{"id":34346,"date":"2019-10-31T21:57:50","date_gmt":"2019-10-31T18:57:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/elasticsearch-sdelala-besplatnymi-problemnye-security-funktsii-ranee-vyvedennye-v-open-source\/"},"modified":"2019-10-31T21:57:50","modified_gmt":"2019-10-31T18:57:50","slug":"elasticsearch-sdelala-besplatnymi-problemnye-security-funktsii-ranee-vyvedennye-v-open-source","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/administrirovanie\/elasticsearch-sdelala-besplatnymi-problemnye-security-funktsii-ranee-vyvedennye-v-open-source","title":{"rendered":"Elasticsearch tornou gratuitas as fun\u00e7\u00f5es de seguran\u00e7a problem\u00e1ticas, anteriormente disponibilizadas como open source","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Recentemente, no blog da Elastic <noindex><a rel=\"nofollow\" href=\"https:\/\/www.elastic.co\/blog\/security-for-elasticsearch-is-now-free\">publicou uma postagem<\/a><\/noindex>, onde \u00e9 relatado que as principais fun\u00e7\u00f5es de seguran\u00e7a do Elasticsearch, lan\u00e7adas no espa\u00e7o de c\u00f3digo aberto h\u00e1 mais de um ano, agora s\u00e3o gratuitas para os usu\u00e1rios.<\/p>\n<p>Na postagem oficial do blog, s\u00e3o mencionadas as \"palavras certas\" de que o c\u00f3digo aberto deve ser gratuito e que os propriet\u00e1rios do projeto est\u00e3o construindo seu neg\u00f3cio com base em outras fun\u00e7\u00f5es adicionais, que s\u00e3o oferecidas para solu\u00e7\u00f5es empresariais. Agora, as seguintes fun\u00e7\u00f5es de seguran\u00e7a, anteriormente dispon\u00edveis apenas com a assinatura gold, est\u00e3o inclu\u00eddas nas compila\u00e7\u00f5es b\u00e1sicas das vers\u00f5es 6.8.0 e 7.1.0:<\/p>\n<ul>\n<li>TLS para comunica\u00e7\u00e3o criptografada.<\/li>\n<li>File e native realm para cria\u00e7\u00e3o e gerenciamento de contas de usu\u00e1rios.<\/li>\n<li>Gerenciamento de acesso de usu\u00e1rios \u00e0 API e ao cluster com base em fun\u00e7\u00f5es; o acesso multiusu\u00e1rio ao Kibana \u00e9 permitido usando os Kibana Spaces.<\/li>\n<\/ul>\n<p>\n<b>No entanto, a transfer\u00eancia das fun\u00e7\u00f5es de seguran\u00e7a para a se\u00e7\u00e3o gratuita n\u00e3o \u00e9 um gesto generoso, mas uma tentativa de criar uma dist\u00e2ncia entre o produto comercial e suas principais falhas. <\/b><\/p>\n<p>E eles t\u00eam falhas s\u00e9rias.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nA pesquisa \"Elastic Leaked\" retorna 13,3 milh\u00f5es de resultados no Google. Impressionante, n\u00e3o \u00e9?<\/p>\n<p>Ap\u00f3s o lan\u00e7amento das fun\u00e7\u00f5es de seguran\u00e7a do projeto no c\u00f3digo aberto, que outrora parecia uma boa ideia, a Elastic come\u00e7ou a enfrentar s\u00e9rios problemas de vazamento de dados. De fato, a vers\u00e3o b\u00e1sica se tornou um verdadeiro queijo su\u00ed\u00e7o, j\u00e1 que ningu\u00e9m realmente mantinha essas fun\u00e7\u00f5es de seguran\u00e7a. <noindex><a rel=\"nofollow\" href=\"https:\/\/www.zdnet.com\/article\/elasticsearch-server-exposed-the-personal-data-of-over-57-million-us-citizens\/\">Um dos vazamentos de dados mais not\u00f3rios de um servidor elastic foi o caso da perda de 57 milh\u00f5es de dados de cidad\u00e3os dos EUA, sobre o qual<\/a><\/noindex> foi noticiado na imprensa<\/p>\n<p>em dezembro de 2018 (posteriormente, descobriu-se que na verdade 82 milh\u00f5es de registros haviam vazado). Na mesma \u00e9poca, em dezembro de 2018, devido a problemas de seguran\u00e7a, dados de 32 milh\u00f5es de pessoas foram roubados no Brasil. Em mar\u00e7o de 2019, de outro servidor elastic, vazaram \"apenas\" 250.000 documentos confidenciais, incluindo documentos legais. E isso \u00e9 apenas a primeira p\u00e1gina da pesquisa para a consulta mencionada.<\/p>\n<p>De fato, os hacks continuam at\u00e9 hoje e come\u00e7aram logo ap\u00f3s a remo\u00e7\u00e3o 'da gra\u00e7a' das fun\u00e7\u00f5es de seguran\u00e7a pelos pr\u00f3prios desenvolvedores e sua transfer\u00eancia para o c\u00f3digo aberto.<\/p>\n<p>O leitor pode notar: \"E da\u00ed? Eles t\u00eam problemas de seguran\u00e7a, e quem n\u00e3o os tem?\"<\/p>\n<p>A quest\u00e3o \u00e9 que at\u00e9 esta segunda-feira, a Elastic estava, sem remorso, cobrando dos clientes por uma peneira chamada fun\u00e7\u00f5es de seguran\u00e7a, que ela mesma lan\u00e7ou como open source em fevereiro de 2018, ou seja, h\u00e1 cerca de 15 meses. Sem assumir despesas significativas para manter essas fun\u00e7\u00f5es, a empresa continuou a cobrar por elas de assinantes gold e premium do segmento empresarial.<\/p>\n<p>Em algum momento, os problemas de seguran\u00e7a tornaram-se t\u00e3o t\u00f3xicos para a empresa e as reclama\u00e7\u00f5es dos clientes t\u00e3o amea\u00e7adoras que a gan\u00e2ncia ficou em segundo plano. No entanto, em vez de retomar o desenvolvimento e 'tapar' os buracos em seu propio projeto, pelos quais milh\u00f5es de documentos e dados pessoais de pessoas comuns vazaram, a Elastic despejou as fun\u00e7\u00f5es de seguran\u00e7a na vers\u00e3o gratuita do Elasticsearch. E apresenta isso como uma grande b\u00ean\u00e7\u00e3o e um apoio ao open source.<\/p>\n<p>\u00c0 luz de tais 'solu\u00e7\u00f5es eficazes', a segunda parte da postagem no blog, pela qual, de fato, chamamos aten\u00e7\u00e3o para esta hist\u00f3ria, parece extremamente estranha. Refere-se <noindex><a rel=\"nofollow\" href=\"https:\/\/www.elastic.co\/blog\/introducing-elastic-cloud-on-kubernetes-the-elasticsearch-operator-and-beyond\">ao lan\u00e7amento da vers\u00e3o alfa do Elastic Cloud on Kubernetes (ECK)<\/a><\/noindex> \u2014 o operador oficial do Kubernetes para Elasticsearch e Kibana.<\/p>\n<p>Desenvolvedores, com uma express\u00e3o s\u00e9ria no rosto, afirmam que, devido \u00e0 inclus\u00e3o das fun\u00e7\u00f5es de seguran\u00e7a na configura\u00e7\u00e3o b\u00e1sica gratuita do Elasticsearch, a carga sobre os administradores desses usu\u00e1rios ser\u00e1 reduzida. E, afinal, tudo est\u00e1 \u00f3timo.<\/p>\n<p>\u2018Podemos garantir que todos os clusters iniciados e geridos pelo ECK estar\u00e3o protegidos por padr\u00e3o desde o in\u00edcio, sem carga adicional para os administradores\u2019, diz o blog oficial.<\/p>\n<p>Como uma solu\u00e7\u00e3o abandonada e praticamente sem suporte dos desenvolvedores originais, que se tornou um alvo de cr\u00edticas no \u00faltimo ano, garantir\u00e1 seguran\u00e7a aos usu\u00e1rios, os desenvolvedores n\u00e3o comentam.<br \/>\n<br \/>Fonte: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/itsumma\/blog\/453110\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041d\u0430 \u0434\u043d\u044f\u0445 \u0432 \u0431\u043b\u043e\u0433\u0435 Elastic \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0437\u0430\u043f\u0438\u0441\u044c, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 security-\u0444\u0443\u043d\u043a\u0446\u0438\u0438 Elasticsearch, \u0432\u044b\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u0435 \u0432 open source-\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u043e \u0431\u043e\u043b\u0435\u0435 \u0433\u043e\u0434\u0430 \u043d\u0430\u0437\u0430\u0434, \u0442\u0435\u043f\u0435\u0440\u044c \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u043c\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u0412 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0431\u043b\u043e\u0433\u043e\u0437\u0430\u043f\u0438\u0441\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u0441\u044f \u00ab\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0435\u00bb \u0441\u043b\u043e\u0432\u0430 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e open source \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u043c \u0438 \u0447\u0442\u043e \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u044b \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0441\u0442\u0440\u043e\u044f\u0442 \u0441\u0432\u043e\u0439 \u0431\u0438\u0437\u043d\u0435\u0441 \u043d\u0430 \u043f\u0440\u043e\u0447\u0438\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0442\u0441\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-34346","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041d\u0430 \u0434\u043d\u044f\u0445 \u0432 \u0431\u043b\u043e\u0433\u0435 Elastic \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0437\u0430\u043f\u0438\u0441\u044c, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 security-\u0444\u0443\u043d\u043a\u0446\u0438\u0438.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/pt\/blog\/administrirovanie\/elasticsearch-sdelala-besplatnymi-problemnye-security-funktsii-ranee-vyvedennye-v-open-source\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"pt_PT\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Elasticsearch \u0441\u0434\u0435\u043b\u0430\u043b\u0430 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u0435 security-\u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u0440\u0430\u043d\u0435\u0435 \u0432\u044b\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u0435 \u0432 open source | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041d\u0430 \u0434\u043d\u044f\u0445 \u0432 \u0431\u043b\u043e\u0433\u0435 Elastic \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0437\u0430\u043f\u0438\u0441\u044c, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 security-\u0444\u0443\u043d\u043a\u0446\u0438\u0438.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/pt\/blog\/administrirovanie\/elasticsearch-sdelala-besplatnymi-problemnye-security-funktsii-ranee-vyvedennye-v-open-source\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:57:50+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:57:50+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Elasticsearch tornou gratuitas as problem\u00e1ticas fun\u00e7\u00f5es de seguran\u00e7a que foram lan\u00e7adas como open source | ProHoster","description":"Recentemente, uma postagem no blog da Elastic afirma que as principais fun\u00e7\u00f5es de seguran\u00e7a.","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/administrirovanie\/elasticsearch-sdelala-besplatnymi-problemnye-security-funktsii-ranee-vyvedennye-v-open-source","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Elasticsearch \u0441\u0434\u0435\u043b\u0430\u043b\u0430 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u0435 security-\u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u0440\u0430\u043d\u0435\u0435 \u0432\u044b\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u0435 \u0432 open source | ProHoster","og:description":"\u041d\u0430 \u0434\u043d\u044f\u0445 \u0432 \u0431\u043b\u043e\u0433\u0435 Elastic \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0437\u0430\u043f\u0438\u0441\u044c, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 security-\u0444\u0443\u043d\u043a\u0446\u0438\u0438.","og:url":"https:\/\/prohoster.info\/pt\/blog\/administrirovanie\/elasticsearch-sdelala-besplatnymi-problemnye-security-funktsii-ranee-vyvedennye-v-open-source","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:57:50+00:00","article:modified_time":"2019-10-31T18:57:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"34346","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 18:50:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:23:17","updated":"2026-01-21 18:50:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/34346","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=34346"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/34346\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=34346"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=34346"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=34346"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}