{"id":32527,"date":"2019-10-31T21:47:32","date_gmt":"2019-10-31T18:47:32","guid":{"rendered":"https:\/\/prohoster.info\/blog\/dockerhub-vzloman\/"},"modified":"2019-10-31T21:47:32","modified_gmt":"2019-10-31T18:47:32","slug":"dockerhub-vzloman","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/dockerhub-vzloman","title":{"rendered":"DockerHub byl hacknut","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"DockerHub
\n
\nP\u0159ed n\u011bkolika hodinami obdr\u017eeli n\u011bkte\u0159\u00ed u\u017eivatel\u00e9 DockerHub n\u00e1sleduj\u00edc\u00ed e-maily:<\/p>\n

\u201eVe \u010dtvrtek 25. dubna 2019 jsme zjistili neopr\u00e1vn\u011bn\u00fd p\u0159\u00edstup k jedn\u00e9 z datab\u00e1z\u00ed DockerHub, ve kter\u00e9 se nach\u00e1z\u00ed \u010d\u00e1st nefinan\u010dn\u00edch \u00fadaj\u016f u\u017eivatel\u016f. Po zji\u0161t\u011bn\u00ed jsme okam\u017eit\u011b podnikli v\u0161echny pot\u0159ebn\u00e9 kroky k zabezpe\u010den\u00ed \u00fadaj\u016f u\u017eivatel\u016f. <\/p>\n

A nyn\u00ed bychom se r\u00e1di pod\u011blili o informace, kter\u00e9 jsme dok\u00e1zali zjistit b\u011bhem vy\u0161et\u0159ov\u00e1n\u00ed, v\u010detn\u011b toho, jak\u00e9 \u00fa\u010dty DockerHub byly ovlivn\u011bny a jak\u00e9 kroky by nyn\u00ed m\u011bli jejich vlastn\u00edci podniknout.
\n<\/a><\/noindex>
\nToto jsou informace, kter\u00e9 jsme zjistili: <\/p>\n

B\u011bhem kr\u00e1tk\u00e9ho obdob\u00ed neopr\u00e1vn\u011bn\u00e9ho p\u0159\u00edstupu k datab\u00e1zi DockerHub mohly b\u00fdt odhaleny citliv\u00e9 \u00fadaje p\u0159ibli\u017en\u011b 190 000 \u00fa\u010dt\u016f (m\u00e9n\u011b ne\u017e 5 % u\u017eivatel\u016f slu\u017eby). \u00dadaje zahrnuj\u00ed u\u017eivatelsk\u00e1 jm\u00e9na a hashovan\u00e9 hesla mal\u00e9ho procenta v\u00fd\u0161e uveden\u00fdch u\u017eivatel\u016f, jako\u017e i tokeny GitHub a BitBucket pou\u017e\u00edvan\u00e9 pro automatick\u00e9 vytv\u00e1\u0159en\u00ed kontejner\u016f. <\/p>\n

Co je t\u0159eba nyn\u00ed u\u010dinit: <\/p>\n

\u2014 Po\u017e\u00e1d\u00e1me u\u017eivatele, aby zm\u011bnili hesla k DockerHub a jak\u00fdmikoliv dal\u0161\u00edm \u00fa\u010dt\u016fm, kter\u00e9 pou\u017e\u00edvaj\u00ed stejn\u00e9 heslo. <\/p>\n

\u2014 U\u017eivatel\u016fm, kte\u0159\u00ed pou\u017e\u00edvali automatick\u00e9 vytv\u00e1\u0159en\u00ed, jich\u017e se to mohlo dotknout, jsme resetovali tokeny a p\u0159\u00edstupov\u00e9 kl\u00ed\u010de. Pros\u00edme je tak\u00e9, aby zkontrolovali sv\u00e9 repozit\u00e1\u0159e na ned\u00e1vnou podez\u0159elou aktivitu. <\/p>\n

\u2014 Chcete-li se dozv\u011bd\u011bt, jak prozkoumat podez\u0159elou aktivitu na sv\u00fdch \u00fa\u010dtech GitHub a BitBucket za posledn\u00edch 24 hodin, nav\u0161tivte odkazy help.github.com\/en\/articles\/reviewing-your-security-log<\/a><\/noindex> a bitbucket.org\/blog\/new-audit-logs-give-you-the-who-what-when-and-where<\/a><\/noindex> <\/p>\n

\u2014 Toto m\u016f\u017ee ovlivnit va\u0161e aktu\u00e1ln\u00ed sestaven\u00ed z na\u0161\u00ed slu\u017eby pro automatizaci sestaven\u00ed. Tak\u00e9 m\u016f\u017ee b\u00fdt nutn\u00e9 odpojit a znovu p\u0159ipojit va\u0161e \u00fa\u010dty GitHub a BitBucket. O tom podrobn\u011b p\u00ed\u0161eme zde docs.docker.com\/docker-hub\/builds\/link-source<\/a><\/noindex> <\/p>\n

Na opl\u00e1tku se budeme v\u011bnovat vylep\u0161en\u00ed na\u0161ich bezpe\u010dnostn\u00edch syst\u00e9m\u016f a p\u0159ehodnot\u00edme na\u0161e politiky. Tak\u00e9 jsme nastavili dal\u0161\u00ed metriky, abychom sledovali mo\u017enou neleg\u00e1ln\u00ed aktivitu v budoucnu. <\/p>\n

St\u00e1le vy\u0161et\u0159ujeme incident a budeme v\u00e1s informovat, jakmile z\u00edsk\u00e1me nov\u00e9 informace.\u201c<\/p>\n

Jak obvykle, kontrolujeme na\u0161i e-mailovou schr\u00e1nku, na\u0161e \u00fa\u010dty v uveden\u00fdch slu\u017eb\u00e1ch a znovu vym\u00fd\u0161l\u00edme hesla. Jakmile se objev\u00ed nov\u00e9 informace, tento p\u0159\u00edsp\u011bvek aktualizujeme.<\/p>\n

Pouze registrovan\u00ed u\u017eivatel\u00e9 se mohou \u00fa\u010dastnit ankety. P\u0159ihlaste se<\/a><\/noindex>, pros\u00edm.<\/p>\n

Dostali jste podobn\u00fd e-mail?<\/h2>\n