Hacking na ginin uwar garken da kuma lalata ma'ajiyar al'ummar Libretro masu haɓaka RetroArch

Al'umman Libretro suna haɓaka ƙirar wasan bidiyo RetroArch da kuma kayan rarrabawa don ƙirƙirar abubuwan wasan bidiyo Lakka, gargadi game da kutse na abubuwan more rayuwa na ayyukan da barna a cikin ma'ajiya. Maharan sun sami damar shiga uwar garken ginin (buildbot) da wuraren ajiya akan GitHub.

A kan GitHub, maharan sun sami dama ga kowa wuraren ajiya Ƙungiyar Libretro ta amfani da asusun ɗaya daga cikin amintattun mahalarta aikin. Ayyukan maharan ya iyakance ga ɓarna - sun yi ƙoƙarin share abubuwan da ke cikin ma'ajiyar ta hanyar sanya wani aikin farko na wofi. Harin ya shafe duk ma'ajiyar da aka jera a kan uku daga cikin shafukan jeri na Libretro tara akan Github. Abin farin ciki, masu haɓaka aikin sun toshe aikin ɓarna kafin maharan su isa wurin ajiyar maɓalli. RetroArch.

A kan uwar garken ginin, maharan sun lalata ayyukan da ke haifar da ginin dare da kwanciyar hankali, da kuma waɗanda ke da alhakin shiryawa. wasanni na cibiyar sadarwa (zauren cibiyar sadarwa). Ayyukan mugunta akan uwar garken sun iyakance ga share abun ciki. Babu yunƙurin maye gurbin kowane fayiloli ko yin canje-canje ga tarurukan RetroArch da manyan fakiti. A halin yanzu, aikin Core Installer, Core Updater da Netplay Lobbie, da kuma shafuka da ayyukan da ke da alaƙa da waɗannan abubuwan (Sabuntawa Kayayyakin, Sabunta overlays, Sabunta Shaders) sun lalace.

Babban matsalar da aikin ya fuskanta bayan abin da ya faru shine rashin tsarin adanawa ta atomatik. Ajiye na ƙarshe na uwar garken gininbot an yi shi watanni da yawa da suka gabata. Matsalolin suna bayyana ta masu haɓakawa ta hanyar rashin kuɗi don tsarin ajiya na atomatik, saboda ƙarancin kasafin kuɗi don kula da kayan aiki. Masu haɓakawa ba su yi niyya don dawo da tsohuwar uwar garken ba, amma don ƙaddamar da wani sabon abu, halittar da ke cikin tsare-tsaren. A wannan yanayin, ginawa don tsarin farko kamar Linux, Windows da Android zai fara nan da nan, amma ginawa don na'urori na musamman kamar na'urorin wasan bidiyo da tsoffin ginin MSVC zai ɗauki lokaci don murmurewa.

Ana tsammanin cewa GitHub, wanda aka aika madaidaicin buƙatun, zai taimaka wajen dawo da abubuwan da ke cikin wuraren da aka tsabtace da kuma gano maharin. Ya zuwa yanzu, mun sani kawai cewa an yi hack ɗin ne daga adireshin IP 54.167.104.253, watau. Mai yiwuwa maharin ya yi amfani da sabar sabar da aka yi kutse a cikin AWS a matsayin tsaka-tsaki. Ba a bayar da bayani game da hanyar shiga ba.

source: budenet.ru