{"id":91711,"date":"2020-08-17T13:42:10","date_gmt":"2020-08-17T11:42:10","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vzlom-sborochnogo-servera-i-komprometacziya-repozitoriev-soobshhestva-libretro-razvivayushhego-retroarch"},"modified":"2020-08-17T13:42:10","modified_gmt":"2020-08-17T11:42:10","slug":"vzlom-sborochnogo-servera-i-komprometacziya-repozitoriev-soobshhestva-libretro-razvivayushhego-retroarch","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/vzlom-sborochnogo-servera-i-komprometacziya-repozitoriev-soobshhestva-libretro-razvivayushhego-retroarch","title":{"rendered":"Hackerstvo na build serveri a kompromit\u00e1cia repozit\u00e1rov komunity Libretro, ktor\u00e1 vyv\u00edja RetroArch","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Komunita Libretro, ktor\u00e1 sa zaober\u00e1 v\u00fdvojom emul\u00e1torov hern\u00fdch konzol RetroArch<\/a><\/noindex> a distrib\u00facie na vytvorenie hern\u00fdch konzol Lakka<\/a><\/noindex>, varovalo<\/a><\/noindex> pred hackom prvkov infra\u0161trukt\u00fary projektu a vandalizmu v repozit\u00e1roch. \u00dato\u010dn\u00edci sa dostali na build server (buildbot) a repozit\u00e1re na GitHub.<\/p>\n

Na GitHub \u00fato\u010dn\u00edci z\u00edskali pr\u00edstup ku v\u0161etk\u00fdm repozit\u00e1rom<\/a><\/noindex> organiz\u00e1cie Libretro, vyu\u017e\u00edvaj\u00fac \u00fa\u010det jedn\u00e9ho z d\u00f4veryhodn\u00fdch \u00fa\u010dastn\u00edkov projektu. Aktivita zlo\u010dincov sa obmedzila na vandalizmus \u2014 pok\u00fasili sa vy\u010disti\u0165 obsah repozit\u00e1rov prostredn\u00edctvom umiestnenia pr\u00e1zdneho po\u010diato\u010dn\u00e9ho commitu. Po\u010das \u00fatoku boli vy\u010disten\u00e9 v\u0161etky repozit\u00e1re zobrazen\u00e9 na troch z deviatich str\u00e1nkach so zoznamami repozit\u00e1rov Libretro na Github. Na\u0161\u0165astie bol vandalizmus zablokovan\u00fd v\u00fdvoj\u00e1rmi sk\u00f4r, ne\u017e sa \u00fato\u010dn\u00edci dostali k hlavn\u00e9mu repozit\u00e1ru. RetroArch<\/a><\/noindex>. <\/p>\n

Na build serveri bol po\u0161kodzen\u00fd slu\u017eby, ktor\u00e9 vykon\u00e1vali vytv\u00e1ranie no\u010dn\u00fdch a stabiln\u00fdch zost\u00e1v a zodpovedali za organiz\u00e1ciu sie\u0165ov\u00fdch hier<\/a><\/noindex> (netplay lobby). Malicious activity on the server was limited to deleting content. No attempts to substitute any files or modify builds of RetroArch and core packages were recorded. Currently, the operation of the Core Installer, Core Updater, and Netplay Lobby, as well as associated websites and services (Update Assets, Update Overlays, Update Shaders), is disrupted.<\/p>\n

Hlavn\u00fdm probl\u00e9mom, s ktor\u00fdm sa projekt stretol po incidente, bola absencia automatizovan\u00e9ho procesu z\u00e1lohovania. Posledn\u00e1 z\u00e1loha servera buildbot bola vykonan\u00e1 pred nieko\u013ek\u00fdmi mesiacmi. Probl\u00e9my boli vysvetlen\u00e9 v\u00fdvoj\u00e1rmi nedostatkom financi\u00ed na syst\u00e9m automatizovan\u00e9ho z\u00e1lohovania, vzh\u013eadom na obmedzen\u00fd rozpo\u010det na \u00fadr\u017ebu infra\u0161trukt\u00fary. V\u00fdvoj\u00e1ri pl\u00e1nuj\u00fa neobnovova\u0165 star\u00fd server, ale spusti\u0165 nov\u00fd, ktor\u00e9ho vytvorenie bolo v pl\u00e1ne. V tomto pr\u00edpade bud\u00fa zostavy pre prim\u00e1rne syst\u00e9my, ako s\u00fa Linux, Windows a Android, spusten\u00e9 okam\u017eite, ale na obnovenie zost\u00e1v pre \u0161pecializovan\u00e9 syst\u00e9my, ako s\u00fa hern\u00e9 konzoly a star\u00e9 zostavy MSVC, bude potrebn\u00fd \u010das.<\/p>\n

Predpoklad\u00e1 sa, \u017ee obnovi\u0165 obsah vy\u010disten\u00fdch repozit\u00e1rov a identifikova\u0165 \u00fato\u010dn\u00edka pom\u00f4\u017ee GitHub, ktor\u00e9mu bol zaslan\u00fd pr\u00edslu\u0161n\u00fd dopyt. Zatia\u013e sa vie len to, \u017ee hack bol vykonan\u00fd z IP adresy 54.167.104.253, t.j. pravdepodobne \u00fato\u010dn\u00edk vyu\u017eil ako medzi\u010dl\u00e1nok hacknut\u00fd virtu\u00e1lny server v AWS. Inform\u00e1cie o sp\u00f4sobe prenikania nie s\u00fa uveden\u00e9.<\/p>\n

<\/a><\/noindex><\/p>\n

Zdroj: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e Libretro, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0435\u0435\u0441\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u044d\u043c\u0443\u043b\u044f\u0442\u043e\u0440\u0430 \u0438\u0433\u0440\u043e\u0432\u044b\u0445 \u043a\u043e\u043d\u0441\u043e\u043b\u0435\u0439 RetroArch \u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0438\u0433\u0440\u043e\u0432\u044b\u0445 \u043a\u043e\u043d\u0441\u043e\u043b\u0435\u0439 Lakka, \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u043e \u043e \u0432\u0437\u043b\u043e\u043c\u0435 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u043e\u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0438 \u0432\u0430\u043d\u0434\u0430\u043b\u0438\u0437\u043c\u0435 \u0432 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443 (buildbot) \u0438 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c \u043d\u0430 GitHub. \u041d\u0430 GitHub \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0434\u043e\u0441\u0442\u0443\u043f \u043a\u043e \u0432\u0441\u0435\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 Libretro, \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0441\u044c \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u044c\u044e \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0445 \u0443\u0447\u0430\u0441\u0442\u043d\u0438\u043a\u043e\u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0430. […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-91711","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Hackovanie build servera a kompromit\u00e1cia repozit\u00e1rov komunity Libretro, ktor\u00e1 vyv\u00edja RetroArch | ProHoster","description":"Komunita Libretro, ktor\u00e1 sa zaober\u00e1 v\u00fdvojom emul\u00e1tora hern\u00fdch konzol RetroArch a distrib\u00facie na jeho vytv\u00e1ranie.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/vzlom-sborochnogo-servera-i-komprometacziya-repozitoriev-soobshhestva-libretro-razvivayushhego-retroarch","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u0437\u043b\u043e\u043c \u0441\u0431\u043e\u0440\u043e\u0447\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0430 Libretro, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e RetroArch | ProHoster","og:description":"\u0421\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u043e Libretro, \u0437\u0430\u043d\u0438\u043c\u0430\u044e\u0449\u0435\u0435\u0441\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u044d\u043c\u0443\u043b\u044f\u0442\u043e\u0440\u0430 \u0438\u0433\u0440\u043e\u0432\u044b\u0445 \u043a\u043e\u043d\u0441\u043e\u043b\u0435\u0439 RetroArch \u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/vzlom-sborochnogo-servera-i-komprometacziya-repozitoriev-soobshhestva-libretro-razvivayushhego-retroarch","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-17T11:42:10+00:00","article:modified_time":"2020-08-17T11:42:10+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"91711","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:22:23","updated":"2022-10-05 21:45:33","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/91711","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=91711"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/91711\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=91711"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=91711"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=91711"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}