{"id":30608,"date":"2019-10-31T21:36:28","date_gmt":"2019-10-31T18:36:28","guid":{"rendered":"https:\/\/prohoster.info\/blog\/inzhenery-asus-mesyatsami-derzhali-otkrytymi-vnutrennie-paroli-na-github\/"},"modified":"2019-10-31T21:36:28","modified_gmt":"2019-10-31T18:36:28","slug":"inzhenery-asus-mesyatsami-derzhali-otkrytymi-vnutrennie-paroli-na-github","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/inzhenery-asus-mesyatsami-derzhali-otkrytymi-vnutrennie-paroli-na-github","title":{"rendered":"Gli ingegneri di ASUS hanno mantenuto aperte per mesi le credenziali interne su GitHub","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Per il team di sicurezza ASUS, marzo non \u00e8 stato un mese fortunato. Sono emerse nuove accuse di gravi violazioni della sicurezza da parte di dipendenti dell'azienda, questa volta coinvolgendo GitHub. La notizia \u00e8 arrivata dopo lo scandalo relativo alla diffusione di vulnerabilit\u00e0 tramite i server ufficiali di Live Update.<\/p>\n

Un analista di sicurezza di SchizoDuckie ha contattato Techcrunch per condividere i dettagli di un'altra falla di sicurezza che ha scoperto nel firewall di ASUS. Secondo lui, l'azienda ha pubblicato involontariamente le proprie password dei dipendenti nei repository su GitHub. Di conseguenza, ha avuto accesso all'email interna dell'azienda, dove i dipendenti scambiavano link a versioni precedenti di applicazioni, driver e strumenti.<\/p>\n

\"Gli<\/p>\n

L'account apparteneva a un ingegnere, che si dice lo abbia lasciato aperto per almeno un anno. SchizoDuckie ha anche riferito di aver trovato password interne dell'azienda pubblicate su GitHub in account di altri due ingegneri del produttore taiwanese. La fonte ha condiviso con i giornalisti screenshot che confermano le sue conclusioni, anche se le immagini stesse non sono state pubblicate.<\/p>\n

Vale la pena notare che si tratta di una vulnerabilit\u00e0 completamente diversa rispetto all'attacco precedente, in cui i hacker erano riusciti ad accedere ai server di ASUS e a modificare il software ufficiale, integrando un backdoor (dopodich\u00e9 ASUS ha aggiunto un certificato di autenticit\u00e0 e ha iniziato a distribuirlo tramite i canali ufficiali). Ma in questo caso \u00e8 stata scoperta una falla di sicurezza che potrebbe mettere l'azienda a rischio di attacchi simili.<\/p>\n

<\/center>
\n\"Gli<\/p>\n

\u00abLe aziende non hanno la minima idea di cosa stiano facendo i loro programmatori con il loro codice su GitHub\u00bb, ha detto SchizoDuckie. ASUS ha dichiarato di non poter verificare le affermazioni dello specialista, ma sta controllando attivamente tutti i sistemi per eliminare le minacce note dai loro server<\/a> e software ausiliari e per assicurarsi che non ci siano fughe di dati.<\/p>\n

Problemi di sicurezza simili non sono unici per ASUS; spesso anche aziende molto grandi si trovano in situazioni analoghe a causa della negligenza dei dipendenti. Tutto ci\u00f2 mette in evidenza quanto sia complessa la questione della sicurezza nelle moderne infrastrutture e quanto sia facile che si verifichino fughe di dati.<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
\n
Fonte: 3dnews.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0423 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 ASUS \u043c\u0430\u0440\u0442 \u044f\u0432\u043d\u043e \u043d\u0435 \u0437\u0430\u0434\u0430\u043b\u0441\u044f. \u041f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u043d\u043e\u0432\u044b\u0435 \u043e\u0431\u0432\u0438\u043d\u0435\u043d\u0438\u044f \u0432 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0445 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0441 \u0443\u0447\u0430\u0441\u0442\u0438\u0435\u043c GitHub. \u041d\u043e\u0432\u043e\u0441\u0442\u044c \u043f\u043e\u0441\u0442\u0443\u043f\u0438\u043b\u0430 \u0432\u0441\u043b\u0435\u0434 \u0437\u0430 \u0441\u043a\u0430\u043d\u0434\u0430\u043b\u043e\u043c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u043c \u0441 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0447\u0435\u0440\u0435\u0437 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Live Update. \u0410\u043d\u0430\u043b\u0438\u0442\u0438\u043a \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 SchizoDuckie \u0441\u0432\u044f\u0437\u0430\u043b\u0441\u044f \u0441 Techcrunch, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u043e \u0435\u0449\u0451 \u043e\u0434\u043d\u043e\u0439 \u0431\u0440\u0435\u0448\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":22602,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-30608","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Gli ingegneri ASUS hanno tenuto aperte per mesi le password interne su GitHub | ProHoster","description":"Il mese di marzo non \u00e8 iniziato bene per il team di sicurezza di ASUS. Sono emerse nuove accuse di gravi violazioni della sicurezza da parte di dipendenti dell'azienda, questa volta coinvolgendo GitHub. La notizia arriva dopo lo scandalo riguardante la diffusione di vulnerabilit\u00e0 attraverso i server ufficiali di Live Update. Un analista di sicurezza di SchizoDuckie ha contattato Techcrunch per condividere i dettagli di un'altra falla.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/inzhenery-asus-mesyatsami-derzhali-otkrytymi-vnutrennie-paroli-na-github","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0418\u043d\u0436\u0435\u043d\u0435\u0440\u044b ASUS \u043c\u0435\u0441\u044f\u0446\u0430\u043c\u0438 \u0434\u0435\u0440\u0436\u0430\u043b\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c\u0438 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 \u043f\u0430\u0440\u043e\u043b\u0438 \u043d\u0430 GitHub | ProHoster","og:description":"\u0423 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 ASUS \u043c\u0430\u0440\u0442 \u044f\u0432\u043d\u043e \u043d\u0435 \u0437\u0430\u0434\u0430\u043b\u0441\u044f. \u041f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u043d\u043e\u0432\u044b\u0435 \u043e\u0431\u0432\u0438\u043d\u0435\u043d\u0438\u044f \u0432 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u044b\u0445 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044f\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0441\u043e\u0442\u0440\u0443\u0434\u043d\u0438\u043a\u043e\u0432 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u043d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0441 \u0443\u0447\u0430\u0441\u0442\u0438\u0435\u043c GitHub. \u041d\u043e\u0432\u043e\u0441\u0442\u044c \u043f\u043e\u0441\u0442\u0443\u043f\u0438\u043b\u0430 \u0432\u0441\u043b\u0435\u0434 \u0437\u0430 \u0441\u043a\u0430\u043d\u0434\u0430\u043b\u043e\u043c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u043c \u0441 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0447\u0435\u0440\u0435\u0437 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Live Update. \u0410\u043d\u0430\u043b\u0438\u0442\u0438\u043a \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 SchizoDuckie \u0441\u0432\u044f\u0437\u0430\u043b\u0441\u044f \u0441 Techcrunch, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u044f\u043c\u0438 \u043e \u0435\u0449\u0451 \u043e\u0434\u043d\u043e\u0439 \u0431\u0440\u0435\u0448\u0438","og:url":"https:\/\/prohoster.info\/it\/blog\/novosti-interneta\/inzhenery-asus-mesyatsami-derzhali-otkrytymi-vnutrennie-paroli-na-github","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:36:28+00:00","article:modified_time":"2019-10-31T18:36:28+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"30608","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 16:57:10","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:32:35","updated":"2026-02-09 16:57:10","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/30608","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=30608"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/30608\/revisions"}],"predecessor-version":[{"id":158532,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/30608\/revisions\/158532"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media\/22602"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=30608"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=30608"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=30608"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}