{"id":35296,"date":"2019-10-31T22:03:29","date_gmt":"2019-10-31T19:03:29","guid":{"rendered":"https:\/\/prohoster.info\/blog\/predstavlena-novaya-tehnika-skrytoj-identifikatsii-sistemy-i-brauzera\/"},"modified":"2019-10-31T22:03:29","modified_gmt":"2019-10-31T19:03:29","slug":"predstavlena-novaya-tehnika-skrytoj-identifikatsii-sistemy-i-brauzera","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/predstavlena-novaya-tehnika-skrytoj-identifikatsii-sistemy-i-brauzera","title":{"rendered":"\u00cbsht\u00eb paraqitur nj\u00eb teknik\u00eb e re e identifikimit t\u00eb fsheht\u00eb t\u00eb sistemit dhe shfletuesit.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nj\u00eb grup hulumtuesish nga Universiteti Teknik i Gradc-it (Austria), i njohur m\u00eb par\u00eb p\u00ebr zhvillimin e metodave t\u00eb sulmeve. MDS<\/a><\/noindex>, NetSpectre<\/a><\/noindex> dhe Throwhammer<\/a><\/noindex>, revealed<\/a><\/noindex> informacione mbi teknik\u00ebn e re t\u00eb analiz\u00ebs p\u00ebrmes kanaleve t\u00eb jashtme, e cila i lejon t\u00eb p\u00ebrcaktoj\u00eb versionin e sakt\u00eb t\u00eb shfletuesit, sistemin operativ t\u00eb p\u00ebrdorur, arkitektur\u00ebn e CPU dhe aplikimin e shtesave p\u00ebr t\u00eb luftuar identifikimin e fsheht\u00eb. <\/p>\n

P\u00ebr t\u00eb p\u00ebrcaktuar parametrat e caktuar, mjafton t\u00eb ekzekutohet n\u00eb shfletues nj\u00eb kod JavaScript t\u00eb p\u00ebrgatitur nga hulumtuesit. N\u00eb praktik\u00eb, metoda mund t\u00eb p\u00ebrdoret jo vet\u00ebm si nj\u00eb burim shtes\u00eb p\u00ebr identifikimin indirekt t\u00eb p\u00ebrdoruesit, por edhe p\u00ebr t\u00eb p\u00ebrcaktuar parametrat e mjedisit sistemor p\u00ebr aplikimin e synuar t\u00eb eksploit\u00ebve duke marr\u00eb parasysh OS-n\u00eb, arkitektur\u00ebn dhe shfletuesin. Metoda \u00ebsht\u00eb efektive gjithashtu kur p\u00ebrdoren shfletues q\u00eb zbatohen mekanizma bllokimi t\u00eb identifikimit t\u00eb fsheht\u00eb, si\u00e7 \u00ebsht\u00eb Tor Browser. Kodet burimore t\u00eb prototipit t\u00eb kodit q\u00eb zbatojn\u00eb metod\u00ebn. jan\u00eb publikuar<\/a><\/noindex> n\u00ebn licenc\u00ebn MIT.<\/p>\n

P\u00ebrcaktimi b\u00ebhet p\u00ebrmes identifikimit t\u00eb modeleve t\u00eb ve\u00e7anta p\u00ebr shfletues t\u00eb ndrysh\u00ebm n\u00eb JavaScript dhe karakteristikave t\u00eb koh\u00ebs s\u00eb ekzekutimit t\u00eb operacioneve, t\u00eb cilat varen nga karakteristikat e pun\u00ebs s\u00eb JIT, CPU dhe mekanizmave t\u00eb ndarjes s\u00eb memorjes. P\u00ebrcaktimi i karakteristikave b\u00ebhet p\u00ebrmes gjenerimit t\u00eb nj\u00eb liste t\u00eb gjitha objekteve q\u00eb jan\u00eb t\u00eb aksesueshme nga JavaScript. Si\u00e7 u duk, numri i objekteve korrelaton drejtp\u00ebrdrejt me motorin e shfletuesit dhe versionin e tij. <\/p>\n

function getProperties(o) {
\n var result = [];
\n while (o !== null) {
\n result = result.concat(Reflect.ownKeys(o));
\n o = Object.getPrototypeOf(o);
\n }
\n return result;
\n }<\/p>\n

P\u00ebr shembull, p\u00ebr Firefox dokumentacioni deklaron mb\u00ebshtetje p\u00ebr 2247 pron\u00ebsi, nd\u00ebrsa numri i v\u00ebrtet\u00eb i pron\u00ebsive t\u00eb p\u00ebrcaktuara, duke marr\u00eb parasysh ato q\u00eb nuk jan\u00eb dokumentuar, arrin n\u00eb 15709 (n\u00eb Tor Browser \u2014 15639), p\u00ebr Chrome deklarohet 2698 pron\u00ebsi, nd\u00ebrsa realisht ofrohet 13570 (n\u00eb Chrome p\u00ebr Android \u2014 13119). Numri dhe vlerat e pron\u00ebsive ndryshojn\u00eb nga versioni n\u00eb version t\u00eb shfletuesit dhe me p\u00ebrdorimin e sistemeve operative t\u00eb ndryshme. <\/p>\n

Vlerat dhe prania e pron\u00ebsive t\u00eb caktuara mund t\u00eb p\u00ebrdoren p\u00ebr t\u00eb p\u00ebrcaktuar llojin e sistemit operativ. P\u00ebr shembull, n\u00eb Kubuntu, pron\u00ebsia window.innerWidth caktohet n\u00eb vler\u00ebn 1000, nd\u00ebrsa n\u00eb Windows 10 \u2014 n\u00eb 1001. N\u00eb Windows \u00ebsht\u00eb e disponueshme pron\u00ebsia window.navigator.activeVRDisplays, nd\u00ebrsa n\u00eb Linux nuk ka. P\u00ebr Android ofrohen shum\u00eb thirrje specifike, por nuk ka window.SharedWorker. P\u00ebr identifikimin e sistemit operativ, gjithashtu sugjerohet t\u00eb p\u00ebrdoret analiza e parametrave t\u00eb WebGL, gjendja e t\u00eb cil\u00ebve varet nga shofer\u00ebt. P\u00ebr m\u00eb tep\u00ebr, thirrja WEBGL_debug_renderer_infoextension lejon marrjen e informacionit mbi motorin e rendering t\u00eb OpenGL, i cili \u00ebsht\u00eb ndryshe p\u00ebr \u00e7do sistem operativ. <\/p>\n

P\u00ebr p\u00ebrcaktimin e CPU-s, p\u00ebrdoret vler\u00ebsimi i dallimeve n\u00eb koh\u00ebn e ekzekutimit t\u00eb blloqeve t\u00eb ndryshme standarde t\u00eb kodit, p\u00ebrpunimi i t\u00eb cilave varet nga arkitektura e setit t\u00eb komandave, duke marr\u00eb parasysh sjelljen JIT (p\u00ebrcaktohet se sa regjistra CPU do t\u00eb angazhohen dhe n\u00eb cilat raste JIT do t\u00eb gjeneroj\u00eb kod eficient me optimizime dhe p\u00ebrfshirjen e instrukcioneve t\u00eb avancuara, e kur jo). P\u00ebr p\u00ebrcaktimin e llojit t\u00eb sistemit t\u00eb shp\u00ebrndarjes s\u00eb memorjes dhe sistemit operativ, gjithashtu matet ndryshimi n\u00eb koh\u00ebn e ndarjes s\u00eb memorjes p\u00ebr struktura t\u00eb ndryshme, nga t\u00eb cilat mund t\u00eb gjykohet mbi madh\u00ebsin\u00eb e blloqeve t\u00eb memories. <\/p>\n

Parametrat e caktuar gjat\u00eb ekzekutimit t\u00eb skriptit krahasohen me vlerat ideale q\u00eb jan\u00eb karakteristike p\u00ebr ambientet e testuara paraprakisht. Gjat\u00eb kontrollit, teknika e zhvilluar leht\u00ebsoi p\u00ebrcaktimin e sakt\u00eb t\u00eb 40 ambienteve t\u00eb ndryshme t\u00eb testimit, duke p\u00ebrcaktuar versionet e shfletuesve t\u00eb p\u00ebrdorur, prodhuesin e CPU, sistemin operativ t\u00eb aplikuar dhe faktin n\u00ebse ishte aktivizuar n\u00eb pajisje reale ose n\u00eb nj\u00eb makin\u00eb virtuale.<\/p>\n

Ve\u00e7an\u00ebrisht, theksohet mund\u00ebsia p\u00ebr t\u00eb p\u00ebrcaktuar shtesat e shfletuesit dhe madje edhe cil\u00ebsimet e ve\u00e7anta t\u00eb shtesave, p\u00ebrfshir\u00eb ato q\u00eb jan\u00eb t\u00eb destinuara p\u00ebr t\u00eb bllokuar metoda t\u00eb identifikimit t\u00eb fsheht\u00eb ose aktivitetet n\u00eb modalitetin e shikimit privat. N\u00eb kontekstin e metod\u00ebs s\u00eb propozuar, k\u00ebto shtesa b\u00ebhen nj\u00eb burim tjet\u00ebr t\u00eb dh\u00ebnash p\u00ebr identifikim. Shtesat p\u00ebrcaktohen p\u00ebrmes vler\u00ebsimit t\u00eb distorsioneve t\u00eb parametrave t\u00eb ambientit origjinal, q\u00eb jan\u00eb sjell\u00eb nga shtesat.<\/p>\n

Nga metodat e tjera t\u00eb identifikimit, mund t\u00eb theksohet marrja n\u00eb konsiderat\u00eb e t\u00eb dh\u00ebnave t\u00eb tilla si zgjatja e ekranit<\/a><\/noindex>, lista e MIME type-ve t\u00eb mb\u00ebshtetur, parametra specifik\u00eb n\u00eb tituj (HTTP\/2<\/a><\/noindex> dhe HTTPS<\/a><\/noindex>), analiza e instalimeve e plug-ineve dhe fonteve<\/a><\/noindex>, disponueshm\u00ebria e disa Web API-ve, specifike p\u00ebr kartat e videove e ve\u00e7anta<\/a><\/noindex> renderimet q\u00eb b\u00ebhen me an\u00eb t\u00eb WebGL dhe Canvas<\/a><\/noindex>, manipulime<\/a><\/noindex> me CSS, analiza e karakteristikave t\u00eb pun\u00ebs me maus<\/a><\/noindex> dhe m\u00eb \u00e7el\u00ebsin<\/a><\/noindex>.<\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0413\u0440\u0430\u0446\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0410\u0432\u0441\u0442\u0440\u0438\u044f), \u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0430\u0442\u0430\u043a MDS, NetSpectre \u0438 Throwhammer, \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043d\u043e\u0432\u043e\u0439 \u0442\u0435\u0445\u043d\u0438\u043a\u0435 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0442\u043e\u0447\u043d\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0443 CPU \u0438 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u0431\u043e\u0440\u044c\u0431\u044b \u0441\u043e \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439. \u0414\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u0443\u043a\u0430\u0437\u0430\u043d\u043d\u044b\u0445 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 JavaScript \u043a\u043e\u0434\u0430. […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-35296","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Nj\u00eb teknik\u00eb e re p\u00ebr identifikimin e fsheht\u00eb t\u00eb sistemit dhe shfletuesit \u00ebsht\u00eb paraqitur | ProHoster","description":"Nj\u00eb grup hulumtuesish nga Universiteti Teknik i Gradc-it (Austria), i njohur m\u00eb par\u00eb p\u00ebr zhvillimin e metodave t\u00eb sulmeve.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/predstavlena-novaya-tehnika-skrytoj-identifikatsii-sistemy-i-brauzera","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0442\u0435\u0445\u043d\u0438\u043a\u0430 \u0441\u043a\u0440\u044b\u0442\u043e\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0413\u0440\u0430\u0446\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0410\u0432\u0441\u0442\u0440\u0438\u044f), \u0440\u0430\u043d\u0435\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0430\u0442\u0430\u043a","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/predstavlena-novaya-tehnika-skrytoj-identifikatsii-sistemy-i-brauzera","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:03:29+00:00","article:modified_time":"2019-10-31T19:03:29+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35296","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 22:42:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:06:24","updated":"2026-01-21 22:42:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/35296","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=35296"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/35296\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=35296"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=35296"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=35296"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}