{"id":91711,"date":"2020-08-17T13:42:10","date_gmt":"2020-08-17T11:42:10","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vzlom-sborochnogo-servera-i-komprometacziya-repozitoriev-soobshhestva-libretro-razvivayushhego-retroarch"},"modified":"2020-08-17T13:42:10","modified_gmt":"2020-08-17T11:42:10","slug":"vzlom-sborochnogo-servera-i-komprometacziya-repozitoriev-soobshhestva-libretro-razvivayushhego-retroarch","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/vzlom-sborochnogo-servera-i-komprometacziya-repozitoriev-soobshhestva-libretro-razvivayushhego-retroarch","title":{"rendered":"Az \u00f6sszeszerel\u0151 szerver felt\u00f6r\u00e9se \u00e9s a Libretro k\u00f6z\u00f6ss\u00e9gi t\u00e1rol\u00f3k kompromitt\u00e1l\u00e1sa, amely a RetroArch-ot fejleszti","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A Libretro k\u00f6z\u00f6ss\u00e9g, amely videoj\u00e1t\u00e9k konzolok emul\u00e1tor\u00e1nak fejleszt\u00e9s\u00e9vel foglalkozik RetroArch<\/a><\/noindex> \u00e9s j\u00e1t\u00e9k konzolok l\u00e9trehoz\u00e1s\u00e1ra szolg\u00e1l\u00f3 disztrib\u00faci\u00f3 Lakka<\/a><\/noindex>, figyelmeztetett<\/a><\/noindex> a projekt infrastrukt\u00far\u00e1j\u00e1nak elemeit \u00e9rt t\u00e1mad\u00e1sra \u00e9s a t\u00e1rol\u00f3kban v\u00e9gzett vandalizmusra. A t\u00e1mad\u00f3k hozz\u00e1f\u00e9r\u00e9st kaptak a buildbot \u00e9p\u00edt\u00e9si szerverhez \u00e9s a GitHub-on tal\u00e1lhat\u00f3 t\u00e1rol\u00f3khoz.<\/p>\n

A GitHub-on a t\u00e1mad\u00f3k hozz\u00e1f\u00e9rtek az \u00f6sszes t\u00e1rol\u00f3hoz<\/a><\/noindex> A Libretro szervezet\u00e9t egy megb\u00edzhat\u00f3 projektpartner fi\u00f3kj\u00e1val vissza\u00e9lve t\u00e1madt\u00e1k meg. A t\u00e1mad\u00f3k aktivit\u00e1sa vandalizmusra korl\u00e1toz\u00f3dott - megpr\u00f3b\u00e1lt\u00e1k t\u00f6r\u00f6lni a t\u00e1rol\u00f3k tartalm\u00e1t egy \u00fcres kezdeti commit bet\u00f6lt\u00e9s\u00e9vel. A t\u00e1mad\u00e1s sor\u00e1n az \u00f6sszes t\u00e1rol\u00f3 t\u00f6rl\u00e9sre ker\u00fclt, amely a Libretro Github-on a kilenc oldalb\u00f3l h\u00e1romon tal\u00e1lhat\u00f3 list\u00e1n szerepelt. Szerencs\u00e9re a vandalizmus aktus\u00e1t a fejleszt\u0151k megakad\u00e1lyozt\u00e1k, miel\u0151tt a t\u00e1mad\u00f3k eljutottak volna a kulcsfontoss\u00e1g\u00fa t\u00e1rol\u00f3hoz. RetroArch<\/a><\/noindex>. <\/p>\n

A build szerveren a t\u00e1mad\u00f3k megs\u00e9rtett\u00e9k az \u00e9jszakai \u00e9s stabil \u00e9p\u00edt\u00e9seket l\u00e9trehoz\u00f3 szolg\u00e1ltat\u00e1sokat, valamint a h\u00e1l\u00f3zati j\u00e1t\u00e9kok<\/a><\/noindex> (netplay lobby) megszervez\u00e9s\u00e9t. A szerveren v\u00e9gzett rosszindulat\u00fa tev\u00e9kenys\u00e9g a tartalom elt\u00e1vol\u00edt\u00e1s\u00e1ra korl\u00e1toz\u00f3dott. A RetroArch \u00e9s a f\u0151 csomagok f\u00e1jljainak megv\u00e1ltoztat\u00e1s\u00e1ra vagy helyettes\u00edt\u00e9s\u00e9re tett k\u00eds\u00e9rletek nem ker\u00fcltek r\u00f6gz\u00edt\u00e9sre. Jelenleg megs\u00e9r\u00fclt a Core Installer, a Core Updater \u00e9s a Netplay Lobby m\u0171k\u00f6d\u00e9se, valamint ezen komponensekhez kapcsol\u00f3d\u00f3 oldalak \u00e9s szolg\u00e1ltat\u00e1sok (Update Assets, Update Overlays, Update Shaders).<\/p>\n

A legnagyobb probl\u00e9ma, amellyel a projekt szembes\u00fclt az incidens ut\u00e1n, az automatiz\u00e1lt biztons\u00e1gi ment\u00e9si folyamat hi\u00e1nya volt. Az utols\u00f3 buildbot szerver ment\u00e9se n\u00e9h\u00e1ny h\u00f3nappal ezel\u0151tt k\u00e9sz\u00fclt. A fejleszt\u0151k magyar\u00e1zata szerint a probl\u00e9m\u00e1t a korl\u00e1tozott infrastrukt\u00fara fenntart\u00e1si k\u00f6lts\u00e9gvet\u00e9s hi\u00e1nya okozta az automatiz\u00e1lt biztons\u00e1gi ment\u00e9si rendszer finansz\u00edroz\u00e1s\u00e1ra. A fejleszt\u0151k nem k\u00edv\u00e1nj\u00e1k helyre\u00e1ll\u00edtani a r\u00e9gi szervert, hanem \u00faj szerver ind\u00edt\u00e1s\u00e1t tervezik, amely m\u00e1r a tervek k\u00f6z\u00f6tt szerepelt. Ebben az esetben az alapvet\u0151 rendszerek, mint p\u00e9ld\u00e1ul a Linux, Windows \u00e9s Android sz\u00e1m\u00e1ra a build-ek azonnal elindulnak, de a speci\u00e1lis rendszerekhez, mint a videoj\u00e1t\u00e9k konzolok \u00e9s a r\u00e9gi MSVC build-ek helyre\u00e1ll\u00edt\u00e1s\u00e1hoz id\u0151 sz\u00fcks\u00e9ges.<\/p>\n

A GitHub request is expected to help restore the contents of the cleared repositories and identify the attacker. It is currently known only that the hack was carried out from the IP address 54.167.104.253, meaning the attacker likely used a compromised virtual server on AWS as an intermediary. No information is provided about the penetration method.<\/p>\n

<\/a><\/noindex><\/p>\n

Forr\u00e1s: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e Libretro, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0435\u0435\u0441\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u044d\u043c\u0443\u043b\u044f\u0442\u043e\u0440\u0430 \u0438\u0433\u0440\u043e\u0432\u044b\u0445 \u043a\u043e\u043d\u0441\u043e\u043b\u0435\u0439 RetroArch \u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0438\u0433\u0440\u043e\u0432\u044b\u0445 \u043a\u043e\u043d\u0441\u043e\u043b\u0435\u0439 Lakka, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u043e \u043e \u0432\u0437\u043b\u043e\u043c\u0435 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0438 \u0432\u0430\u043d\u0434\u0430\u043b\u0438\u0437\u043c\u0435 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 (buildbot) \u0438 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c \u043d\u0430 GitHub. \u041d\u0430 GitHub \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a\u043e \u0432\u0441\u0435\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 Libretro, \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0441\u044c \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u043e\u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0430. […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-91711","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Hack of the build server and compromise of Libretro community repositories developing RetroArch | ProHoster","description":"The Libretro community, which is engaged in the development of the RetroArch game console emulator and a distribution for creation.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/vzlom-sborochnogo-servera-i-komprometacziya-repozitoriev-soobshhestva-libretro-razvivayushhego-retroarch","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u0437\u043b\u043e\u043c \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0430 Libretro, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e RetroArch | ProHoster","og:description":"\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e Libretro, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0435\u0435\u0441\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u044d\u043c\u0443\u043b\u044f\u0442\u043e\u0440\u0430 \u0438\u0433\u0440\u043e\u0432\u044b\u0445 \u043a\u043e\u043d\u0441\u043e\u043b\u0435\u0439 RetroArch \u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/vzlom-sborochnogo-servera-i-komprometacziya-repozitoriev-soobshhestva-libretro-razvivayushhego-retroarch","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-17T11:42:10+00:00","article:modified_time":"2020-08-17T11:42:10+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"91711","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:22:23","updated":"2022-10-05 21:45:33","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/91711","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=91711"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/91711\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=91711"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=91711"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=91711"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}