Tus neeg sau npe APNIC, lub luag haujlwm rau kev faib tawm IP chaw nyob hauv thaj av Asia-Pacific, tau tshaj tawm qhov xwm txheej uas tshwm sim los ntawm SQL pob tseg ntawm Whois cov kev pabcuam, suav nrog cov ntaub ntawv tsis pub lwm tus paub thiab password hashes, tau tshaj tawm rau pej xeem. Nws yog ib qho tseem ceeb uas qhov no tsis yog thawj qhov xau ntawm tus kheej cov ntaub ntawv hauv APNIC - hauv 2017, Whois database twb tau tshaj tawm rau pej xeem, kuj yog vim muaj kev saib xyuas cov neeg ua haujlwm.
Hauv cov txheej txheem qhia txog kev txhawb nqa rau RDAP raws tu qauv, tsim los hloov WHOIS raws tu qauv, APNIC cov neeg ua haujlwm tau tso SQL pob tseg ntawm cov ntaub ntawv siv hauv Whois cov kev pabcuam hauv Google Cloud huab cia, tab sis tsis txwv kev nkag mus rau nws. Vim yog qhov yuam kev hauv qhov chaw, SQL pob tseg tau tshaj tawm rau peb lub hlis thiab qhov tseeb no tsuas yog tshwm sim rau lub Rau Hli 4, thaum ib tus kws tshawb fawb txog kev ruaj ntseg tau pom qhov no thiab ceeb toom rau tus neeg sau npe txog qhov teeb meem.
Lub pob pov tseg SQL muaj "auth" tus cwj pwm uas muaj lo lus zais hashes rau kev hloov Cov Pabcuam Saib Xyuas thiab Cov Teeb Meem Teb (IRT) cov khoom, nrog rau qee cov ntaub ntawv rhiab rau cov neeg siv khoom uas tsis tshwm sim hauv Whois thaum cov lus nug ib txwm muaj (feem ntau yog cov ntaub ntawv tiv tauj ntxiv thiab sau ntawv txog tus neeg siv) . Nyob rau hauv rooj plaub ntawm kev rov qab lo lus zais, cov neeg tawm tsam tuaj yeem hloov pauv cov ntsiab lus ntawm thaj chaw nrog cov tsis muaj tus tswv ntawm IP chaw nyob thaiv hauv Whois. Cov Khoom Muag Khoom txhais tau hais tias tus neeg ua haujlwm hloov kho ib pawg ntawm cov ntaub ntawv txuas los ntawm "mnt-by" tus cwj pwm, thiab cov khoom IRT muaj cov ntaub ntawv tiv tauj rau cov thawj coj uas teb cov lus ceeb toom teeb meem. Cov ntaub ntawv hais txog tus password hashing algorithm siv tsis tau muab, tab sis xyoo 2017, MD5 thiab CRYPT-PW algorithms uas dhau los (8 tus cim lo lus zais nrog hashes raws li UNIX crypt muaj nuj nqi) tau siv rau hashing.
Tom qab txheeb xyuas qhov xwm txheej, APNIC pib rov pib dua tus password rau cov khoom hauv Whois. Ntawm APNIC sab, tseem tsis tau pom cov cim qhia txog kev ua txhaum cai, tab sis tsis muaj kev lees paub tias cov ntaub ntawv tsis poob rau hauv tes ntawm cov neeg tawm tsam, vim tias tsis muaj cov ntaub ntawv nkag mus rau hauv Google Cloud. Raws li tom qab qhov xwm txheej dhau los, APNIC tau cog lus tias yuav ua qhov kev tshuaj xyuas thiab hloov pauv cov txheej txheem thev naus laus zis los tiv thaiv kev xau zoo li yav tom ntej.
Tau qhov twg los: opennet.ru