GitHub yakatumidzwa semupomerwi muCapital One userbase leak case

Kambani yemagweta yeTycko & Zavareei yakamhan'arira kudana, yakabatana ne leakage dhata yega yega yevatengi vanopfuura mamirioni evatengi vebhangi vakabata Capital One, kusanganisira ruzivo nezve 100 zviuru zvesocial manhamba nhamba uye 140 zviuru zvebhangi account nhamba. Kuwedzera kune Capital One, vanopomerwa vanosanganisira zvaisanganisira GitHub, iyo inopihwa mhosva yekupa kugona kugashira, kuratidza uye kushandisa ruzivo rwakawanikwa semhedzisiro yekubira.

Sekureva kwemumhan'ari, GitHub inofanirwa kutevedzera mitemo yeUS inorambidza kutumira paruzhinji nhamba dzevashandisi'Social Security. Kunyanya, sezvo nhamba dzeSocial Security dziine fomati yakagadziriswa, kambani yaifanira kupa mafirita kuti ione kana vashandisi vaitumira kuvuza nekudzivharira, pasina kumirira zviziviso zvepamutemo.

Vamiriri veGitHub vakataura kuti ruzivo rwemumhan'ari rwakanga rwusiri rwechokwadi uye data yemunhu yakawanikwa nekuda kwekudonha haina kuiswa paGitHub. Imwe yemarekodhi yaingove nemirairo yekudzoreredza data, iyo yakaramba iri mudhatabhesi yakabatwa muAmazon S3 gore sevhisi. Nekuda kwekusarongeka kwakashata kwefirewall iyo yairambidza kupinda kune mawebhu application, zvaive zvichikwanisika kuwana kuchengetedza muAmazon S3. Pamusoro pechiziviso chekutanga kubva Capital One, iyo yakatumirwa mirairo yakabviswa paGitHub.

Sechikamu chenyaya zvakare kusungwa Paige Thompson, aimbove mushandi weAmazon akawana dambudziko munaKurume uye akatumira ruzivo rwekuti ungawana sei GitHub muna Kubvumbi. Tsanangudzo inotsanangura nyaya yakaramba iri paGitHub kubva Kubvumbi 21 kusvika pakati paChikunguru. Mhosva iyi inopomera Capital One yekutarisa zvisiri izvo kutyorwa, izvo zvakabvumira kutyorwa kusaonekwa kweinenge mwedzi mitatu.

Source: opennet.ru

Voeg