{"id":91711,"date":"2020-08-17T13:42:10","date_gmt":"2020-08-17T11:42:10","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vzlom-sborochnogo-servera-i-komprometacziya-repozitoriev-soobshhestva-libretro-razvivayushhego-retroarch"},"modified":"2020-08-17T13:42:10","modified_gmt":"2020-08-17T11:42:10","slug":"vzlom-sborochnogo-servera-i-komprometacziya-repozitoriev-soobshhestva-libretro-razvivayushhego-retroarch","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/news\/vzlom-sborochnogo-servera-i-komprometacziya-repozitoriev-soobshhestva-libretro-razvivayushhego-retroarch","title":{"rendered":"Compromissione del server di build e dei repository della comunit\u00e0 Libretro, sviluppatrice di RetroArch","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>La comunit\u00e0 Libretro, che si occupa dello sviluppo di emulatori di console di gioco <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=53522\">RetroArch<\/a><\/noindex> e di una distribuzione per la creazione di console di gioco <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51519\">Lakka<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.libretro.com\/index.php\/hacker-vandalised-our-buildbot-and-github-organization\/\">ha avvisato<\/a><\/noindex> su un attacco agli elementi infrastrutturali del progetto e sul vandalismo nei repository. Gli aggressori sono riusciti ad accedere al server di build (buildbot) e ai repository su GitHub.<\/p>\n<p>Su GitHub, gli aggressori hanno avuto accesso a tutti <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/libretro\">i repository<\/a><\/noindex> Le organizzazioni Libretro, utilizzando l'account di uno dei membri fidati del progetto. L'attivit\u00e0 degli aggressori si \u00e8 limitata al vandalismo \u2014 hanno cercato di cancellare il contenuto dei repository inserendo un commit iniziale vuoto. Durante l'attacco, sono stati svuotati tutti i repository presenti su tre delle nove pagine con l'elenco dei repository di Libretro su Github. Fortunatamente, l'atto di vandalismo \u00e8 stato bloccato dagli sviluppatori prima che gli aggressori raggiungessero il repository chiave. <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/libretro\/RetroArch\">RetroArch<\/a><\/noindex>. <\/p>\n<p>Sulla server di build, i servizi che generano le build notturne e stabili sono stati danneggiati, cos\u00ec come quelli responsabili dell'organizzazione  <noindex><a rel=\"nofollow\" href=\"http:\/\/lobby.libretro.com\/\">dei giochi in rete<\/a><\/noindex> (netplay lobby). L'attivit\u00e0 malevola sul server si \u00e8 limitata alla cancellazione dei contenuti. Non sono state registrate tentativi di sostituzione di file o modifiche alle build di RetroArch e ai principali pacchetti. Attualmente, il funzionamento di Core Installer, Core Updater e Netplay Lobby \u00e8 compromesso, cos\u00ec come i siti e i servizi ad essi correlati (Update Assets, Update Overlays, Update Shaders).<\/p>\n<p>Il problema principale con cui il progetto si \u00e8 trovato a fronteggiare dopo l'incidente \u00e8 stata l'assenza di un processo automatizzato di backup. L'ultima copia di backup del server buildbot \u00e8 stata eseguita diversi mesi fa. Gli sviluppatori hanno spiegato i problemi con la mancanza di fondi per un sistema automatizzato di backup, a causa di un budget limitato per mantenere l'infrastruttura. Gli sviluppatori intendono non recuperare il vecchio server, ma avviare uno nuovo, la cui creazione era nei piani. In questo caso, le build per i sistemi primari, come Linux, Windows e Android, saranno avviate immediatamente, ma ci vorr\u00e0 tempo per ripristinare le build per sistemi specializzati, come console di gioco e vecchie build MSVC.<\/p>\n<p>Si prevede che il ripristino del contenuto dei repository ripuliti e l'identificazione dell'attaccante sar\u00e0 supportato da GitHub, a cui \u00e8 stata inviata la richiesta corrispondente. Fino ad ora, si sa solo che l'attacco \u00e8 stato effettuato dall'indirizzo IP 54.167.104.253, ovvero \u00e8 probabile che l'attaccante abbia utilizzato un server virtuale compromesso in AWS come punto intermedio. Non vengono fornite informazioni sul metodo di infiltrazione.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Fonte: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=53558\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e Libretro, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0435\u0435\u0441\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u044d\u043c\u0443\u043b\u044f\u0442\u043e\u0440\u0430 \u0438\u0433\u0440\u043e\u0432\u044b\u0445 \u043a\u043e\u043d\u0441\u043e\u043b\u0435\u0439 RetroArch \u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0438\u0433\u0440\u043e\u0432\u044b\u0445 \u043a\u043e\u043d\u0441\u043e\u043b\u0435\u0439 Lakka, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u043e \u043e \u0432\u0437\u043b\u043e\u043c\u0435 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0438 \u0432\u0430\u043d\u0434\u0430\u043b\u0438\u0437\u043c\u0435 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 (buildbot) \u0438 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c \u043d\u0430 GitHub. \u041d\u0430 GitHub \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a\u043e \u0432\u0441\u0435\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 Libretro, \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0441\u044c \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u043e\u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0430. [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-91711","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e Libretro, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0435\u0435\u0441\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u044d\u043c\u0443\u043b\u044f\u0442\u043e\u0440\u0430 \u0438\u0433\u0440\u043e\u0432\u044b\u0445 \u043a\u043e\u043d\u0441\u043e\u043b\u0435\u0439 RetroArch \u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/it\/blog\/news\/vzlom-sborochnogo-servera-i-komprometacziya-repozitoriev-soobshhestva-libretro-razvivayushhego-retroarch\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"it_IT\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u0437\u043b\u043e\u043c \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0430 Libretro, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e RetroArch | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e Libretro, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0435\u0435\u0441\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u044d\u043c\u0443\u043b\u044f\u0442\u043e\u0440\u0430 \u0438\u0433\u0440\u043e\u0432\u044b\u0445 \u043a\u043e\u043d\u0441\u043e\u043b\u0435\u0439 RetroArch \u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/it\/blog\/news\/vzlom-sborochnogo-servera-i-komprometacziya-repozitoriev-soobshhestva-libretro-razvivayushhego-retroarch\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-08-17T11:42:10+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-08-17T11:42:10+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Compromissione del server di build e dei repository della comunit\u00e0 Libretro, che sviluppa RetroArch | ProHoster","description":"La comunit\u00e0 Libretro, impegnata nello sviluppo dell'emulatore di console per videogiochi RetroArch e della distribuzione per la creazione.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/news\/vzlom-sborochnogo-servera-i-komprometacziya-repozitoriev-soobshhestva-libretro-razvivayushhego-retroarch","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u0437\u043b\u043e\u043c \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0430 Libretro, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e RetroArch | ProHoster","og:description":"\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e Libretro, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0435\u0435\u0441\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u044d\u043c\u0443\u043b\u044f\u0442\u043e\u0440\u0430 \u0438\u0433\u0440\u043e\u0432\u044b\u0445 \u043a\u043e\u043d\u0441\u043e\u043b\u0435\u0439 RetroArch \u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f.","og:url":"https:\/\/prohoster.info\/it\/blog\/news\/vzlom-sborochnogo-servera-i-komprometacziya-repozitoriev-soobshhestva-libretro-razvivayushhego-retroarch","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-17T11:42:10+00:00","article:modified_time":"2020-08-17T11:42:10+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"91711","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:22:23","updated":"2022-10-05 21:45:33","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/91711","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=91711"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/91711\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=91711"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=91711"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=91711"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}