{"id":183679,"date":"2026-10-07T22:54:32","date_gmt":"2026-10-07T20:54:33","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/v-github-vyyavleno-543-tysyachi-ostavlennyh-v-repozitoriyah-dejstvuyushhih-tokenov-klyuchej-i-parolej"},"modified":"2026-10-07T22:54:38","modified_gmt":"2026-10-07T20:54:38","slug":"543000-active-tokens-keys-and-passwords-found-in-github-repositories","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/543000-active-tokens-keys-and-passwords-found-in-github-repositories","title":{"rendered":"GitHubis on leitud 543 tuhat aktiivset tokenit, v\u00f5tit ja parooli, mis on j\u00e4etud hoidlatesse","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Truffle Security avaldas tulemused oma anal\u00fc\u00fcsist, mis k\u00e4sitleb andmelekeid GitHubi hoidlatest. Ajavahemikus skaneeriti 224 miljonit hoidlat, mis sisaldasid 58 miljardit faili, tuvastati 543 tuhat unikaalset aktiveeritud kasutajat (tokenid, v\u00f5tmed ja paroolid). Need aktiveeritud kasutajad olid hoidlates olnud v\u00e4hemalt aasta, kuna uuringus kasutati GitHubi seisundit 7. augustist eelmisel aastal, ning kasutajate kehtivuse kontrollimine, mis viidi l\u00e4bi API proovikutsedega, v\u00f5rguteenuste ja hostide poole, tehti sel aastal juuli l\u00f5pus. <\/p>\n

Avatud juurdep\u00e4\u00e4sul olevate kasutajate keskmine aeg on hinnatud 784 p\u00e4evaks, samas kui vanimad kehtivad juurdep\u00e4\u00e4suv\u00f5tmed olid v\u00e4lja antud alates 2009. aastast. Umbes 200 tuhat leitud kehtivat kasutajat paigutati hoidlastesse p\u00e4rast seda, kui GitHubi vaikimisi lubatud mehhanism konfidentsiaalsete andmete ja juurdep\u00e4\u00e4sukoodide leketeks k\u00e4ivitas kontrollimise push-k\u00e4skude saatmise etapis. Leketeid ei tuvastatud, kuna need olid paigutatud vormingutesse, mis ei olnud rakendatud kaitses toetatud, kuigi filtrite aktiveerimine v\u00e4hendas umbes kaks korda tuvastatud andmelekeid. <\/p>\n

Selgus, et GitHub tuvastab edukalt tokenite leket tuntud teenustes, nagu GitHub, AWS, Slack, SendGrid, Stripe ja GCP, kuid j\u00e4tab m\u00e4rkamata andmebaasiga \u00fchenduse parameetrid, Google API juurdep\u00e4\u00e4suv\u00f5tmed ja privaatsed v\u00f5tmed. Andmebaasi \u00fchenduse parameetrid ja privaatsed v\u00f5tmed ei blokeerita vaikimisi valeh\u00e4irete v\u00e4ltimiseks. Google API juurdep\u00e4\u00e4suv\u00f5tmed ei ole blokeeritud, kuna neil on prefiks AIzaSy, nagu avatud Google Mapsi v\u00f5tmetel, mis on m\u00f5eldud veebilehtede integreerimiseks. <\/p>\n

Mis leidisime, et suures osas leitud kontod on mittetoimivad, viidates ligip\u00e4\u00e4su tokenitele ja v\u00f5tmetele, mis on seotud teenustega, mis pakuvad tagasikutsumise mehhanismi. N\u00e4iteks 101886 NPM-tokenist oli ainus kehtiv vaid \u00fcks (0.001%), 73048 GitHub-tokenist oli kehtivaid 260 (0.35%) ja 30437 Hugging Face tokenist 15 (0.05%). Stripe v\u00f5tmete elluj\u00e4\u00e4misprotsent oli 4%, AWS-l 8%, GCP-l 8%, Slackil 2% ja GitLabi puhul 0.64%. V\u00f5rdluseks, 12985 leitud PostgreSQL andmebaasi \u00fchendusparameetrist j\u00e4i aktiivseks 11465 (88%), 2421 MySQL \u00fchendusparameetrist 1806 (74%), 126963 Google Cloud teenusekontost 69041 (54%), 3790 Docker Hub tokenist 1244 (33%) ja 22800 SendGrid v\u00f5tme seest 9189 (40%). <\/p>\n

Varem uurisid teadlased umbes 7,5 PB andmeid, mida kasutati AI mudelite koolitamiseks, mis jagati Hugging Face'i kaudu, ja tuvastasid neis 221 tuhat toimivat kasutajateavet.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Truffle Security \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u0442\u0435\u0447\u0435\u043a \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445, \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d\u043d\u044b\u0445 \u043d\u0430 GitHub. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f 224 \u043c\u043b\u043d \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432, \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0445 58 \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u043e\u0432 \u0444\u0430\u0439\u043b\u043e\u0432, \u0431\u044b\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 543 \u0442\u044b\u0441\u044f\u0447\u0438 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 (\u0442\u043e\u043a\u0435\u043d\u043e\u0432, \u043a\u043b\u044e\u0447\u0435\u0439 \u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439), \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0449\u0438\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c. \u0414\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0433\u043e\u0434, \u0442\u0430\u043a \u043a\u0430\u043a \u0432 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u0441\u0440\u0435\u0437 \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044f GitHub \u043e\u0442 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-183679","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47GitHubis leiti 543 tuhat hoidlatesse j\u00e4etud toimivat tokenit, v\u00f5tit ja parooli | ProHoster","description":"Ettev\u00f5te Truffle Security avaldas anal\u00fc\u00fcsi tulemused kasutajate andmete lekkimise kohta GitHubi hostitud hoidlatest.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/543000-active-tokens-keys-and-passwords-found-in-github-repositories","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 GitHub \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 543 \u0442\u044b\u0441\u044f\u0447\u0438 \u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0442\u043e\u043a\u0435\u043d\u043e\u0432, \u043a\u043b\u044e\u0447\u0435\u0439 \u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Truffle Security \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u0442\u0435\u0447\u0435\u043a \u0443\u0447\u0451\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445, \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d\u043d\u044b\u0445 \u043d\u0430 GitHub.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/543000-active-tokens-keys-and-passwords-found-in-github-repositories","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-10-07T20:54:33+00:00","article:modified_time":"2026-10-07T20:54:38+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/183679","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=183679"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/183679\/revisions"}],"predecessor-version":[{"id":183680,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/183679\/revisions\/183680"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=183679"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=183679"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=183679"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}