{"id":100566,"date":"2021-06-22T10:22:46","date_gmt":"2021-06-22T08:22:46","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/utechka-heshej-parolej-whois-servisa-internet-registratora-apnic"},"modified":"2021-06-22T10:22:46","modified_gmt":"2021-06-22T08:22:46","slug":"utechka-heshej-parolej-whois-servisa-internet-registratora-apnic","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/utechka-heshej-parolej-whois-servisa-internet-registratora-apnic","title":{"rendered":"\u00danik hash\u016f hesel ze slu\u017eby Whois internetov\u00e9ho registr\u00e1tora APNIC","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Registr\u00e1tor APNIC, odpov\u011bdn\u00fd za rozd\u011blov\u00e1n\u00ed IP adres v regionu Asie a Tichomo\u0159\u00ed, ozn\u00e1mil incident, p\u0159i n\u011bm\u017e se do ve\u0159ejn\u00e9ho prostoru dostal SQL dump slu\u017eby Whois obsahuj\u00edc\u00ed d\u016fv\u011brn\u00e9 \u00fadaje a hashovan\u00e9 hesla. Je zaj\u00edmav\u00e9, \u017ee to nen\u00ed prvn\u00ed \u00fanik osobn\u00edch \u00fadaj\u016f v APNIC \u2014 v roce 2017 byla datab\u00e1ze Whois tak\u00e9 zve\u0159ejn\u011bna a rovn\u011b\u017e kv\u016fli nedbalosti zam\u011bstnanc\u016f. <\/p>\n

P\u0159i zav\u00e1d\u011bn\u00ed podpory protokolu RDAP, kter\u00fd m\u00e1 nahradit protokol WHOIS, zam\u011bstnanci APNIC ulo\u017eili SQL dump datab\u00e1ze pou\u017e\u00edvan\u00e9 ve slu\u017eb\u011b Whois do cloudov\u00e9ho \u00falo\u017ei\u0161t\u011b Google Cloud, ale neomezen\u00fd p\u0159\u00edstup k n\u011bmu nezak\u00e1zali. Kv\u016fli chyb\u011b v nastaven\u00ed byl SQL dump po dobu t\u0159\u00ed m\u011bs\u00edc\u016f ve\u0159ejn\u011b p\u0159\u00edstupn\u00fd a tento fakt vy\u0161el najevo a\u017e 4. \u010dervna, kdy\u017e si toho jeden z nez\u00e1visl\u00fdch bezpe\u010dnostn\u00edch v\u00fdzkumn\u00edk\u016f v\u0161iml a upozornil registr\u00e1tora na probl\u00e9m. <\/p>\n

V SQL dumpu se nach\u00e1zely atributy \u201eauth\u201c, kter\u00e9 obsahovaly hashovan\u00e1 hesla pro \u00fapravu objekt\u016f Maintainer a Incident Response Team (IRT), stejn\u011b jako n\u011bkter\u00e9 d\u016fv\u011brn\u00e9 informace o klientech, kter\u00e9 se b\u011b\u017en\u011b nezobrazuj\u00ed ve Whois p\u0159i standardn\u00edch dotazech (obvykle se jedn\u00e1 o dopl\u0148kov\u00e9 kontaktn\u00ed \u00fadaje a pozn\u00e1mky o u\u017eivateli). V p\u0159\u00edpad\u011b obnoven\u00ed hesel by \u00fato\u010dn\u00edci m\u011bli mo\u017enost m\u011bnit obsah pol\u00ed s parametry majitel\u016f blok\u016f IP adress<\/a> ve Whois. Objekt Maintainer ur\u010duje osobu odpov\u011bdnou za zm\u011bnu skupiny z\u00e1znam\u016f spojen\u00fdch prost\u0159ednictv\u00edm atributu \u201emnt-by\u201c, zat\u00edmco objekt IRT obsahuje kontaktn\u00ed \u00fadaje administr\u00e1tor\u016f, kte\u0159\u00ed reaguj\u00ed na ozn\u00e1men\u00ed o probl\u00e9mech. Informace o pou\u017eit\u00e9m algoritmu hashov\u00e1n\u00ed hesel nebyly uvedeny, ale v roce 2017 byly k hashov\u00e1n\u00ed pou\u017e\u00edv\u00e1ny zastaral\u00e9 algoritmy MD5 a CRYPT-PW (8-znakov\u00e1 hesla s hashem na z\u00e1klad\u011b funkce UNIX crypt). <\/p>\n

Po zji\u0161t\u011bn\u00ed incidentu APNIC inicioval reset hesel pro objekty ve Whois. Na stran\u011b APNIC nebyly zat\u00edm zji\u0161t\u011bny \u017e\u00e1dn\u00e9 znaky nelegitimn\u00edch akc\u00ed, ale z\u00e1ruky, \u017ee data se nedostala do rukou \u00fato\u010dn\u00edk\u016f, nejsou, proto\u017ee chyb\u011bj\u00ed kompletn\u00ed access logy k soubor\u016fm v Google Cloud. Podobn\u011b jako po minul\u00e9m incidentu APNIC sl\u00edbil prov\u00e9st revizi a zav\u00e9st zm\u011bny v technologick\u00fdch procesech, aby se podobn\u00fdm \u00fanik\u016fm v budoucnosti p\u0159ede\u0161lo.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 APNIC, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0439 \u0437\u0430 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0432 \u0410\u0437\u0438\u0430\u0442\u0441\u043a\u043e-\u0422\u0438\u0445\u043e\u043e\u043a\u0435\u0430\u043d\u0441\u043a\u043e\u043c \u0440\u0435\u0433\u0438\u043e\u043d\u0435, \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e\u0431 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0435, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e\u043f\u0430\u043b SQL-\u0434\u0430\u043c\u043f \u0441\u0435\u0440\u0432\u0438\u0441\u0430 Whois, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0439 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u0445\u044d\u0448\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439. \u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u044d\u0442\u043e \u043d\u0435 \u043f\u0435\u0440\u0432\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 APNIC — \u0432 2017 \u0433\u043e\u0434\u0443 \u0431\u0430\u0437\u0430 Whois \u0443\u0436\u0435 \u043f\u043e\u043f\u0430\u0434\u0430\u043b\u0430 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u0442\u043e\u0436\u0435 \u043f\u043e \u043d\u0435\u0434\u043e\u0441\u043c\u043e\u0442\u0440\u0443 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u0430. \u0412 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100566","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u00danik hash\u016f hesel slu\u017eby Whois internetov\u00e9ho registr\u00e1tora APNIC | ProHoster","description":"Registr\u00e1tor APNIC, zodpov\u011bdn\u00fd za distribuci IP adres v asijsko-pacifick\u00e9m regionu, ozn\u00e1mil incident, kter\u00fd zp\u016fsobil zve\u0159ejn\u011bn\u00ed SQL dumpu slu\u017eby Whois, obsahuj\u00edc\u00edho citliv\u00e9 informace.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/utechka-heshej-parolej-whois-servisa-internet-registratora-apnic","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0442\u0435\u0447\u043a\u0430 \u0445\u044d\u0448\u0435\u0439 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 Whois-\u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 APNIC | ProHoster","og:description":"\u0420\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 APNIC, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0439 \u0437\u0430 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0432 \u0410\u0437\u0438\u0430\u0442\u0441\u043a\u043e-\u0422\u0438\u0445\u043e\u043e\u043a\u0435\u0430\u043d\u0441\u043a\u043e\u043c \u0440\u0435\u0433\u0438\u043e\u043d\u0435, \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e\u0431 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0435, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e\u043f\u0430\u043b SQL-\u0434\u0430\u043c\u043f \u0441\u0435\u0440\u0432\u0438\u0441\u0430 Whois, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0439 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/utechka-heshej-parolej-whois-servisa-internet-registratora-apnic","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-06-22T08:22:46+00:00","article:modified_time":"2021-06-22T08:22:46+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100566","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-06-22 08:30:54","updated":"2026-02-08 20:40:15","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/100566","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=100566"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/100566\/revisions"}],"predecessor-version":[{"id":158025,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/100566\/revisions\/158025"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=100566"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=100566"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=100566"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}