Ukukhishwa kwe-uBlock Origin 1.25 ngokuvikelwa ekuvinjelweni kwe-block bypass ngokusebenzisa ukukhohlisa kwe-DNS

Iyatholakala ukukhishwa okusha kwe-blocker yokuqukethwe okungalungile uBlock Origin 1.25, okuvimbela ukukhangisa, izinto ezinonya, ikhodi yokulandelela, abavukuzi be-JavaScript nezinye izici eziphazamisa ukusebenza okuvamile. Isengezo se-uBlock Origin sibonakala ngokusebenza okuphezulu nokusetshenziswa kwenkumbulo okongayo, futhi ikuvumela ukuthi ungagcini nje ngokususa izinto ezicasulayo, kodwa futhi unciphise ukusetshenziswa kwezinsiza futhi usheshise ukulayisha ikhasi.

Inguqulo entsha ivumela abasebenzisi beFirefox ukuthi bavimbe indlela entsha yokulandelela ukunyakaza nokufaka amayunithi esikhangiso, esekelwe ekudaleni isizinda esingaphansi esihlukile ku-DNS ngaphakathi kwesizinda sesayithi lamanje. Izixhumanisi zesizinda esingaphansi kwesinye esidaliwe eziya kuseva yenethiwekhi yokukhangisa (isibonelo, irekhodi le-CNAME elithi f7ds.liberation.fr liyakhiwa, likhomba iseva yokulandela umkhondo liberation.eulerian.net), ngakho-ke ikhodi yokukhangisa ilayishwa ngokusemthethweni isuka esizindeni esiyisisekelo esifanayo neso indawo. Igama lesizinda esingaphansi kwesinye likhethwa ngendlela yokokuhlonza okungahleliwe, okwenza ukuvinjwa ngemaski kube nzima, njengoba isizinda esingaphansi esihlotshaniswa nenethiwekhi yokukhangisa kunzima ukusehlukanisa nezingaphansi kwezinye ukuze kulayishwe ezinye izinsiza zasendaweni ekhasini.

Enguqulweni entsha ye-uBlock Origin ukuze kunqunywe umsingathi ohlotshaniswa ne-CNAME kungezwe inselele ye ukuxazulula Igama ku-DNS, elikuvumela ukuthi usebenzise uhlu lwamabhulokhi emagameni aqondiswe kabusha nge-CNAME.
Ngokombono wokusebenza, ukuchaza i-CNAME akumele kuthule noma iyiphi i-overhead eyengeziwe ngaphandle kokumosha izinsiza ze-CPU ekusebenziseni kabusha imithetho yegama elihlukile, njengoba lapho isisetshenziswa sifinyelelwa, isiphequluli sesivele sixazululiwe futhi inani kufanele ligcinwe kunqolobane. . Lapho ufaka inguqulo entsha, uzodinga ukunikeza izimvume zokubuyisa ulwazi lwe-DNS.

Indlela yokuvikela eyengeziwe esekelwe ekuqinisekiseni i-CNAME ingadlulwa ngokubophezela igama ngqo ku-IP ngaphandle kokusebenzisa i-CNAME, kodwa le ndlela yenza kube nzima ukunakekelwa nokunakekelwa kwengqalasizinda (uma ikheli lasesizindeni se-inthanethi lenethiwekhi yokukhangisa lishintshwa, kuzodingeka ukushintsha idatha kuwo wonke amaseva e-DNS abashicileli) futhi kungadlulwa ngokwakha uhlu oluvinjelwe lwamakheli e-IP we-tracker. Kusakhiwo se-uBlock Origin se-Chrome, ukuqinisekiswa kwe-CNAME akusebenzi ngenxa ye-API dns.resolve() Itholakalela izengezo kuphela kuFirefox futhi ayisekelwe ku-Chrome.

Source: opennet.ru