{"id":30608,"date":"2019-10-31T21:36:28","date_gmt":"2019-10-31T18:36:28","guid":{"rendered":"https:\/\/prohoster.info\/blog\/inzhenery-asus-mesyatsami-derzhali-otkrytymi-vnutrennie-paroli-na-github\/"},"modified":"2019-10-31T21:36:28","modified_gmt":"2019-10-31T18:36:28","slug":"inzhenery-asus-mesyatsami-derzhali-otkrytymi-vnutrennie-paroli-na-github","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/inzhenery-asus-mesyatsami-derzhali-otkrytymi-vnutrennie-paroli-na-github","title":{"rendered":"ASUS-i insenerid hoidsid kuude v\u00e4ltel GitHubis avatud sisemisi salas\u00f5nasid.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

ASUS-i turvameeskonna jaoks ei alanud m\u00e4rts just k\u00f5ige paremini. Ilmusid uued s\u00fc\u00fcdistused t\u00f6\u00f6tajate t\u00f5siste turvav\u00e4\u00e4rtegude kohta, seekord seoses GitHubiga. Uudis saabus p\u00e4rast skandaali, mis oli seotud haavatavuste levimisega ametlikest Live Update serveritest.<\/p>\n

SchizoDuckie turvaanal\u00fc\u00fctik v\u00f5ttis \u00fchendust Techcrunchiga, et jagada \u00fcksikasju veel \u00fche turvaaugu kohta, mille ta leidis ASUS-e tulem\u00fc\u00fcris. Tema s\u00f5nul avaldas ettev\u00f5te ekslikult oma t\u00f6\u00f6tajate salas\u00f5nad GitHubi hoidlates. Selle tulemusel sai ta juurdep\u00e4\u00e4su ettev\u00f5tte sisemisele e-postile, kus t\u00f6\u00f6tajad jagasid linke varasemate rakenduste, draiverite ja t\u00f6\u00f6riistade versioonidele.<\/p>\n

\"ASUS-i<\/p>\n

Konto kuulus insenerile, kes ilmselt hoidis seda avatud v\u00e4hemalt aasta. SchizoDuckie teatas ka, et leidis ettev\u00f5tte sisemised paroolid, mis olid avaldatud GitHubis kahe teise Taiwanist p\u00e4rit tootja inseneri kontodel. Allikas jagas ajakirjanikega ekraanipilte, mis kinnitavad tema j\u00e4reldusi, kuigi ise pilte ei avaldatud.<\/p>\n

Tasub m\u00e4rkida, et see on t\u00e4iesti erinev haavatavus v\u00f5rreldes eelneva r\u00fcnnakuga, mille k\u00e4igus said h\u00e4kkerid juurdep\u00e4\u00e4su ASUSi serveritele ja muutsid ametlikku tarkvara, sisestades sellesse tagaukse (p\u00e4rast mida lisas ASUS sellele autentimissertifikaadi ja hakkas seda ametlikest kanalitest levitama). Kuid sel juhul on avastatud turvaviga, mis v\u00f5is panna ettev\u00f5tte ohtu sarnaste r\u00fcnnakute ees.<\/p>\n

<\/center>
\n\"ASUS-i<\/p>\n

«Ettev\u00f5tetel pole v\u00e4himatki aimu, mida nende arendajad GitHubis oma koodiga teevad», \u00fctles SchizoDuckie. ASUS teatas, et ei saa spetsialisti v\u00e4iteid kinnitada, kuid kontrollib aktiivselt k\u00f5iki s\u00fcsteeme, et k\u00f5rvaldada tuntud ohud oma serverite<\/a> ja samuti veenduda, et andmeleke puudub.<\/p>\n

Sarnased turvaprobleemid ei ole ainulaadsed ASUSele \u2014 sageli satuvad isegi suured ettev\u00f5tted sarnastesse olukordadesse, mis on seotud t\u00f6\u00f6tajate hooletusega. K\u00f5ik see n\u00e4itab, kui keeruline on turvalisuse tagamise \u00fclesanne kaasaegses infrastruktuuris ja kui kergesti v\u00f5ivad andmelekked toimuda.<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
\n
Allikas: 3dnews.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0423 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 ASUS \u043c\u0430\u0440\u0442 \u044f\u0432\u043d\u043e \u043d\u0435 \u0437\u0430\u0434\u0430\u043b\u0441\u044f. \u041f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u043d\u043e\u0432\u044b\u0435 \u043e\u0431\u0432\u0438\u043d\u0435\u043d\u0438\u044f \u0432 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0445 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0441 \u0443\u0447\u0430\u0441\u0442\u0438\u0435\u043c GitHub. \u041d\u043e\u0432\u043e\u0441\u0442\u044c \u043f\u043e\u0441\u0442\u0443\u043f\u0438\u043b\u0430 \u0432\u0441\u043b\u0435\u0434 \u0437\u0430 \u0441\u043a\u0430\u043d\u0434\u0430\u043b\u043e\u043c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u043c \u0441 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0447\u0435\u0440\u0435\u0437 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Live Update. \u0410\u043d\u0430\u043b\u0438\u0442\u0438\u043a \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 SchizoDuckie \u0441\u0432\u044f\u0437\u0430\u043b\u0441\u044f \u0441 Techcrunch, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u043e \u0435\u0449\u0451 \u043e\u0434\u043d\u043e\u0439 \u0431\u0440\u0435\u0448\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":22602,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-30608","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47ASUS-i insenerid hoidsid kuude kaupa GitHubis avatud sisepassid | ProHoster","description":"ASUS-i turvameeskonnal ei ole m\u00e4rts selgelt h\u00e4sti l\u00e4inud. Ettev\u00f5tte t\u00f6\u00f6tajate t\u00f5siste turvarikkumiste t\u00f5ttu on esitatud uusi s\u00fc\u00fcdistusi, seekord seotud GitHubiga. Uudis tuli p\u00e4rast skandaali, mis oli seotud haavatavuste levitamisega ametlike Live Update serverite kaudu. SchizoDuckie turvanal\u00fc\u00fctik v\u00f5ttis Techcrunchiga \u00fchendust, et jagada detaile veel \u00fchest turvaveast","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/inzhenery-asus-mesyatsami-derzhali-otkrytymi-vnutrennie-paroli-na-github","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u043d\u0436\u0435\u043d\u0435\u0440\u044b ASUS \u043c\u0435\u0441\u044f\u0446\u0430\u043c\u0438 \u0434\u0435\u0440\u0436\u0430\u043b\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u043f\u0430\u0440\u043e\u043b\u0438 \u043d\u0430 GitHub | ProHoster","og:description":"\u0423 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 ASUS \u043c\u0430\u0440\u0442 \u044f\u0432\u043d\u043e \u043d\u0435 \u0437\u0430\u0434\u0430\u043b\u0441\u044f. \u041f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u043d\u043e\u0432\u044b\u0435 \u043e\u0431\u0432\u0438\u043d\u0435\u043d\u0438\u044f \u0432 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0445 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0441 \u0443\u0447\u0430\u0441\u0442\u0438\u0435\u043c GitHub. \u041d\u043e\u0432\u043e\u0441\u0442\u044c \u043f\u043e\u0441\u0442\u0443\u043f\u0438\u043b\u0430 \u0432\u0441\u043b\u0435\u0434 \u0437\u0430 \u0441\u043a\u0430\u043d\u0434\u0430\u043b\u043e\u043c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u043c \u0441 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0447\u0435\u0440\u0435\u0437 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Live Update. \u0410\u043d\u0430\u043b\u0438\u0442\u0438\u043a \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 SchizoDuckie \u0441\u0432\u044f\u0437\u0430\u043b\u0441\u044f \u0441 Techcrunch, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u043e \u0435\u0449\u0451 \u043e\u0434\u043d\u043e\u0439 \u0431\u0440\u0435\u0448\u0438","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/inzhenery-asus-mesyatsami-derzhali-otkrytymi-vnutrennie-paroli-na-github","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:36:28+00:00","article:modified_time":"2019-10-31T18:36:28+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30608","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 16:57:10","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:32:35","updated":"2026-02-09 16:57:10","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/30608","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=30608"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/30608\/revisions"}],"predecessor-version":[{"id":158532,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/30608\/revisions\/158532"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/22602"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=30608"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=30608"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=30608"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}