uBlock Origin 1.25 yakaburitswa ine dziviriro kubva ku block bypass kuburikidza neDNS manipulation

Inowanikwa kuburitswa kutsva kwezvisina kufanira zvemukati blocker uBlock Mavambo 1.25, iyo inopa kuvharika kwekushambadzira, zvinhu zvakashata, kodhi yekutevera mafambiro, JavaScript miners uye zvimwe zvinhu zvinokanganisa kushanda kwakajairika. Iyo uBlock Origin yekuwedzera ndeyekuita kwepamusoro uye ndangariro inoshanda-yekuwedzera iyo inobvumidza iwe kwete chete kubvisa zvinhu zvinogumbura, asiwo kuderedza kushandiswa kwezviwanikwa uye kukurumidza kurodha peji.

Mushanduro itsva, vashandisi veFirefox vanopihwa kuvharika kwemaitiro matsva ekutevera mafambiro uye kutsiviwa kwezvikamu zvekushambadzira, zvichibva pakugadzirwa kwenzvimbo yakaparadzana muDNS mukati menzvimbo yesaiti iripo. Iyo yakagadzirwa subdomain inonongedza kune ad network server (semuenzaniso, f7ds.liberation.fr CNAME rekodhi yakagadzirwa inonongedza kune yekutevera server liberation.eulerian.net), saka iyo ad kodhi inoiswa zviri pamutemo kubva kune imwecheteyo yekutanga domain sesaiti. Iro zita reiyo subdomain rinosarudzwa muchimiro chechiziviso chisina kujairika, izvo zvinoita kuti kuvharika nemask kuve kwakaoma, sezvo subdomain yakabatana neiyo advertising network yakaoma kusiyanisa kubva kune subdomain yekurodha zvimwe zviwanikwa zvepaji peji.

Muiyo vhezheni itsva yeBlock Origin, kuona mugadziri ane hukama kuburikidza neCNAME akawedzera call for kugadzirisa zita muDNS, iro rinobvumira ma block list kuti aiswe kumazita anotungamirwa kuburikidza neCNAME zvakare.
Kubva pakuona kwekuita, kutsanangura CNAME hakufanire kuunza yakawedzera pamusoro, kunze kwekuparadza zviwanikwa zveCPU zvekushandisa zvakare mitemo yezita rakasiyana, sezvo bhurawuza rakatogadzirisa kana richiwana sosi, uye kukosha kunofanirwa kuvharwa. Paunoisa vhezheni itsva, unozofanirwa kupa mvumo yekutora ruzivo kubva kuDNS.

Iyo yakawedzerwa nzira yekuchengetedza yakavakirwa paCNAME kusimbiswa inogona kupfuudzwa nekusunga zita kuIP pasina kushandisa CNAME, asi nzira iyi inoomesera kuchengetedzwa nekuchengetedza zvivakwa (kana IP kero ye ad network ikachinja, uchada kuwana data. chinja pane vese vaparidzi DNS maseva) uye inogona kupfuudzwa nekugadzira blacklist ye tracker IP kero. MuBlock Origin kuvaka yeChrome, cheki yeCNAME haishande nekuti API dns.resolve() inongowanikwa chete yekuwedzera muFirefox uye isingatsigirwe muChrome.

Source: opennet.ru