I-Rostelecom, owona mqhubi mkhulu wokufikelela kwi-broadband kwi-Russian Federation, ekhonza malunga nababhalisi be-13 yezigidi, ngaphandle kokupapashwa ngokungeyomfuneko. inkqubo yokubeka endaweni yeebhena zayo zentengiso kwitrafikhi yeHTTP engafihlwanga yababhalisi. Ekubeni iibhloko zeJavaScript ezifakwe kwi-traffic traffic zibandakanya ikhowudi efihliweyo kunye nokufikelela kwiindawo ezingathandabuzekiyo ezingahambelani neRostelecom (p.analytic.press, d.d1tracker.ru, dmd.digitaltarget.ru), ekuqaleni kwakukho ukukrokra ukuba izixhobo zomboneleli isetyenzisiwe kwaye isoftware enobungozi yazisiwe. Kodwa emva kokuthumela isikhalazo, abameli beRostelecom babonise ukuba ukutshintshwa kwentengiso kuqhutywe ngaphakathi kwesakhelo senkonzo yokubonisa intengiso yebhanari kubabhalisi, esebenza ukususela ngoFebruwari 10.
Intengiso iboniswa kwinethiwekhi ye-banner ye-mail.ru, kwaye iintshukumo zilandelwa nge-d1tracker.ru (iprosesa ibanjwe kwilifu le-Amazon). Ikhowudi iquka iifowuni kwi-domain analytic.press, eyabhaliswa ekupheleni kukaDisemba.
Ngokuqhelekileyo, intengiso yesikrini esigcweleyo iyaboniswa egubungela umxholo wonke wephepha, okanye ibhena yongezwa phezulu kwamaphepha. Kwiimeko ezininzi, iibhloko ezibekwe zibukeka njengokubekwa kweentengiso ezicaphukisayo ziziza ngokwazo, kwaye umrhumi akaqapheli ukuba intengiso ibekwe ngokwenene ngumboneleli. Zonke iintlobo zeenkonzo ezivela kwiinkampani zangaphandle (ezingadibaniswanga neRostelecom) zipapashwa, kubandakanywa nokuthengiswa kwezibane.
Umzekelo wekhowudi engaphakathi unokufumaneka kwi . Inxalenye yekhowudi i-obfuscated kwaye ilayishwe ngokuguquguqukayo, ngoko ngaphandle kohlalutyo olucacileyo kunzima ukugweba ukuba bafake kuphela intengiso okanye benze ezinye izenzo kwicala lomxhasi lomxhasi.
Ngokusebenzisa ujongano olusemgangathweni lweakhawunti yakho yobuqu akukho nto yakwenza ukhubaze ukutshintshwa kwentengiso, kodwa emva kokubhala ibango , Abasebenzi beRostelecom bakhubaza ukutshintshwa kweentengiso kubabhalisi abathile. Umbuzo ngowokuba ngaba ukutshintshwa kuchaphazela kuphela itrafikhi ye-HTTP engafihlwanga okanye inkampani nayo kwaye kwitrafikhi ye-HTTPS ngokutshintshwa kwesatifikethi kuhlale kungaphendulwanga. Iwebhusayithi yenkampani ayinalo ulwazi malunga nokuqala kokuguqulwa kwetrafikhi yokuhamba kwabathengi.
umthombo: opennet.ru