{"id":99306,"date":"2021-03-02T16:23:29","date_gmt":"2021-03-02T14:23:29","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/opublikovan-razbor-inczidenta-s-poterej-kontrolya-nad-domenom-perl-com"},"modified":"2021-03-02T16:23:29","modified_gmt":"2021-03-02T14:23:29","slug":"opublikovan-razbor-inczidenta-s-poterej-kontrolya-nad-domenom-perl-com","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/opublikovan-razbor-inczidenta-s-poterej-kontrolya-nad-domenom-perl-com","title":{"rendered":"Analyse de l'incident de perte de contr\u00f4le sur le domaine perl.com publi\u00e9e","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Brian Foy (brian d foy), fondateur de l'organisation Perl Mongers, a publi\u00e9 une analyse d\u00e9taill\u00e9e de l'incident au cours duquel le domaine perl.com a \u00e9t\u00e9 captur\u00e9 par des tiers. La capture du domaine n'a pas affect\u00e9 l'infrastructure serveur du projet et a \u00e9t\u00e9 effectu\u00e9e au niveau du changement de propri\u00e9taire et du remplacement des param\u00e8tres des serveurs DNS chez le registraire. Il est affirm\u00e9 que les ordinateurs des responsables du domaine n'ont \u00e9galement pas \u00e9t\u00e9 compromis et que les attaquants ont utilis\u00e9 des m\u00e9thodes d'ing\u00e9nierie sociale pour tromper le registraire Network Solutions et modifier les donn\u00e9es sur le propri\u00e9taire, en utilisant de faux documents pour prouver les droits de propri\u00e9t\u00e9 sur le domaine. <\/p>\n

Parmi les facteurs ayant contribu\u00e9 \u00e0 l'attaque, on mentionne \u00e9galement la d\u00e9sactivation de l'authentification \u00e0 deux facteurs dans l'interface du registraire et l'utilisation d'un email de contact qui pointe vers le m\u00eame domaine<\/a>. La capture du domaine a \u00e9t\u00e9 r\u00e9alis\u00e9e en septembre 2020, en d\u00e9cembre le domaine a \u00e9t\u00e9 transf\u00e9r\u00e9 au registraire chinois BizCN, et en janvier, pour brouiller les pistes, il a \u00e9t\u00e9 transf\u00e9r\u00e9 au registraire allemand Key-Systems GmbH. <\/p>\n

Jusqu'\u00e0 d\u00e9cembre, le domaine est rest\u00e9 chez Network Solutions conform\u00e9ment aux exigences de l'ICANN, interdisant le transfert du domaine vers un autre registraire pendant 60 jours apr\u00e8s le changement d'informations de contact. Si l'information sur la capture du domaine avait \u00e9t\u00e9 r\u00e9v\u00e9l\u00e9e avant d\u00e9cembre, le processus de restitution du domaine aurait \u00e9t\u00e9 consid\u00e9rablement simplifi\u00e9, c'est pourquoi les malfaiteurs n'ont pas modifi\u00e9 les serveurs DNS pendant longtemps, et le domaine a continu\u00e9 \u00e0 fonctionner sans \u00e9veiller de soup\u00e7ons, ce qui a entrav\u00e9 la d\u00e9tection rapide de l'attaque. Le probl\u00e8me n'est apparu qu'\u00e0 la fin janvier, lorsque les fraudeurs ont redirig\u00e9 le trafic vers leur serveur et ont tent\u00e9 de vendre le domaine sur le site Afternic pour 190 000 dollars. <\/p>\n

Parmi les \u00e9v\u00e9nements li\u00e9s au langage Perl, on peut \u00e9galement noter que l'archive des modules CPAN a abandonn\u00e9 l'utilisation de miroirs au profit de l'utilisation d'un r\u00e9seau de distribution de contenu, all\u00e9geant la charge sur le principal de serveurs<\/a>. En juin, il est pr\u00e9vu de nettoyer compl\u00e8tement la liste des miroirs, ne conservant qu'un seul enregistrement \u2014 www.cpan.org. La possibilit\u00e9 de configurer manuellement le client CPAN pour fonctionner via un miroir sp\u00e9cifi\u00e9 restera.
\n
Source : opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0411\u0440\u0430\u0439\u0430\u043d \u0424\u043e\u0439 (brian d foy), \u043e\u0441\u043d\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 Perl Mongers, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0434\u043e\u043c\u0435\u043d perl.com \u0431\u044b\u043b \u0437\u0430\u0445\u0432\u0430\u0447\u0435\u043d \u043f\u043e\u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c\u0438 \u043b\u0438\u0446\u0430\u043c\u0438. \u0417\u0430\u0445\u0432\u0430\u0442 \u0434\u043e\u043c\u0435\u043d\u0430 \u043d\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u0443\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0438 \u0431\u044b\u043b \u0441\u043e\u0432\u0435\u0440\u0448\u0451\u043d \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0441\u043c\u0435\u043d\u044b \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430 \u0438 \u0437\u0430\u043c\u0435\u043d\u044b \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 DNS-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0443 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430. \u0423\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u044b \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0437\u0430 \u0434\u043e\u043c\u0435\u043d \u0442\u0430\u043a\u0436\u0435 \u043d\u0435 \u0431\u044b\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-99306","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Analyse de l'incident de perte de contr\u00f4le du domaine perl.com | ProHoster","description":"Brian Foy (brian d foy), fondateur de l'organisation Perl Mongers, a publi\u00e9 une analyse d\u00e9taill\u00e9e de l'incident au cours duquel le domaine perl.com a \u00e9t\u00e9 captur\u00e9 par des tiers.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/opublikovan-razbor-inczidenta-s-poterej-kontrolya-nad-domenom-perl-com","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0430\u0437\u0431\u043e\u0440 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430 \u0441 \u043f\u043e\u0442\u0435\u0440\u0435\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u043d\u0430\u0434 \u0434\u043e\u043c\u0435\u043d\u043e\u043c perl.com | ProHoster","og:description":"\u0411\u0440\u0430\u0439\u0430\u043d \u0424\u043e\u0439 (brian d foy), \u043e\u0441\u043d\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 Perl Mongers, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u044b\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0434\u043e\u043c\u0435\u043d perl.com \u0431\u044b\u043b \u0437\u0430\u0445\u0432\u0430\u0447\u0435\u043d \u043f\u043e\u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c\u0438 \u043b\u0438\u0446\u0430\u043c\u0438.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/opublikovan-razbor-inczidenta-s-poterej-kontrolya-nad-domenom-perl-com","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-03-02T14:23:29+00:00","article:modified_time":"2021-03-02T14:23:29+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"99306","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-02 14:27:49","updated":"2026-03-05 11:10:51","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/99306","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=99306"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/99306\/revisions"}],"predecessor-version":[{"id":163194,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/99306\/revisions\/163194"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=99306"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=99306"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=99306"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}