{"id":107510,"date":"2023-03-25T00:48:09","date_gmt":"2023-03-24T22:48:09","guid":{"rendered":"https:\/\/prohoster.info\/?p=107510"},"modified":"2023-03-27T19:30:41","modified_gmt":"2023-03-27T17:30:41","slug":"github-pomenyal-zakrytyj-rsa-klyuch-dlya-ssh-posle-ego-popadaniya-v-publichnyj-repozitorij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/github-pomenyal-zakrytyj-rsa-klyuch-dlya-ssh-posle-ego-popadaniya-v-publichnyj-repozitorij","title":{"rendered":"GitHub a schimbat cheia RSA \u00eenchis\u0103 pentru SSH dup\u0103 ce a fost expus\u0103 \u00eentr-un depozit public.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

GitHub a raportat un incident \u00een care cheia RSA privat\u0103, utilizat\u0103 ca cheie de g\u0103zduire pentru accesul la repositoare GitHub prin SSH, a fost publicat\u0103 din gre\u0219eal\u0103 \u00eentr-un repositar public. Scurgerea a fost limitat\u0103 doar la cheia RSA, iar cheile de g\u0103zduire SSH ECDSA \u0219i Ed25519 continu\u0103 s\u0103 fie sigure. Cheia SSH de g\u0103zduire expus\u0103 public nu permite accesul la infrastructura GitHub sau la datele utilizatorilor, dar poate fi folosit\u0103 pentru a intercepta opera\u021biunile Git efectuate prin SSH. <\/p>\n

Pentru a exclude posibila interceptare a sesiunilor SSH c\u0103tre GitHub \u00een cazul \u00een care cheia RSA ajunge \u00een m\u00e2inile atacatorilor, GitHub a ini\u021biat un proces de \u00eenlocuire a cheii. Pe partea utilizatorilor, este necesar\u0103 eliminarea vechii chei publice GitHub (ssh-keygen -R github.com) sau \u00eenlocuirea manual\u0103 a cheii \u00een fi\u0219ierul ~\/ .ssh\/known_hosts, lucru care poate afecta func\u021bionarea scripturilor automate.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

GitHub \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e\u0431 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0435, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0439 RSA-\u043a\u043b\u044e\u0447, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0445\u043e\u0441\u0442\u043e\u0432\u043e\u0433\u043e \u043a\u043b\u044e\u0447\u0430 \u043f\u0440\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043a \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c GitHub \u043f\u043e SSH, \u043f\u043e \u043e\u0448\u0438\u0431\u043a\u0435 \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438. \u0423\u0442\u0435\u0447\u043a\u0430 \u043a\u043e\u0441\u043d\u0443\u043b\u0430\u0441\u044c \u0442\u043e\u043b\u044c\u043a\u043e \u043a\u043b\u044e\u0447\u0430 RSA, \u0445\u043e\u0441\u0442\u043e\u0432\u044b\u0435 SSH-\u043a\u043b\u044e\u0447\u0438 ECDSA \u0438 Ed25519 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u043e\u0441\u0442\u0430\u0432\u0430\u0442\u044c\u0441\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c\u0438. \u041f\u043e\u043f\u0430\u0432\u0448\u0438\u0439 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0445\u043e\u0441\u0442\u043e\u0432\u044b\u0439 SSH-\u043a\u043b\u044e\u0447 \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 GitHub […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-107510","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47GitHub a \u00eenlocuit cheia RSA privat\u0103 pentru SSH dup\u0103 ce aceasta a ajuns \u00eentr-un repositar public | ProHoster","description":"GitHub a raportat un incident \u00een care cheia RSA privat\u0103, utilizat\u0103 ca cheie de g\u0103zduire pentru accesul la repositoare GitHub prin SSH, a fost publicat\u0103 din gre\u0219eal\u0103 \u00eentr-un repositar public.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/github-pomenyal-zakrytyj-rsa-klyuch-dlya-ssh-posle-ego-popadaniya-v-publichnyj-repozitorij","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47GitHub \u043f\u043e\u043c\u0435\u043d\u044f\u043b \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0439 RSA-\u043a\u043b\u044e\u0447 \u0434\u043b\u044f SSH \u043f\u043e\u0441\u043b\u0435 \u0435\u0433\u043e \u043f\u043e\u043f\u0430\u0434\u0430\u043d\u0438\u044f \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 | ProHoster","og:description":"GitHub \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e\u0431 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0435, \u0432 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0439 RSA-\u043a\u043b\u044e\u0447, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0445\u043e\u0441\u0442\u043e\u0432\u043e\u0433\u043e \u043a\u043b\u044e\u0447\u0430 \u043f\u0440\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435 \u043a \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c GitHub \u043f\u043e SSH, \u043f\u043e \u043e\u0448\u0438\u0431\u043a\u0435 \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0432 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/github-pomenyal-zakrytyj-rsa-klyuch-dlya-ssh-posle-ego-popadaniya-v-publichnyj-repozitorij","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-03-24T22:48:09+00:00","article:modified_time":"2023-03-27T17:30:41+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/107510","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=107510"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/107510\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=107510"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=107510"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=107510"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}