Mararka qaarkood, isticmaalayaasha cusub ama kuwa aan waxba galabsan ayaa lagu khiyaami karaa si aan ula kac ahayn haddii ay u soo diraan macluumaadka ilo kale. Tani waxay ku dari kartaa khatar gaar ah. Tusaale ahaan, HTML5 waxa ay ku dartay shabkada muuqaal la yiraahdo Hyperlink Auditing . Haddii aadan ka warqabin sifadan, xisaabinta Hyperlink waxaa lagu daraa bogga internetka ama waxaa sameeyay qayb aag leh sifo ping ah.

Hyperlink Auditing Pings

Caadi ahaan waxa isticmaala goobuhu si ay ula socdaan xidhidhiyeyaasha laakiin sidoo kale waxa la ogaaday in ay ku xad-gudbeen dambiilayaasha internetka si ay ugu gudbiyaan tirada badan ee codsiyada shabakadaha iyagoo isku dayaya in ay offline ka qaataan. Haddaba, sidee loo dami karaa sifadan Chrome^(Chrome) ama Firefox browserkaaga? Sidoo kale, aan isku dayno inaan ka jawaabno dhowr su'aalood oo la xiriira.

Waxaan ku socon doonaa 2 tillaabo-

1. Jooji xisaabinta Hyperlink
2. Go'aanso haddii Hyperlink ay xisaabinayso mid wanaagsan iyo mid xun

Xisaabinta Hyperlink^(Hyperlink) waa halbeeg HTML ah oo u oggolaanaya abuurista xiriiriyo gaar ah oo dib ugu soo celiya URL cayiman marka la gujiyo. pings-yadan waxaa loo sameeyay qaab codsi POST ah bogga shabakadda ee la cayimay ka dibna baari kara cinwaannada codsiga si loo arko bogga xiriirka la gujiyay.

1] Jooji xisaabinta Hyperlink

Firefox waa mid ka mid ah dhowrka daalacashada ee sifada ping-ka si caadi ah u naafo. Waxaad ku xaqiijin kartaa adigoo furaya browserka oo fiiriya ku saabsan: config >  browser.send_pings qiimaha gelida. Hoos ka eeg sawirka hoose wixii macluumaad dheeraad ah

Chrome waxa uu qorshaynayaa in uu meesha ka saaro awoodan noocyada mustaqbalka. Si kastaba ha ahaatee, waxaad weli damin kartaa adigoo furaya chrome://flags#disable-hyperlink-auditing oo aad calanka u dejiso Disabled.

Macluumaadkaaga noocyada cusub, sifada raadraaca ping ee Hyperlink ayaa si toos ah loo shaqayn doonaa, markaa waxaa laga yaabaa inaadan ku arkin calamadan browserkaaga.

2] Hyperlink ma xisaabintu mid wanaagsan mise mid xun

Waxaa jirtay warbixin wakhti hore; waxay soo jeedisay in nooc cusub oo weerarka DDoS ah uu ku^{(DDoS attack)} xad- gudbo HTML5^(HTML5) -ku-saleysan habka xisaabinta hyperlink.

Weerarku wuxuu ugu horrayn ku lug leeyahay isticmaaleyaasha iyagoon waxba galabsan booqan bog shabakad la farsameeyey oo wata laba fayl oo JavaScript dibadda ah. Mid ka mid ah kuwaas oo ay ku jiraan array ka kooban URL^(URLs) -yada (oo la rumeysan yahay inay yihiin bartilmaameedyada weerarka DDoS . Faylka labaad ee JavaScript wuxuu lahaa shaqo si aan kala sooc lahayn uga soo xushay URL shaxanka, ku abuuray summada leh sifo 'ping', oo barnaamij-naxwe ahaan gujiyay isku xidhka ilbiriqsi kasta.Tani waxa ay u sahashay weeraryahanadu in ay u soo diraan hyperlink auditing ping bartilmaameedka ilaa inta bogga shabakada la furayo.sidaa awgeed, halkii ay ahayd nuglaanta, weerarku waxa uu ku tiirsanaa in sifo sharci ah loo rogo qalab weerar.

Tani waa isbeddel walaac leh, sidaas darteed xisaabinta Hyperlink guud ahaan looma tixgalinayo fikrad wanaagsan.

Hyperlink Auditing in Chrome & Firefox browsers

Sometіmеs, novice or innocent users can be tricked to unwittingly participate if sends information to another resource. This may add а privacy risk. For instаnce, HTML5 has аdded a feature to the web called Hyperlink Auditing. If you are not aware of this feature, Hyperlink auditing is added to a web page or created by an area element that has a ping attribute.

Hyperlink Auditing Pings

It is normally used by sites to track link clicks but has also been found to be abused by cyber-criminals to pass the massive amount of web requests to sites in an attempt to take them offline. So, how to disable this feature in your Chrome or Firefox browser? Also, let us try to answer a few questions related to it.

We’ll proceed in 2 steps-

1. Disable Hyperlink auditing
2. Determine if Hyperlink auditing good or bad

Hyperlink auditing is an HTML standard that allows the creation of special links that ping back to a specified URL when they are clicked on. These pings are done in the form of a POST request to the specified web page that can then examine the request headers to see what page the link was clicked on.

1] Disable Hyperlink auditing

Firefox is one of the few browsers that have the ping attribute disabled by default. You can verify it by opening the browser and taking a look at about:config >  browser.send_pings entry value. See the screenshot below for more information.

Chrome is planning to remove this ability in future versions. However, you can still disable it by opening chrome://flags#disable-hyperlink-auditing and setting the flag to Disabled.

For your information in newer versions, Hyperlink ping tracking feature will be enabled by default, and so you may not see these flags in your browser.

2] Is Hyperlink auditing good or bad

There was a report sometime earlier; it suggested that a new type of DDoS attack abuses the HTML5 Ping-based hyperlink auditing feature.

The attack primarily involves users innocently visiting a crafted web page with two external JavaScript files. One of which includes an array containing URLs (believed to be targets of the DDoS attack. The second JavaScript file had a function that randomly selected an URL from the array, created the <a> tag with a ‘ping’ attribute, and pro-grammatically clicked the link every second. This enabled attackers to send hyperlink auditing ping to the target so long the web page was opened. As such, rather than vulnerability, the attack relied on turning a legitimate feature into an attack tool.

This is a worrying trend, and so Hyperlink auditing is generally not considered as a good idea.

Related posts

• FIX: reCAPTCHA oo aan ka shaqayn Chrome, Firefox, ama browser kasta

• Sida loo xidhiidhiyo tabs inta u dhaxaysa Edge, Chrome iyo Firefox browsers

• Google Chrome vs Firefox Quantum ee Windows PC

• Sida loo kaydiyo boggaga internetka sidii PDF ahaan Chrome ama Firefox

• 400 Codsi Xun, Kukis Aad U Weyn - Chrome, Edge, Firefox

• Sida loo isticmaalo Chrome, Edge, Firefox, Opera browsers sida Notepad ahaan

• Daawade Cache Shabakad bilaash ah oo loogu talagalay daalacashada Chrome, Firefox iyo Edge

• Xir dhammaan tabaha birawsarka ee furmay hal mar gudaha Chrome, Edge, ama Firefox

• Sida loo beddelo Font Default gudaha Chrome, Edge, Firefox browser

• Amniga, Qarsoonaanta, Aaladaha Nadiifinta ee Edge, Firefox, Chrome, Opera

• Beddel mashiinka raadinta caadiga ah ee Chrome, Firefox, Opera, IE

• La wadaag badhanka Plugins ee Chrome, Firefox iyo browsers Edge

• Khariidadaha Google-ka ku hagaaji arrin gaabis ah Chrome, Firefox, Edge on Windows 11/10

• Dami sawirada Chrome, Firefox, Edge, Internet Explorer markaad baadhayso

• Waa maxay Loadista caajisnimada? Daar ama dami gudaha Chrome, Firefox, Edge

• 10ka ugu wanaagsan ee Chrome, Edge, iyo Firefox kordhinta si loo kaydiyo bogga si loo akhriyo hadhow

• Ku rakib YouTube sidii App Web Horumarineed ee Chrome ama Edge

• Ku samee soo-gaab shabakadeed desktop-ka adoo isticmaalaya Chrome, Edge, Firefox

• Sida loo furo faylasha maxaliga ah ee Chrome, Firefox, iyo Edge

• Sida liiska madow looga dhigo ama loo xannibo mareegaha Chrome, Firefox, browser-yada Edge