{"id":91711,"date":"2020-08-17T13:42:10","date_gmt":"2020-08-17T11:42:10","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vzlom-sborochnogo-servera-i-komprometacziya-repozitoriev-soobshhestva-libretro-razvivayushhego-retroarch"},"modified":"2020-08-17T13:42:10","modified_gmt":"2020-08-17T11:42:10","slug":"vzlom-sborochnogo-servera-i-komprometacziya-repozitoriev-soobshhestva-libretro-razvivayushhego-retroarch","status":"publish","type":"post","link":"https:\/\/prohoster.info\/nl\/blog\/news\/vzlom-sborochnogo-servera-i-komprometacziya-repozitoriev-soobshhestva-libretro-razvivayushhego-retroarch","title":{"rendered":"De hack van de buildserver en de compromittering van de repositories van de Libretro-community, die RetroArch ontwikkelt.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>De Libretro-gemeenschap die verantwoordelijk is voor de ontwikkeling van de emulator voor gameconsoles <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=53522\">RetroArch<\/a><\/noindex> en de distributie voor het cre\u00ebren van gameconsoles <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51519\">Lakka<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/www.libretro.com\/index.php\/hacker-vandalised-our-buildbot-and-github-organization\/\">waarschuwde<\/a><\/noindex> voor een inbraak in de infrastructuurelementen van het project en vandalisme in de repositories. Kwaadwillenden wisten toegang te krijgen tot de buildserver (buildbot) en de repositories op GitHub.<\/p>\n<p>Op GitHub hebben de kwaadwillenden toegang gekregen tot alle <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/libretro\">repositories<\/a><\/noindex> de organisaties Libretro, door gebruik te maken van een account van een van de vertrouwde deelnemers aan het project. De activiteit van de aanvallers was beperkt tot vandalisme \u2014 ze probeerden de inhoud van de repositories te wissen door een lege initi\u00eble commit te plaatsen. Tijdens de aanval werden alle repositories gewist die op drie van de negen pagina's met lijsten van Libretro-repositories op Github stonden. Gelukkig werd de daad van vandalisme door de ontwikkelaars geblokkeerd voordat de aanvallers de sleutelrepository konden bereiken. <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/libretro\/RetroArch\">RetroArch<\/a><\/noindex>. <\/p>\n<p>Op de buildserver werden de services die verantwoordelijk zijn voor het maken van nachtelijke en stabiele builds, evenals voor het organiseren van  <noindex><a rel=\"nofollow\" href=\"http:\/\/lobby.libretro.com\/\">netwerkspellen<\/a><\/noindex> (netplay lobby), beschadigd door de aanvallers. De kwaadaardige activiteit op de server was beperkt tot het verwijderen van inhoud. Er zijn geen pogingen geregistreerd om bestanden te vervangen of wijzigingen aan te brengen in de RetroArch-bouw en de belangrijkste pakketten. Op dit moment werkt de Core Installer, Core Updater en Netplay Lobby niet, evenals gerelateerde websites en diensten (Update Assets, Update Overlays, Update Shaders).<\/p>\n<p>Het grootste probleem waarmee het project na het incident werd geconfronteerd, was het gebrek aan een geautomatiseerd back-upproces. De laatste back-up van de buildbot-server werd enkele maanden geleden gemaakt. De problemen werden door de ontwikkelaars toegeschreven aan een gebrek aan geld voor een geautomatiseerd back-upsysteem, gezien het beperkte budget voor het onderhoud van de infrastructuur. De ontwikkelaars zijn van plan de oude server niet te herstellen, maar een nieuwe te lanceren, wat al op de planning stond. In dit geval zullen de builds voor primaire systemen zoals Linux, Windows en Android direct worden opgestart, maar het zal enige tijd duren om de builds voor gespecialiseerde systemen, zoals gameconsoles en oude MSVC-builds, te herstellen.<\/p>\n<p>Het wordt verondersteld dat GitHub kan helpen bij het herstel van de inhoud van gewiste repositories en het identificeren van de aanvaller, aan wie een verzoek is gestuurd. Tot nu toe is alleen bekend dat de hack heeft plaatsgevonden vanaf IP-adres 54.167.104.253, wat betekent dat de aanvaller waarschijnlijk een gehackte virtuele server in AWS als tussenpunt heeft gebruikt. Informatie over de penetratiemethode wordt niet verstrekt.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Bron: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=53558\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e Libretro, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0435\u0435\u0441\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u044d\u043c\u0443\u043b\u044f\u0442\u043e\u0440\u0430 \u0438\u0433\u0440\u043e\u0432\u044b\u0445 \u043a\u043e\u043d\u0441\u043e\u043b\u0435\u0439 RetroArch \u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0438\u0433\u0440\u043e\u0432\u044b\u0445 \u043a\u043e\u043d\u0441\u043e\u043b\u0435\u0439 Lakka, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u043e \u043e \u0432\u0437\u043b\u043e\u043c\u0435 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0438 \u0432\u0430\u043d\u0434\u0430\u043b\u0438\u0437\u043c\u0435 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 (buildbot) \u0438 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c \u043d\u0430 GitHub. \u041d\u0430 GitHub \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a\u043e \u0432\u0441\u0435\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 Libretro, \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0441\u044c \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u043e\u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0430. [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-91711","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e Libretro, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0435\u0435\u0441\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u044d\u043c\u0443\u043b\u044f\u0442\u043e\u0440\u0430 \u0438\u0433\u0440\u043e\u0432\u044b\u0445 \u043a\u043e\u043d\u0441\u043e\u043b\u0435\u0439 RetroArch \u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/nl\/blog\/news\/vzlom-sborochnogo-servera-i-komprometacziya-repozitoriev-soobshhestva-libretro-razvivayushhego-retroarch\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"nl_NL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u0437\u043b\u043e\u043c \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0430 Libretro, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e RetroArch | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e Libretro, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0435\u0435\u0441\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u044d\u043c\u0443\u043b\u044f\u0442\u043e\u0440\u0430 \u0438\u0433\u0440\u043e\u0432\u044b\u0445 \u043a\u043e\u043d\u0441\u043e\u043b\u0435\u0439 RetroArch \u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/nl\/blog\/news\/vzlom-sborochnogo-servera-i-komprometacziya-repozitoriev-soobshhestva-libretro-razvivayushhego-retroarch\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-08-17T11:42:10+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-08-17T11:42:10+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Hack van de buildserver en compromittering van de repositories van de Libretro-gemeenschap die RetroArch ontwikkelt | ProHoster","description":"De Libretro-gemeenschap, die zich richt op de ontwikkeling van de RetroArch-gameconsole-emulator en de bijbehorende distributie.","canonical_url":"https:\/\/prohoster.info\/nl\/blog\/news\/vzlom-sborochnogo-servera-i-komprometacziya-repozitoriev-soobshhestva-libretro-razvivayushhego-retroarch","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"nl_NL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u0437\u043b\u043e\u043c \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0430 Libretro, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e RetroArch | ProHoster","og:description":"\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e Libretro, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0435\u0435\u0441\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u044d\u043c\u0443\u043b\u044f\u0442\u043e\u0440\u0430 \u0438\u0433\u0440\u043e\u0432\u044b\u0445 \u043a\u043e\u043d\u0441\u043e\u043b\u0435\u0439 RetroArch \u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f.","og:url":"https:\/\/prohoster.info\/nl\/blog\/news\/vzlom-sborochnogo-servera-i-komprometacziya-repozitoriev-soobshhestva-libretro-razvivayushhego-retroarch","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-17T11:42:10+00:00","article:modified_time":"2020-08-17T11:42:10+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"91711","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:22:23","updated":"2022-10-05 21:45:33","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts\/91711","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/comments?post=91711"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts\/91711\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/media?parent=91711"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/categories?post=91711"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/tags?post=91711"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}