{"id":114077,"date":"2024-03-03T12:26:07","date_gmt":"2024-03-03T10:26:07","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/github-vklyuchil-po-umolchaniyu-sistemu-zashhity-ot-utechek-tokenov-k-api"},"modified":"2024-03-03T12:26:07","modified_gmt":"2024-03-03T10:26:07","slug":"github-vklyuchil-po-umolchaniyu-sistemu-zashhity-ot-utechek-tokenov-k-api","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/github-vklyuchil-po-umolchaniyu-sistemu-zashhity-ot-utechek-tokenov-k-api","title":{"rendered":"A GitHub alap\u00e9rtelmez\u00e9s szerint be\u00e1ll\u00edtott egy API-token sziv\u00e1rg\u00e1s elleni v\u00e9delmi rendszert.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A GitHub bejelentette, hogy minden nyilv\u00e1nos t\u00e1rol\u00f3n\u00e1l alap\u00e9rtelmezett\u00e9 v\u00e1lt a v\u00e9delmi mechanizmus, amely megakad\u00e1lyozza a bizalmas adatok v\u00e9letlen t\u00e1rol\u00f3kba ker\u00fcl\u00e9s\u00e9t, amelyeket a fejleszt\u0151k hanyags\u00e1ga miatt hagytak a k\u00f3dban. P\u00e9ld\u00e1ul el\u0151fordulhat, hogy a t\u00e1rol\u00f3ba konfigur\u00e1ci\u00f3s f\u00e1jlok ker\u00fclnek, amelyek az adatb\u00e1zis-kezel\u0151 jelszavait, tokeneket vagy API-hozz\u00e1f\u00e9r\u00e9si kulcsokat tartalmaznak. Kor\u00e1bban a keres\u00e9s passz\u00edv \u00fczemm\u00f3dban zajlott, \u00e9s lehet\u0151v\u00e9 tette m\u00e1r bek\u00f6vetkezett adatlop\u00e1sok \u00e9szlel\u00e9s\u00e9t, amelyek a t\u00e1rol\u00f3ba ker\u00fclt. Most a vizsg\u00e1lat automatikusan t\u00f6rt\u00e9nik a k\u00f6zz\u00e9t\u00e9tel (git push) szakasz\u00e1ban, \u00e9s figyelmeztet\u00e9st ad ki, ha acommitokban bizalmas adatokat tal\u00e1lnak. <\/p>\n

T\u00f6bb mint 250 sablon ker\u00fclt megval\u00f3s\u00edt\u00e1sra k\u00fcl\u00f6nb\u00f6z\u0151 t\u00edpus\u00fa kulcsok, tokenek, tan\u00fas\u00edtv\u00e1nyok \u00e9s hiteles\u00edt\u0151 adatok azonos\u00edt\u00e1s\u00e1ra. A hamis pozit\u00edv eredm\u00e9nyek kiz\u00e1r\u00e1sa \u00e9rdek\u00e9ben csak garant\u00e1ltan azonos\u00edthat\u00f3 token t\u00edpusok ker\u00fclnek ellen\u0151rz\u00e9sre, amelyek t\u00f6bb mint 180 k\u00fcl\u00f6nb\u00f6z\u0151 szolg\u00e1ltat\u00e1st fednek le, bele\u00e9rtve az Amazon Web Services, Azure, Crates.io, DigitalOcean, Google Cloud, NPM, PyPI, RubyGems \u00e9s Yandex.Cloud. A potenci\u00e1lis adatlop\u00e1s \u00e9szlel\u00e9se ut\u00e1n a fejleszt\u0151knek lehet\u0151s\u00e9g\u00fck van a probl\u00e9m\u00e1s k\u00f3d fel\u00fclvizsg\u00e1lat\u00e1ra, az adatlop\u00e1s megsz\u00fcntet\u00e9s\u00e9re \u00e9s a commit ism\u00e9tl\u00e9s\u00e9re, vagy annak hamis riaszt\u00e1sk\u00e9nt val\u00f3 megjel\u00f6l\u00e9s\u00e9re.
\n
Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

GitHub \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043f\u043e\u043f\u0430\u0434\u0430\u043d\u0438\u044f \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e \u043d\u0435\u0434\u043e\u0441\u043c\u043e\u0442\u0440\u0443 \u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 \u0432 \u043a\u043e\u0434\u0435. \u041d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0441\u043b\u0443\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u043f\u043e\u043f\u0430\u0434\u0430\u044e\u0442 \u0444\u0430\u0439\u043b\u044b \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0441 \u043f\u0430\u0440\u043e\u043b\u044f\u043c\u0438 \u043a \u0421\u0423\u0411\u0414, \u0442\u043e\u043a\u0435\u043d\u044b \u0438\u043b\u0438 \u043a\u043b\u044e\u0447\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a API. \u0420\u0430\u043d\u0435\u0435 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u043b\u043e\u0441\u044c \u0432 \u043f\u0430\u0441\u0441\u0438\u0432\u043d\u043e\u043c \u0440\u0435\u0436\u0438\u043c\u0435 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u043e \u0432\u044b\u044f\u0432\u043b\u044f\u0442\u044c \u0443\u0436\u0435 \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u0435\u0434\u0448\u0438\u0435 \u0443\u0442\u0435\u0447\u043a\u0438, \u043f\u043e\u043f\u0430\u0432\u0448\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-114077","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47A GitHub alap\u00e9rtelmez\u00e9s szerint aktiv\u00e1lta az API-tokenek sziv\u00e1rg\u00e1s\u00e1nak v\u00e9delm\u00e9t | ProHoster","description":"A GitHub bejelentette, hogy minden nyilv\u00e1nos t\u00e1rol\u00f3n\u00e1l alap\u00e9rtelmezett\u00e9 v\u00e1lt a v\u00e9delmi mechanizmus, amely megakad\u00e1lyozza a bizalmas adatok v\u00e9letlen t\u00e1rol\u00f3kba ker\u00fcl\u00e9s\u00e9t, amelyeket a fejleszt\u0151k hanyags\u00e1ga miatt hagytak a k\u00f3dban.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/github-vklyuchil-po-umolchaniyu-sistemu-zashhity-ot-utechek-tokenov-k-api","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47GitHub \u0432\u043a\u043b\u044e\u0447\u0438\u043b \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0443\u0442\u0435\u0447\u0435\u043a \u0442\u043e\u043a\u0435\u043d\u043e\u0432 \u043a API | ProHoster","og:description":"GitHub \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0434\u043b\u044f \u0432\u0441\u0435\u0445 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u043f\u043e\u043f\u0430\u0434\u0430\u043d\u0438\u044f \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u043e \u043d\u0435\u0434\u043e\u0441\u043c\u043e\u0442\u0440\u0443 \u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 \u0432 \u043a\u043e\u0434\u0435.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/github-vklyuchil-po-umolchaniyu-sistemu-zashhity-ot-utechek-tokenov-k-api","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-03-03T10:26:07+00:00","article:modified_time":"2024-03-03T10:26:07+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/114077","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=114077"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/114077\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=114077"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=114077"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=114077"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}