{"id":31440,"date":"2019-10-31T21:41:16","date_gmt":"2019-10-31T18:41:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/vzlom-infrastruktury-matrix-org\/"},"modified":"2019-10-31T21:41:16","modified_gmt":"2019-10-31T18:41:16","slug":"vzlom-infrastruktury-matrix-org","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/news\/vzlom-infrastruktury-matrix-org","title":{"rendered":"Matrix.org infrastrukt\u016bras p\u0101rk\u0101p\u0161ana","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Matrix decentraliz\u0113t\u0101 zi\u0146ojumapmai\u0146as platformas izstr\u0101d\u0101t\u0101ji pazi\u0146oja par steidzamu Matrix.org un Riot.im (galvenais Matrix klients) serveru izsl\u0113g\u0161anu, rea\u0123\u0113jot uz projekta infrastrukt\u016bras uzlau\u0161anu. Pirmais izsl\u0113g\u0161anas gad\u012bjums notika vakar vakar\u0101, p\u0113c kura serveru darb\u012bba tika atjaunota, un lietotnes tika p\u0101rveidotas no standarta avota kodiem. Tom\u0113r pirms da\u017e\u0101m min\u016bt\u0113m serveri tika kompromit\u0113ti otro reizi. <\/p>\n

Uzbruc\u0113ji public\u0113ja projekta galvenaj\u0101 lap\u0101 detaliz\u0113tu inform\u0101ciju par servera konfigur\u0101ciju<\/a> un dati par to, ka vi\u0146iem ir datu b\u0101ze ar gandr\u012bz pieciem ar pusmiljoniem Matrix lietot\u0101ju hash. K\u0101 pier\u0101d\u012bjums publiskaj\u0101 pieejam\u012bb\u0101 tika ievietots Matrix projekta vad\u012bt\u0101ja parole hash. Modific\u0113tais vietnes kods ir pieejams uzbruc\u0113ju GitHub repozitorij\u0101 (nevis ofici\u0101laj\u0101 matrix repozitorij\u0101). S\u012bk\u0101ka inform\u0101cija par otro uzlau\u0161anu v\u0113l nav pieejama.<\/p>\n

P\u0113c pirm\u0101 uzlau\u0161anas Matrix komanda public\u0113ja zi\u0146ojumu, kur\u0101 nor\u0101d\u012bts, ka uzlau\u0161ana tika veikta caur neaizsarg\u0101t\u012bbu neaktualiz\u0113t\u0101 Jenkins nep\u0101rtraukt\u0101s integr\u0101cijas sist\u0113m\u0101. P\u0113c piek\u013cuves ieg\u016b\u0161anas serverim<\/a> no Jenkins uzbruc\u0113ji p\u0101r\u0146\u0113ma SSH atsl\u0113gas un ieguva piek\u013cuvi citiem infrastrukt\u016bras serveriem. Tika pazi\u0146ots, ka kods un pakotnes netika boj\u0101tas uzbrukuma rezult\u0101t\u0101. Uzbrukums ar\u012b neaizsk\u0101ra Modular.im serverus. Tom\u0113r uzbruc\u0113ji ieguva piek\u013cuvi galvenajai datu b\u0101zei, kur\u0101 ir ne tikai ne\u0161ifr\u0113ti zi\u0146ojumi, bet ar\u012b piek\u013cuves kodi un paroles hashi.<\/p>\n

Visiem lietot\u0101jiem tika nor\u0101d\u012bts main\u012bt paroles. Tom\u0113r paroles mai\u0146as proces\u0101 galvenaj\u0101 klient\u0101 Riot lietot\u0101ji sask\u0101r\u0101s ar probl\u0113m\u0101m, kad izzuda failu rezerves kopijas, kas nepiecie\u0161amas, lai atjaunotu \u0161ifr\u0113to saraksti, un piek\u013cuve iepriek\u0161\u0113jo zi\u0146ojumu v\u0113sturei k\u013cuva neiesp\u0113jama.<\/p>\n

Atg\u0101din\u0101m, ka decentraliz\u0113tu komunik\u0101ciju platforma Matrix tiek pasniegta k\u0101 projekts, kas izmanto atv\u0113rtos standartus un piev\u0113r\u0161 lielu uzman\u012bbu lietot\u0101ju dro\u0161\u012bbai un priv\u0101tumam. Matrix nodro\u0161ina gal\u0113jo (end-to-end) \u0161ifr\u0113\u0161anu, pamatojoties uz p\u0101rbaud\u012btu Signal algoritmu, atbalsta mekl\u0113\u0161anu un neierobe\u017eotu sarakstes v\u0113stures skat\u012b\u0161anu, var tikt izmantota failu p\u0101rs\u016bt\u012b\u0161anai, pazi\u0146ojumu nos\u016bt\u012b\u0161anai, izstr\u0101d\u0101t\u0101ja kl\u0101tb\u016btnes nov\u0113rt\u0113\u0161anai tie\u0161saist\u0113, t\u0101lru\u0146u konferences organiz\u0113\u0161anai, balss un video zvanu veik\u0161anai. T\u0101pat tiek atbalst\u012btas ar\u012b t\u0101das papla\u0161in\u0101tas iesp\u0113jas k\u0101 teksta ievades pazi\u0146ojums, las\u012b\u0161anas apstiprin\u0101jums, push pazi\u0146ojumi un mekl\u0113\u0161ana servera pus\u0113, v\u0113stures un klientu st\u0101vok\u013ca sinhroniz\u0101cija, da\u017e\u0101di identifikatori (e-pasts, t\u0101lru\u0146a numurs, Facebook konts utt.).
\n
Avots: opennet.lv<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u043b\u044f \u0434\u0435\u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 Matrix \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e\u0431 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Matrix.org \u0438 Riot.im (\u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043a\u043b\u0438\u0435\u043d\u0442 Matrix) \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441\u043e \u0432\u0437\u043b\u043e\u043c\u043e\u043c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u043f\u0440\u043e\u0435\u043a\u0442\u0430. \u041f\u0435\u0440\u0432\u043e\u0435 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0441\u043e\u0441\u0442\u043e\u044f\u043b\u043e\u0441\u044c \u0432\u0447\u0435\u0440\u0430 \u0432\u0435\u0447\u0435\u0440\u043e\u043c, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0440\u0430\u0431\u043e\u0442\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0431\u044b\u043b\u0430 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0430, \u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u043f\u0435\u0440\u0435\u0441\u043e\u0431\u0440\u0430\u043d\u044b \u0438\u0437 \u044d\u0442\u0430\u043b\u043e\u043d\u043d\u044b\u0445 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432. \u041d\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043c\u0438\u043d\u0443\u0442 \u043d\u0430\u0437\u0430\u0434 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0431\u044b\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0432\u0442\u043e\u0440\u043e\u0439 \u0440\u0430\u0437. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u043b\u0438 \u043d\u0430 \u0433\u043b\u0430\u0432\u043d\u043e\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-31440","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Infrastrukt\u016bras uzlau\u0161ana matrix.org | ProHoster","description":"Decentraliz\u0113to zi\u0146ojumapmai\u0146as platformas Matrix izstr\u0101d\u0101t\u0101ji pazi\u0146oju\u0161i par steidzamu Matrix.org un Riot.im (galvenais Matrix klients) serveru atsl\u0113g\u0161anu, rea\u0123\u0113jot uz projekta infrastrukt\u016bras uzlau\u0161anu.","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/news\/vzlom-infrastruktury-matrix-org","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u0437\u043b\u043e\u043c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b matrix.org | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u0434\u043b\u044f \u0434\u0435\u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 Matrix \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0438 \u043e\u0431 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 Matrix.org \u0438 Riot.im (\u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043a\u043b\u0438\u0435\u043d\u0442 Matrix) \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441\u043e \u0432\u0437\u043b\u043e\u043c\u043e\u043c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u043f\u0440\u043e\u0435\u043a\u0442\u0430.","og:url":"https:\/\/prohoster.info\/lv\/blog\/news\/vzlom-infrastruktury-matrix-org","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:41:16+00:00","article:modified_time":"2019-10-31T18:41:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31440","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 21:45:03","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:16:23","updated":"2026-02-09 21:45:03","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/31440","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=31440"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/31440\/revisions"}],"predecessor-version":[{"id":160129,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/31440\/revisions\/160129"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=31440"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=31440"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=31440"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}