{"id":34346,"date":"2019-10-31T21:57:50","date_gmt":"2019-10-31T18:57:50","guid":{"rendered":"https:\/\/prohoster.info\/blog\/elasticsearch-sdelala-besplatnymi-problemnye-security-funktsii-ranee-vyvedennye-v-open-source\/"},"modified":"2019-10-31T21:57:50","modified_gmt":"2019-10-31T18:57:50","slug":"elasticsearch-sdelala-besplatnymi-problemnye-security-funktsii-ranee-vyvedennye-v-open-source","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/elasticsearch-sdelala-besplatnymi-problemnye-security-funktsii-ranee-vyvedennye-v-open-source","title":{"rendered":"Elasticsearch a f\u0103cut gratuite func\u021biile de securitate problematice, anterior scoase \u00een open source","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Recent in the Elastic blog <noindex><a rel=\"nofollow\" href=\"https:\/\/www.elastic.co\/blog\/security-for-elasticsearch-is-now-free\">a post appeared<\/a><\/noindex>, in which it is reported that the core security features of Elasticsearch, made open source over a year ago, are now free for users.<\/p>\n<p>The official blog post contains the 'right' words about how open source should be free and that the project owners build their business on additional features offered for enterprise solutions. Now the following security features, previously available only with a gold subscription, are included in the basic builds of versions 6.8.0 and 7.1.0:<\/p>\n<ul>\n<li>TLS for encrypted communication.<\/li>\n<li>File and native realm for creating and managing user accounts.<\/li>\n<li>User access management to the API and cluster based on roles; multi-user access to Kibana is allowed using Kibana Spaces.<\/li>\n<\/ul>\n<p>\n<b>However, the transition of the security features to the free section is not a big gesture, but an attempt to create distance between the commercial product and its major issues. <\/b><\/p>\n<p>And there are serious issues.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nThe query 'Elastic Leaked' returns 13.3 million search results on Google. Impressive, isn't it? After the release of the project's security features to open source, which once seemed like a good idea, Elastic started facing serious data leak problems. In fact, the basic version has turned into a sieve, as no one really supported those security features.<\/p>\n<p>One of the loudest data leaks from the elastic server was the loss of 57 million data of U.S. citizens, which <noindex><a rel=\"nofollow\" href=\"https:\/\/www.zdnet.com\/article\/elasticsearch-server-exposed-the-personal-data-of-over-57-million-us-citizens\/\">was reported in the press<\/a><\/noindex> in December 2018 (later it turned out that actually 82 million records leaked). Back then, in December 2018, due to security issues, data of 32 million people was stolen in Brazil. In March 2019, from another elastic server, 'only' 250,000 confidential documents leaked, including legal documents. And this is just the first page of the search for the mentioned query.<\/p>\n<p>In fact, the hacks are still ongoing and began shortly after the security features were 'decommissioned' by the developers and moved to open source.<\/p>\n<p>The reader may notice: 'So what? They have security problems, but who doesn't?'<\/p>\n<p>And now, attention.<\/p>\n<p>\u00centrebarea este c\u0103 p\u00e2n\u0103 luni, Elastic a perceput \u00een mod onest bani de la clien\u021bi pentru un sistem numit func\u021bii de securitate, pe care le-a scos \u00een open source \u00eenc\u0103 din februarie 2018, adic\u0103 acum aproximativ 15 luni. F\u0103r\u0103 a suporta cheltuieli semnificative pentru \u00eentre\u021binerea acestor func\u021bii, compania a \u00eencasat regular bani de la abona\u021bii gold \u0219i premium din segmentul enterprise.<\/p>\n<p>\u00centr-un anumit moment, problemele de securitate au devenit at\u00e2t de toxice pentru companie, iar pl\u00e2ngerile din partea clien\u021bilor at\u00e2t de amenin\u021b\u0103toare, \u00eenc\u00e2t l\u0103comia a fost pus\u0103 pe plan secund. Totu\u0219i, \u00een loc s\u0103 re\u00eenceap\u0103 dezvoltarea \u0219i s\u0103 \u201eacopere\u201d g\u0103urile din propriul proiect, din cauza c\u0103rora milioane de documente \u0219i date personale ale oamenilor au ajuns \u00een spa\u021biul public, Elastic a aruncat func\u021biile de securitate \u00een versiunea gratuit\u0103 a elasticsearch. \u0218i o prezint\u0103 ca pe o mare binefacere \u0219i un sprijin pentru cauza open source.<\/p>\n<p>\u00cen lumina unor astfel de \u201esolu\u021bii eficiente\u201d, a doua parte a post\u0103rii pe blog, din cauza c\u0103reia am acordat aten\u021bie acestei pove\u0219ti, pare extrem de ciudat\u0103. Este vorba <noindex><a rel=\"nofollow\" href=\"https:\/\/www.elastic.co\/blog\/introducing-elastic-cloud-on-kubernetes-the-elasticsearch-operator-and-beyond\">despre lansarea versiunii alpha a Elastic Cloud on Kubernetes (ECK)<\/a><\/noindex> \u2014 operatorul oficial Kubernetes pentru Elasticsearch \u0219i Kibana.<\/p>\n<p>Dezvoltatorii, cu o expresie destul de serioas\u0103, afirm\u0103 c\u0103, datorit\u0103 transferului func\u021biilor de securitate \u00een pachetul gratuit de baz\u0103, sarcina adminilor acestor solu\u021bii va fi redus\u0103. \u0218i, \u00een general, totul este excelent.<\/p>\n<p>\u201ePutem garanta c\u0103 toate clusterele lansate \u0219i gestionate de ECK vor fi protejate implicit de la lansare, f\u0103r\u0103 o sarcin\u0103 suplimentar\u0103 pentru administratori\u201d, se men\u021bioneaz\u0103 \u00een blogul oficial.<\/p>\n<p>Cum o solu\u021bie abandonat\u0103 \u0219i ne\u00eentre\u021binut\u0103 de ini\u021bialii dezvoltatori, care \u00een ultimul an a devenit \u021binta tuturor criticilor, va asigura utilizatorilor securitate, dezvoltatorii nu men\u021bioneaz\u0103.<br \/>\n<br \/>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/itsumma\/blog\/453110\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041d\u0430 \u0434\u043d\u044f\u0445 \u0432 \u0431\u043b\u043e\u0433\u0435 Elastic \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0437\u0430\u043f\u0438\u0441\u044c, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 security-\u0444\u0443\u043d\u043a\u0446\u0438\u0438 Elasticsearch, \u0432\u044b\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u0435 \u0432 open source-\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u043e \u0431\u043e\u043b\u0435\u0435 \u0433\u043e\u0434\u0430 \u043d\u0430\u0437\u0430\u0434, \u0442\u0435\u043f\u0435\u0440\u044c \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u043c\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439. \u0412 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0431\u043b\u043e\u0433\u043e\u0437\u0430\u043f\u0438\u0441\u0438 \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442\u0441\u044f \u00ab\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u0435\u00bb \u0441\u043b\u043e\u0432\u0430 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e open source \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u043c \u0438 \u0447\u0442\u043e \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u044b \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0441\u0442\u0440\u043e\u044f\u0442 \u0441\u0432\u043e\u0439 \u0431\u0438\u0437\u043d\u0435\u0441 \u043d\u0430 \u043f\u0440\u043e\u0447\u0438\u0445 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u044e\u0442\u0441\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-34346","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041d\u0430 \u0434\u043d\u044f\u0445 \u0432 \u0431\u043b\u043e\u0433\u0435 Elastic \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0437\u0430\u043f\u0438\u0441\u044c, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 security-\u0444\u0443\u043d\u043a\u0446\u0438\u0438.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/elasticsearch-sdelala-besplatnymi-problemnye-security-funktsii-ranee-vyvedennye-v-open-source\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Elasticsearch \u0441\u0434\u0435\u043b\u0430\u043b\u0430 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u0435 security-\u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u0440\u0430\u043d\u0435\u0435 \u0432\u044b\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u0435 \u0432 open source | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041d\u0430 \u0434\u043d\u044f\u0445 \u0432 \u0431\u043b\u043e\u0433\u0435 Elastic \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0437\u0430\u043f\u0438\u0441\u044c, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 security-\u0444\u0443\u043d\u043a\u0446\u0438\u0438.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/elasticsearch-sdelala-besplatnymi-problemnye-security-funktsii-ranee-vyvedennye-v-open-source\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:57:50+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:57:50+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Elasticsearch a f\u0103cut gratuite func\u021biile de securitate problematice, anterior scoase \u00een open source | ProHoster","description":"Recent, pe blogul Elastic a ap\u0103rut o postare care informeaz\u0103 despre func\u021biile de securitate de baz\u0103.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/elasticsearch-sdelala-besplatnymi-problemnye-security-funktsii-ranee-vyvedennye-v-open-source","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Elasticsearch \u0441\u0434\u0435\u043b\u0430\u043b\u0430 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u0435 security-\u0444\u0443\u043d\u043a\u0446\u0438\u0438, \u0440\u0430\u043d\u0435\u0435 \u0432\u044b\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u0435 \u0432 open source | ProHoster","og:description":"\u041d\u0430 \u0434\u043d\u044f\u0445 \u0432 \u0431\u043b\u043e\u0433\u0435 Elastic \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0437\u0430\u043f\u0438\u0441\u044c, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0435 security-\u0444\u0443\u043d\u043a\u0446\u0438\u0438.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/elasticsearch-sdelala-besplatnymi-problemnye-security-funktsii-ranee-vyvedennye-v-open-source","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:57:50+00:00","article:modified_time":"2019-10-31T18:57:50+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"34346","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 18:50:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:23:17","updated":"2026-01-21 18:50:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/34346","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=34346"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/34346\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=34346"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=34346"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=34346"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}