{"id":107040,"date":"2023-03-02T12:48:19","date_gmt":"2023-03-02T10:48:19","guid":{"rendered":"https:\/\/prohoster.info\/?p=107040"},"modified":"2023-03-03T15:16:29","modified_gmt":"2023-03-03T13:16:29","slug":"github-realizoval-proverku-utechki-konfidenczialnyh-dannyh-v-repozitoriyah","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/github-realizoval-proverku-utechki-konfidenczialnyh-dannyh-v-repozitoriyah","title":{"rendered":"GitHub rakendas konfidentsiaalsete andmete lekke kontrolli hoidlatest","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

GitHub teatas tasuta teenuse k\u00e4ivitamisest, mis j\u00e4lgib juhuslikult avaldatud konfidentsiaalsete andmete, n\u00e4iteks kr\u00fcpteerimisv\u00f5tmete, andmebaasi paroolide ja API juurdep\u00e4\u00e4sutokenite ilmuvaid andmeid oma hoidlatest. Varasemalt oli see teenus saadaval ainult beetatestimise programmi osalejatele, kuid n\u00fc\u00fcd on see avatud k\u00f5igile avalikele hoidlatele. Oma hoidla kontrollimiseks tuleb seadetes jaotises «Koodi turve ja anal\u00fc\u00fcs» aktiveerida valik «Salajaste skaneerimine». <\/p>\n

T\u00f6\u00f6tamiseks on loodud \u00fcle 200 malli mitmesuguste v\u00f5tmete, tokenite, sertifikaatide ja akrediteeringute tuvastamiseks. Lehakadude otsing ei toimu mitte ainult koodis, vaid ka probleemides, kirjeldustes ja kommentaarides. Valeh\u00e4irete v\u00e4ltimiseks kontrollitakse ainult kindlalt tuvastatavaid tokenite t\u00fc\u00fcpe, mis katab rohkem kui 100 erinevat teenust, sealhulgas Amazon Web Services, Azure, Crates.io, DigitalOcean, Google Cloud, NPM, PyPI, RubyGems ja Yandex.Cloud. T\u00e4iendavalt toetatakse hoiatuste saatmist eneseloodud sertifikaatide ja v\u00f5tmete tuvastamisel. <\/p>\n

Jaanuaris anal\u00fc\u00fcsiti eksperimendi k\u00e4igus 14 000 repositooriumi, mis kasutasid GitHub Actions. Selle tulemusena leiti 1110 repositooriumist (7,9%, ehk peaaegu igast kaheteistk\u00fcmnendast) konfidentsiaalsete andmete olemasolu. N\u00e4iteks leiti repositooriumidest 692 GitHub App tokenit, 155 Azure Storage v\u00f5tme, 155 GitHub Personal tokenit, 120 Amazon AWS v\u00f5tme ja 50 Google API v\u00f5tme olemasolu.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

GitHub \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u0432\u0435\u0434\u0435\u043d\u0438\u0438 \u0432 \u0441\u0442\u0440\u043e\u0439 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u043f\u043e \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044e \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u043a\u043b\u044e\u0447\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u043f\u0430\u0440\u043e\u043b\u0438 \u043a \u0421\u0423\u0411\u0414 \u0438 \u0442\u043e\u043a\u0435\u043d\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a API. \u0420\u0430\u043d\u0435\u0435 \u0434\u0430\u043d\u043d\u044b\u0439 \u0441\u0435\u0440\u0432\u0438\u0441 \u0431\u044b\u043b \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0442\u043e\u043b\u044c\u043a\u043e \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b \u0431\u0435\u0442\u0430-\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0430 \u0442\u0435\u043f\u0435\u0440\u044c \u043d\u0430\u0447\u0430\u043b \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c\u0441\u044f \u0431\u0435\u0437 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u0432\u0441\u0435\u043c \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c. \u0414\u043b\u044f \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0441\u0432\u043e\u0435\u0433\u043e \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f \u0432 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u0445 \u0432 \u0441\u0435\u043a\u0446\u0438\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-107040","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47GitHub on rakendanud konfidentsiaalsete andmete lekete kontrolli repositooriumides | ProHoster","description":"GitHub teatas tasuta teenuse k\u00e4ivitamisest, mille eesm\u00e4rk on j\u00e4lgida juhuslikke avaldusi hoidlatest, mis sisaldavad konfidentsiaalseid andmeid, nagu kr\u00fcpteerimisv\u00f5tmed, andmebaasi paroolid ja API ligip\u00e4\u00e4sutokenid.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/github-realizoval-proverku-utechki-konfidenczialnyh-dannyh-v-repozitoriyah","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47GitHub \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0443\u0442\u0435\u0447\u043a\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 | ProHoster","og:description":"GitHub \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u0432\u0435\u0434\u0435\u043d\u0438\u0438 \u0432 \u0441\u0442\u0440\u043e\u0439 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u043f\u043e \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u043d\u0438\u044e \u0441\u043b\u0443\u0447\u0430\u0439\u043d\u043e\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u043a\u043b\u044e\u0447\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u043f\u0430\u0440\u043e\u043b\u0438 \u043a \u0421\u0423\u0411\u0414 \u0438 \u0442\u043e\u043a\u0435\u043d\u044b \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a API.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/github-realizoval-proverku-utechki-konfidenczialnyh-dannyh-v-repozitoriyah","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-03-02T10:48:19+00:00","article:modified_time":"2023-03-03T13:16:29+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/107040","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=107040"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/107040\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=107040"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=107040"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=107040"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}