Asalin UBlock yanzu yana da tallafi don toshe tashar tashar tashar jirgin ruwa

Kwanan nan Bayani ya fito game da wasu rukunin yanar gizon da ke aiwatar da sikanin tashar jiragen ruwa na gida a kan baƙi, wannan "an ɗauka" a matsayin ɓangare na yatsan hannu da bin mai amfani ko gano bot.

A cikin waɗannan rukunin yanar gizon, kawai don ambaci ɗayan mashahurai wanda ke yin tashar jirgin ruwa ta gida shine shafin eBay.com.

Bugu da ƙari kuma, ya juya cewa wannan aikin ba'a iyakance ga eBay da sauran shafuka masu yawa ba (Citibank, TD Bank, Sky, GumTree, WePay, da sauransu) amfani da tashar tashar jirgin ruwas daga tsarin gida na mai amfani yayin buɗe shafukanta, ta amfani da lambar don gano yunƙurin isa ga kwamfutocin da aka yiwa kutse, wanda aka bayar ta hanyar ThreatMetrix.

A cikin shari'ar eBay, an tabbatar da tashoshin yanar gizo 14 hade da sabobin samun damar nesa kamar VNC, TeamViewer, Anyplace Control, Aeroadmin, Ammy Admin, da RDP.

Tabbacin za a aiwatar da shi ne don tantancewa idan akwai alamun ɓarnatar da cutar ta shafa don hana sayan yaudara ta amfani da botnets. Hakanan za'a iya amfani da sikan don samun bayanai don shaidar mai amfani kai tsaye.

Kafin wannan UBlock Origin developer ya yanke shawarar daukar mataki a cikin lamarinzuwa kuma a cikin EasyPrivacy an kara dokoki don toshe daidaitattun rubutun da ke duba tashoshin hanyar sadarwa akan tsarin mai amfani na gari.

Don yin sikanin, ana amfani da wata dabara bisa ga ƙoƙari don kafa haɗin kai zuwa tashar jiragen ruwa daban-daban na mai watsa shiri 127.0.0.1 (localhost) ta hanyar WebSocket.

Binciken tashar jiragen ruwa wata dabara ce ta karo-karo wanda masu satar kudi ko masu fashin baki ke amfani da ita don yin amfani da injina tare da haɗin Intanet da ƙayyade waɗanne aikace-aikace ko ayyuka suke sauraro a kan hanyar sadarwar, yawanci don a sami takamaiman hare-hare. Abu ne na yau da kullun ga software na tsaro don gano aikin tashar tashar jiragen ruwa da alama shi azaman cin zarafi.

Ko kuna da tashar sadarwar budewa ta hanyar kai tsaye ta hanyar bambance-bambance a cikin aikin kuskure yayin haɗawa zuwa tashar jiragen ruwa masu aiki da marasa amfani.

WebSocket yana ba da izinin aika buƙatun HTTP kawai, amma irin wannan buƙatar don tashar sadarwar yanar gizo mara aiki ta kasa nan da nan kuma don tashar mai aiki kawai bayan ɗan lokaci yana ɗaukar ƙoƙari don sasanta haɗin. Hakanan, game da tashar tashar jirgin ruwa, WebSocket yana haifar da lambar kuskuren haɗi (ERR_CONNECTION_REFUSED), kuma game da tashar tashar jiragen ruwa mai aiki, lambar kuskuren tattaunawar haɗi.

Lokacin daidaita sigar yanar gizo, saka mai masauki da tashar jirgin ruwa, wanda ba lallai bane ya zama yanki guda ɗaya ana amfani da rubutun daga. 

Don yin tashar tashar jiragen ruwa, rubutun kawai ya tantance adreshin IP na sirri (kamar localhost) da tashar jiragen ruwa da kake son sikanin.

Binciken tashar jiragen ruwa na iya samar da bayanai ga gidan yanar gizo game da irin kayan aikin da kuke aiki. Yawancin tashoshin jiragen ruwa suna da ingantattun jerin ayyukan da suke amfani dasu, saboda haka jerin buɗe tashoshin jiragen ruwa suna ba da kyakkyawar ra'ayi game da aikace-aikacen gudana. 

Misali, Steam (gidan wasan caca da dandamali) an san shi yana aiki a tashar 27036, don haka na'urar daukar hotan takardu ganin bude tashar zata iya samun kwarin gwiwa cewa mai amfani shima ya bude a yayin ziyartar gidan yanar gizon.

Baya ga binciken tashar jiragen ruwa, Hakanan ana iya amfani da WebSockets don kai hari ga tsarin masu haɓaka yanar gizo wanda ke gudanar da direbobin WebSocket don React aikace-aikace akan tsarin gida.

Shafin waje yana iya yin amfani da shi ta hanyar tashar jiragen ruwa, yana tantance wanzuwar irin wannan mai kula, kuma haɗa shi.

Tsakanin tsinkaye don saƙonnin kuskure da hare-hare na lokaci, shafin zai iya samun kyakkyawan ra'ayin ko an buɗe wani tashar jirgin ruwa.

Idan mai haɓaka yayi kuskure, to maharin zai iya samun abubuwan cikin bayanan cire kuskure, wanda zai iya haɗawa da bayanan sirri na ɓoye.

Idan kanaso ka kara sani game dashi, zaku iya koma zuwa post mai zuwa.

Source: https://nullsweep.com/