{"id":112727,"date":"2024-01-06T21:10:22","date_gmt":"2024-01-06T19:10:22","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/orange-espana-vzlomali-iz-za-togo-chto-parol-u-polzovatelya-admin-uchetnoj-zapisi-ripe-ncc-byl-ripeadmin"},"modified":"2024-01-06T21:10:22","modified_gmt":"2024-01-06T19:10:22","slug":"orange-espana-vzlomali-iz-za-togo-chto-parol-u-polzovatelya-admin-uchetnoj-zapisi-ripe-ncc-byl-ripeadmin","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/orange-espana-vzlomali-iz-za-togo-chto-parol-u-polzovatelya-admin-uchetnoj-zapisi-ripe-ncc-byl-ripeadmin","title":{"rendered":"Az Orange Espa\u00f1a-t felt\u00f6rt\u00e9k, mert a RIPE NCC adminisztr\u00e1tori fi\u00f3kj\u00e1nak jelszava ripeadmin volt.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Az Orange Espa\u00f1a, Spanyolorsz\u00e1g m\u00e1sodik legnagyobb mobilszolg\u00e1ltat\u00f3ja, komoly zavarral n\u00e9zett szembe szerd\u00e1n, miut\u00e1n egy ismeretlen f\u00e9l hozz\u00e1f\u00e9rt egy fi\u00f3khoz, amely a glob\u00e1lis \u00fatvonal-ir\u00e1ny\u00edt\u00e1si t\u00e1bl\u00e1zat kezel\u00e9s\u00e9re szolg\u00e1lt egy «nevets\u00e9gesen gyenge» jelsz\u00f3val. 9:28 UTC-t\u0151l egy Snow nev\u0171 felhaszn\u00e1l\u00f3 bel\u00e9pett az Orange fi\u00f3kj\u00e1ba a RIPE NCC-n\u00e9l, a ripeadmin jelsz\u00f3val. A RIPE NCC felel\u0151s az IP-c\u00edmek kezel\u00e9s\u00e9\u00e9rt \u00e9s eloszt\u00e1s\u00e1\u00e9rt, 75 eur\u00f3pai, k\u00f6zel-keleti \u00e9s k\u00f6z\u00e9p-\u00e1zsiai orsz\u00e1got szolg\u00e1l ki.<\/p>\n

Snow el\u0151sz\u00f6r \u00faj ROA-kat (Route Origin Authorizations) adott hozz\u00e1 a glob\u00e1lis \u00fatvonal-ir\u00e1ny\u00edt\u00e1si t\u00e1bl\u00e1zathoz, amelyek kezdetben nem okoztak zavart. Azonban k\u00e9s\u0151bb Snow olyan ROA-kat adott hozz\u00e1 «hamis forr\u00e1sokkal», amelyek jelent\u0151s m\u00e9rt\u00e9kben cs\u00f6kkentett\u00e9k az Orange \u00e9rv\u00e9nyes \u00fatvonalait, ami viszont szolg\u00e1ltat\u00e1skimarad\u00e1shoz vezetett. A probl\u00e9ma s\u00falyosb\u00edtotta a RPKI (Resource Public Key Infrastructure) rendszer alkalmaz\u00e1s\u00e1t, amely a hamis \u00fatvonalak megakad\u00e1lyoz\u00e1s\u00e1ra szolg\u00e1l, \u00edgy az Orange h\u00e1l\u00f3zata gyakorlatilag m\u0171k\u00f6d\u00e9sk\u00e9ptelenn\u00e9 v\u00e1lt.<\/p>\n

A Hudson Rock felfedezte az online boltokban elad\u00e1sra k\u00edn\u00e1lt hiteles\u00edt\u0151 adatokat, amelyeket egy Orange sz\u00e1m\u00edt\u00f3g\u00e9p\u00e9n telep\u00edtett rosszindulat\u00fa szoftver seg\u00edts\u00e9g\u00e9vel loptak el szeptember \u00f3ta. A kutat\u00f3k emellett felh\u00edvt\u00e1k a figyelmet m\u00e1s ezer, a RIPE fi\u00f3kok v\u00e9delm\u00e9t szolg\u00e1l\u00f3 hiteles\u00edt\u0151 adatra, amelyek ilyen piactereken tal\u00e1lhat\u00f3k.<\/p>\n

Ez az incidens kihangs\u00falyozza a BGP rendszer t\u00f6r\u00e9kenys\u00e9g\u00e9t \u00e9s komoly biztons\u00e1gi probl\u00e9m\u00e1kat t\u00e1r fel az Orange-n\u00e1l. A gyenge jelsz\u00f3 haszn\u00e1lata \u00e9s a t\u00f6bbt\u00e9nyez\u0151s hiteles\u00edt\u00e9s hi\u00e1nya, valamint a munkav\u00e1llal\u00f3 sz\u00e1m\u00edt\u00f3g\u00e9p\u00e9n \u00e9szrev\u00e9tlen\u00fcl maradt rosszindulat\u00fa szoftver n\u00e9gy h\u00f3napon \u00e1t s\u00falyos mulaszt\u00e1sok, amelyek egy ilyen m\u00e9ret\u0171 szervezetn\u00e9l, mint az Orange, soha nem t\u00f6rt\u00e9nhettek volna meg. A kutat\u00f3k rem\u00e9lik, hogy ez az incidens figyelmeztet\u0151 jelk\u00e9nt szolg\u00e1l m\u00e1s szolg\u00e1ltat\u00f3k sz\u00e1m\u00e1ra, \u00e9s \u00f6szt\u00f6nzi \u0151ket a biztons\u00e1gi int\u00e9zked\u00e9sek meger\u0151s\u00edt\u00e9s\u00e9re.<\/p>\n

Forr\u00e1s: linux.org.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

Orange Espa\u00f1a, \u0432\u0442\u043e\u0440\u043e\u0439 \u043f\u043e \u0432\u0435\u043b\u0438\u0447\u0438\u043d\u0435 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440 \u0418\u0441\u043f\u0430\u043d\u0438\u0438, \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0441\u044f \u0441 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u0441\u0431\u043e\u0435\u043c \u0432 \u0441\u0440\u0435\u0434\u0443 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0441\u0442\u043e\u0440\u043e\u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0442\u0430\u0431\u043b\u0438\u0446\u0435\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e «\u0441\u043c\u0435\u0445\u043e\u0442\u0432\u043e\u0440\u043d\u043e \u0441\u043b\u0430\u0431\u043e\u0433\u043e» \u043f\u0430\u0440\u043e\u043b\u044f. \u041d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 9:28 UTC, \u043b\u0438\u0446\u043e \u043f\u043e\u0434 \u043d\u0438\u043a\u043e\u043c Snow \u0432\u043e\u0448\u043b\u043e \u0432 \u0443\u0447\u0435\u0442\u043d\u0443\u044e \u0437\u0430\u043f\u0438\u0441\u044c Orange \u0432 RIPE NCC, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0430\u0440\u043e\u043b\u044c ripeadmin. RIPE NCC […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112727","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Az Orange Espa\u00f1a-t felt\u00f6rt\u00e9k, mert a RIPE NCC adminisztr\u00e1tori fi\u00f3kj\u00e1nak jelszava ripeadmin volt | ProHoster","description":"Az Orange Espa\u00f1a, Spanyolorsz\u00e1g m\u00e1sodik legnagyobb mobilszolg\u00e1ltat\u00f3ja, komoly m\u0171k\u00f6d\u00e9si z\u0171rzavarral szembes\u00fclt szerd\u00e1n, miut\u00e1n egy ismeretlen f\u00e9l hozz\u00e1f\u00e9r\u00e9st szerzett a glob\u00e1lis \u00fatv\u00e1laszt\u00e1si t\u00e1bl\u00e1t ir\u00e1ny\u00edt\u00f3 fi\u00f3khoz.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/orange-espana-vzlomali-iz-za-togo-chto-parol-u-polzovatelya-admin-uchetnoj-zapisi-ripe-ncc-byl-ripeadmin","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Orange Espa\u00f1a \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0438 \u0438\u0437-\u0437\u0430 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043f\u0430\u0440\u043e\u043b\u044c \u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f admin \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 RIPE NCC \u0431\u044b\u043b ripeadmin | ProHoster","og:description":"Orange Espa\u00f1a, \u0432\u0442\u043e\u0440\u043e\u0439 \u043f\u043e \u0432\u0435\u043b\u0438\u0447\u0438\u043d\u0435 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440 \u0418\u0441\u043f\u0430\u043d\u0438\u0438, \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0441\u044f \u0441 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u043c \u0441\u0431\u043e\u0435\u043c \u0432 \u0441\u0440\u0435\u0434\u0443 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u0441\u0442\u043e\u0440\u043e\u043d\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0442\u0430\u0431\u043b\u0438\u0446\u0435\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0446\u0438\u0438.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/orange-espana-vzlomali-iz-za-togo-chto-parol-u-polzovatelya-admin-uchetnoj-zapisi-ripe-ncc-byl-ripeadmin","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-06T19:10:22+00:00","article:modified_time":"2024-01-06T19:10:22+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/112727","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=112727"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/112727\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=112727"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=112727"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=112727"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}