dockerhub anadula

Maola angapo apitawo, ena ogwiritsa ntchito DockerHub adatumizidwa maimelo ndi izi:

"Lachinayi, Epulo 25, 2019, tidapeza mwayi wosaloledwa wogwiritsa ntchito imodzi mwama database a DockerHub, omwe amasunga zina mwazinthu zomwe si zandalama. Titazindikira, nthawi yomweyo tinachita zonse zofunika kuti titeteze deta ya ogwiritsa ntchito.

Ndipo tsopano tikufuna kugawana zambiri zomwe tidapeza pakufufuza, kuphatikiza maakaunti a DockerHub omwe adakhudzidwa ndi zomwe eni ake akuyenera kuchita tsopano.

Nazi zomwe takwanitsa kuzipeza:

Munthawi yaifupi yofikira mopanda chilolezo ku nkhokwe ya DockerHub, zinsinsi zamaakaunti pafupifupi 190 (osakwana 000% a ogwiritsa ntchito) zitha kuwululidwa. Detayi imaphatikizapo ma usernames ndi ma hashes achinsinsi a ochepa omwe ali pamwambawa, komanso zizindikiro za GitHub ndi BitBucket zomwe zimagwiritsidwa ntchito popanga chidebe chokhazikika.

Zoyenera kuchita tsopano:

- Tikupempha ogwiritsa ntchito kusintha mapasiwedi a DockerHub ndi maakaunti ena aliwonse pogwiritsa ntchito mawu achinsinsi omwewo.

- Ogwiritsa ntchito zomanga zokha omwe mwina akhudzidwa ndi izi asinthidwanso makiyi olowera. Timawapemphanso kuti ayang'ane nkhokwe zawo kuti awonetsere zochitika zilizonse zokayikitsa zaposachedwa.

- Kuti mudziwe momwe mungafufuzire zokayikitsa pa akaunti yanu ya GitHub ndi BitBucket m'maola 24 apitawa, tsatirani maulalo help.github.com/en/articles/reviewing-your-security-log и bitbucket.org/blog/new-audit-logs-give-you-the-who-what-when-and-where

- Izi zitha kukhudza zomanga zanu zapano kuchokera ku ntchito yathu yomanga magalimoto. Mungafunikenso kumasula ndikugwirizanitsanso akaunti yanu ya GitHub ndi BitBucket. Izi zalembedwa mwatsatanetsatane apa. docs.docker.com/docker-hub/builds/link-source

Ifenso tidzakonza njira zathu zachitetezo ndikuwunikanso mfundo zathu. Takhazikitsanso ma metric owonjezera kuti azitsatira zomwe zingachitike m'tsogolo mophwanya malamulo.

Tikufufuzabe zomwe zidachitika ndipo tikudziwitsani zambiri zikapezeka."

Monga mwa nthawi zonse, timayang'ana makalata athu, maakaunti athu muzinthu zomwe zawonetsedwa, ndikupanganso mawu achinsinsi. Tisintha positiyi pomwe zatsopano zikupezeka.

Ogwiritsa ntchito olembetsedwa okha ndi omwe angatenge nawo gawo pa kafukufukuyu. Lowani muakauntichonde.

Kodi mwalandira kalata yofanana ndi imeneyi?

• kuti

• No

• Ndilibe akaunti ya DockerHub

Ogwiritsa ntchito 26 adavota. Ogwiritsa 2 adakana.

Source: www.habr.com