{"id":169865,"date":"2026-04-23T18:24:28","date_gmt":"2026-04-23T16:24:28","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-api-indexeddb-pozvolyayushhaya-identificzirovat-polzovatelej-firefox-i-tor-browser"},"modified":"2026-04-23T18:24:28","modified_gmt":"2026-04-23T16:24:28","slug":"uyazvimost-v-api-indexeddb-pozvolyayushhaya-identificzirovat-polzovatelej-firefox-i-tor-browser","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-v-api-indexeddb-pozvolyayushhaya-identificzirovat-polzovatelej-firefox-i-tor-browser","title":{"rendered":"Nj\u00eb dob\u00ebsi n\u00eb API-n\u00eb IndexedDB, e cila mund\u00ebson identifikimin e p\u00ebrdoruesve n\u00eb Firefox dhe Tor Browser","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
N\u00eb motorin e shfletuesit Gecko \u00ebsht\u00eb identifikuar nj\u00eb dob\u00ebsi (CVE-2026-6770), e cila lejon krijimin e identifikuesve unik\u00eb p\u00ebr ndjekjen e hapjes s\u00eb disa faqeve nga nj\u00eb shfletues i vet\u00ebm. Problemi shfaqet n\u00eb t\u00eb gjitha shfletuesit e bazuar n\u00eb Firefox, duke p\u00ebrfshir\u00eb Tor Browser, dhe funksionon edhe n\u00eb modin privat. Identifikuesit veprojn\u00eb brenda procesit aktual t\u00eb shfletuesit dhe fshihen pas riaktivizimit t\u00eb shfletuesit. Dob\u00ebsia \u00ebsht\u00eb eliminua n\u00eb versionet e Firefox 150\/140.10.0 dhe Tor Browser 15.0.10. <\/p>\n
P\u00ebr t\u00eb formuar identifikuesin, mjafton t\u00eb krijosh n\u00eb faqe t\u00eb ndryshme p\u00ebrmes API IndexedDB t\u00eb nj\u00ebjt\u00ebn sekuenc\u00eb BD, pas s\u00eb cil\u00ebs vler\u00ebsohet renditja e k\u00ebtyre BDs si rezultat i thirrjes s\u00eb metod\u00ebs indexedDB.databases(). P\u00ebr instanca t\u00eb ndryshme t\u00eb shfletuesit, renditja e listimit t\u00eb BDs do t\u00eb jet\u00eb e ndryshme, por p\u00ebr nj\u00eb - do t\u00eb p\u00ebrs\u00ebritet. Ky rend ruhet deri n\u00eb rinisjen e shfletuesit dhe riprodhohet pavar\u00ebsisht nga faqja q\u00eb \u00ebsht\u00eb e hapur. <\/p>\n
P\u00ebr shembull, pasi t\u00eb krijohet BD 'a,b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,r' n\u00eb nj\u00eb instanc\u00eb t\u00eb Firefox, metoda indexedDB.databases() gjithmon\u00eb do t\u00eb kthej\u00eb 'g,c,p,a,l,f,n,r,d,j,b,o,h,e,m,i,k' n\u00eb nj\u00eb tjet\u00ebr instanc\u00eb - 'j,b,o,h,e,m,i,k,f,n,r,d,g,c,p,a,l'. Duke krijuar 16 BD, mund t\u00eb merrni rreth 44 bit entropie p\u00ebr identifikim. Krijimi i identifikuesit nuk ndikohet nga pastrimi i magazinave lokale t\u00eb shfletuesit dhe nga p\u00ebrdit\u00ebsimi i zinxhirit t\u00eb nyjave Tor me butonin 'New Identity' n\u00eb Tor Browser. Metoda gjithashtu mund t\u00eb p\u00ebrdoret p\u00ebr identifikimin e p\u00ebrdoruesve n\u00eb dritaren e shikimit privat. <\/p>\n
Dob\u00ebsia shkaktohet nga ve\u00e7orit\u00eb e implementimit t\u00eb API-t IndexedDB, ku rendi i DB-ve ndikohet nga aranzhimi i strukturave brenda, specifike p\u00ebr \u00e7do ekzemplar t\u00eb procesit t\u00eb shfletuesit. Renditja e elementeve n\u00eb list\u00ebn e DB-ve, e kthyer nga metoda indexedDB.databases(), nuk varet nga emrat e DB-ve apo rendi i krijimit t\u00eb tyre, por nga pozita n\u00eb tabela globale t\u00eb hash-it p\u00ebr UUID-t\u00eb e brendsh\u00ebm t\u00eb asociuar me emrat e skedar\u00ebve, n\u00eb t\u00eb cil\u00ebt ruhen DB-t\u00eb n\u00eb disk. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"