Bromite: ๊ธฐ๋ณธ์ ์œผ๋กœ ๋ฆฌํผ๋Ÿฌ ์„ธ๋ถ„์„ฑ ๊ฐ์†Œ ๋ฐ ํ”„๋ฆฌํŽ˜์น˜-ํ”„๋ผ์ด๋ฒ„์‹œ-๋ณ€๊ฒฝ ํ™œ์„ฑํ™”

์— ๋งŒ๋“  2020๋…„ 07์›” 29์ผ  ยท  5์ฝ”๋ฉ˜ํŠธ  ยท  ์ถœ์ฒ˜: bromite/bromite

๊ธฐ๋ณธ์ ์œผ๋กœ chrome://flags/#reduced -referrer-granularity ๋ฐ chrome://flags/#prefetch -privacy-changes๋ฅผ ํ™œ์„ฑํ™”ํ•˜๋Š” ๊ฒƒ์ด ์ข‹์Šต๋‹ˆ๋‹ค. ์ „์ž๋Š” ์ˆœ์ „ํžˆ ๊ฐœ์ธ ์ •๋ณด ๋ณดํ˜ธ์™€ ๊ด€๋ จ๋˜์–ด ์žˆ์œผ๋ฉฐ ์ด๋ฏธ ๋น„์Šทํ•œ ์ž‘์—…์„ ์ˆ˜ํ–‰ํ•˜๊ณ  ์žˆ๋Š”์ง€ ๋ชจ๋ฅด๊ฒ ์Šต๋‹ˆ๋‹ค. ํ›„์ž๋Š” ์—ฌ๊ธฐ์— ์„ค๋ช…๋œ ๋Œ€๋กœ ๋ฐ์ดํ„ฐ ๋ˆ„์ถœ์„ ๋ฐฉ์ง€ํ•ฉ๋‹ˆ๋‹ค.

https://terjanq.github.io/Bug-Bounty/Google/cache-attack-06jd2d2mz2r0/index.html

Chromium์˜ "๊ตฌํ˜„ ์˜๋„"๋Š” ๋‹ค์Œ๊ณผ ๊ฐ™์Šต๋‹ˆ๋‹ค.

https://groups.google.com/a/chromium.org/forum/#!topic/blink -dev/bSMOY-evrV4

Brave ๋ธŒ๋ผ์šฐ์ € ๋ฆฌํฌ์ง€ํ† ๋ฆฌ์—์„œ ๋™์ผํ•œ ๋ฌธ์ œ๋ฅผ ์ œ๊ธฐํ–ˆ์œผ๋ฉฐ ๊ฒฐ๊ณผ์ ์œผ๋กœ ํ”Œ๋ž˜๊ทธ๊ฐ€ ๊ธฐ๋ณธ์ ์œผ๋กœ ํ™œ์„ฑํ™”๋˜์—ˆ์Šต๋‹ˆ๋‹ค.

https://github.com/brave/brave-browser/issues/8319

Vanadium ๋ฐ Ungoogled Chromium repos(์•„์ง ๊ฒ€ํ†  ์ค‘)์—์„œ๋„ ์ด ๋ฌธ์ œ๋ฅผ ์ œ๊ธฐํ–ˆ์Šต๋‹ˆ๋‹ค.

https://github.com/Eloston/ungoogled-chromium/issues/1117

https://github.com/GrapheneOS/Vanadium/issues/71

๊ด€์‹ฌ์„ ๊ฐ€์ ธ์ฃผ์…”์„œ ๊ฐ์‚ฌํ•ฉ๋‹ˆ๋‹ค.

missing-issue-template

๊ฐ€์žฅ ์œ ์šฉํ•œ ๋Œ“๊ธ€

84.0.4147.106 ์—์„œ ์ˆ˜์ •๋˜์—ˆ์Šต๋‹ˆ๋‹ค.

๋ชจ๋“  5 ๋Œ“๊ธ€

@Peacock365 Brave์— ๋Œ€ํ•œ ๋ฌธ์ œ ํ…œํ”Œ๋ฆฟ์„ ์‚ฌ์šฉํ–ˆ์„ ๋•Œ ์—ฌ๊ธฐ์—์„œ๋„ ๋™์ผํ•˜๊ฒŒ ์ˆ˜ํ–‰ํ–ˆ์–ด์•ผ ํ•ฉ๋‹ˆ๋‹ค.

@csagan5

_์ง€๊ธˆ ๋ฌธ์ œ ํ…œํ”Œ๋ฆฟ์„ ์ถ”๊ฐ€ํ•ฉ๋‹ˆ๋‹ค. ํ•˜์ง€๋งŒ ์ด ๊ฒฝ์šฐ์—๋Š” ๊ฐ€์น˜ ์žˆ๋Š” ์ •๋ณด๊ฐ€ ์ „ํ˜€ ์ถ”๊ฐ€๋˜์ง€ ์•Š๊ธฐ ๋•Œ๋ฌธ์— ์˜์‹์ ์œผ๋กœ ์žŠ์–ด๋ฒ„๋ ธ๋‹ค๊ณ  ๋งํ•ด์•ผ ํ•ฉ๋‹ˆ๋‹ค. ํ•˜์ง€๋งŒ ์–ด์จŒ๋“  ์—ฌ๊ธฐ ์žˆ์Šต๋‹ˆ๋‹ค:_

๋ฌธ์ œ ์ถ”์ ๊ธฐ, FAQ ๋ฐ ReadMe๋ฅผ ๊ฒ€์ƒ‰ํ–ˆ์Šต๋‹ˆ๋‹ค.

### ๊ธฐ๋Šฅ ์š”์ฒญ์ด ๊ฐœ์ธ ์ •๋ณด ๋ณดํ˜ธ์™€ ๊ด€๋ จ๋˜์–ด ์žˆ์Šต๋‹ˆ๊นŒ?

์˜ˆ.

### ์ด ๊ธฐ๋Šฅ์— ๋Œ€ํ•œ ํŒจ์น˜๊ฐ€ ์–ด๋”˜๊ฐ€์— ์žˆ์Šต๋‹ˆ๊นŒ?

Brave๊ฐ€ ์ด๋ฅผ ํŒจ์น˜ํ–ˆ์ง€๋งŒ ์ •ํ™•ํ•œ ํŒจ์น˜๋Š” Bromite์— ์žฌ์‚ฌ์šฉํ•  ์ˆ˜ ์—†์Šต๋‹ˆ๋‹ค.

### ์›ํ•˜๋Š” ์†”๋ฃจ์…˜ ์„ค๋ช…

๊ธฐ๋ณธ์ ์œผ๋กœ chrome://flags/#reduced -referrer-granularity ๋ฐ chrome://flags/#prefetch -privacy-changes๋ฅผ ํ™œ์„ฑํ™”ํ•ฉ๋‹ˆ๋‹ค.

### ๊ณ ๋ คํ•œ ๋Œ€์•ˆ์„ ๊ธฐ์ˆ ํ•˜์‹ญ์‹œ์˜ค

๊ฐœ์ธ ์ •๋ณด ์†์‹ค๋กœ ๊ธฐ๋ณธ/๋น„ํ™œ์„ฑํ™” ์ƒํƒœ๋กœ ๋‘์‹ญ์‹œ์˜ค. ๊ทธ๋Ÿฌ๋‚˜ ์—ฌ๊ธฐ์˜ ๋ชฉํ‘œ๋ฅผ ๊ณ ๋ คํ•  ๋•Œ ์‹ค์ œ๋กœ๋Š” ๊ฐœ์ธ ์ •๋ณด ๋ณดํ˜ธ๋ฅผ ๊ฐœ์„ ํ•˜๋Š” ๋Œ€์•ˆ์ด ์•„๋‹™๋‹ˆ๋‹ค. ํ™œ์„ฑํ™”ํ•˜์ง€ ์•Š์œผ๋ฉด ์ด ๋ฌธ์ œ๊ฐ€ ์ž๋™์œผ๋กœ ํ•ด๊ฒฐ๋จ์„ ์˜๋ฏธํ•ฉ๋‹ˆ๋‹ค.

Brave ๊ฐœ๋ฐœ์ž๊ฐ€ ์ง€์ ํ–ˆ๋“ฏ์ด ์—ฌ๊ธฐ์—์„œ ํ˜ธํ™˜์„ฑ ์œ„ํ—˜์ด ๋‚ฎ์€ ๊ฒƒ ๊ฐ™์Šต๋‹ˆ๋‹ค. ๊ทธ๋Ÿฌ๋‚˜ ์ด ๋‘ ํ”Œ๋ž˜๊ทธ๋ฅผ ํ™œ์„ฑํ™”ํ•˜๋ฉด ๋” ๋‚˜์€ ์ฐธ์กฐ ํ—ค๋” ์ •์ฑ…์ด ๋„์ž…๋˜๊ณ  ์บ์‹œ๊ฐ€ ๋Œ€์ƒ์ด ๋˜๋Š” ๊ฒฝ์šฐ ์ž„์˜์˜ ์–‘์˜ ์ •๋ณด๊ฐ€ ๋ˆ„์ถœ๋˜๋Š” ๊ฒƒ์„ ๋ฐฉ์ง€ํ•  ์ˆ˜ ์žˆ๊ธฐ ๋•Œ๋ฌธ์— ์—ฌ๊ธฐ์—์„œ ๊ฐœ์ธ ์ •๋ณด ๋ณดํ˜ธ ์ด๋“์ด ์ƒ๋‹นํ•ฉ๋‹ˆ๋‹ค.

๋‚˜๋Š” ์ด ๊ฒฝ์šฐ์— ๊ฐ€์น˜ ์žˆ๋Š” ์ •๋ณด๋ฅผ ์ „ํ˜€ ์ถ”๊ฐ€ํ•˜์ง€ ์•Š๊ธฐ ๋•Œ๋ฌธ์— ์˜์‹์ ์œผ๋กœ ๊ทธ๊ฒƒ์„ ์žŠ์–ด ๋ฒ„๋ ธ์Šต๋‹ˆ๋‹ค.

ํ…œํ”Œ๋ฆฟ์€ ์ด์Šˆ ํŠธ๋ž˜์ปค๋ฅผ ์ฒด๊ณ„์ ์œผ๋กœ ์œ ์ง€ํ•˜๋Š” ๋ฐ ํ•„์š”ํ•ฉ๋‹ˆ๋‹ค. Brave์— ์‚ฌ์šฉํ•œ ํ…œํ”Œ๋ฆฟ์€ ๋ฒ„๊ทธ ๋ณด๊ณ ์„œ์šฉ์ด๊ณ  ์—ฌ๊ธฐ์—๋Š” ๊ธฐ๋Šฅ ์š”์ฒญ์šฉ ํ…œํ”Œ๋ฆฟ๋„ ์žˆ์Šต๋‹ˆ๋‹ค.

๋‹ค์Œ ๋ฆด๋ฆฌ์Šค์—์„œ๋Š” ์ด ๋‘ ๊ฐ€์ง€๋ฅผ ํ™œ์„ฑํ™”ํ•˜๋Š” ๊ฒƒ์„ ๊ณ ๋ คํ•  ๊ฒƒ์ž…๋‹ˆ๋‹ค.

84.0.4147.106 ์—์„œ ์ˆ˜์ •๋˜์—ˆ์Šต๋‹ˆ๋‹ค.

์ด ํŽ˜์ด์ง€๊ฐ€ ๋„์›€์ด ๋˜์—ˆ๋‚˜์š”?
0 / 5 - 0 ๋“ฑ๊ธ‰