{"id":34346,"date":"2019-10-31T21:57:50","date_gmt":"2019-10-31T18:57:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/elasticsearch-sdelala-besplatnymi-problemnye-security-funktsii-ranee-vyvedennye-v-open-source\/"},"modified":"2019-10-31T21:57:50","modified_gmt":"2019-10-31T18:57:50","slug":"elasticsearch-sdelala-besplatnymi-problemnye-security-funktsii-ranee-vyvedennye-v-open-source","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/elasticsearch-sdelala-besplatnymi-problemnye-security-funktsii-ranee-vyvedennye-v-open-source","title":{"rendered":"Elasticsearch muutis probleemsed turvafunktsioonid, mis varem olid avatud l\u00e4htekoodiga, tasuta","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Hiljuti Elasticu blogis <noindex><a rel=\"nofollow\" href=\"https:\/\/www.elastic.co\/blog\/security-for-elasticsearch-is-now-free\">ilmus postitus<\/a><\/noindex>, milles teatatakse, et Elasticsearchi peamised turbefunktsioonid, mis viidi avatud l\u00e4htekoodiga ruumi \u00fcle aasta tagasi, on n\u00fc\u00fcd tasuta kasutajatele saadaval.<\/p>\n<p>Ametlikus blogipostituses on \u00ab\u00f5igeid\u00bb s\u00f5nu selle kohta, et avatud l\u00e4htekood peab olema tasuta ja et projekti omanikud ehitavad oma \u00e4ri muude t\u00e4iendavate funktsioonide peale, mida nad pakuvad ettev\u00f5tte lahendustes. N\u00fc\u00fcd on versiooni 6.8.0 ja 7.1.0 p\u00f5hiversioonidesse lisatud j\u00e4rgmised turbefunktsioonid, mis varem olid saadaval ainult kuldses tellimuses:<\/p>\n<ul>\n<li>TLS kr\u00fcpteeritud side jaoks.<\/li>\n<li>Fail ja kohalik ala kasutajakontode loomise ja haldamise jaoks.<\/li>\n<li>Kasutajate juurdep\u00e4\u00e4su haldamine API-le ja klastri, mis p\u00f5hineb rollidel; mitme kasutaja juurdep\u00e4\u00e4s Kibana'sse Kibana Spacesi kaudu on lubatud.<\/li>\n<\/ul>\n<p>\n<b>Kuid turbefunktsioonide viimine tasuta sektsiooni ei ole lai \u017eest, vaid katse luua kaugus kommertstoote ja selle t\u00f5siste probleemide vahel. <\/b><\/p>\n<p>Ja need probleemid on t\u00f5sised.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nK\u00fcsimus \u00abElastic Leaked\u00bb tagastab Googles 13,3 miljonit otsingutulemust. Muljetavaldav, eks? P\u00e4rast turbefunktsioonide viimist projekti avatud l\u00e4htekoodi, mis kunagi n\u00e4is hea idee, tekkis Elasticul t\u00f5siseid andmelekkimise probleeme. Tegelikult muutus p\u00f5hiversioon l\u00e4bi lastavaks, kuna keegi ei toetanud neid turbefunktsioone korralikult.<\/p>\n<p>\u00dcks k\u00f5ige t\u00e4helepanuv\u00e4\u00e4rsemaid andmelekkimise juhtumeid elastic-serverilt oli 57 miljoni USA kodaniku andmete kadumine, millest <noindex><a rel=\"nofollow\" href=\"https:\/\/www.zdnet.com\/article\/elasticsearch-server-exposed-the-personal-data-of-over-57-million-us-citizens\/\">kandsid meedia<\/a><\/noindex> teavet 2018. aasta detsembris (hiljem selgus, et tegelikult lekkis 82 miljonit kirjet). Samuti, 2018. aasta detsembris varastasid Elasti turvap probleemide t\u00f5ttu Brasiilias 32 miljoni inimese andmed. 2019. aasta m\u00e4rtsis lekkis teiselt elastic-serverilt \u00abainult\u00bb 250 000 konfidentsiaalset dokumenti, sealhulgas ka juriidilisi dokumente. Ja see on alles esimene otsingulehe tulemus selle termini j\u00e4rgi.<\/p>\n<p>Tegelikult j\u00e4tkuvad sissetungid siiani ja algasid peagi p\u00e4rast turbefunktsioonide \u00abrahuldamisest vabastamist\u00bb arendajate poolt ja nende viimist avatud l\u00e4htekoodi.<\/p>\n<p>Lugeja v\u00f5ib m\u00e4rkida: \u00abNo ja mis siis? No ei ole neil turvaprobleeme, aga kellel ei ole?\u00bb<\/p>\n<p>Ja n\u00fc\u00fcd t\u00e4helepanu.<\/p>\n<p>K\u00fcsimus on selles, et kuni k\u00e4esoleva esmasp\u00e4evani v\u00f5ttis Elastic oma klientidelt raha riistvara eest, mida nad nimetasid turvafunktsioonideks, kuigi nad olid need juba 2018. aasta veebruaris avatud l\u00e4htekoodiga v\u00e4lja toonud, st umbes 15 kuud tagasi. Ettev\u00f5te ei kandnud nende funktsioonide toe eest mingeid m\u00e4rkimisv\u00e4\u00e4rseid kulutusi, kuid siiski k\u00fcsis raha kuld- ja premium-liikmetelt oma ettev\u00f5tlussektoris.<\/p>\n<p>M\u00f5nes punktis muutusid turvaprobleemid ettev\u00f5tte jaoks nii toksilisteks ning klientide kaebused nii \u00e4hvardavateks, et ahnus j\u00e4i teisele kohale. Kuid, selle asemel, et taastada arendus ja \u201efikseerida\u201c augud oma projektis, mille t\u00f5ttu p\u00e4\u00e4sesid miljonid dokumendid ja isikuandmed avalikuks, viskas Elastic turvafunktsioonid tasuta elasticsearchi versiooni. Nad esitavad selle kui suurt headust ja panust avatud l\u00e4htekoodiga.<\/p>\n<p>Kuna sellised \u201eefektiivsed\u201c lahendused paistavad, on blogipostituse teine osa, mille t\u00f5ttu me seda lugu j\u00e4lgisime, \u00fcsna kummaline. R\u00e4\u00e4gime <noindex><a rel=\"nofollow\" href=\"https:\/\/www.elastic.co\/blog\/introducing-elastic-cloud-on-kubernetes-the-elasticsearch-operator-and-beyond\">Elastic Cloud on Kubernetes (ECK) alfa- versiooni v\u00e4ljaandmisest<\/a><\/noindex> \u2014 Elasticsearchi ja Kibana ametlik Kubernetes'i operaator.<\/p>\n<p>Arendajad, n\u00e4o t\u00f5sise ilmega, r\u00e4\u00e4givad, et turvafunktsioonide viimisega tasuta versioonidesse v\u00e4heneb haldurite koormus nende lahenduste kasutajate jaoks. Ja \u00fcldiselt, k\u00f5ik on suurep\u00e4rane.<\/p>\n<p>\u201eMe saame garanteerida, et k\u00f5ik ECK-s k\u00e4ivitatud ja hallatavad klastrid on vaikimisi kaitstud alates k\u00e4ivitamisest, ilma halduritele lisakoormuseta,\u201c \u00f6eldakse ametlikus blogis.<\/p>\n<p>Kuidas juhuslik ja t\u00f5eliselt mitte toetatud lahendus, mis viimase aasta jooksul on muutunud \u00fcldiseks sihtm\u00e4rgiks, tagab kasutajatele turvalisuse, arendajad ei \u00fctle.<br \/>\n<br \/>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/itsumma\/blog\/453110\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041d\u0430 \u0434\u043d\u044f\u0445 \u0432 \u0431\u043b\u043e\u0433\u0435 Elastic \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0437\u0430\u043f\u0438\u0441\u044c, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 security-\u0444\u0443\u043d\u043a\u0446\u0438\u0438 Elasticsearch, \u0432\u044b\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u0435 \u0432 open source-\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u043e \u0431\u043e\u043b\u0435\u0435 \u0433\u043e\u0434\u0430 \u043d\u0430\u0437\u0430\u0434, \u0442\u0435\u043f\u0435\u0440\u044c \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u043c\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u0412 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0431\u043b\u043e\u0433\u043e\u0437\u0430\u043f\u0438\u0441\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u0441\u044f \u00ab\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0435\u00bb \u0441\u043b\u043e\u0432\u0430 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e open source \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u043c \u0438 \u0447\u0442\u043e \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u044b \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0441\u0442\u0440\u043e\u044f\u0442 \u0441\u0432\u043e\u0439 \u0431\u0438\u0437\u043d\u0435\u0441 \u043d\u0430 \u043f\u0440\u043e\u0447\u0438\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0442\u0441\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-34346","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041d\u0430 \u0434\u043d\u044f\u0445 \u0432 \u0431\u043b\u043e\u0433\u0435 Elastic \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0437\u0430\u043f\u0438\u0441\u044c, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 security-\u0444\u0443\u043d\u043a\u0446\u0438\u0438.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/elasticsearch-sdelala-besplatnymi-problemnye-security-funktsii-ranee-vyvedennye-v-open-source\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Elasticsearch \u0441\u0434\u0435\u043b\u0430\u043b\u0430 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u0435 security-\u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u0440\u0430\u043d\u0435\u0435 \u0432\u044b\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u0435 \u0432 open source | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041d\u0430 \u0434\u043d\u044f\u0445 \u0432 \u0431\u043b\u043e\u0433\u0435 Elastic \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0437\u0430\u043f\u0438\u0441\u044c, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 security-\u0444\u0443\u043d\u043a\u0446\u0438\u0438.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/elasticsearch-sdelala-besplatnymi-problemnye-security-funktsii-ranee-vyvedennye-v-open-source\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:57:50+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:57:50+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Elasticsearch tegi tasuta probleemsed turvafunktsioonid, mis olid varem avatud l\u00e4htekoodiga | ProHoster","description":"Hiljuti ilmus Elastici blogisse postitus, kus teatatakse, et p\u00f5hiturvafunktsioonid.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/elasticsearch-sdelala-besplatnymi-problemnye-security-funktsii-ranee-vyvedennye-v-open-source","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Elasticsearch \u0441\u0434\u0435\u043b\u0430\u043b\u0430 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u0435 security-\u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u0440\u0430\u043d\u0435\u0435 \u0432\u044b\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u0435 \u0432 open source | ProHoster","og:description":"\u041d\u0430 \u0434\u043d\u044f\u0445 \u0432 \u0431\u043b\u043e\u0433\u0435 Elastic \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0437\u0430\u043f\u0438\u0441\u044c, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 security-\u0444\u0443\u043d\u043a\u0446\u0438\u0438.","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/elasticsearch-sdelala-besplatnymi-problemnye-security-funktsii-ranee-vyvedennye-v-open-source","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:57:50+00:00","article:modified_time":"2019-10-31T18:57:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"34346","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 18:50:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:23:17","updated":"2026-01-21 18:50:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/34346","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=34346"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/34346\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=34346"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=34346"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=34346"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}