{"id":114077,"date":"2024-03-03T12:26:07","date_gmt":"2024-03-03T10:26:07","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/github-vklyuchil-po-umolchaniyu-sistemu-zashhity-ot-utechek-tokenov-k-api"},"modified":"2024-03-03T12:26:07","modified_gmt":"2024-03-03T10:26:07","slug":"github-vklyuchil-po-umolchaniyu-sistemu-zashhity-ot-utechek-tokenov-k-api","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/github-vklyuchil-po-umolchaniyu-sistemu-zashhity-ot-utechek-tokenov-k-api","title":{"rendered":"GitHub nyn\u00ed ve v\u00fdchoz\u00edm nastaven\u00ed zahrnuje ochrann\u00fd syst\u00e9m proti \u00faniku API token\u016f.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

GitHub ozn\u00e1mil, \u017ee pro v\u0161echny ve\u0159ejn\u00e9 repozit\u00e1\u0159e nov\u011b aktivuje mechanismus ochrany proti \u00faniku d\u016fv\u011brn\u00fdch dat, kter\u00e1 jsou omylem ponech\u00e1na v\u00fdvoj\u00e1\u0159i v k\u00f3du. Nap\u0159\u00edklad se st\u00e1v\u00e1, \u017ee do repozit\u00e1\u0159e proniknou konfigura\u010dn\u00ed soubory s hesly k datab\u00e1z\u00edm, tokeny nebo kl\u00ed\u010di pro p\u0159\u00edstup k API. D\u0159\u00edve se skenov\u00e1n\u00ed prov\u00e1d\u011blo pasivn\u011b a umo\u017e\u0148ovalo zji\u0161\u0165ovat ji\u017e prob\u011bhl\u00e9 \u00faniky, kter\u00e9 se dostaly do repozit\u00e1\u0159e. Nyn\u00ed se kontrola prov\u00e1d\u00ed automaticky ve f\u00e1zi publikace (git push) a vede k v\u00fdstraze p\u0159i pokusu o p\u0159id\u00e1n\u00ed commit\u016f, ve kter\u00fdch byla zji\u0161t\u011bna p\u0159\u00edtomnost d\u016fv\u011brn\u00fdch dat. <\/p>\n

Bylo implementov\u00e1no v\u00edce ne\u017e 250 \u0161ablon pro identifikaci r\u016fzn\u00fdch typ\u016f kl\u00ed\u010d\u016f, token\u016f, certifik\u00e1t\u016f a p\u0159ihla\u0161ovac\u00edch \u00fadaj\u016f. Pro vylou\u010den\u00ed fale\u0161n\u00fdch pozitiv se kontroluj\u00ed pouze zaru\u010den\u011b definovateln\u00e9 typy token\u016f, kter\u00e9 pokr\u00fdvaj\u00ed v\u00edce ne\u017e 180 r\u016fzn\u00fdch slu\u017eeb, v\u010detn\u011b Amazon Web Services, Azure, Crates.io, DigitalOcean, Google Cloud, NPM, PyPI, RubyGems a Yandex.Cloud. Po odhalen\u00ed potenci\u00e1ln\u00edho \u00faniku je v\u00fdvoj\u00e1\u0159i navr\u017eeno, aby provedli revizi problematick\u00e9ho k\u00f3du, odstranili \u00fanik a provedli commit znovu, nebo ozna\u010dili blokaci jako fale\u0161nou.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

GitHub \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043f\u043e\u043f\u0430\u0434\u0430\u043d\u0438\u044f \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e \u043d\u0435\u0434\u043e\u0441\u043c\u043e\u0442\u0440\u0443 \u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 \u0432 \u043a\u043e\u0434\u0435. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0441\u043b\u0443\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u043f\u043e\u043f\u0430\u0434\u0430\u044e\u0442 \u0444\u0430\u0439\u043b\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441 \u043f\u0430\u0440\u043e\u043b\u044f\u043c\u0438 \u043a \u0421\u0423\u0411\u0414, \u0442\u043e\u043a\u0435\u043d\u044b \u0438\u043b\u0438 \u043a\u043b\u044e\u0447\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a API. \u0420\u0430\u043d\u0435\u0435 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u043b\u043e\u0441\u044c \u0432 \u043f\u0430\u0441\u0441\u0438\u0432\u043d\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u044f\u0442\u044c \u0443\u0436\u0435 \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u0434\u0448\u0438\u0435 \u0443\u0442\u0435\u0447\u043a\u0438, \u043f\u043e\u043f\u0430\u0432\u0448\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-114077","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47GitHub aktivoval ochrann\u00fd syst\u00e9m proti \u00fanik\u016fm token\u016f API | ProHoster","description":"GitHub ozn\u00e1mil, \u017ee pro v\u0161echny ve\u0159ejn\u00e9 repozit\u00e1\u0159e nov\u011b aktivuje mechanismus ochrany proti \u00faniku d\u016fv\u011brn\u00fdch dat, kter\u00e1 jsou omylem ponech\u00e1na v\u00fdvoj\u00e1\u0159i v k\u00f3du.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/github-vklyuchil-po-umolchaniyu-sistemu-zashhity-ot-utechek-tokenov-k-api","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47GitHub \u0432\u043a\u043b\u044e\u0447\u0438\u043b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u0442\u0435\u0447\u0435\u043a \u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u043a API | ProHoster","og:description":"GitHub \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043f\u043e\u043f\u0430\u0434\u0430\u043d\u0438\u044f \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e \u043d\u0435\u0434\u043e\u0441\u043c\u043e\u0442\u0440\u0443 \u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 \u0432 \u043a\u043e\u0434\u0435.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/github-vklyuchil-po-umolchaniyu-sistemu-zashhity-ot-utechek-tokenov-k-api","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-03-03T10:26:07+00:00","article:modified_time":"2024-03-03T10:26:07+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/114077","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=114077"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/114077\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=114077"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=114077"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=114077"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}