{"id":112852,"date":"2024-01-12T15:10:15","date_gmt":"2024-01-12T13:10:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-na-infrastrukturu-pytorch-komprometiruyushhaya-repozitorij-i-relizy"},"modified":"2026-02-13T23:24:49","modified_gmt":"2026-02-13T21:24:49","slug":"ataka-na-infrastrukturu-pytorch-komprometiruyushhaya-repozitorij-i-relizy","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/ataka-na-infrastrukturu-pytorch-komprometiruyushhaya-repozitorij-i-relizy","title":{"rendered":"Atac asupra infrastructurii PyTorch, compromi\u021b\u00e2nd depozitul \u0219i lans\u0103rile","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Detaliile atacului asupra infrastructurii utilizate pentru dezvoltarea cadrelor de \u00eenv\u0103\u021bare automat\u0103 PyTorch au fost dezv\u0103luite, permi\u021b\u00e2nd extragerea cheilor de acces suficiente pentru a plasa date arbitrare \u00een depozitul cu versiunile proiectului pe GitHub \u0219i AWS, precum \u0219i pentru a insera cod \u00een ramura principal\u0103 a depozitului \u0219i a ad\u0103uga un backdoor prin dependen\u021be. \u00cenlocuirea versiunilor PyTorch ar fi putut fi folosit\u0103 pentru a efectua atacuri asupra unor mari companii, precum Google, Meta, Boeing \u0219i Lockheed Martin, care utilizeaz\u0103 PyTorch \u00een proiectele lor. \u00cen cadrul programului Bug Bounty, Meta a pl\u0103tit cercet\u0103torilor 16.250 de dolari pentru informa\u021bii despre problem\u0103. <\/p>\n

Esenta atacului const\u0103 \u00een posibilitatea de a rula propriul cod pe servere<\/a> integrarea continu\u0103, care efectueaz\u0103 recompilarea \u0219i executarea sarcinilor pentru testarea noilor modific\u0103ri trimise \u00een repository. Problema afecteaz\u0103 proiectele care utilizeaz\u0103 propriile solu\u021bii externe \u201eSelf-Hosted Runner\u201d cu GitHub Actions. Spre deosebire de ac\u021biunile tradi\u021bionale GitHub, procesatorii Self-Hosted nu sunt rula\u021bi \u00een infrastructura GitHub, ci pe serverul lor servere sau pe ma\u0219ini virtuale<\/a> sus\u021binute de dezvoltatori. <\/p>\n

Executarea sarcinilor de compilare pe serverele proprii permite organizarea rul\u0103rii codului care poate efectua scan\u0103ri ale re\u021belei interne a \u00eentreprinderii, c\u0103ut\u00e2nd \u00een sistemul de fi\u0219iere local chei de criptare \u0219i token-uri de acces, analiz\u00e2nd variabilele de mediu cu parametrii de accesare a stoc\u0103rii externe sau a serviciilor cloud. \u00cen absen\u021ba unei izola\u021bii corespunz\u0103toare a mediului de compilare, datele confiden\u021biale g\u0103site pot fi trimise \u00een exterior de atacatori, de exemplu, prin apeluri c\u0103tre API-uri externe. Pentru a stabili utilizarea de c\u0103tre proiecte a \u201eSelf-Hosted Runner\u201d poate fi folosit instrumentul Gato, care analizeaz\u0103 fi\u0219ierele de workflow publice \u0219i logurile sarcinilor CI. <\/p>\n

\u00cen PyTorch \u0219i multe alte proiecte care utilizeaz\u0103 \u201eSelf-Hosted Runner\u201d, rularea sarcinilor de compilare este permis\u0103 doar dezvoltatorilor ale c\u0103ror modific\u0103ri au fost anterior revizuite \u0219i incluse \u00een baza de cod a proiectului. A avea statutul de \u201econtributor\u201d folosind set\u0103rile implicite \u00een repository permite rularea procesatorilor GitHub Actions la trimiterea de pull request-uri \u0219i, prin urmare, executarea propriului cod \u00een orice mediu GitHub Actions Runner legat de repository sau organiza\u021bia care coordoneaz\u0103 proiectul. <\/p>\n

O evitare a statutului de \u201econtributor\u201d s-a dovedit a fi u\u0219or de realizat \u2014 era suficient s\u0103 trimi\u021bi o modificare minor\u0103 \u0219i s\u0103 a\u0219tep\u021bi acceptarea acesteia \u00een baza de cod, dup\u0103 care dezvoltatorul primea automat statutul de participant activ, iar cererile de extragere ale acestuia erau permise a fi testate \u00een infrastructura CI f\u0103r\u0103 o verificare separat\u0103. Pentru a ob\u021bine statutul de dezvoltator activ, \u00een timpul experimentului au fost folosite modific\u0103ri cosmetice minore legate de corectarea gre\u0219elilor de tipar din documenta\u021bie. Pentru a ob\u021bine accesul la depozitul \u0219i la stocul de versiuni PyTorch \u00een timpul atacului, \u00een executarea codului pe \u201eSelf-Hosted Runner\u201d a avut loc interceptarea token-ului GitHub, utilizat pentru accesul la depozit din procesele de compilare, precum \u0219i a cheilor AWS, implicate \u00een salvarea rezultatelor compil\u0103rii. <\/p>\n

Problema nu este specific\u0103 pentru PyTorch \u0219i afecteaz\u0103 multe alte proiecte mari care utilizeaz\u0103 set\u0103rile implicite pentru \u201eSelf-Hosted Runner\u201d \u00een GitHub Actions. De exemplu, este men\u021bionat\u0103 realizarea unor atacuri similare pentru a insera backdoor-uri \u00een anumite portofele mari de criptomonede \u0219i proiecte blockchain cu capitalizare de miliarde, introducerea de modific\u0103ri \u00een versiunile Microsoft Deepspeed \u0219i TensorFlow, compromiterea uneia dintre aplica\u021biile companiei CloudFlare, precum \u0219i executarea codului pe computere \u00een re\u021beaua Microsoft. Detalii despre aceste incidente nu sunt \u00eenc\u0103 dezv\u0103luite. \u00cen cadrul programelor active Bug Bounty, cercet\u0103torii au trimis peste 20 de cereri pentru a ob\u021bine recompense \u00een valoare de c\u00e2teva sute de mii de dolari.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0434\u0435\u0442\u0430\u043b\u0438 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u043f\u0440\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f PyTorch, \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0432\u0448\u0443\u044e \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u043a\u043b\u044e\u0447\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u0435 \u0434\u043b\u044f \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u0441 \u0440\u0435\u043b\u0438\u0437\u0430\u043c\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0432 GitHub \u0438 AWS, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043b\u044f \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u043a\u043e\u0434\u0430 \u0432 \u043e\u0441\u043d\u043e\u0432\u043d\u0443\u044e \u0432\u0435\u0442\u043a\u0443 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f \u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0431\u044d\u043a\u0434\u043e\u0440\u0430 \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u043e\u0434\u043c\u0435\u043d\u0430 \u0440\u0435\u043b\u0438\u0437\u043e\u0432 PyTorch \u043c\u043e\u0433\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043a\u0440\u0443\u043f\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112852","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Atacul asupra infrastructurii PyTorch, compromi\u021b\u00e2nd depozitul \u0219i versiunile | ProHoster","description":"Detaliile atacului asupra infrastructurii utilizate pentru dezvoltarea framework-ului de \u00eenv\u0103\u021bare automat\u0103 PyTorch au fost dezv\u0103luite, permi\u021b\u00e2nd extragerea cheilor de acces suficient de puternice pentru a publica date arbitrare \u00een depozitul cu versiunile.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/ataka-na-infrastrukturu-pytorch-komprometiruyushhaya-repozitorij-i-relizy","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 PyTorch, \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u0443\u044e\u0449\u0430\u044f \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0438 \u0440\u0435\u043b\u0438\u0437\u044b | ProHoster","og:description":"\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0434\u0435\u0442\u0430\u043b\u0438 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0443\u044e \u043f\u0440\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0430 \u043c\u0430\u0448\u0438\u043d\u043d\u043e\u0433\u043e \u043e\u0431\u0443\u0447\u0435\u043d\u0438\u044f PyTorch, \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0432\u0448\u0443\u044e \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u043a\u043b\u044e\u0447\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u044b\u0435 \u0434\u043b\u044f \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438 \u0441 \u0440\u0435\u043b\u0438\u0437\u0430\u043c\u0438.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/ataka-na-infrastrukturu-pytorch-komprometiruyushhaya-repozitorij-i-relizy","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-12T13:10:15+00:00","article:modified_time":"2026-02-13T21:24:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"112852","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-13 21:24:49","updated":"2026-02-13 21:24:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/112852","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=112852"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/112852\/revisions"}],"predecessor-version":[{"id":164381,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/112852\/revisions\/164381"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=112852"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=112852"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=112852"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}