{"id":31440,"date":"2019-10-31T21:41:16","date_gmt":"2019-10-31T18:41:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/vzlom-infrastruktury-matrix-org\/"},"modified":"2019-10-31T21:41:16","modified_gmt":"2019-10-31T18:41:16","slug":"vzlom-infrastruktury-matrix-org","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/vzlom-infrastruktury-matrix-org","title":{"rendered":"matrix.org infrastruktuuri r\u00fcndamine","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Matrixi, detsentraliseeritud s\u00f5numivahetuse platvormi arendajad, teatasid Matrix.org ja Riot.im (Matrixi p\u00f5hiklient) serverite h\u00e4daseiskamisest seoses projekti infrastruktuuri h\u00e4kkimisega. Esimene h\u00e4daseiskamine toimus eile \u00f5htul, p\u00e4rast mida serverite t\u00f6\u00f6 taastati ja rakendused uuendati originaalsete allikaid kasutades. Kuid paar minutit tagasi kompromiteeriti serverid teist korda. <\/p>\n

R\u00fcndajad avaldasid projekti peamisel lehel \u00fcksikasjalikud andmed serveri konfiguratsiooni<\/a> ning teavet nende valduses olevate andmebaaside kohta, mis sisaldavad peaaegu viie ja poole miljoni Matrixi kasutaja h\u00e4she. T\u00f5endina on avalikustatud Matrixi projekti juhi paroolih\u00e4sh. Muudetud veebileht on r\u00fcndajate GitHubi hoidlas (mitte ametlikus matrixi hoidlas). Teise h\u00e4kkimise kohta puuduvad hetkel \u00fcksikasjad.<\/p>\n

P\u00e4rast esimest h\u00e4kkimist avaldas Matrixi meeskond aruande, kus \u00f6eldi, et h\u00e4kkimine toimus aegunud Jenkins'i pideva integreerimise s\u00fcsteemi haavatavuse t\u00f5ttu. Juurdep\u00e4\u00e4su saades serveri<\/a> Jenkins'ile, r\u00fcndajad haarasid SSH v\u00f5tmed ja said v\u00f5imaluse juurdep\u00e4\u00e4suks teistele infrastruktuuri serveritele. R\u00e4\u00e4kisime, et l\u00e4htekood ja paketid ei saanud r\u00fcnnaku k\u00e4igus kahjustada. R\u00fcnnak ei m\u00f5jutanud ka Modular.im servereid. Kuid r\u00fcndajad said juurdep\u00e4\u00e4su p\u00f5hise andmebaasile, kuhu on salvestatud sealhulgas kr\u00fcptimata s\u00f5numid, juurdep\u00e4\u00e4su tokenid ja paroolih\u00e4shid.<\/p>\n

K\u00f5igile kasutajatele on soovitatud parooli vahetada. Kuid parooli vahetamise protsessis p\u00f5hikliendis Riot kogesid kasutajad probleeme varukoopiaid sisaldavate failide kaotamisega, mis olid vajalikud kr\u00fcpteeritud vestluste taastamiseks, ning ei p\u00e4\u00e4senud ligi varasemate s\u00f5numite ajaloole.<\/p>\n

Tulet meenutatud, et platvormi deentsentraliseeritud suhtluse korraldamiseks Matrix esitatakse projektina, mis kasutab avatud standardeid ja p\u00f6\u00f6rab suurt t\u00e4helepanu kasutajate turvalisusele ja privaatsusele. Matrix tagab l\u00f5pp-l\u00f5puni kr\u00fcptimise, mis p\u00f5hineb t\u00f5estatud Signali algoritmil, toetab otsingut ja piiramatu p\u00e4\u00e4su vestluste ajaloole, mida saab kasutada failide edastamiseks, teate saatmiseks, arendaja kohaloleku hindamiseks internetis, konverentside korraldamiseks, h\u00e4\u00e4l- ja videok\u00f5nede tegemiseks. Toetatakse ka laiendatud funktsioone, nagu tekstisisestuse teavitamine, lugemise kinnitamine, push-teavitused ja serveripoolne otsing, ajaloode ja kliendiseisundi s\u00fcnkroonimine, eri t\u00fc\u00fcpi identifikaatorid (email, telefoninumber, Facebooki konto jne).
\n
Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u043b\u044f \u0434\u0435\u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 Matrix \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e\u0431 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Matrix.org \u0438 Riot.im (\u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043a\u043b\u0438\u0435\u043d\u0442 Matrix) \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441\u043e \u0432\u0437\u043b\u043e\u043c\u043e\u043c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u043f\u0440\u043e\u0435\u043a\u0442\u0430. \u041f\u0435\u0440\u0432\u043e\u0435 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0441\u043e\u0441\u0442\u043e\u044f\u043b\u043e\u0441\u044c \u0432\u0447\u0435\u0440\u0430 \u0432\u0435\u0447\u0435\u0440\u043e\u043c, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0440\u0430\u0431\u043e\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0431\u044b\u043b\u0430 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0430, \u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0441\u043e\u0431\u0440\u0430\u043d\u044b \u0438\u0437 \u044d\u0442\u0430\u043b\u043e\u043d\u043d\u044b\u0445 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432. \u041d\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0438\u043d\u0443\u0442 \u043d\u0430\u0437\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0431\u044b\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0432\u0442\u043e\u0440\u043e\u0439 \u0440\u0430\u0437. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u043b\u0438 \u043d\u0430 \u0433\u043b\u0430\u0432\u043d\u043e\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-31440","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Matrix.org infrastruktuuri h\u00e4kkimine | ProHoster","description":"Matrixi deentsentraliseeritud s\u00f5numivahetusplatvormi arendajad teatasid Matrix.org ja Riot.im (Matrixi p\u00f5hiklient) serverite h\u00e4daolukorrast v\u00e4lja l\u00fclitamisest projekti infrastruktuuri h\u00e4kkimise t\u00f5ttu.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/vzlom-infrastruktury-matrix-org","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u0437\u043b\u043e\u043c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b matrix.org | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u043b\u044f \u0434\u0435\u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 Matrix \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e\u0431 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Matrix.org \u0438 Riot.im (\u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043a\u043b\u0438\u0435\u043d\u0442 Matrix) \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441\u043e \u0432\u0437\u043b\u043e\u043c\u043e\u043c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u043f\u0440\u043e\u0435\u043a\u0442\u0430.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/vzlom-infrastruktury-matrix-org","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:41:16+00:00","article:modified_time":"2019-10-31T18:41:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31440","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 21:45:03","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:16:23","updated":"2026-02-09 21:45:03","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31440","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=31440"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31440\/revisions"}],"predecessor-version":[{"id":160129,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31440\/revisions\/160129"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=31440"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=31440"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=31440"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}