00fasili vykona\u0165 <b>\u010dasov\u00e9 \u00fatoky na WiFi protokol WPA3<\/b>.<\/p>\n<p>Jeden zo spoluautorov \u010dl\u00e1nku Mati Vanhof u\u017e sk\u00f4r odhalil <noindex><a rel=\"nofollow\" href=\"https:\/\/wpa3.mathyvanhoef.com\/\">potenci\u00e1lny \u00fanik \u010dasu v protokole overovania spojenia WPA3.<\/a><\/noindex>. Av\u0161ak \u010das bol bu\u010f pr\u00edli\u0161 kr\u00e1tky na pou\u017eitie na vysoko v\u00fdkonn\u00fdch zariadeniach, alebo ho nebolo mo\u017en\u00e9 pou\u017ei\u0165 proti serverom.<\/p>\n<p>\u201eS pomocou nov\u00e9ho typu \u00fatokov bez \u010dasu sme dok\u00e1zali, \u017ee je skuto\u010dne mo\u017en\u00e9 vyu\u017ei\u0165 authentication handshake (EAP-pwd) proti serverom, aj ke\u010f be\u017e\u00ed na nich v\u00fdkonn\u00e9 zariadenie,\u201c hovor\u00ed Van Goetem.<\/p>\n<h3>Ide\u00e1lny moment<\/h3>\n<p>\nVo svojej pr\u00e1ci vedci uviedli odpor\u00fa\u010dania na ochranu serverov pred bez\u010dasov\u00fdmi \u00fatokmi, ako je obmedzenie vykon\u00e1vania na kon\u0161tantn\u00fd \u010das a prid\u00e1vanie n\u00e1hodnej latencie. Na realiz\u00e1ciu praktick\u00fdch ochrann\u00fdch prostriedkov proti priamym \u00fatokom v \u010dase, ktor\u00e9 by mali minim\u00e1lny dopad na pr\u00e1cu siete, s\u00fa potrebn\u00e9 \u010fal\u0161ie v\u00fdskumy.<\/p>\n<p>\u201eMysl\u00edme si, \u017ee t\u00e1to oblas\u0165 v\u00fdskumu je na ve\u013emi ran\u00fdch \u0161t\u00e1di\u00e1ch a vy\u017eaduje si ove\u013ea hlb\u0161ie presk\u00famanie,\u201c hovor\u00ed Van Goetem.<\/p>\n<p>V bud\u00facich v\u00fdskumoch sa bud\u00fa m\u00f4c\u0165 sk\u00fama\u0165 \u010fal\u0161ie met\u00f3dy, ktor\u00e9 by \u00fato\u010dn\u00edci mohli pou\u017ei\u0165 na vykon\u00e1vanie s\u00fabe\u017en\u00fdch \u00fatokov v \u010dase, in\u00e9 protokoly a medzi\u010dl\u00e1nky, na ktor\u00e9 m\u00f4\u017eu by\u0165 \u00fatoky zameran\u00e9, ako aj vyhodnoti\u0165 zranite\u013enosti popul\u00e1rnych webov\u00fdch str\u00e1nok, ktor\u00e9 umo\u017e\u0148uj\u00fa vykon\u00e1va\u0165 tak\u00e9to v\u00fdskumy v r\u00e1mci programu bug bounty.<\/p>\n<p>N\u00e1zov \u201ebez\u010dasov\u00fd\u201c bol zvolen\u00fd, \u201epreto\u017ee pri t\u00fdchto \u00fatokoch sme nepou\u017e\u00edvali \u017eiadne (absol\u00fatne) inform\u00e1cie o \u010dase,\u201c vysvet\u013euje Van Goetem.<\/p>\n<p>\u201eOkrem toho ich mo\u017eno pova\u017eova\u0165 za \u201ebez\u010dasov\u00e9\u201c aj preto, \u017ee (dia\u013ekov\u00e9) \u00fatoky v \u010dase sa pou\u017e\u00edvaj\u00fa u\u017e d\u00e1vno, a pod\u013ea na\u0161ich v\u00fdskumov sa situ\u00e1cia len zhor\u0161\u00ed.\u201c<\/p>\n<p><center><div class=\"youtube-placeholder\" data-id=\"DjRwTsUQt58\" onclick=\"loadVideo(this)\">\r\n        <img decoding=\"async\" src=\"https:\/\/img.youtube.com\/vi\/DjRwTsUQt58\/hqdefault.jpg\" alt=\"Prehrajte video\" loading=\"lazy\" width=\"480\" height=\"360\" style=\"width:100%;height:auto;\">\r\n        <div class=\"play-button\"><\/div>\r\n    <\/div><\/center><br \/>\nPln\u00fd text spr\u00e1vy s Usenix sa nach\u00e1dza <noindex><a rel=\"nofollow\" href=\"https:\/\/www.usenix.org\/system\/files\/sec20-van_goethem.pdf\">tu<\/a><\/noindex>.<\/p>\n<p><\/p>\n<h4>Na z\u00e1klade reklamy<\/h4>\n<p>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/vdsina.ru\/cloud-servers?partner=habr105\">V\u00fdkonn\u00e9 VDS<\/a><\/noindex> s ochranou proti DDoS \u00fatokom a najnov\u0161\u00edm hardv\u00e9rom. To v\u0161etko je o na\u0161ich <b>epick\u00fdch serveroch<\/b>. Maxim\u00e1lna konfigur\u00e1cia \u2014 128 jadier CPU, 512 GB RAM, 4000 GB NVMe.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/vdsina.ru\/cloud-servers?partner=habr105\"><img decoding=\"async\" alt=\"Organiz\u00e1cia efekt\u00edvnych \u010dasov\u00fdch \u00fatokov pomocou HTTP\/2 a WPA3\" src=\"\/wp-content\/uploads\/2020\/09\/24ab2d9ab30dd2a713ee4efdcaf75fac.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/vdsina\/blog\/519592\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041d\u043e\u0432\u0430\u044f \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0430 \u0432\u0437\u043b\u043e\u043c\u0430 \u043f\u0440\u0435\u043e\u0434\u043e\u043b\u0435\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u00ab\u0434\u0436\u0438\u0442\u0442\u0435\u0440\u0430 \u0441\u0435\u0442\u0438\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c \u041d\u043e\u0432\u0430\u044f \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0430, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u0430\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u041b\u0435\u0432\u0435\u043d\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0411\u0435\u043b\u044c\u0433\u0438\u044f) \u0438 \u041d\u044c\u044e-\u0419\u043e\u0440\u043a\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0410\u0431\u0443-\u0414\u0430\u0431\u0438, \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0430, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0442\u0435\u0447\u0435\u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u042d\u0442\u0430 \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0430 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c Timeless Timing Attacks, \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u0432 \u044d\u0442\u043e\u043c \u0433\u043e\u0434\u0443 \u043d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Usenix, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":94706,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-94705","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041d\u043e\u0432\u0430\u044f \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0430 \u0432\u0437\u043b\u043e\u043c\u0430 \u043f\u0440\u0435\u043e\u0434\u043e\u043b\u0435\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u00ab\u0434\u0436\u0438\u0442\u0442\u0435\u0440\u0430 \u0441\u0435\u0442\u0438\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/organizacziya-effektivnyh-atak-po-vremeni-s-pomoshhyu-http-2-i-wpa3\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u043f\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e HTTP\/2 \u0438 WPA3 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041d\u043e\u0432\u0430\u044f \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0430 \u0432\u0437\u043b\u043e\u043c\u0430 \u043f\u0440\u0435\u043e\u0434\u043e\u043b\u0435\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u00ab\u0434\u0436\u0438\u0442\u0442\u0435\u0440\u0430 \u0441\u0435\u0442\u0438\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/organizacziya-effektivnyh-atak-po-vremeni-s-pomoshhyu-http-2-i-wpa3\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-20T05:42:30+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-20T05:42:30+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Organizovanie efekt\u00edvnych \u00fatokov v \u010dase s pomocou HTTP\/2 a WPA3 | ProHoster","description":"Nov\u00e1 met\u00f3da hackovania prekon\u00e1va probl\u00e9m \u201esie\u0165ov\u00e9ho jitteru\u201c, ktor\u00fd m\u00f4\u017ee ovplyvni\u0165 \u00faspe\u0161nos\u0165 \u00fatokov cez bo\u010dn\u00e9 kan\u00e1ly.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/organizacziya-effektivnyh-atak-po-vremeni-s-pomoshhyu-http-2-i-wpa3","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u043f\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e HTTP\/2 \u0438 WPA3 | ProHoster","og:description":"\u041d\u043e\u0432\u0430\u044f \u043c\u0435\u0442\u043e\u0434\u0438\u043a\u0430 \u0432\u0437\u043b\u043e\u043c\u0430 \u043f\u0440\u0435\u043e\u0434\u043e\u043b\u0435\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u00ab\u0434\u0436\u0438\u0442\u0442\u0435\u0440\u0430 \u0441\u0435\u0442\u0438\u00bb, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c","og:url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/organizacziya-effektivnyh-atak-po-vremeni-s-pomoshhyu-http-2-i-wpa3","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-20T05:42:30+00:00","article:modified_time":"2020-09-20T05:42:30+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"94705","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:19:22","updated":"2022-09-27 17:10:32","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/94705","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=94705"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/94705\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/94706"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=94705"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=94705"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=94705"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}