30% yezviuru zvemasaiti makuru anoshandisa zvinyorwa zvekuzivikanwa kwakavanzika

Chikwata chevaongorori kubva kuMozilla, University of Iowa uye University of California yakabudiswa mhedzisiro yekudzidza kushandiswa kwekodhi pane mawebhusaiti kune yakavanzika mushandisi kuzivikanwa. Kuzivikanwa kwakavanzika kunoreva chizvarwa chezviziviso zvichibva pane isina kunanga data nezve mashandiro ebrowser, senge. screen resolution, runyorwa rwemhando dzeMIME dzinotsigirwa, maparamita chaiwo mumisoro (HTTP / 2 и HTTPS), kuongororwa kwekuiswa plugins uye mafonti, kuwanikwa kwemamwe maWeb API, chaiwo kumakadhi evhidhiyo maficha kupa uchishandisa WebGL uye Canvas, manipulation neCSS, tichifunga nezve default values, kushanda pakuvheneka network ports, kuongororwa kwemaitiro ekushanda nawo mouse и keyboard.

Ongororo ye100 zviuru zvinonyanya kufarirwa saiti zvinoenderana neAlexa ratings yakaratidza kuti 9040 yavo (10.18%) vanoshandisa kodhi kuti vaone vashanyi muchivande. Uyezve, kana tikafunga nezvechiuru chakanyanya kufarirwa masaiti, saka kodhi yakadaro yakaonekwa mu30.60% yezviitiko (266 nzvimbo), uye pakati pemasaiti ari kutora nzvimbo munzvimbo kubva pachiuru kusvika kune gumi zviuru, mu24.45% yezviitiko (2010 saiti) . Kuzivikanwa kwakavanzika kunonyanya kushandiswa muzvinyorwa zvinopihwa nevekunze masevhisi e anti-fraud uye kuongorora kunze bots, pamwe nekushambadzira network uye mushandisi mafambiro ekutevera masisitimu.

Kuti uone kodhi inoburitsa chiziviso chakavanzika, bhuku rekushandisa rakagadzirwa FP-Inspector, kodhi yake suggested pasi peMIT rezinesi. Iyo kiti yekushandisa inoshandisa muchina kudzidza matekiniki pamwe chete neakamira uye ane simba ongororo yeJavaScript kodhi. Zvinonzi kushandiswa kwemichina yekudzidza kwakawedzera zvakanyanya iko kurongeka kwekuziva kodhi yekuzivikanwa yakavanzika uye yakaratidza 26% mamwe magwaro ane dambudziko.
zvichienzaniswa nemaoko akatsanangurwa heuristics.

Mazhinji ezvinyorwa zvinozivikanwa haana kuverengerwa mune akajairika ekuvharira zvinyorwa. Dzinga, Adsafe,DuckDuckGo, Justuno и EasyPrivacy.
Mushure mekutumira zviziviso Vagadziri veiyo EasyPrivacy block list vaive yakasimbiswa chikamu chakasiyana chezvinyorwa zvakavanzika zvekuzivikanwa. Pamusoro pezvo, FP-Inspector yakatibvumira kuona dzimwe nzira nyowani dzekushandisa iyo Webhu API yekuzivikanwa iyo isati yambosangana nayo mukuita.

Semuyenzaniso, zvakaonekwa kuti ruzivo rwekurongeka kwekhibhodi (getLayoutMap), data yakasara mucache yakashandiswa kuona ruzivo (uchishandisa Performance API, kunonoka kuendeswa kwedata kunoongororwa, izvo zvinoita kuti zvikwanise kuona kana mushandisi akawana imwe dura kana kwete, pamwe nekuti peji rakambovhurwa), mvumo yakaiswa mubrowser (ruzivo nezve kuwana Ziviso, Geolocation uye Kamera API), kuvapo kweakasarudzika madhizaini uye asingawanzo sensors (magamepads, chaiwo heti dzechokwadi, pedyo sensors). Pamusoro pezvo, pakuona kuvepo kwema API akasarudzika kune mamwe mabhurawuza uye mutsauko mune API maitiro (AudioWorklet, setTimeout, mozRTCSessionDescription), pamwe nekushandiswa kweAudioContext API kuona maficha eizwi system, yakarekodhwa.

Chidzidzo chacho chakaongororawo nyaya yekuvhiringidzwa kwekushanda kwemaitiro emasaiti munyaya yekushandisa nzira dzekudzivirira kubva pakuzivikanwa kwakavanzika, zvichiita kuti kuvharwa kwezvikumbiro zvetiweki kana kurambidza kupinda kuAPI. Kusarudzika kudzora iyo API kune zvinyorwa chete zvakaonekwa neFP-Inspector zvakaratidzwa zvichikonzera kukanganisa kushoma pane Brave neTor Browser vachishandisa zvakanyanya kuomesesa zvirambidzo pama API mafoni, zvinogona kutungamira mukudonha kwedata.

Source: opennet.ru