{"id":36789,"date":"2019-10-31T22:13:49","date_gmt":"2019-10-31T19:13:49","guid":{"rendered":"https:\/\/prohoster.info\/blog\/github-vklyuchyon-v-chislo-otvetchikov-v-dele-ob-utechke-polzovatelskoj-bazy-capital-one\/"},"modified":"2019-10-31T22:13:49","modified_gmt":"2019-10-31T19:13:49","slug":"github-vklyuchyon-v-chislo-otvetchikov-v-dele-ob-utechke-polzovatelskoj-bazy-capital-one","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/github-vklyuchyon-v-chislo-otvetchikov-v-dele-ob-utechke-polzovatelskoj-bazy-capital-one","title":{"rendered":"GitHub je zahrnut\u00fd medzi ob\u017ealovan\u00fdmi v pr\u00edpade \u00faniku pou\u017e\u00edvate\u013eskej datab\u00e1zy Capital One","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Pr\u00e1vnick\u00e1 firma Tycko & Zavareei podala s\u00fadny na<\/a><\/noindex>, s\u00favisiacu s \u00fanikom<\/a><\/noindex> osobn\u00fdmi \u00fadajmi viac ako 100 mili\u00f3nov z\u00e1kazn\u00edkov bankov\u00e9ho holdingu Capital One, vr\u00e1tane inform\u00e1ci\u00ed o pribli\u017ene 140 tis\u00edcoch \u010d\u00edsel soci\u00e1lneho zabezpe\u010denia a 80 tis\u00edcoch \u010d\u00edsel bankov\u00fdch \u00fa\u010dtov. Okrem Capital One je medzi ob\u017ealovan\u00fdmi je zahrnut\u00e1<\/a><\/noindex> aj spolo\u010dnos\u0165 GitHub, ktorej sa vy\u010d\u00edta, \u017ee poskytla mo\u017enos\u0165 zverejnenia, zobrazovania a pou\u017e\u00edvania inform\u00e1ci\u00ed z\u00edskan\u00fdch v d\u00f4sledku hackovania. <\/p>\n

Pod\u013ea \u017ealobcu je GitHub povinn\u00fd dodr\u017eiava\u0165 platn\u00e9 z\u00e1kony USA, ktor\u00e9 zakazuj\u00fa zverej\u0148ovanie \u010d\u00edsel soci\u00e1lneho zabezpe\u010denia pou\u017e\u00edvate\u013eov. Predov\u0161etk\u00fdm, ke\u010f\u017ee \u010d\u00edsla soci\u00e1lneho zabezpe\u010denia maj\u00fa pevn\u00fd form\u00e1t, firma mala zabezpe\u010di\u0165 existenciu filtroch na odha\u013eovanie zverejnenia v\u00fdsledkov \u00fanikov pou\u017e\u00edvate\u013emi a ich blokovanie bez \u010dakania na ofici\u00e1lne ozn\u00e1menia.<\/p>\n

Z\u00e1stupcovia GitHub vyhl\u00e1sili, \u017ee tvrdenia \u017ealobcu nie s\u00fa pravdiv\u00e9 a na GitHub neboli zverejnen\u00e9 osobn\u00e9 \u00fadaje z\u00edskan\u00e9 v d\u00f4sledku \u00faniku. V jednom z repozit\u00e1rov boli umiestnen\u00e9 len pokyny na z\u00edskanie \u00fadajov, ktor\u00e9 v skuto\u010dnosti ostali v datab\u00e1ze umiestnenej v cloudovej slu\u017ebe Amazon S3. Z d\u00f4vodu nevhodn\u00e9ho nastavenia firewallu, ktor\u00fd obmedzoval pr\u00edstup k webov\u00fdm aplik\u00e1ci\u00e1m, bola mo\u017enos\u0165 pr\u00edstupu k \u00falo\u017eisku v Amazon S3. Pri prvom ozn\u00e1men\u00ed od Capital One boli zverejnen\u00e9 pokyny odstr\u00e1nen\u00e9 z GitHub.<\/p>\n

V r\u00e1mci konania bola taktie\u017e zatknut\u00e1<\/a><\/noindex> Paige Thompson, b\u00fdval\u00e1 zamestnanky\u0148a Amazon, ktor\u00e1 v marci objavila probl\u00e9m a v apr\u00edli zverejnila na GitHub inform\u00e1cie o z\u00edskavan\u00ed pr\u00edstupu. Detaily t\u00fdkaj\u00face sa opisu probl\u00e9mu zostali na GitHub od 21. apr\u00edla do polovice j\u00fala. Capital One je v \u017ealobe obvi\u0148ovan\u00e1 z neprimeranej organiz\u00e1cie monitorovania neopr\u00e1vnen\u00e9ho pr\u00edstupu, \u010do viedlo k tomu, \u017ee \u00fanik zostal bez pov\u0161imnutia takmer tri mesiace.<\/p>\n

<\/a><\/noindex><\/p>\n

Zdroj: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u042e\u0440\u0438\u0434\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Tycko & Zavareei \u043f\u043e\u0434\u0430\u043b\u0430 \u0441\u0443\u0434\u0435\u0431\u043d\u044b\u0439 \u0438\u0441\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441 \u0443\u0442\u0435\u0447\u043a\u043e\u0439 \u043f\u0435\u0440\u0441\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0431\u043e\u043b\u0435\u0435 100 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u043e\u0433\u043e \u0445\u043e\u043b\u0434\u0438\u043d\u0433\u0430 Capital One, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u043e\u043a\u043e\u043b\u043e 140 \u0442\u044b\u0441\u044f\u0447\u0430\u0445 \u043d\u043e\u043c\u0435\u0440\u043e\u0432 \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0441\u0442\u0440\u0430\u0445\u043e\u0432\u0430\u043d\u0438\u044f \u0438 80 \u0442\u044b\u0441\u044f\u0447\u0430\u0445 \u043d\u043e\u043c\u0435\u0440\u043e\u0432 \u0431\u0430\u043d\u043a\u043e\u0432\u0441\u043a\u0438\u0445 \u0441\u0447\u0435\u0442\u043e\u0432. \u041f\u043e\u043c\u0438\u043c\u043e Capital One \u0432 \u0447\u0438\u0441\u043b\u043e \u043e\u0442\u0432\u0435\u0442\u0447\u0438\u043a\u043e\u0432 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f GitHub, \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0432\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0440\u0430\u0437\u043c\u0435\u0449\u0435\u043d\u0438\u044f, \u043e\u0442\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u043e\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-36789","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47GitHub je zahrnut\u00fd medzi ob\u017ealovan\u00fdmi v pr\u00edpade \u00faniku pou\u017e\u00edvate\u013eskej datab\u00e1zy Capital One | ProHoster","description":"Pr\u00e1vnick\u00e1 firma Tycko & Zavareei podala \u017ealobu, s\u00favisiacu s.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/github-vklyuchyon-v-chislo-otvetchikov-v-dele-ob-utechke-polzovatelskoj-bazy-capital-one","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47GitHub \u0432\u043a\u043b\u044e\u0447\u0451\u043d \u0432 \u0447\u0438\u0441\u043b\u043e \u043e\u0442\u0432\u0435\u0442\u0447\u0438\u043a\u043e\u0432 \u0432 \u0434\u0435\u043b\u0435 \u043e\u0431 \u0443\u0442\u0435\u0447\u043a\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u0431\u0430\u0437\u044b Capital One | ProHoster","og:description":"\u042e\u0440\u0438\u0434\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Tycko & Zavareei \u043f\u043e\u0434\u0430\u043b\u0430 \u0441\u0443\u0434\u0435\u0431\u043d\u044b\u0439 \u0438\u0441\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0439 \u0441.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/github-vklyuchyon-v-chislo-otvetchikov-v-dele-ob-utechke-polzovatelskoj-bazy-capital-one","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:13:49+00:00","article:modified_time":"2019-10-31T19:13:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36789","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 04:51:40","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:38:24","updated":"2026-01-22 04:51:40","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/36789","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=36789"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/36789\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=36789"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=36789"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=36789"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}