{"id":112852,"date":"2024-01-12T15:10:15","date_gmt":"2024-01-12T13:10:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-na-infrastrukturu-pytorch-komprometiruyushhaya-repozitorij-i-relizy"},"modified":"2026-02-13T23:24:49","modified_gmt":"2026-02-13T21:24:49","slug":"ataka-na-infrastrukturu-pytorch-komprometiruyushhaya-repozitorij-i-relizy","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/ataka-na-infrastrukturu-pytorch-komprometiruyushhaya-repozitorij-i-relizy","title":{"rendered":"Angreb p\u00e5 PyTorch-infrastrukturen, der kompromitterer repository og udgivelser","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Detaljer om angrebet p\u00e5 infrastrukturen, der anvendes til udviklingen af maskinl\u00e6ringsrammen PyTorch, er blevet afsl\u00f8ret. Dette angreb gjorde det muligt at udtr\u00e6kke adgangsn\u00f8gler, der var tilstr\u00e6kkelige til at inds\u00e6tte vilk\u00e5rlige data i repository med projektets udgivelser p\u00e5 GitHub og AWS samt til at inds\u00e6tte kode i hovedgrenen af repository og tilf\u00f8je bagd\u00f8re via afh\u00e6ngigheder. Erstatning af PyTorch-udgivelser kunne anvendes til at udf\u00f8re angreb p\u00e5 store virksomheder som Google, Meta, Boeing og Lockheed Martin, der bruger PyTorch i deres projekter. Som en del af Bug Bounty-programmet udbetalte Meta $16250 til forskere for information om problemet. <\/p>\n

Kernen i angrebet er muligheden for at eksekvere sin kode p\u00e5 servere<\/a> kontinuerlig integration, der udf\u00f8rer genopbygning og k\u00f8rsel af opgaver for at teste nye \u00e6ndringer, der sendes til depotet. Problemet vedr\u00f8rer projekter, der bruger egne eksterne behandlere «Self-Hosted Runner» med GitHub Actions. I mods\u00e6tning til traditionelle GitHub Actions behandles Self-Hosted ikke i GitHub's infrastruktur, men p\u00e5 ens egne servere eller i virtuelle<\/a> maskiner, der underst\u00f8ttes af udviklerne. <\/p>\n

Udf\u00f8relsen af byggeopgaver p\u00e5 egne servere muligg\u00f8r k\u00f8rsel af kode, der kan scanne virksomhedens interne netv\u00e6rk, s\u00f8ge i det lokale filsystem efter krypteringsn\u00f8gler og adgangstokens samt analysere milj\u00f8variabler med parametre til tilgange til eksterne lagre eller cloud-tjenester. Uden tilstr\u00e6kkelig isolation af byggeomgivelser kan fundne fortrolige data sendes ud af angribere, for eksempel ved at tilg\u00e5 eksterne API'er. Til at bestemme anvendelsen af projekter med «Self-Hosted Runner» kan v\u00e6rkt\u00f8jet Gato anvendes, som analyserer offentligt tilg\u00e6ngelige workflow-filer og logs fra CI-opgaver. <\/p>\n

I PyTorch og mange andre projekter, der bruger «Self-Hosted Runner», er k\u00f8rsel af byggeopgaver kun tilladt for udviklere, hvis \u00e6ndringer tidligere har v\u00e6ret genstand for gennemgang og er blevet inkluderet i projektets kodebase. At have status som «contributor» ved brug af repository-indstillingerne er tilladt at k\u00f8re GitHub Actions behandlere ved indsendelse af pull-anmodninger og dermed udf\u00f8re ens kode i enhver GitHub Actions Runner-omgivelse, der er knyttet til depotet eller den organisation, der f\u00f8rer projektet. <\/p>\n

Attributet til status som «contributor» viste sig at v\u00e6re let at omg\u00e5 — det var tilstr\u00e6kkeligt at sende en lille \u00e6ndring og vente p\u00e5 dens accept i kodebasen, hvorefter udvikleren automatisk fik status som aktiv deltager, hvis pull-anmodninger kunne testes i CI-infrastrukturen uden s\u00e6rskilt kontrol. For at opn\u00e5 status som aktiv udvikler blev der i eksperimentet brugt sm\u00e5 kosmetiske \u00e6ndringer relateret til rettelse af tastefejl i dokumentationen. For at f\u00e5 adgang til repository og udgivelseslagre af PyTorch under angrebet blev der opn\u00e5et adgang til et GitHub-token, der blev brugt til at tilg\u00e5 repository fra build-processerne, samt AWS-n\u00f8gler, der var involveret i at gemme bygge resultater. <\/p>\n

Problemet er ikke specifikt for PyTorch og ber\u00f8rer mange andre store projekter, der bruger standardindstillinger for «Self-Hosted Runner» i GitHub Actions. For eksempel kan jeg n\u00e6vne udf\u00f8relsen af lignende angreb for at inds\u00e6tte bagd\u00f8re i nogle store kryptovaluta-wallets og blockchain-projekter med milliardkapitalisering, \u00e6ndringer i udgivelserne af Microsoft Deepspeed og TensorFlow, kompromittering af en af CloudFlares applikationer samt udf\u00f8relse af kode p\u00e5 en computer i Microsoft-netv\u00e6rket. Detaljer om disse h\u00e6ndelser er endnu ikke blevet offentliggjort. Inden for de eksisterende Bug Bounty-programmer har forskere indsendt over 20 ans\u00f8gninger for at modtage bel\u00f8nninger p\u00e5 i alt flere hundrede tusinde dollar.
\n
Kilde: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0434\u0435\u0442\u0430\u043b\u0438 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u043f\u0440\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f PyTorch, \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0432\u0448\u0443\u044e \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u043a\u043b\u044e\u0447\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u0435 \u0434\u043b\u044f \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u0441 \u0440\u0435\u043b\u0438\u0437\u0430\u043c\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0432 GitHub \u0438 AWS, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043b\u044f \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043a\u043e\u0434\u0430 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u0443\u044e \u0432\u0435\u0442\u043a\u0443 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f \u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u043e\u0434\u043c\u0435\u043d\u0430 \u0440\u0435\u043b\u0438\u0437\u043e\u0432 PyTorch \u043c\u043e\u0433\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043a\u0440\u0443\u043f\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112852","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Angreb p\u00e5 PyTorch-infrastrukturen, der kompromitterer lageret og udgivelserne | ProHoster","description":"Detaljer om angrebet p\u00e5 infrastrukturen, der bruges til udviklingen af machine learning-rammev\u00e6rket PyTorch, er blevet afsl\u00f8ret, hvilket gjorde det muligt at udtr\u00e6kke adgangsn\u00f8gler, der er tilstr\u00e6kkelige til at placere vilk\u00e5rlige data i udgivelseslageret.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/ataka-na-infrastrukturu-pytorch-komprometiruyushhaya-repozitorij-i-relizy","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 PyTorch, \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u0443\u044e\u0449\u0430\u044f \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0438 \u0440\u0435\u043b\u0438\u0437\u044b | ProHoster","og:description":"\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0434\u0435\u0442\u0430\u043b\u0438 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u043f\u0440\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f PyTorch, \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0432\u0448\u0443\u044e \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u043a\u043b\u044e\u0447\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u0435 \u0434\u043b\u044f \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u0441 \u0440\u0435\u043b\u0438\u0437\u0430\u043c\u0438.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/ataka-na-infrastrukturu-pytorch-komprometiruyushhaya-repozitorij-i-relizy","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-12T13:10:15+00:00","article:modified_time":"2026-02-13T21:24:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"112852","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-13 21:24:49","updated":"2026-02-13 21:24:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/112852","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=112852"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/112852\/revisions"}],"predecessor-version":[{"id":164381,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/112852\/revisions\/164381"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=112852"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=112852"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=112852"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}