{"id":31420,"date":"2019-10-31T21:41:09","date_gmt":"2019-10-31T18:41:09","guid":{"rendered":"https:\/\/prohoster.info\/blog\/okolo-5-5-sajtov-ispolzuyut-uyazvimye-realizatsii-tls\/"},"modified":"2019-10-31T21:41:09","modified_gmt":"2019-10-31T18:41:09","slug":"okolo-5-5-sajtov-ispolzuyut-uyazvimye-realizatsii-tls","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/okolo-5-5-sajtov-ispolzuyut-uyazvimye-realizatsii-tls","title":{"rendered":"Rreth 5.5% e faqeve p\u00ebrdorin implementime t\u00eb prekshme TLS","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Nj\u00eb grup k\u00ebrkuesish nga Universiteti Ca' Foscari (Itali) analizoi 90,000 hoste t\u00eb lidhura me 10,000 faqet m\u00eb t\u00eb m\u00ebdha sipas renditjes Alexa dhe arriti n\u00eb p\u00ebrfundimin se 5.5% e tyre kan\u00eb probleme serioze me sigurin\u00eb n\u00eb implementimet e TLS. Gjat\u00eb hulumtimit u shqyrtuan problemet me p\u00ebrdorimin e metodave t\u00eb dob\u00ebta t\u00eb enkriptimit: 4,818 nga hostet problematike qen\u00eb t\u00eb ekspozuar ndaj sulmeve MITM, 733 p\u00ebrmbanin dob\u00ebsi q\u00eb lejonin dekodimin e plot\u00eb t\u00eb trafikut, nd\u00ebrsa 912 lejonin kryerjen e nj\u00eb dekodimi t\u00eb pjessh\u00ebm (p\u00ebr shembull, nxjerrjen e cookie-ve t\u00eb sesionit).<\/p>\n
N\u00eb 898 faqe u identifikuan dob\u00ebsi serioze q\u00eb mund t\u00eb komprometojn\u00eb ato plot\u00ebsisht, p\u00ebr shembull, p\u00ebrmes organizimit t\u00eb injeksionit t\u00eb skripteve n\u00eb faqet e internetit. 660 (73.5%) nga k\u00ebto faqe p\u00ebrdornin n\u00eb faqet e tyre skripte t\u00eb jashtme, t\u00eb ngarkuara nga hoste t\u00eb jasht\u00ebm t\u00eb preksh\u00ebm, q\u00eb demonstrojn\u00eb aktualitetin e sulmeve indirekte dhe mund\u00ebsin\u00eb e p\u00ebrhapjes kaskad\u00eb (si rast, mund t\u00eb p\u00ebrmendim hackimin e statistikave t\u00eb StatCounter, q\u00eb mund t\u00eb \u00e7onte n\u00eb komprometimin e m\u00eb shum\u00eb se dy milion faqeve t\u00eb tjera).<\/p>\n
10% e t\u00eb gjitha formave t\u00eb hyrjes n\u00eb faqet e studiuara kishin probleme me privat\u00ebsin\u00eb, t\u00eb cilat potencialisht mund t\u00eb \u00e7onin n\u00eb vjedhjen e fjal\u00ebkalimeve. 412 faqe kishin probleme me kapjen e Cookies t\u00eb sesioneve. 543 faqe kishin probleme me kontrollin e integritetit t\u00eb Cookies t\u00eb sesioneve. M\u00eb shum\u00eb se 20% e Cookies t\u00eb studiuara ishin t\u00eb ekspozuara ndaj rrjedhjes s\u00eb informacionit p\u00ebr individ\u00eb q\u00eb kontrollonin subdomenet. \n Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"