{"id":36619,"date":"2019-10-31T22:12:43","date_gmt":"2019-10-31T19:12:43","guid":{"rendered":"https:\/\/prohoster.info\/blog\/post-analiz-chto-izvestno-o-poslednej-atake-na-set-serverov-kriptoklyuchej-sks-keyserver\/"},"modified":"2019-10-31T22:12:43","modified_gmt":"2019-10-31T19:12:43","slug":"post-analiz-chto-izvestno-o-poslednej-atake-na-set-serverov-kriptoklyuchej-sks-keyserver","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/post-analiz-chto-izvestno-o-poslednej-atake-na-set-serverov-kriptoklyuchej-sks-keyserver","title":{"rendered":"Post-analiza: ce se \u0219tie despre ultimul atac asupra re\u021belei serverelor de criptocluce SKS Keyserver","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Hackers used a feature of the OpenPGP protocol that has been known for over ten years. <\/p>\n

We explain what it's about and why it cannot be closed.<\/p>\n

\"Post-analiza:<\/a><\/noindex><\/a><\/noindex>
\n\/ Unsplash \/ Chunlea Ju<\/a><\/noindex><\/i><\/p>\n

Network problems<\/h2>\n

\nIn mid-June, unknown parties launched an attack<\/a><\/noindex> on a network of cryptographic key servers SKS Keyserver<\/a><\/noindex>, built on the OpenPGP protocol. This is an IETF standard (RFC 4880<\/a><\/noindex>), which is used for encrypting emails and other messages. The SKS network was created thirty years ago for distributing public certificates. Tools such as GnuPG<\/a><\/noindex> are connected to it for encrypting data and creating electronic digital signatures.<\/p>\n

Hackers compromised the certificates of two maintainers of the GnuPG project \u2014 Robert Hansen and Daniel Gillmor. Downloading the corrupted certificate from the server causes GnuPG to crash \u2014 the system simply hangs. There are reasons to believe that the attackers will not stop at this, and the number of compromised certificates will only increase. Currently, the scale of the problem remains unknown.<\/p>\n

The essence of the attack<\/h2>\n

\nHackers exploited a vulnerability in the OpenPGP protocol. It has been known to the community for decades. Even on GitHub , se pot g\u0103si<\/a><\/noindex> there are corresponding exploits. But so far, no one has taken responsibility for closing the 'hole' (we will talk more about the reasons later).<\/p>\n

A couple of collections from our blog on Habr:<\/b><\/p>\n