Browser fingerprint: chii, kuti inoshanda sei, ingave ichityora mutemo uye maitiro ekuzvidzivirira. Chikamu 1

Kubva kuSelectel: chinyorwa ichi ndicho chekutanga munhevedzano yeshanduro dzechinyorwa chakadzama nezvebrowser printing yeminwe uye kuti tekinoroji inoshanda sei. Hezvino zvese zvawaida kuziva asi wakatya kubvunza nezvenyaya iyi.

Chii chinonzi mafingerprints ebrowser?

Iyi inzira inoshandiswa nemasaiti uye masevhisi kuronda vashanyi. Vashandisi vanopihwa yakasarudzika identifier (fingerprint). Iine ruzivo rwakawanda nezvezvirongwa uye kugona kwebrowser yevashandisi, iyo inoshandiswa kuvazivisa. Uye zvakare, browser yemunwe zvigunwe inobvumira mawebhusaiti kuteedzera maitiro ekuti gare gare aone vashandisi zvakatonyanya.

Iyo yakasarudzika inenge yakafanana neyeiyo chaiyo yeminwe. Vekupedzisira chete ndivo vanotorwa nemapurisa kuti vatsvage vanofungirwa mhosva. Asi browser yefingerprinting tekinoroji haishandiswe kuronda matsotsi. Mushure mezvose, hatisi matsotsi pano, handiti?

Ndeipi data inounganidzwa nebrowser fingerprint?

Isu taiziva kuti munhu anogona kuteverwa neIP kumashure mumazuva ekutanga eInternet. Asi munyaya iyi zvinhu zvose zvakanyanya kuoma. Iyo browser yemunwe zvigunwe inosanganisira iyo IP kero, asi iyi haisi iyo inonyanya kukosha ruzivo. Muchokwadi, IP haidiwe kukuzivisa iwe.

Maererano nekutsvakurudza EFF (Electronic Frontier Foundation), browser yemunwe zvigunwe zvinosanganisira:

• Mushandisi-mumiriri (kusanganisira kwete browser chete, asiwo OS vhezheni, rudzi rwechishandiso, marongero emitauro, maturusi, nezvimwewo).
• Timezone.
• Screen resolution uye kudzika kwemavara.
• Supercookies.
• Cookie settings.
• Mafonti eSistimu.
• Browser plugins uye shanduro dzavo.
• Shanyira log.

Sekureva kwechidzidzo cheEFF, kusarudzika kwebrowser zvigunwe zvemunwe zvakanyanya. Kana tikataura nezvehuwandu, saka kamwe chete mumakesi 286777 ndipo panoitika mutambo wakakwana webrowser zvigunwe zvevashandisi vaviri vakasiyana.

Maererano nezvimwe chidzidzo chimwe, iko kurongeka kwekuzivikanwa kwemushandisi uchishandisa browser yemunwe zvigunwe ndeye 99,24%. Kuchinja imwe yebrowser parameters kunoderedza iko kurongeka kwekuzivikanwa kwemushandisi ne 0,3% chete. Kune browser yezvigunwe bvunzo bvunzo inoratidza kuti ingani ruzivo rwuri kuunganidzwa.

Browser fingerprinting inoshanda sei?

Sei zvichikwanisika kuunganidza ruzivo rwebrowser zvachose? Zviri nyore - browser yako inotaurirana newebhu server paunokumbira kero yesaiti. Mumamiriro akajairwa, masaiti nemasevhisi zvinopa yakasarudzika identifier kumushandisi.

Somuenzaniso, "gh5d443ghjflr123ff556ggf".

Iyi tambo yemavara asina kujairika nenhamba inobatsira sevha kukuziva, batanidza browser yako uye zvaunofarira newe. Zviito zvaunotora online zvichapihwa kodhi yakafanana.

Saka, kana iwe wakapinda mu Twitter, uko kune rumwe ruzivo nezvako, iyi data yese inozobatanidzwa otomatiki neicho chiziviso.

Ehe, iyi kodhi haizove newe kwemazuva ako ese. Kana iwe ukatanga kusefa kubva kune imwe mudziyo kana browser, iyo ID inogona kuchinja zvakare.

Mawebhusaiti anounganidza sei data revashandisi?

Iwo maviri-tier maitiro anoshanda pamativi ese server uye nedivi revatengi.

Server side

Site access logs

Muchiitiko ichi, tiri kutaura nezvekuunganidza data yakatumirwa nebrowser. Zvishoma izvi:

• Yakakumbirwa protocol.
• Yakumbirwa URL.
• IP yako.
• Referrer.
• Mushandisi-mumiririri.

Mazita

Masevha ewebhu anoagamuchira kubva kubrowser yako. Misoro yakakosha nekuti inobvumidza iwe kuve nechokwadi chekuti saiti yakakumbirwa inoshanda nebrowser yako.

Semuenzaniso, ruzivo rwemusoro runoita kuti saiti izive kana uri kushandisa desktop kana nharembozha. Muchiitiko chechipiri, redirect ichaitika kune iyo vhezheni yakagadziridzwa nharembozha. Nehurombo, iyi data imwe chete inozoguma mune zvigunwe zvako.

Cookies

Zvese zviri pachena pano. Masevha ewebhu anogara achichinjana makuki nemabhurawuza. Kana iwe ukagonesa makuki muzvirongwa zvako, anochengetwa pachishandiso chako uye anotumirwa kuseva pese paunowana saiti yawakashanyira kare.

Makuki anokubatsira kusefa zvakasununguka, asi anoburitsawo rumwe ruzivo nezvako.

Canvas Fingerprinting

Iyi nzira inoshandisa HTML5 canvas element, iyo WebGL inoshandisawo kupa 2D uye 3D mifananidzo mubrowser.

Iyi nzira inowanzomanikidza bhurawuza kuti igadzirise zvirimo, zvinosanganisira mifananidzo, zvinyorwa, kana zvese. Maitiro aya haaonekwe kwauri nekuti zvese zvinoitika kumashure.

Kana maitirwo apera, canvas fingerprinting inoshandura graphic kuita hashi, inova iyo yakasarudzika identifier yatataura pamusoro.

Iyi nzira inobvumidza iwe kuti uwane iyo inotevera ruzivo nezve mudziyo wako:

• Graphics adapta.
• Graphics adapta mutyairi.
• processor (kana pasina yakatsaurirwa giraidhi chip).
• Mafonti akaiswa.

Client side regging

Izvi zvinofungidzira kuti browser yako inotsinhanisa ruzivo rwakawanda nekuda kwe:

Adobe Flash uye JavaScript

Maererano ne FAQ AmIUnique, kana iwe uine JavaScript yakagoneswa, ipapo data nezve plugins yako kana hardware yakatarwa inotumirwa kunze.

Kana Flash ikaiswa uye ikavhurwa, izvi zvinopa wechitatu mucherechedzi ruzivo rwakanyanya, kusanganisira:

• Nguva yako nzvimbo.
• OS shanduro.
• Screen resolution.
• Yakazara rondedzero yemafonti akaiswa pane system.

Cookies

Vanoita basa rinokosha zvikuru mukutema matanda. Saka, iwe kazhinji unofanirwa kusarudza kana uchibvumira bhurawuza kugadzirisa makuki kana kudzima zvachose.

Muchiitiko chekutanga, sevha yewebhu inogamuchira chete huwandu hukuru hweruzivo nezve mudziyo wako uye zvaunofarira. Kana iwe usingagamuchire makuki, mawebhusaiti acharamba achigamuchira rumwe ruzivo nezve browser yako.

Sei browser yeminwe ichidiwa?

Kunyanya kuitira kuti mushandisi wemudziyo agamuchire webhusaiti yakagadziridzwa pamudziyo wake, zvisinei nekuti anopinda paInternet kubva patablet kana smartphone.

Mukuwedzera, teknolojia inoshandiswa pakushambadzira. Ichi chingori chakakwana chekuchera data chishandiso.

Saka, kana wagamuchira ruzivo rwakaunganidzwa nesevha, vatengesi vezvinhu kana masevhisi vanogona kugadzira kushambadzira kwakanangwa kwakanangwa nekuita zvemunhu. Kurongeka kwekutarisa kwakakwira zvakanyanya pane kungoshandisa IP kero.

Semuyenzaniso, vashambadziri vanogona kushandisa bhurawuza zvigunwe zvekudhindisa zvigunwe kuti vawane runyoro rwevashandisi vesaiti vane zvigadziriso zvescreen zvinogona kunzi zvakaderera (semuenzaniso, 1300*768) vari kutsvaga mamonitor emhando yepamusoro muchitoro chemutengesi. Kana vashandisi vanongovhura saiti vasina chinangwa chekutenga chero chinhu.

Ruzivo rwakawanikwa runogona kushandiswa kunanga kushambadza kwemhando yepamusoro, yepamusoro-resolution monitors kune vashandisi vane zvidiki uye zvechinyakare zviratidziro.

Mukuwedzera, tekinoroji yekunyorera zvigunwe yebrowser inoshandiswawo ku:

• Kubiridzira uye kuona botnet. Iri ibasa rinobatsira chaizvo kumabhangi uye masangano emari. Ivo vanokutendera iwe kuparadzanisa maitiro emushandisi kubva kune anorwisa chiitiko.
• Tsanangudzo yeVPN uye vashandisi veproxy. Masangano ehungwaru anogona kushandisa nzira iyi kuronda vashandisi veInternet neakavanzika IP kero.

Pakupedzisira, kunyangwe kana browser yekudhindisa zvigunwe ichishandiswa kune zviri pamutemo zvinangwa, zvichiri zvakanyanya kuipa kune kuvanzika kwevashandisi. Kunyanya kana vekupedzisira vari kuedza kuzvidzivirira vachishandisa VPN.

Uyezve, browser zvigunwe zvigunwe zvinogona kuve shamwari yepamoyo yehacker. Kana vakaziva iwo chaiwo ruzivo rwechishandiso chako, vanogona kushandisa zvakakosha kubira mudziyo. Hapana chakaoma pane izvi - chero cybercriminal inogona kugadzira webhusaiti yenhema ine script yemunwe.

Ngatikuyeuchidzei kuti chinyorwa ichi chinongova chikamu chekutanga, kune mamwe maviri achauya. Ivo vanogadzirisa zviri pamutemo kuunganidza data remunhu kubva kune vashandisi, mukana wekushandisa iyi data, uye nzira dzekudzivirira kubva kune vanonyanya kushingaira "vanotora".

Source: www.habr.com