{"id":100566,"date":"2021-06-22T10:22:46","date_gmt":"2021-06-22T08:22:46","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/utechka-heshej-parolej-whois-servisa-internet-registratora-apnic"},"modified":"2021-06-22T10:22:46","modified_gmt":"2021-06-22T08:22:46","slug":"utechka-heshej-parolej-whois-servisa-internet-registratora-apnic","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/utechka-heshej-parolej-whois-servisa-internet-registratora-apnic","title":{"rendered":"Vazamento de hashes de senhas do servi\u00e7o Whois do registrador de internet APNIC","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

O registrador APNIC, respons\u00e1vel pela aloca\u00e7\u00e3o de endere\u00e7os IP na regi\u00e3o \u00c1sia-Pac\u00edfico, informou sobre um incidente que resultou na exposi\u00e7\u00e3o de um dump SQL do servi\u00e7o Whois, contendo dados confidenciais e hashes de senhas. Notavelmente, esta n\u00e3o \u00e9 a primeira viola\u00e7\u00e3o de dados pessoais no APNIC \u2014 em 2017, a base do Whois j\u00e1 foi exposta ao p\u00fablico devido \u00e0 neglig\u00eancia da equipe. <\/p>\n

Durante a implementa\u00e7\u00e3o do suporte ao protocolo RDAP, destinado a substituir o protocolo WHOIS, os funcion\u00e1rios da APNIC armazenaram um dump SQL do banco de dados usado no servi\u00e7o Whois em um armazenamento em nuvem do Google Cloud, mas n\u00e3o restringiram o acesso a ele. Devido a um erro nas configura\u00e7\u00f5es, o dump SQL ficou acess\u00edvel publicamente por tr\u00eas meses, e esse fato foi descoberto apenas em 4 de junho, quando um dos pesquisadores independentes de seguran\u00e7a chamou a aten\u00e7\u00e3o para isso e notificou o registrador sobre o problema. <\/p>\n

No dump SQL estavam presentes os atributos \u00abauth\u00bb, que continham hashes de senhas para altera\u00e7\u00e3o de objetos Maintainer e Incident Response Team (IRT), al\u00e9m de algumas informa\u00e7\u00f5es confidenciais sobre clientes que n\u00e3o s\u00e3o exibidas no Whois em consultas normais (geralmente, essas s\u00e3o dados de contato adicionais e observa\u00e7\u00f5es sobre o usu\u00e1rio). Em caso de recupera\u00e7\u00e3o de senhas, os atacantes teriam a possibilidade de alterar o conte\u00fado dos campos com os par\u00e2metros dos propriet\u00e1rios dos blocos endere\u00e7os IP<\/a> no Whois. O objeto Maintainer define a pessoa respons\u00e1vel pela altera\u00e7\u00e3o do grupo de registros relacionados por meio do atributo \u00abmnt-by\u00bb, enquanto o objeto IRT cont\u00e9m informa\u00e7\u00f5es de contato dos administradores que respondem a notifica\u00e7\u00f5es sobre problemas. A informa\u00e7\u00e3o sobre o algoritmo de hashing de senhas utilizado n\u00e3o \u00e9 fornecida, mas em 2017, foram utilizados algoritmos obsoletos MD5 e CRYPT-PW (senhas de 8 caracteres com hashes baseados na fun\u00e7\u00e3o UNIX crypt). <\/p>\n

Ap\u00f3s a descoberta do incidente, o APNIC iniciou o reset de senhas para os objetos no Whois. Do lado do APNIC, ainda n\u00e3o foram encontrados sinais de a\u00e7\u00f5es ileg\u00edtimas, mas n\u00e3o h\u00e1 garantias de que os dados n\u00e3o tenham ca\u00eddo nas m\u00e3os de criminosos, pois n\u00e3o h\u00e1 logs de acesso completos aos arquivos no Google Cloud. Assim como ap\u00f3s o \u00faltimo incidente, o APNIC prometeu realizar uma auditoria e fazer mudan\u00e7as nos processos tecnol\u00f3gicos para evitar vazamentos semelhantes no futuro.
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 APNIC, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0439 \u0437\u0430 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0432 \u0410\u0437\u0438\u0430\u0442\u0441\u043a\u043e-\u0422\u0438\u0445\u043e\u043e\u043a\u0435\u0430\u043d\u0441\u043a\u043e\u043c \u0440\u0435\u0433\u0438\u043e\u043d\u0435, \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e\u0431 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0435, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e\u043f\u0430\u043b SQL-\u0434\u0430\u043c\u043f \u0441\u0435\u0440\u0432\u0438\u0441\u0430 Whois, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0439 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438 \u0445\u044d\u0448\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439. \u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u044d\u0442\u043e \u043d\u0435 \u043f\u0435\u0440\u0432\u0430\u044f \u0443\u0442\u0435\u0447\u043a\u0430 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 APNIC — \u0432 2017 \u0433\u043e\u0434\u0443 \u0431\u0430\u0437\u0430 Whois \u0443\u0436\u0435 \u043f\u043e\u043f\u0430\u0434\u0430\u043b\u0430 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0438 \u0442\u043e\u0436\u0435 \u043f\u043e \u043d\u0435\u0434\u043e\u0441\u043c\u043e\u0442\u0440\u0443 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u0430. \u0412 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100566","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vazamento de hashes de senhas do servi\u00e7o Whois do registrador de internet APNIC | ProHoster","description":"O registrador APNIC, respons\u00e1vel pela distribui\u00e7\u00e3o de endere\u00e7os IP na regi\u00e3o \u00c1sia-Pac\u00edfico, informou sobre um incidente que resultou na exposi\u00e7\u00e3o de um dump SQL do servi\u00e7o Whois, incluindo informa\u00e7\u00f5es confidenciais.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/utechka-heshej-parolej-whois-servisa-internet-registratora-apnic","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u0442\u0435\u0447\u043a\u0430 \u0445\u044d\u0448\u0435\u0439 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 Whois-\u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 APNIC | ProHoster","og:description":"\u0420\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440 APNIC, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u0439 \u0437\u0430 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0432 \u0410\u0437\u0438\u0430\u0442\u0441\u043a\u043e-\u0422\u0438\u0445\u043e\u043e\u043a\u0435\u0430\u043d\u0441\u043a\u043e\u043c \u0440\u0435\u0433\u0438\u043e\u043d\u0435, \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e\u0431 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0435, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e\u043f\u0430\u043b SQL-\u0434\u0430\u043c\u043f \u0441\u0435\u0440\u0432\u0438\u0441\u0430 Whois, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0438\u0439 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/utechka-heshej-parolej-whois-servisa-internet-registratora-apnic","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-06-22T08:22:46+00:00","article:modified_time":"2021-06-22T08:22:46+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100566","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-06-22 08:30:54","updated":"2026-02-08 20:40:15","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/100566","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=100566"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/100566\/revisions"}],"predecessor-version":[{"id":158025,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/100566\/revisions\/158025"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=100566"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=100566"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=100566"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}