{"id":34790,"date":"2019-10-31T22:00:24","date_gmt":"2019-10-31T19:00:24","guid":{"rendered":"https:\/\/prohoster.info\/blog\/opyat-sotni-tysyach-platezhej-grazhdan-v-gibdd-i-fssp-nahodilis-v-otkrytom-dostupe\/"},"modified":"2019-10-31T22:00:24","modified_gmt":"2019-10-31T19:00:24","slug":"opyat-sotni-tysyach-platezhej-grazhdan-v-gibdd-i-fssp-nahodilis-v-otkrytom-dostupe","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/opyat-sotni-tysyach-platezhej-grazhdan-v-gibdd-i-fssp-nahodilis-v-otkrytom-dostupe","title":{"rendered":"Taaskord olid sadu tuhandeid makseid kodanike GIBDD ja FSSP-le avalikult k\u00e4tte saadavad.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Kas m\u00e4 m\u00e4letate, et ma <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/448440\/\">kirjutasin Habrasse<\/a><\/noindex> ja enda <noindex><a rel=\"nofollow\" href=\"http:\/\/tele.click\/dataleak\/961\">Telegrami kanalisse<\/a><\/noindex>, kuidas said avalikuks andmed maksete kohta, mida kasutajad tegid GIBDD ja FSSP veebilehtedele <em>oplatagibdd.rf<\/em>, <em>paygibdd.ru<\/em>, <em>gos-oplata.ru<\/em>, <em>shtrafov.net<\/em> ja <em>oplata-fssp.ru<\/em>?<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Taaskord olid sadu tuhandeid makseid kodanike GIBDD ja FSSP-le avalikult k\u00e4tte saadavad.\" src=\"\/wp-content\/uploads\/2019\/05\/3f0928a00144c08cb608032ad7550ae5.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>\u00c4rge naerge, see ei ole naljakas \u2014 sama server, mis sisaldab sama s\u00fcsteemi andmeid, on taas avatud kogu maailmale.<\/p>\n<p><\/p>\n<p>Noh, alustame siis \u2026<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<pre><code class=\"plaintext\">Distsipliin: kogu allpool olev teave avaldatakse ainult hariduslikel eesm\u00e4rkidel. Autor ei ole saanud juurdep\u00e4\u00e4su kolmandate isikute ja ettev\u00f5tete isikuandmetele. Teave on saadud kas avatud allikatest v\u00f5i on autori k\u00e4es anon\u00fc\u00fcmsete headest soovidest.<\/code><\/pre>\n<p><\/p>\n<p>Esmalt tuletan meelde s\u00fcndmuste kronoloogiat:<\/p>\n<p><\/p>\n<ul>\n<li>12.04.2019 (\u00f6\u00f6sel) avastati autentimist mitte n\u00f5udev Elasticsearchi server.<\/li>\n<li>13.04.2019 (hommikul) saadeti serveri omanikele teade.<\/li>\n<li>13.04.2019 (p\u00e4eval) server \"vaikselt\" eemaldati avatud juurdep\u00e4\u00e4sust.<\/li>\n<\/ul>\n<p><\/p>\n<p>Esimese serveri sulgemise hetkeks n\u00e4gid Elasticsearchi indeksid v\u00e4lja j\u00e4rgmised:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Taaskord olid sadu tuhandeid makseid kodanike GIBDD ja FSSP-le avalikult k\u00e4tte saadavad.\" src=\"\/wp-content\/uploads\/2019\/05\/7f2ee67a67a4caf7c7e0eebb0f50b33d.png\" style=\"display:block;margin: 0 auto;\" \/> <\/p>\n<p><\/p>\n<p>Ja 21.05.2019 umbes kell 16:00 (MSK) ilmus sama Elasticsearchi server uuesti avatud juurdep\u00e4\u00e4sesse, koos samade (pluss uute) indeksitega:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Taaskord olid sadu tuhandeid makseid kodanike GIBDD ja FSSP-le avalikult k\u00e4tte saadavad.\" src=\"\/wp-content\/uploads\/2019\/05\/f915e575967ca597f19e913944dbc3dc.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Ma ei uskunud oma silmi, kui n\u00e4gin (vahetult p\u00e4rast esinemist <em>PHDays<\/em> avatud andmebaaside avastamise teemal) meilile teatiste, meie <noindex><a rel=\"nofollow\" href=\"https:\/\/www.devicelock.com\/ru\/data-breach-intelligence\/\">DeviceLock Data Breach Intelligence<\/a><\/noindex>. Ausalt \u00f6eldes oli esimene m\u00f5te, et ehk on tegemist s\u00fcsteemi veaga.<\/p>\n<p><\/p>\n<p>Kuid ei, see ei olnud viga ja p\u00e4rast k\u00f5igi andmete k\u00e4sitsi kontrollimist saatsin kell 01:25 22.05.2019 uuesti teate samadesse aadressidesse nagu esimesel korral.<\/p>\n<p><\/p>\n<p>Esimese sulgemise hetkest peale skaneeriti seda serverit Shodan'i poolt 11 korda ja kuni 21. maieni oli Elasticsearch sellel serveril suletud.<\/p>\n<p><\/p>\n<p>Alles 24.05.2019 hommikul kadus see Elasticsearch avatud juurdep\u00e4\u00e4sust teist korda. Selle aja jooksul olid indeksid oluliselt suurenenud:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Taaskord olid sadu tuhandeid makseid kodanike GIBDD ja FSSP-le avalikult k\u00e4tte saadavad.\" src=\"\/wp-content\/uploads\/2019\/05\/889a939c98424e316308b41f0392e7ae.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Ja kui vaadata andmeid (ainult olulised andmed, mis sisaldavad isikuandmeid) indeksites ajavahemikul 1. kuni 22. mai, n\u00e4eb pilt v\u00e4lja j\u00e4rgmine:<\/p>\n<p><\/p>\n<ul>\n<li>127,525 kirjet indeksis <em>paygibdd<\/em> <\/li>\n<li>49,627 kirjet indeksis <em>shtrafov-net<\/em><\/li>\n<li>162,282 kirjet indeksis <em>oplata-fssp<\/em><\/li>\n<li>220,201 kirjet indeksis <em>gosoplata<\/em><\/li>\n<\/ul>\n<p><\/p>\n<p>Andmete n\u00e4ide indeksist <em>gosoplata<\/em>:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Taaskord olid sadu tuhandeid makseid kodanike GIBDD ja FSSP-le avalikult k\u00e4tte saadavad.\" src=\"\/wp-content\/uploads\/2019\/05\/8f596de149b6c6a4bf7d06abfcc90e2c.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Andmete n\u00e4ide indeksist <em>paygibdd<\/em>:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Taaskord olid sadu tuhandeid makseid kodanike GIBDD ja FSSP-le avalikult k\u00e4tte saadavad.\" src=\"\/wp-content\/uploads\/2019\/05\/20c88b7f644f551775bd73d02f6c4dc6.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Kirsiks tordil oli kiri \u00fchest aadressist, kuhu ma teate saatsin:<\/p>\n<p><\/p>\n<blockquote><p>Saime teie kiri avatud ElasticSearchi kohta \u2014 t\u00e4nan teavet, andmebaas suleti. S\u00fcsteemiadministraator, kes juurdep\u00e4\u00e4su uuesti avas, vallandati. Samuti valmistab juriidiline teenistus ette avaldust, mis esitatakse Tatarstani Vabariigi siseasjade ministeeriumile s\u00fcsteemiadministraatori tegevuse osas vastavalt Kriminaalkoodeksi artiklitele 272 ja 273.<\/p><\/blockquote>\n<p>Infot andmelekkete ja siseinfo kohta saab alati leida minu Telegrami kanalist \u201e<noindex><a rel=\"nofollow\" href=\"http:\/\/tele.click\/dataleak\">Andmelekked<\/a><\/noindex>\u00bb: <noindex><a rel=\"nofollow\" href=\"https:\/\/t.me\/dataleak\">https:\/\/t.me\/dataleak<\/a><\/noindex>.<\/p>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/454048\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u043c\u043d\u0438\u0442\u0435 \u044f \u043f\u0438\u0441\u0430\u043b \u043d\u0430 \u0425\u0430\u0431\u0440\u0435 \u0438 \u0443 \u0441\u0435\u0431\u044f \u0432 Telegram-\u043a\u0430\u043d\u0430\u043b\u0435, \u043a\u0430\u043a \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043e\u043a\u0430\u0437\u0430\u043b\u0438\u0441\u044c \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043f\u043b\u0430\u0442\u0435\u0436\u0435\u0439 \u0432 \u043f\u043e\u043b\u044c\u0437\u0443 \u0413\u0418\u0411\u0414\u0414 \u0438 \u0424\u0421\u0421\u041f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441\u0430\u0439\u0442\u043e\u0432 \u043e\u043f\u043b\u0430\u0442\u0430\u0433\u0438\u0431\u0434\u0434.\u0440\u0444, paygibdd.ru, gos-oplata.ru, \u0448\u0442\u0440\u0430\u0444\u043e\u0432.net \u0438 oplata-fssp.ru? \u0422\u043e\u043b\u044c\u043a\u043e \u043d\u0435 \u043d\u0430\u0434\u043e \u0441\u043c\u0435\u044f\u0442\u044c\u0441\u044f, \u044d\u0442\u043e \u0432\u043e\u0432\u0441\u0435 \u043d\u0435 \u0448\u0443\u0442\u043a\u0430 \u2014 \u0442\u043e\u0442 \u0436\u0435 \u0441\u0430\u043c\u044b\u0439 \u0441\u0435\u0440\u0432\u0435\u0440 \u0441 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0442\u043e\u0439 \u0436\u0435 \u0441\u0430\u043c\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441\u043d\u043e\u0432\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0434\u043b\u044f \u0432\u0441\u0435\u0433\u043e \u043c\u0438\u0440\u0430. [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":26212,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-34790","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u043c\u043d\u0438\u0442\u0435 \u044f \u043f\u0438\u0441\u0430\u043b \u043d\u0430 \u0425\u0430\u0431\u0440\u0435 \u0438 \u0443 \u0441\u0435\u0431\u044f \u0432 Telegram-\u043a\u0430\u043d\u0430\u043b\u0435, \u043a\u0430\u043a.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/opyat-sotni-tysyach-platezhej-grazhdan-v-gibdd-i-fssp-nahodilis-v-otkrytom-dostupe\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041e\u043f\u044f\u0442\u044c \u0441\u043e\u0442\u043d\u0438 \u0442\u044b\u0441\u044f\u0447 \u043f\u043b\u0430\u0442\u0435\u0436\u0435\u0439 \u0433\u0440\u0430\u0436\u0434\u0430\u043d \u0432 \u0413\u0418\u0411\u0414\u0414 \u0438 \u0424\u0421\u0421\u041f \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0438\u0441\u044c \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u043c\u043d\u0438\u0442\u0435 \u044f \u043f\u0438\u0441\u0430\u043b \u043d\u0430 \u0425\u0430\u0431\u0440\u0435 \u0438 \u0443 \u0441\u0435\u0431\u044f \u0432 Telegram-\u043a\u0430\u043d\u0430\u043b\u0435, \u043a\u0430\u043a.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/opyat-sotni-tysyach-platezhej-grazhdan-v-gibdd-i-fssp-nahodilis-v-otkrytom-dostupe\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:00:24+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:00:24+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Taaskord j\u00e4lle sadu tuhandeid makseid kodanike GIBDD ja FSSP-le, mis olid avalikult kergesti ligip\u00e4\u00e4setavad | ProHoster","description":"Kas m\u00e4letate, et ma kirjutasin Habrasse ja enda Telegrami kanalisse, kuidas.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/opyat-sotni-tysyach-platezhej-grazhdan-v-gibdd-i-fssp-nahodilis-v-otkrytom-dostupe","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u043f\u044f\u0442\u044c \u0441\u043e\u0442\u043d\u0438 \u0442\u044b\u0441\u044f\u0447 \u043f\u043b\u0430\u0442\u0435\u0436\u0435\u0439 \u0433\u0440\u0430\u0436\u0434\u0430\u043d \u0432 \u0413\u0418\u0411\u0414\u0414 \u0438 \u0424\u0421\u0421\u041f \u043d\u0430\u0445\u043e\u0434\u0438\u043b\u0438\u0441\u044c \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435 | ProHoster","og:description":"\u041f\u043e\u043c\u043d\u0438\u0442\u0435 \u044f \u043f\u0438\u0441\u0430\u043b \u043d\u0430 \u0425\u0430\u0431\u0440\u0435 \u0438 \u0443 \u0441\u0435\u0431\u044f \u0432 Telegram-\u043a\u0430\u043d\u0430\u043b\u0435, \u043a\u0430\u043a.","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/opyat-sotni-tysyach-platezhej-grazhdan-v-gibdd-i-fssp-nahodilis-v-otkrytom-dostupe","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:00:24+00:00","article:modified_time":"2019-10-31T19:00:24+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"34790","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 20:38:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:15:37","updated":"2026-01-21 20:38:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/34790","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=34790"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/34790\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/26212"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=34790"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=34790"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=34790"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}