{"id":106247,"date":"2022-12-23T15:36:48","date_gmt":"2022-12-23T13:36:48","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/utechka-rezervnyh-kopij-s-dannymi-polzovatelej-lastpass"},"modified":"2022-12-23T15:36:48","modified_gmt":"2022-12-23T13:36:48","slug":"utechka-rezervnyh-kopij-s-dannymi-polzovatelej-lastpass","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/utechka-rezervnyh-kopij-s-dannymi-polzovatelej-lastpass","title":{"rendered":"LastPassi kasutajaandmete varukoopiate lekkimine","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

LastPassi paroolihalduri arendajad, keda kasutab enam kui 33 miljonit inimest ja \u00fcle 100 000 ettev\u00f5tte, teatasid kasutajatele juhtumist, mille k\u00e4igus suutsid r\u00fcndajad p\u00e4\u00e4seda ligip\u00e4\u00e4sule teenuse kasutajate andmete varukoopiatele. Andmed sisaldasid teavet nagu kasutajanimi, aadress, e-posti aadress, telefoninumber ja IP-aadressid, mille kaudu teenusesse sisse logiti, samuti paroolihalduris salvestatud de\u0161ifreerimata veebisaitide nimesid ning kr\u00fcpteeritud kujul salvestatud sisselogimisi, paroole, vormiandmeid ja m\u00e4rkmeid nende veebisaitide kohta. <\/p>\n

Veebisaitide sisselogimiste ja paroolide kaitsmiseks kasutati AES-iga kr\u00fcptimist, millel on 256-bitine v\u00f5ti, genereeritud PBKDF2 funktsiooni abil, mis p\u00f5hines ainult kasutajale tuntud meistriparoolil, mille pikkus on v\u00e4hemalt 12 m\u00e4rki. LastPassis toimuvad sisselogimiste ja paroolide kr\u00fcptimine ja dekr\u00fcptimine ainult kasutaja poolel, ning meistriparooli t\u00f5en\u00e4osus on t\u00e4nap\u00e4eva seadmete osas ebat\u00f5en\u00e4oline, arvestades meistriparooli suurust ja PBKDF2 iteratsioonide arvu. <\/p>\n

R\u00fcnnaku teostamiseks kasutati andmeid, mille r\u00fcndajad said eelmisel korral tehtud r\u00fcnnaku k\u00e4igus, mis toimus augustis ja oli seotud \u00fche teenuse arendaja konto kompromiteerimisega. Augustikuisest h\u00e4kkimisest tingitud ebaseaduslik ligip\u00e4\u00e4s arenduskeskkonnale, rakenduse koodile ja tehnilisele teabele j\u00f5udis kurjategijate k\u00e4tte. Hiljem selgus, et r\u00fcndajad kasutasid arenduskeskkonnast saadud andmeid, et r\u00fcnnata teist arendajat, mille k\u00e4igus saadi ligip\u00e4\u00e4sukoode pilveteenusesse ja kr\u00fcpteerimisv\u00f5tmeid sealsete konteinerite andmete dekr\u00fcptimiseks. Kompromiteeritud pilv serverites<\/a> sisaldas t\u00e4ielikke varukoopiaid aktiivse teenuse andmetest.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 LastPass, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 33 \u043c\u043b\u043d \u0447\u0435\u043b\u043e\u0432\u0435\u043a \u0438 \u0431\u043e\u043b\u0435\u0435 100 \u0442\u044b\u0441\u044f\u0447 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u0431 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0435, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u043c \u043a\u043e\u043f\u0438\u044f\u043c \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430 \u0441 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0435\u0440\u0432\u0438\u0441\u0430. \u0414\u0430\u043d\u043d\u044b\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u043b\u0438 \u0442\u0430\u043a\u0438\u0435 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f, \u043a\u0430\u043a \u0438\u043c\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u0430\u0434\u0440\u0435\u0441, email, \u0442\u0435\u043b\u0435\u0444\u043e\u043d \u0438 IP-\u0430\u0434\u0440\u0435\u0441\u0430 \u0441 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0431\u044b\u043b \u0432\u0445\u043e\u0434 \u0432 \u0441\u0435\u0440\u0432\u0438\u0441, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u0445\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-106247","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47LastPassi kasutajate andmete varukoopiate lekke juhtum | ProHoster","description":"LastPassi paroolihalduri arendajad, keda kasutab enam kui 33 miljonit inimest ja \u00fcle 100 000 ettev\u00f5tte, teatasid kasutajatele juhtumist, mille k\u00e4igus suutsid r\u00fcndajad p\u00e4\u00e4seda ligip\u00e4\u00e4sule varukoopiatele.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/utechka-rezervnyh-kopij-s-dannymi-polzovatelej-lastpass","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0442\u0435\u0447\u043a\u0430 \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u0445 \u043a\u043e\u043f\u0438\u0439 \u0441 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 LastPass | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0430 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 LastPass, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 33 \u043c\u043b\u043d \u0447\u0435\u043b\u043e\u0432\u0435\u043a \u0438 \u0431\u043e\u043b\u0435\u0435 100 \u0442\u044b\u0441\u044f\u0447 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439, \u0443\u0432\u0435\u0434\u043e\u043c\u0438\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u043e\u0431 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0435, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0435\u0437\u0435\u0440\u0432\u043d\u044b\u043c.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/utechka-rezervnyh-kopij-s-dannymi-polzovatelej-lastpass","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-12-23T13:36:48+00:00","article:modified_time":"2022-12-23T13:36:48+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/106247","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=106247"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/106247\/revisions"}],"predecessor-version":[{"id":164429,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/106247\/revisions\/164429"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=106247"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=106247"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=106247"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}