{"id":36789,"date":"2019-10-31T22:13:49","date_gmt":"2019-10-31T19:13:49","guid":{"rendered":"https:\/\/prohoster.info\/blog\/github-vklyuchyon-v-chislo-otvetchikov-v-dele-ob-utechke-polzovatelskoj-bazy-capital-one\/"},"modified":"2019-10-31T22:13:49","modified_gmt":"2019-10-31T19:13:49","slug":"github-vklyuchyon-v-chislo-otvetchikov-v-dele-ob-utechke-polzovatelskoj-bazy-capital-one","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pt\/blog\/news\/github-vklyuchyon-v-chislo-otvetchikov-v-dele-ob-utechke-polzovatelskoj-bazy-capital-one","title":{"rendered":"O GitHub foi inclu\u00eddo entre os r\u00e9us no caso da viola\u00e7\u00e3o da base de usu\u00e1rios do Capital One","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A empresa jur\u00eddica Tycko & Zavareei entrou com uma a\u00e7\u00e3o judicial contra<\/a><\/noindex>dados pessoais de mais de 100 milh\u00f5es de clientes do conglomerado banc\u00e1rio Capital One, incluindo informa\u00e7\u00f5es sobre cerca de 140 mil n\u00fameros de previd\u00eancia social e 80 mil n\u00fameros de contas banc\u00e1rias. Al\u00e9m do Capital One, vazamento<\/a><\/noindex> a empresa GitHub, que \u00e9 acusada de possibilitar a hospedagem, exibi\u00e7\u00e3o e uso das informa\u00e7\u00f5es obtidas como resultado do hackeamento. inclu\u00edda<\/a><\/noindex> De acordo com os autores da a\u00e7\u00e3o, o GitHub \u00e9 obrigado a cumprir a legisla\u00e7\u00e3o dos EUA que pro\u00edbe a publica\u00e7\u00e3o em acesso aberto dos n\u00fameros de previd\u00eancia social dos usu\u00e1rios. Em particular, como os n\u00fameros de previd\u00eancia social t\u00eam um formato fixo, a empresa deveria ter implementado filtros para detectar e bloquear a publica\u00e7\u00e3o pelos usu\u00e1rios de resultados de vazamentos, sem esperar por notifica\u00e7\u00f5es oficiais. <\/p>\n

Representantes do GitHub afirmaram que as alega\u00e7\u00f5es do autor n\u00e3o s\u00e3o verdadeiras e que no GitHub n\u00e3o foram publicados dados pessoais resultantes de um vazamento. Em um dos reposit\u00f3rios, apenas foram colocadas instru\u00e7\u00f5es para acessar os dados, que de fato permaneciam no banco de dados hospedado no servi\u00e7o de nuvem Amazon S3. Devido a configura\u00e7\u00f5es inadequadas do firewall que limitavam o acesso a aplicativos web, havia a possibilidade de acesso ao armazenamento na Amazon S3. Ap\u00f3s o primeiro aviso do Capital One, as instru\u00e7\u00f5es publicadas foram removidas do GitHub.<\/p>\n

No decorrer do processo, tamb\u00e9m<\/p>\n

foi presa Paige Thompson, ex-funcion\u00e1ria da Amazon, que em mar\u00e7o descobriu o problema e em abril publicou no GitHub informa\u00e7\u00f5es sobre como acess\u00e1-lo. Os detalhes que descreviam o problema permaneceram no GitHub de 21 de abril at\u00e9 meados de julho. O Capital One foi acusado na a\u00e7\u00e3o de n\u00e3o ter organizado adequadamente o monitoramento de acessos n\u00e3o autorizados, o que levou a que o vazamento permanecesse despercebido por cerca de tr\u00eas meses.<\/a><\/noindex> Novas vulnerabilidades na tecnologia de prote\u00e7\u00e3o de redes sem fio WPA3 e no EAP-pwd<\/p>\n

<\/a><\/noindex><\/p>\n

Fonte: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u042e\u0440\u0438\u0434\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Tycko & Zavareei \u043f\u043e\u0434\u0430\u043b\u0430 \u0441\u0443\u0434\u0435\u0431\u043d\u044b\u0439 \u0438\u0441\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u0443\u0442\u0435\u0447\u043a\u043e\u0439 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0431\u043e\u043b\u0435\u0435 100 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u043e\u0433\u043e \u0445\u043e\u043b\u0434\u0438\u043d\u0433\u0430 Capital One, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u043e\u043a\u043e\u043b\u043e 140 \u0442\u044b\u0441\u044f\u0447\u0430\u0445 \u043d\u043e\u043c\u0435\u0440\u043e\u0432 \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0441\u0442\u0440\u0430\u0445\u043e\u0432\u0430\u043d\u0438\u044f \u0438 80 \u0442\u044b\u0441\u044f\u0447\u0430\u0445 \u043d\u043e\u043c\u0435\u0440\u043e\u0432 \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u0438\u0445 \u0441\u0447\u0435\u0442\u043e\u0432. \u041f\u043e\u043c\u0438\u043c\u043e Capital One \u0432 \u0447\u0438\u0441\u043b\u043e \u043e\u0442\u0432\u0435\u0442\u0447\u0438\u043a\u043e\u0432 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f GitHub, \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0432\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u044f, \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u043e\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-36789","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47O GitHub foi inclu\u00eddo entre os r\u00e9us no caso da viola\u00e7\u00e3o da base de usu\u00e1rios do Capital One | ProHoster","description":"\ud83e\udd47O GitHub foi inclu\u00eddo entre os r\u00e9us no caso da viola\u00e7\u00e3o da base de usu\u00e1rios do Capital One | ProHoster","canonical_url":"https:\/\/prohoster.info\/pt\/blog\/news\/github-vklyuchyon-v-chislo-otvetchikov-v-dele-ob-utechke-polzovatelskoj-bazy-capital-one","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pt_PT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47GitHub \u0432\u043a\u043b\u044e\u0447\u0451\u043d \u0432 \u0447\u0438\u0441\u043b\u043e \u043e\u0442\u0432\u0435\u0442\u0447\u0438\u043a\u043e\u0432 \u0432 \u0434\u0435\u043b\u0435 \u043e\u0431 \u0443\u0442\u0435\u0447\u043a\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u0431\u0430\u0437\u044b Capital One | ProHoster","og:description":"\u042e\u0440\u0438\u0434\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Tycko & Zavareei \u043f\u043e\u0434\u0430\u043b\u0430 \u0441\u0443\u0434\u0435\u0431\u043d\u044b\u0439 \u0438\u0441\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441.","og:url":"https:\/\/prohoster.info\/pt\/blog\/news\/github-vklyuchyon-v-chislo-otvetchikov-v-dele-ob-utechke-polzovatelskoj-bazy-capital-one","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:13:49+00:00","article:modified_time":"2019-10-31T19:13:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36789","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 04:51:40","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:38:24","updated":"2026-01-22 04:51:40","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/36789","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/comments?post=36789"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/posts\/36789\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/media?parent=36789"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/categories?post=36789"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pt\/wp-json\/wp\/v2\/tags?post=36789"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}