Vagadziri vefingerprintjs raibhurari, iyo inokutendera kuti ugadzire zviziviso zvebrowser mune passive modhi zvichibva pane zvisina kunanga maficha senge screen resolution, WebGL maficha, rondedzero akaiswa plugins uye mafonti, yakaratidza nzira nyowani yekuzivikanwa yakavakirwa paongororo yezvakajairwa maapplication akaiswa. pamushandisi uye nekushanda kuburikidza nekutarisa rutsigiro mubrowser yekuwedzera maprotocol handlers. Iyo script kodhi nekuitwa kweiyo nzira inoburitswa pasi peMIT rezinesi.
Cheki inoitwa zvichibva pakuongorora kusungirirwa kwevanobata kune makumi matatu nemaviri maapplication akakurumbira. Semuenzaniso, nekuona kuvepo kwe URL scheme handlers telegraph://, slack:// uye skype:// mubrowser, unogona kugumisa kuti iyo system ine telegraph, slack uye skype application, uye shandisa ruzivo urwu sechiratidzo. paunenge uchigadzira chiziviso chehurongwa. Sezvo runyoro rwevabatiki rwakafanana kune ese mabhurawuza ari muhurongwa, chiziviso hachichinji kana uchichinja mabhurawuza uye chinogona kushandiswa muChrome, Firefox, Safari, Brave, Yandex Browser, Edge, uye kunyange Tor Browser.
Iyo nzira inobvumidza iwe kugadzira 32-bit identifiers, i.e. mumwe nemumwe haabvumidze kuwana kurongeka kukuru, asi zvine musoro sechinhu chekuwedzera musanganiswa nemamwe ma parameter. Chinhu chinocherechedzwa chakashata cheiyo nzira kuoneka kwekuyedza kuzivikanwa kwemushandisi - kana uchigadzira chiziviso pane yakarongwa demo peji, diki asi rinonyatso onekwa hwindo rinovhura mukona yezasi yekurudyi umo vanobata vanopuruzira kwenguva yakati rebei. Izvi zvinokanganisa hazvioneke muTor Browser, umo iyo identifier inogona kuverengerwa isingaonekwe.
Kuti uone kuvepo kwechishandiso, script inoedza kuvhura chinongedzo chine chekuita nechekunze chibatiso pahwindo repop-up, mushure meizvozvo bhurawuza rinoratidza dialog richikukumbira kuti uvhure zvirimo mune inosanganisirwa application kana application iri kutariswa. iripo, kana kuratidza peji yekukanganisa kana application isiri pahurongwa. Kuburikidza nekutsvaga kwakatevedzana kwevakajairwa vekunze vanobata uye kuongororwa kwekukanganisa kunodzoka, munhu anogona kugumisa kuti sisitimu ine zvirongwa zviri kuedzwa.
MuChrome 90 yeLinux, iyo nzira haina kushanda uye bhurawuza yakaratidza yakajairwa mashandiro ekusimbisa dialog kune ese kuedza kutarisa mubati (muChrome yeWindows uye macOS nzira inoshanda). MuFirefox 88 yeLinux, mune yakajairika modhi uye mune incognito modhi, script yakaona kuvepo kweakaiswa mamwe maapplication kubva pane iyo rondedzero, uye chokwadi chekuzivikanwa chakafungidzirwa pa99.87% (35 yakafanana machisi pazviuru makumi maviri nematanhatu bvunzo dzakaitwa). MuTor Browser inomhanya pane imwecheteyo sisitimu, chiziviso chakagadzirwa chakafanana nebvunzo muFirefox.
Sezvineiwo, iyo yekuwedzera dziviriro muTor Browser yakaridza hutsinye joke uye yakashanduka kuita mukana wekuita chiziviso chisingaonekwe nemushandisi. Nekuda kwekuremara kwema dialog ekusimbisa ekushandiswa kwevabati vekunze muTor Browser, zvakazoitika kuti zvikumbiro zvekusimbisa zvinogona kuvhurwa mune iframe uye kwete muhwindo repopup (kuparadzanisa kuvapo uye kusavapo kwevanobata, iyo yakafanana-yekutanga mitemo. vhara kupinda kwemapeji ane zvikanganiso uye bvumidza kupinda kune nezve: isina mapeji). Nekuda kwekudzivirira kwemafashama, kutarisa muTor Browser kunotora zvinooneka kureba (masekonzi gumi pakushandisa).
Source: opennet.ru