An gano mummunan harin fansa akan ma'ajin Git

Ya ruwaito game da guguwar hare-hare da nufin ɓoye ma'ajiyar Git a cikin ayyukan GitHub, GitLab da Bitbucket. Masu kai hari suna share ma'ajiyar kuma suna barin saƙo suna tambayarka don aika 0.1 BTC (kimanin $ 700) don dawo da bayanai daga kwafin ajiyar kuɗi (a zahiri, kawai suna lalata masu rubutun kai kuma bayanin na iya zama. mayar da). A kan GitHub riga ta irin wannan hanya Wahala 371 wuraren ajiya.

Wasu wadanda harin ya shafa sun yarda da amfani da kalmomin sirri masu rauni ko mantawa da cire alamun shiga daga tsoffin aikace-aikacen. Wasu sun yi imani (a yanzu wannan hasashe ne kawai kuma har yanzu ba a tabbatar da hasashe ba) cewa dalilin zubar da takaddun shaida ya kasance sasantawa na aikace-aikacen. SourceTree, wanda ke ba da GUI don aiki tare da Git daga macOS da Windows. A cikin Maris, da yawa m vulnerabilities, yana ba ku damar tsara aiwatar da lambar a nesa lokacin shiga wuraren ajiyar kayan da maharin ke sarrafawa.

Don mayar da ma'ajiyar bayan an kai hari, kawai gudanar da "git checkout origin/master", bayan haka
nemo SHA hash na ƙaddamarwar ƙarshe ta amfani da "git reflog" kuma sake saita canje-canjen maharan tare da "git reset {SHA}". Idan kuna da kwafin gida, ana magance matsalar ta hanyar gudu "git push origin HEAD: master -force".

source: budenet.ru

Add a comment