{"id":99420,"date":"2021-03-13T16:22:51","date_gmt":"2021-03-13T14:22:51","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/google-prodemonstriroval-ekspluatacziyu-uyazvimostej-spectre-cherez-vypolnenie-javascript-v-brauzere"},"modified":"2021-03-13T16:22:51","modified_gmt":"2021-03-13T14:22:51","slug":"google-prodemonstriroval-ekspluatacziyu-uyazvimostej-spectre-cherez-vypolnenie-javascript-v-brauzere","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/google-prodemonstriroval-ekspluatacziyu-uyazvimostej-spectre-cherez-vypolnenie-javascript-v-brauzere","title":{"rendered":"Google demonstroi shfryt\u00ebzimin e dob\u00ebsive Spectre p\u00ebrmes ekzekutimit t\u00eb JavaScript n\u00eb shfletues","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Kompania Google publikoi disa prototipe eksploit\u00ebsh q\u00eb tregojn\u00eb mund\u00ebsin\u00eb e shfryt\u00ebzimit t\u00eb dob\u00ebsive t\u00eb klas\u00ebs Spectre gjat\u00eb ekzekutimit t\u00eb kodit JavaScript n\u00eb shfletues duke anashkaluar metodat e mbrojtjes t\u00eb shtuar m\u00eb par\u00eb. Eksploit\u00ebt mund t\u00eb p\u00ebrdoren p\u00ebr t\u00eb fituar qasje n\u00eb memorjen e procesit q\u00eb p\u00ebrpunon p\u00ebrmbajtjen web n\u00eb skedarin aktual. P\u00ebr testimin e funksionimit t\u00eb eksploitit \u00ebsht\u00eb aktivizuar faqja leaky.page, nd\u00ebrsa kodi me p\u00ebrshkrimin e logjik\u00ebs s\u00eb funksionimit \u00ebsht\u00eb publikuar n\u00eb GitHub.    <\/p>\n<p>\u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0439 \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f \u0440\u0430\u0441\u0441\u0447\u0438\u0442\u0430\u043d \u043d\u0430 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u043c\u0438 Intel Core i7-6500U  \u0432 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0438 \u0441 Linux \u0438 Chrome 88. \u0414\u043b\u044f \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u0434\u043b\u044f \u0434\u0440\u0443\u0433\u0438\u0445 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u0439 \u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439. \u041c\u0435\u0442\u043e\u0434 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u0435\u043d \u0434\u043b\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u043e\u0432 Intel &#8212; \u043f\u043e\u0441\u043b\u0435 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u0439 \u0430\u0434\u0430\u043f\u0442\u0430\u0446\u0438\u0438 \u0431\u044b\u043b\u0430 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u0440\u0430\u0431\u043e\u0442\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u043d\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0441 CPU \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u0439, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Apple M1 \u043d\u0430 \u0431\u0430\u0437\u0435 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b ARM. \u041f\u043e\u0441\u043b\u0435 \u043d\u0435\u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u043e\u043a \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442 \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0431\u043e\u0442\u043e\u0441\u043f\u043e\u0441\u043e\u0431\u0435\u043d \u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445  \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0438 \u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430\u0445 \u043d\u0430 \u0431\u0430\u0437\u0435 \u0434\u0432\u0438\u0436\u043a\u0430 Chromium.    <\/p>\n<p>N\u00eb nj\u00eb mjedis t\u00eb bazuar n\u00eb Chrome 88 t\u00eb zakonsh\u00ebm dhe procesor\u00eb Intel Skylake, arriti t\u00eb siguroj\u00eb nj\u00eb rrjedhje t\u00eb t\u00eb dh\u00ebnave nga procesi q\u00eb \u00ebsht\u00eb p\u00ebrgjegj\u00ebs p\u00ebr p\u00ebrpunimin e p\u00ebrmbajtjes web n\u00eb skedarin aktual t\u00eb Chrome (procesi i renderimit), me shpejt\u00ebsi prej 1 kilobajt n\u00eb sekond\u00eb. Shtes\u00eb, jan\u00eb zhvilluar prototipe alternative, p\u00ebr shembull, nj\u00eb eksploit q\u00eb lejon, me \u00e7mimin e uljes s\u00eb stabilitetit, rritjen e shpejt\u00ebsis\u00eb s\u00eb rrjedhjes deri n\u00eb 8kB\/s duke p\u00ebrdorur timerin performance.now() me sakt\u00ebsi prej 5 mikrosekondash (0.005 milisekonda). Gjithashtu \u00ebsht\u00eb p\u00ebrgatitur nj\u00eb variant q\u00eb funksionon me sakt\u00ebsi timeri n\u00eb nivelin e nj\u00eb milisekonde, i cili mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb organizuar qasjen n\u00eb memorjen e nj\u00eb procesi tjet\u00ebr me shpejt\u00ebsi rreth 60 byte n\u00eb sekond\u00eb.      <\/p>\n<p>Kodi demonstrues i publikuar p\u00ebrb\u00ebhet nga tre pjes\u00eb. Pjesa e par\u00eb ekzekuton kalibrimin e timerit p\u00ebr t\u00eb vler\u00ebsuar koh\u00ebn e ekzekutimit t\u00eb operacioneve t\u00eb nevojshme p\u00ebr rikuperimin e t\u00eb dh\u00ebnave q\u00eb kan\u00eb mbetur n\u00eb \u043a\u0435\u0448in e procesorit si rezultat i ekzekutimit spekullativ t\u00eb instruksioneve t\u00eb CPU. Pjesa e dyt\u00eb p\u00ebrcakton shp\u00ebrndarjen e memorjes e cila p\u00ebrdoret gjat\u00eb vendosjes s\u00eb nj\u00eb vargu JavaScript.     <\/p>\n<p>Pjesa e tret\u00eb ekzekuton drejtp\u00ebrdrejt shfryt\u00ebzimin e dob\u00ebsis\u00eb Spectre p\u00ebr t\u00eb p\u00ebrcaktuar p\u00ebrmbajtjen e memorjes s\u00eb procesit aktual si rezultat i krijimit t\u00eb kushteve p\u00ebr ekzekutimin spekullativ t\u00eb operacioneve t\u00eb caktuara, rezultati i s\u00eb cilave p\u00ebrjashtohet nga procesori pas p\u00ebrcaktimit t\u00eb nj\u00eb parashikimi t\u00eb d\u00ebshtuar, por gjurm\u00ebt e ekzekutimit mbeten n\u00eb \u043a\u0435\u0448 dhe mund t\u00eb rikuperohen me metoda t\u00eb p\u00ebrcaktimit t\u00eb p\u00ebrmbajtjes s\u00eb \u043a\u0435\u0448it p\u00ebrmes kanaleve an\u00ebsore q\u00eb analizojn\u00eb ndryshimin n\u00eb koh\u00ebn e aksesit n\u00eb t\u00eb dh\u00ebna t\u00eb memorizuar dhe t\u00eb pambuluara.        <\/p>\n<p>T\u00eb dh\u00ebnat e propozuara t\u00eb shfryt\u00ebzimit lejojn\u00eb shmangien e timer\u00ebve me sakt\u00ebsi t\u00eb lart\u00eb, t\u00eb cil\u00ebt jan\u00eb t\u00eb disponuesh\u00ebm p\u00ebrmes API performance.now(), dhe pa mb\u00ebshtetje p\u00ebr tipin SharedArrayBuffer, i cili lejon krijimin e vargjeve n\u00eb memorje t\u00eb ndar\u00eb. Eksploit p\u00ebrfshin nj\u00eb gadget Spectre q\u00eb shkakton ekzekutimin e kontrolluar spekullativ t\u00eb kodit dhe nj\u00eb analist t\u00eb rrjedhjes p\u00ebrmes kanaleve an\u00ebsore q\u00eb p\u00ebrcakton t\u00eb dh\u00ebnat e mbetura n\u00eb \u043a\u0435\u0448 duke u marr\u00eb gjat\u00eb ekzekutimit spekullativ.        <\/p>\n<p>Gadgeti \u00ebsht\u00eb realizuar p\u00ebrmes nj\u00eb vargu JavaScript, n\u00eb t\u00eb cilin b\u00ebhet p\u00ebrpjekja p\u00ebr t\u00eb aksesuar nj\u00eb zon\u00eb jasht\u00eb kufijve t\u00eb tamponit, q\u00eb ndikon n\u00eb gjendjen e bllokut t\u00eb parashikimit t\u00eb kalimeve p\u00ebr shkak t\u00eb nj\u00eb kontrolli t\u00eb madh\u00ebsis\u00eb s\u00eb tamponit t\u00eb shtuar nga kompajleri (procesori parashikon n\u00eb m\u00ebnyr\u00eb spekullative, por t\u00ebrheq gjendjen pas kontrollit). P\u00ebr analizimin e p\u00ebrmbajtjes s\u00eb \u043a\u0435\u0448it n\u00eb kushte t\u00eb sakt\u00ebsis\u00eb s\u00eb pamjaftueshme t\u00eb timerit \u00ebsht\u00eb propozuar nj\u00eb metod\u00eb q\u00eb mashtron strategjin\u00eb e p\u00ebrdorur nga procesor\u00ebt p\u00ebr z\u00ebvend\u00ebsimin e t\u00eb dh\u00ebnave nga \u043a\u0435\u0448i Tree-PLRU dhe lejon q\u00eb p\u00ebrmes rritjes s\u00eb numrit t\u00eb cikleve t\u00eb rritet duksh\u00ebm diferenciali i koh\u00ebs kur kthehet nj\u00eb vler\u00eb nga \u043a\u0435\u0448i dhe kur nuk ka vler\u00eb n\u00eb \u043a\u0435\u0448.      <\/p>\n<p>Sh\u00ebnohet se kompania Google publikoi nj\u00eb prototip eksploit p\u00ebr t\u00eb demonstruar realizmin e sulmeve duke p\u00ebrdorur dob\u00ebsi t\u00eb klas\u00ebs Spectre dhe p\u00ebr t\u00eb inkurajuar zhvilluesit web q\u00eb t\u00eb p\u00ebrdorin teknika q\u00eb minimizojn\u00eb rreziqet nga k\u00ebto sulme. N\u00eb k\u00ebt\u00eb m\u00ebnyr\u00eb, Google beson se pa nj\u00eb ripunim t\u00eb r\u00ebnd\u00ebsish\u00ebm t\u00eb prototipit t\u00eb propozuar, nuk \u00ebsht\u00eb e mundur t\u00eb krijohen eksploit\u00eb universale q\u00eb jan\u00eb t\u00eb gatshme jo vet\u00ebm p\u00ebr demonstrim, por edhe p\u00ebr p\u00ebrdorim t\u00eb zakonsh\u00ebm.     <\/p>\n<p>P\u00ebr t\u00eb ulur rrezikun, pronar\u00ebve t\u00eb faqeve u sugjerohet t\u00eb p\u00ebrdorin titujt e realizuar n\u00eb koh\u00ebt e fundit si Cross-Origin Opener Policy (COOP), Cross-Origin Embedder Policy (COEP), Cross-Origin Resource Policy (CORP), Fetch Metadata Request, X-Frame-Options, X-Content-Type-Options dhe SameSite Cookie. Mekanizmat e lartp\u00ebrmendur nuk ofrojn\u00eb mbrojtje direkte nga sulmet, por lejojn\u00eb izolon e t\u00eb dh\u00ebnave t\u00eb faqes nga rrjedhja n\u00eb procese, n\u00eb t\u00eb cilat mund t\u00eb ekzekutohet kodi JavaScript i sulmuesit (rrjedhja ndodh nga kujtesa e procesit aktual, n\u00eb t\u00eb cilin p\u00ebrve\u00e7 kodit t\u00eb sulmuesit mund t\u00eb p\u00ebrpunohen edhe t\u00eb dh\u00ebna nga nj\u00eb faqe tjet\u00ebr, e hapur n\u00eb t\u00eb nj\u00ebjtin tab). Ideja kryesore \u00ebsht\u00eb t\u00eb ndahen n\u00eb procese t\u00eb ndryshme ekzekutimi i kodit t\u00eb faqes nga kodi i huaj, i marr\u00eb nga burime jo t\u00eb besueshme, p\u00ebr shembull, i p\u00ebrfshir\u00eb p\u00ebrmes iframe.                   <center>  <div class=\"youtube-placeholder\" data-id=\"V_9cQP60ZGI\" onclick=\"loadVideo(this)\">\r\n        <img decoding=\"async\" src=\"https:\/\/img.youtube.com\/vi\/V_9cQP60ZGI\/hqdefault.jpg\" alt=\"Luaj videon\" loading=\"lazy\" width=\"480\" height=\"360\" style=\"width:100%;height:auto;\">\r\n        <div class=\"play-button\"><\/div>\r\n    <\/div><\/center><br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=54751\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u043e\u0432 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432, \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043b\u0430\u0441\u0441\u0430 Spectre \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 JavaScript-\u043a\u043e\u0434\u0430 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u0432 \u043e\u0431\u0445\u043e\u0434 \u0440\u0430\u043d\u0435\u0435 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b. \u042d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0449\u0435\u0433\u043e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 web-\u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u0432 \u0442\u0435\u043a\u0443\u0449\u0435\u0439 \u0432\u043a\u043b\u0430\u0434\u043a\u0435. \u0414\u043b\u044f \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0430\u0439\u0442 leaky.page, \u0430 \u043a\u043e\u0434 \u0441 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435\u043c \u043b\u043e\u0433\u0438\u043a\u0438 \u0440\u0430\u0431\u043e\u0442\u0430 \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d \u043d\u0430 GitHub. \u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0439 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-99420","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.0.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u043e\u0432 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432, \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043b\u0430\u0441\u0441\u0430 Spectre \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 JavaScript-\u043a\u043e\u0434\u0430 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u0432 \u043e\u0431\u0445\u043e\u0434 \u0440\u0430\u043d\u0435\u0435 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b. \u042d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0449\u0435\u0433\u043e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 web-\u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u0432 \u0442\u0435\u043a\u0443\u0449\u0435\u0439 \u0432\u043a\u043b\u0430\u0434\u043a\u0435. \u0414\u043b\u044f \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0430\u0439\u0442 leaky.page, \u0430 \u043a\u043e\u0434 \u0441 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435\u043c \u043b\u043e\u0433\u0438\u043a\u0438 \u0440\u0430\u0431\u043e\u0442\u0430 \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d \u043d\u0430 GitHub. \u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0439\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/google-prodemonstriroval-ekspluatacziyu-uyazvimostej-spectre-cherez-vypolnenie-javascript-v-brauzere\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.0.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Google \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Spectre \u0447\u0435\u0440\u0435\u0437 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 JavaScript \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u043e\u0432 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432, \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043b\u0430\u0441\u0441\u0430 Spectre \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 JavaScript-\u043a\u043e\u0434\u0430 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u0432 \u043e\u0431\u0445\u043e\u0434 \u0440\u0430\u043d\u0435\u0435 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b. \u042d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0449\u0435\u0433\u043e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 web-\u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u0432 \u0442\u0435\u043a\u0443\u0449\u0435\u0439 \u0432\u043a\u043b\u0430\u0434\u043a\u0435. \u0414\u043b\u044f \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0430\u0439\u0442 leaky.page, \u0430 \u043a\u043e\u0434 \u0441 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435\u043c \u043b\u043e\u0433\u0438\u043a\u0438 \u0440\u0430\u0431\u043e\u0442\u0430 \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d \u043d\u0430 GitHub. \u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0439\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/google-prodemonstriroval-ekspluatacziyu-uyazvimostej-spectre-cherez-vypolnenie-javascript-v-brauzere\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-03-13T14:22:51+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-03-13T14:22:51+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google demonstroi shfryt\u00ebzimin e dob\u00ebsive Spectre p\u00ebrmes ekzekutimit t\u00eb JavaScript n\u00eb shfletues | ProHoster","description":"Kompania Google publikoi disa prototipa eksploitesh q\u00eb tregojn\u00eb mund\u00ebsin\u00eb e shfryt\u00ebzimit t\u00eb dob\u00ebsive t\u00eb klas\u00ebs Spectre gjat\u00eb ekzekutimit t\u00eb kodit JavaScript n\u00eb shfletues p\u00ebr t\u2019i kaluar metodat e mbrojtjes t\u00eb shtuara m\u00eb par\u00eb. Eksploit\u00ebt mund t\u00eb p\u00ebrdoren p\u00ebr t\u00eb marr\u00eb akses n\u00eb kujtes\u00ebn e procesit q\u00eb p\u00ebrpunon p\u00ebrmbajtjen web n\u00eb tabin aktual. P\u00ebr testimin e funksionimit t\u00eb exploit-it \u00ebsht\u00eb aktivizuar faqja leaky.page, dhe kodi me p\u00ebrshkrimin e logjik\u00ebs s\u00eb funksionimit \u00ebsht\u00eb vendosur n\u00eb GitHub. Propozimi i","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/google-prodemonstriroval-ekspluatacziyu-uyazvimostej-spectre-cherez-vypolnenie-javascript-v-brauzere","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 Spectre \u0447\u0435\u0440\u0435\u0437 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 JavaScript \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u043e\u0432 \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u043e\u0432, \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043a\u043b\u0430\u0441\u0441\u0430 Spectre \u043f\u0440\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 JavaScript-\u043a\u043e\u0434\u0430 \u0432 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0435 \u0432 \u043e\u0431\u0445\u043e\u0434 \u0440\u0430\u043d\u0435\u0435 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 \u0437\u0430\u0449\u0438\u0442\u044b. \u042d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u044b \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044e\u0449\u0435\u0433\u043e \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 web-\u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430 \u0432 \u0442\u0435\u043a\u0443\u0449\u0435\u0439 \u0432\u043a\u043b\u0430\u0434\u043a\u0435. \u0414\u043b\u044f \u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0438\u0442\u0430 \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0441\u0430\u0439\u0442 leaky.page, \u0430 \u043a\u043e\u0434 \u0441 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435\u043c \u043b\u043e\u0433\u0438\u043a\u0438 \u0440\u0430\u0431\u043e\u0442\u0430 \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d \u043d\u0430 GitHub. \u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u043d\u044b\u0439","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/google-prodemonstriroval-ekspluatacziyu-uyazvimostej-spectre-cherez-vypolnenie-javascript-v-brauzere","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-03-13T14:22:51+00:00","article:modified_time":"2021-03-13T14:22:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"99420","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-13 14:24:19","updated":"2022-10-02 07:42:08","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/99420","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=99420"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/99420\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=99420"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=99420"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=99420"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}