Cov tsim tawm ntawm lub platform rau decentralized messaging Matrix tshaj tawm kev kaw thaum muaj xwm txheej ceev ntawm cov servers Matrix.org thiab Riot.im (tus neeg siv tseem ceeb ntawm Matrix) vim kev nyiag ntawm qhov project infrastructure. Thawj qhov hluav taws xob tau tshwm sim nag hmo, tom qab ntawd cov servers tau rov qab los thiab cov ntawv thov rov tsim dua los ntawm cov ntaub ntawv siv. Tab sis ob peb feeb dhau los cov servers tau cuam tshuam rau zaum ob.
Cov neeg tawm tsam tau tshaj tawm rau ntawm nplooj ntawv tseem ceeb ntawm qhov project cov ncauj lus kom ntxaws txog kev teeb tsa neeg rau zaub mov thiab cov ntaub ntawv hais txog qhov muaj cov ntaub ntawv nrog hashes ntawm yuav luag tsib thiab ib nrab lab tus neeg siv Matrix. Raws li cov pov thawj, tus password hash ntawm tus thawj coj ntawm Matrix qhov project yog muaj rau pej xeem. Cov cai hloov kho qhov chaw tau muab tso rau hauv cov neeg tawm tsam 'repository ntawm GitHub (tsis yog nyob rau hauv cov ntaub ntawv matrix repository). Paub meej txog qhov thib ob hack tseem tsis tau muaj.
Tom qab thawj zaug hack, pab pawg Matrix tau tshaj tawm tsab ntawv tshaj tawm qhia tias qhov hack tau ua txhaum los ntawm qhov tsis muaj zog hauv Jenkins tsis tu ncua kev sib koom ua ke. Tom qab nkag mus rau Jenkins servers, cov neeg tawm tsam tau cuam tshuam cov yuam sij SSH thiab tuaj yeem nkag mus rau lwm qhov chaw servers. Nws tau hais tias lub hauv paus code thiab pob khoom tsis cuam tshuam los ntawm kev tawm tsam. Qhov kev tawm tsam kuj tsis cuam tshuam rau Modular.im servers. Tab sis cov neeg tawm tsam tau txais kev nkag mus rau lub ntsiab DBMS, uas muaj, ntawm lwm yam, cov lus tsis tau encrypted, nkag mus rau tokens thiab password hashs.
Txhua tus neeg siv tau qhia kom hloov lawv tus password. Tab sis nyob rau hauv tus txheej txheem ntawm kev hloov passwords nyob rau hauv lub ntsiab Riot tus neeg siv, cov neeg siv tau ntsib nrog lub ploj ntawm cov ntaub ntawv nrog backup cov ntawv luam ntawm cov yuam sij rau rov qab encrypted correspondence thiab tsis muaj peev xwm mus saib tau cov keeb kwm ntawm yav dhau los cov lus.
Cia peb nco qab tias lub platform rau kev teeb tsa kev sib tham tsis sib haum xeeb Matrix tau nthuav tawm raws li qhov project uas siv cov qauv qhib thiab ua tib zoo saib xyuas kom muaj kev ruaj ntseg thiab kev ceev ntiag tug ntawm cov neeg siv. Matrix muab qhov kawg-rau-kawg encryption raws li cov pov thawj Signal algorithm, txhawb kev tshawb nrhiav thiab tsis txwv kev saib cov ntaub ntawv keeb kwm, tuaj yeem siv los hloov cov ntaub ntawv, xa cov ntawv ceeb toom, ntsuas tus tsim tawm hauv online, teeb tsa kev sib tham hauv xov tooj, hu xov tooj thiab video. Nws kuj tseem txhawb nqa cov yam ntxwv siab heev xws li ntaus ntawv ceeb toom, nyeem ntawv pom zoo, thawb cov ntawv ceeb toom thiab kev tshawb nrhiav neeg rau zaub mov, synchronization ntawm tus neeg siv khoom keeb kwm thiab xwm txheej, ntau yam kev xaiv tus cim (email, xov tooj, Facebook account, thiab lwm yam).
Tau qhov twg los: opennet.ru