{"id":31452,"date":"2019-10-31T21:41:20","date_gmt":"2019-10-31T18:41:20","guid":{"rendered":"https:\/\/prohoster.info\/blog\/podrobnosti-pro-vtoroj-vzlom-matrix-skomprometirovany-gpg-klyuchi-proekta\/"},"modified":"2019-10-31T21:41:20","modified_gmt":"2019-10-31T18:41:20","slug":"podrobnosti-pro-vtoroj-vzlom-matrix-skomprometirovany-gpg-klyuchi-proekta","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/news\/podrobnosti-pro-vtoroj-vzlom-matrix-skomprometirovany-gpg-klyuchi-proekta","title":{"rendered":"Szczeg\u00f3\u0142y dotycz\u0105ce drugiego w\u0142amania do Matrix. Skompromitowane klucze GPG projektu","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Opublikowano nowe szczeg\u00f3\u0142y dotycz\u0105ce w\u0142amania do infrastruktury zdecentralizowanej platformy wymiany wiadomo\u015bci Matrix, o kt\u00f3rym informowano rano. Problemowym ogniwem, przez kt\u00f3re wnikn\u0119li napastnicy, by\u0142 system ci\u0105g\u0142ej integracji Jenkins, kt\u00f3ry zosta\u0142 z\u0142amany ju\u017c 13 marca. Nast\u0119pnie na serwerze c Jenkins przechwycono przekierowany dost\u0119p SSH jednego z administrator\u00f3w, a 4 kwietnia napastnicy uzyskali dost\u0119p do innych serwer\u00f3w infrastruktury.<\/p>\n

Podczas drugiego ataku strona matrix.org zosta\u0142a przekierowana na inny serwer (matrixnotorg.github.io) poprzez zmian\u0119 ustawie\u0144 DNS, wykorzystuj\u0105c przechwycony podczas pierwszego ataku klucz do API systemu dostarczania tre\u015bci Cloudflare. Podczas odbudowy tre\u015bci serwer\u00f3w<\/a> po pierwszym w\u0142amaniu administratorzy Matrix zaktualizowali tylko nowe osobiste klucze i pomin\u0119li aktualizacj\u0119 klucza do Cloudflare. <\/p>\n

Podczas drugiego ataku serwery Matrix pozosta\u0142y nietkni\u0119te, zmiany ograniczy\u0142y si\u0119 tylko do zamiany adres\u00f3w w DNS. W przypadku, gdy u\u017cytkownik ju\u017c zmieni\u0142 has\u0142o po pierwszym ataku, nie ma potrzeby zmiany go ponownie. Ale je\u015bli has\u0142o nadal nie zosta\u0142o zmienione, nale\u017cy je jak najszybciej zaktualizowa\u0107, poniewa\u017c potwierdzono wyciek bazy z haszami hase\u0142. Aktualnie planowane jest zainicjowanie procesu wymuszonego resetowania has\u0142a przy nast\u0119pnym logowaniu.<\/p>\n

Opr\u00f3cz wycieku hase\u0142 potwierdzono r\u00f3wnie\u017c, \u017ce napastnicy zdobyli klucze GPG, stosowane do generowania podpis\u00f3w cyfrowych pakiet\u00f3w w repozytorium Debiana oraz wyda\u0144 Riot\/Web. Klucze by\u0142y chronione has\u0142em. Obecnie klucze zosta\u0142y ju\u017c uniewa\u017cnione. Klucze zosta\u0142y przechwycone 4 kwietnia, ale od tego czasu nie wydano aktualizacji Synapse, chocia\u017c wydano klienta Riot\/Web 1.0.7 (wst\u0119pne sprawdzenie wykaza\u0142o, \u017ce nie zosta\u0142 on skompromitowany). <\/p>\n

Napastnik opublikowa\u0142 szereg raport\u00f3w zawieraj\u0105cych szczeg\u00f3\u0142y ataku na GitHubie, ale zosta\u0142y one usuni\u0119te. Niemniej jednak, w archiwum raporty pozosta\u0142y.
\n
\u0179r\u00f3d\u0142o: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043d\u043e\u0432\u044b\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e \u0432\u0437\u043b\u043e\u043c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0434\u0435\u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 Matrix, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c \u0443\u0442\u0440\u043e\u043c. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u043c \u0437\u0432\u0435\u043d\u043e\u043c, \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043f\u0440\u043e\u043d\u0438\u043a\u043b\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0431\u044b\u043b\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043d\u0435\u043f\u0440\u0435\u0440\u044b\u0432\u043d\u043e\u0439 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 Jenkins, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u0430 \u0435\u0449\u0451 13 \u043c\u0430\u0440\u0442\u0430. \u0417\u0430\u0442\u0435\u043c \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 c Jenkins \u0431\u044b\u043b \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0447\u0435\u043d \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0439 SSH-\u0430\u0433\u0435\u043d\u0442\u043e\u043c \u0432\u0445\u043e\u0434 \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u0438 4 \u0430\u043f\u0440\u0435\u043b\u044f \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0440\u0443\u0433\u0438\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b. […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-31452","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Szczeg\u00f3\u0142y dotycz\u0105ce drugiego w\u0142amania do Matrix. Skompromitowane klucze GPG projektu | ProHoster","description":"Opublikowano nowe szczeg\u00f3\u0142y dotycz\u0105ce w\u0142amania do infrastruktury zdecentralizowanej platformy wymiany wiadomo\u015bci Matrix, o kt\u00f3rym informowano rano.","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/news\/podrobnosti-pro-vtoroj-vzlom-matrix-skomprometirovany-gpg-klyuchi-proekta","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e \u0432\u0442\u043e\u0440\u043e\u0439 \u0432\u0437\u043b\u043e\u043c Matrix. \u0421\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b GPG-\u043a\u043b\u044e\u0447\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u044b \u043d\u043e\u0432\u044b\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u043e \u0432\u0437\u043b\u043e\u043c \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0434\u0435\u0446\u0435\u043d\u0442\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 Matrix, \u043e \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u043e\u0441\u044c \u0443\u0442\u0440\u043e\u043c.","og:url":"https:\/\/prohoster.info\/pl\/blog\/news\/podrobnosti-pro-vtoroj-vzlom-matrix-skomprometirovany-gpg-klyuchi-proekta","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:41:20+00:00","article:modified_time":"2019-10-31T18:41:20+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31452","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 16:59:47","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:16:23","updated":"2026-02-09 16:59:47","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/31452","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=31452"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/31452\/revisions"}],"predecessor-version":[{"id":158549,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/31452\/revisions\/158549"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=31452"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=31452"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=31452"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}