{"id":107510,"date":"2023-03-25T00:48:09","date_gmt":"2023-03-24T22:48:09","guid":{"rendered":"https:\/\/prohoster.info\/?p=107510"},"modified":"2023-03-27T19:30:41","modified_gmt":"2023-03-27T17:30:41","slug":"github-pomenyal-zakrytyj-rsa-klyuch-dlya-ssh-posle-ego-popadaniya-v-publichnyj-repozitorij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/github-pomenyal-zakrytyj-rsa-klyuch-dlya-ssh-posle-ego-popadaniya-v-publichnyj-repozitorij","title":{"rendered":"GitHub ha cambiato la chiave RSA riservata per SSH dopo che \u00e8 stata pubblicata in un repository pubblico","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

GitHub ha segnalato un incidente in cui una chiave RSA privata, utilizzata come chiave host per l'accesso ai repository GitHub tramite SSH, \u00e8 stata erroneamente pubblicata in un repository accessibile al pubblico. La fuga ha riguardato solo la chiave RSA, mentre le chiavi SSH ECDSA ed Ed25519 rimangono al sicuro. La chiave SSH host pubblicata non consente l'accesso all'infrastruttura di GitHub o ai dati degli utenti, ma pu\u00f2 essere utilizzata per intercettare le operazioni Git eseguite tramite SSH. <\/p>\n

Per escludere possibili intercettazioni delle sessioni SSH a GitHub nel caso in cui la chiave RSA dovesse cadere nelle mani di malintenzionati, GitHub ha avviato un processo di sostituzione della chiave. Gli utenti devono rimuovere la vecchia chiave pubblica di GitHub (ssh-keygen -R github.com) oppure sostituirla manualmente nel file ~\/.ssh\/known_hosts, il che potrebbe interrompere il funzionamento degli script eseguiti automaticamente.
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

GitHub \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e\u0431 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0435, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0439 RSA-\u043a\u043b\u044e\u0447, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0445\u043e\u0441\u0442\u043e\u0432\u043e\u0433\u043e \u043a\u043b\u044e\u0447\u0430 \u043f\u0440\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043a \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c GitHub \u043f\u043e SSH, \u043f\u043e \u043e\u0448\u0438\u0431\u043a\u0435 \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438. \u0423\u0442\u0435\u0447\u043a\u0430 \u043a\u043e\u0441\u043d\u0443\u043b\u0430\u0441\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u043a\u043b\u044e\u0447\u0430 RSA, \u0445\u043e\u0441\u0442\u043e\u0432\u044b\u0435 SSH-\u043a\u043b\u044e\u0447\u0438 ECDSA \u0438 Ed25519 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u043e\u0441\u0442\u0430\u0432\u0430\u0442\u044c\u0441\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c\u0438. \u041f\u043e\u043f\u0430\u0432\u0448\u0438\u0439 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0445\u043e\u0441\u0442\u043e\u0432\u044b\u0439 SSH-\u043a\u043b\u044e\u0447 \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 GitHub […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-107510","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47GitHub ha sostituito la chiave RSA privata per SSH dopo che \u00e8 stata pubblicata in un repository pubblico | ProHoster","description":"GitHub ha segnalato un incidente in cui una chiave RSA privata, utilizzata come chiave host per l'accesso ai repository GitHub tramite SSH, \u00e8 stata erroneamente pubblicata in un repository accessibile al pubblico. La fuga ha riguardato solo la chiave RSA, mentre le chiavi SSH ECDSA ed Ed25519 rimangono al sicuro. La chiave SSH host pubblicata non consente l'accesso all'infrastruttura di GitHub.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/github-pomenyal-zakrytyj-rsa-klyuch-dlya-ssh-posle-ego-popadaniya-v-publichnyj-repozitorij","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47GitHub \u043f\u043e\u043c\u0435\u043d\u044f\u043b \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0439 RSA-\u043a\u043b\u044e\u0447 \u0434\u043b\u044f SSH \u043f\u043e\u0441\u043b\u0435 \u0435\u0433\u043e \u043f\u043e\u043f\u0430\u0434\u0430\u043d\u0438\u044f \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 | ProHoster","og:description":"GitHub \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e\u0431 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0435, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0439 RSA-\u043a\u043b\u044e\u0447, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0445\u043e\u0441\u0442\u043e\u0432\u043e\u0433\u043e \u043a\u043b\u044e\u0447\u0430 \u043f\u0440\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043a \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c GitHub \u043f\u043e SSH, \u043f\u043e \u043e\u0448\u0438\u0431\u043a\u0435 \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438. \u0423\u0442\u0435\u0447\u043a\u0430 \u043a\u043e\u0441\u043d\u0443\u043b\u0430\u0441\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u043a\u043b\u044e\u0447\u0430 RSA, \u0445\u043e\u0441\u0442\u043e\u0432\u044b\u0435 SSH-\u043a\u043b\u044e\u0447\u0438 ECDSA \u0438 Ed25519 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u043e\u0441\u0442\u0430\u0432\u0430\u0442\u044c\u0441\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c\u0438. \u041f\u043e\u043f\u0430\u0432\u0448\u0438\u0439 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0445\u043e\u0441\u0442\u043e\u0432\u044b\u0439 SSH-\u043a\u043b\u044e\u0447 \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 GitHub","og:url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/github-pomenyal-zakrytyj-rsa-klyuch-dlya-ssh-posle-ego-popadaniya-v-publichnyj-repozitorij","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-03-24T22:48:09+00:00","article:modified_time":"2023-03-27T17:30:41+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/107510","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=107510"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/107510\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=107510"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=107510"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=107510"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}