{"id":104172,"date":"2022-05-27T21:36:38","date_gmt":"2022-05-27T19:36:38","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/github-raskryl-dannye-o-vzlome-infrastruktury-npm-i-vyyavlenii-otkrytyh-parolej-v-logah"},"modified":"2022-05-27T21:36:38","modified_gmt":"2022-05-27T19:36:38","slug":"github-raskryl-dannye-o-vzlome-infrastruktury-npm-i-vyyavlenii-otkrytyh-parolej-v-logah","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/github-raskryl-dannye-o-vzlome-infrastruktury-npm-i-vyyavlenii-otkrytyh-parolej-v-logah","title":{"rendered":"GitHub avaldas andmed NPM infrastruktuuri h\u00e4kkimise ja avatud paroolide avastamise kohta logides","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

GitHub avaldas haarangute anal\u00fc\u00fcsi tulemused, mille k\u00e4igus p\u00e4\u00e4sesid 12. aprillil r\u00fcndajad ligi Amazon AWS teenuse pilvekeskkondadele, mida kasutati NPM projekti infrastruktuuris. Insidenti anal\u00fc\u00fcsides selgus, et r\u00fcndajad p\u00e4\u00e4sesid ligi skimdb.npmjs.com hosti varukoopiatele, sealhulgas umbes 100 000 NPM kasutaja andmebaasi varukoopia juurde, mis oli loodud 2015. aastal ning sisaldas paroolihash'e, nimesid ja e-kirju. <\/p>\n

Paroolihash'id loodi PBKDF2 v\u00f5i SHA1 soolaga, mille kasutamine asendati 2017. aastal kr\u00fcptiliselt tugevama bcrypt'iga. P\u00e4rast insidentide tuvastamist l\u00e4htestati lekkinud paroolid ja kasutajatele saadeti teavitus uue parooli seadistamise vajadusest. Kuna alates 1. m\u00e4rtsist on NPM-is kehtestatud kohustuslik kahefaktoriline autentimine e-kirjaga kinnitamisega, siis on kasutajate kompromiteerimise oht hinnatud madalaks. <\/p>\n

Lisaks saidi r\u00fcndajate k\u00e4tesse j\u00f5udsid k\u00f5ik manifestifailid ja privaatpakettide metaandmed, mis olid seisuga aprill 2021, samuti CSV-failid, kus on ajakohane loetelu k\u00f5igist privaatpakettide nimedest ja versioonidest, ning k\u00f5ik kahe GitHubi kliendi privaatpakettide sisu (nimesid ei avalikustata). Mis puudutab reposi endaga, siis j\u00e4lgide anal\u00fc\u00fcs ja pakettide kontrollimise hash'id ei tuvastanud r\u00fcndajate muudatusi NPM-pakettides ega valeversioonide avaldamist. <\/p>\n

R\u00fcnne toimus 12. aprillil, kasutades varastatud OAuthi tokenit, mis oli genereeritud kahele kolmanda osapoole GitHubi integratsioonile \u2014 Heroku ja Travis-CI. Utiliseerides tokeneid, said r\u00fcndajad p\u00e4\u00e4seda ligi GitHubi privaatsetest hoidlatest API Amazon Web Services'i v\u00f5tmega, mida kasutati NPM-i projekti infrastruktuuris. Saadud v\u00f5ti v\u00f5imaldas p\u00e4\u00e4seda AWS S3 teenuses hoitud andmetele. <\/p>\n

Lisaks paljastati varasemalt tuvastatud t\u00f5siste probleeme isikuandmete t\u00f6\u00f6tlemise konfidentsiaalsusega serverites<\/a> NPM \u2014 sise logides salvestati avatud kujul mitme NPM kasutaja paroolid ning ka NPM-i ligip\u00e4\u00e4su tokenid. NPM-i integreerimise k\u00e4igus GitHubi logimiss\u00fcsteemiga ei tagatud konfidentsiaalse teabe eemaldamist NPM-i teenuste logis olevatest p\u00e4ringutest. V\u00e4idetakse, et puudus on k\u00f5rvaldatud ning logid puhastatud juba enne NPM-i r\u00fcnnakut. Ligip\u00e4\u00e4s logidele, mis sisaldasid avatud paroleid, oli vaid \u00fcksikutel GitHubi t\u00f6\u00f6tajatel.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f GitHub \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0440\u0430\u0437\u0431\u043e\u0440\u0430 \u0430\u0442\u0430\u043a\u0438, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 12 \u0430\u043f\u0440\u0435\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u043c \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f\u043c \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0435 Amazon AWS, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u043c \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 NPM. \u0410\u043d\u0430\u043b\u0438\u0437 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u043f\u043e\u043a\u0430\u0437\u0430\u043b, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u043c \u043a\u043e\u043f\u0438\u044f\u043c \u0445\u043e\u0441\u0442\u0430 skimdb.npmjs.com \u0438 \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043a \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u043e\u0439 \u043a\u043e\u043f\u0438\u0438 \u0411\u0414 \u0441 \u0443\u0447\u0451\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 100 \u0442\u044b\u0441\u044f\u0447 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 NPM \u043f\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-104172","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47GitHub avalikustas andmeid NPM-i infrastruktuuri h\u00e4kkimise ja avatud salas\u00f5nade tuvastamise kohta logides | ProHoster","description":"Ettev\u00f5te GitHub avaldas r\u00fcnnaku uurimise tulemused, mille k\u00e4igus said kurjategijad 12. aprillil juurdep\u00e4\u00e4su Amazoni AWS-i pilvekeskkondadele, mida kasutati NPM projekti infrastruktuuris.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/github-raskryl-dannye-o-vzlome-infrastruktury-npm-i-vyyavlenii-otkrytyh-parolej-v-logah","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47GitHub \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u0434\u0430\u043d\u043d\u044b\u0435 \u043e \u0432\u0437\u043b\u043e\u043c\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b NPM \u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0445 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0432 \u043b\u043e\u0433\u0430\u0445 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f GitHub \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0440\u0430\u0437\u0431\u043e\u0440\u0430 \u0430\u0442\u0430\u043a\u0438, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 12 \u0430\u043f\u0440\u0435\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0431\u043b\u0430\u0447\u043d\u044b\u043c \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f\u043c \u0432 \u0441\u0435\u0440\u0432\u0438\u0441\u0435 Amazon AWS, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u043c \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 NPM.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/github-raskryl-dannye-o-vzlome-infrastruktury-npm-i-vyyavlenii-otkrytyh-parolej-v-logah","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-05-27T19:36:38+00:00","article:modified_time":"2022-05-27T19:36:38+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"104172","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-25 11:20:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-05-27 19:36:53","updated":"2026-01-25 11:20:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/104172","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=104172"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/104172\/revisions"}],"predecessor-version":[{"id":164417,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/104172\/revisions\/164417"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=104172"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=104172"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=104172"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}